Edit tour

Windows Analysis Report
https://uaqtu.com

Overview

General Information

Sample URL:	https://uaqtu.com
Analysis ID:	1433686
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2004,i,14648356518188033823,13625772419691981786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uaqtu.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&gjid=355082263&_gid=1339673146.1714421633&_u=YGBAiEABBAAAAGAEq~&z=909245502 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.usps.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 29 Apr 2024 20:13:56 GMTContent-Type: text/htmlContent-Length: 1971Connection: closeVary: Accept-EncodingETag: "631f1a4d-7b3"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 29 Apr 2024 20:14:34 GMTContent-Type: text/htmlContent-Length: 1971Connection: closeVary: Accept-EncodingETag: "631f1a4d-7b3"

Source: chromecache_407.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_395.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_366.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_297.2.dr	String found in binary or memory: http://postcalc.usps.com/
Source: chromecache_294.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_324.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: http://www.pinterest.com/uspsstamps/
Source: chromecache_288.2.dr, chromecache_296.2.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/
Source: chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/careers/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/newsroom/
Source: chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/residential/welcome.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/resources/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/what/government-services/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/accessibility-statement/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/fair-chance-act/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/foia/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/no-fear-act/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/privacy-policy/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://about.usps.com/who/legal/terms-of-use.htm
Source: chromecache_231.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_413.2.dr, chromecache_204.2.dr, chromecache_231.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_208.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat
Source: chromecache_374.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_384.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_318.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_297.2.dr	String found in binary or memory: https://cfo.usps.com/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://cfo.usps.com/cfo-web/labelInformation.html
Source: chromecache_297.2.dr	String found in binary or memory: https://cns.usps.com
Source: chromecache_294.2.dr	String found in binary or memory: https://cns.usps.com/
Source: chromecache_212.2.dr, chromecache_220.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_297.2.dr	String found in binary or memory: https://eddm.usps.com/eddm
Source: chromecache_288.2.dr	String found in binary or memory: https://eddm.usps.com/eddm/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://eddm.usps.com/eddm/customer/routeSearch.action
Source: chromecache_294.2.dr	String found in binary or memory: https://faq.usps.com/s/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://gateway.usps.com/
Source: chromecache_315.2.dr, chromecache_210.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_374.2.dr, chromecache_208.2.dr	String found in binary or memory: https://getrockerbox.com/assets/xyz.js
Source: chromecache_215.2.dr	String found in binary or memory: https://getrockerbox.com/integrations?source=
Source: chromecache_215.2.dr	String found in binary or memory: https://getrockerbox.com/jpuid?jsonp=RB.jsonPUID
Source: chromecache_215.2.dr	String found in binary or memory: https://getrockerbox.com/rb?
Source: chromecache_315.2.dr, chromecache_210.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_210.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_231.2.dr	String found in binary or memory: https://google.com
Source: chromecache_231.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_294.2.dr	String found in binary or memory: https://holdmail.usps.com/holdmail/
Source: chromecache_294.2.dr	String found in binary or memory: https://informeddelivery.usps.com
Source: chromecache_294.2.dr	String found in binary or memory: https://informeddelivery.usps.com/
Source: chromecache_297.2.dr	String found in binary or memory: https://loyalty.usps.com/
Source: chromecache_297.2.dr	String found in binary or memory: https://moversguide.usps.com
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG80
Source: chromecache_294.2.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG82
Source: chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_318.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://pe.usps.com
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://postalmuseum.si.edu/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://postalpro.usps.com/
Source: chromecache_294.2.dr	String found in binary or memory: https://postcalc.usps.com/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://postcalc.usps.com/?country=10440
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://postcalc.usps.com/business
Source: chromecache_374.2.dr, chromecache_208.2.dr	String found in binary or memory: https://r.turn.com/r/beacon?b2=HpxTzGTzKKlxb6HzAVw5IjPx27ujoOEwgoCyEMiUu4GfgWyBHra5nbXx39S0t2NAAAzK7
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=/
Source: chromecache_294.2.dr	String found in binary or memory: https://reg.usps.com/informeddelivery/login
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://retail-pi.usps.com/retailpi/actions/index.action
Source: chromecache_220.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Source: chromecache_215.2.dr	String found in binary or memory: https://secure.adnxs.com/px?
Source: chromecache_374.2.dr, chromecache_208.2.dr	String found in binary or memory: https://secure.adnxs.com/px?id=1391229&seg=24232669&t=1
Source: chromecache_296.2.dr	String found in binary or memory: https://sitpx-about.usps.com
Source: chromecache_231.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_381.2.dr, chromecache_241.2.dr, chromecache_306.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_381.2.dr, chromecache_241.2.dr, chromecache_306.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_384.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=buy-stamps
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=cards-envelopes
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=shipping-supplies
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=stamp-collectors
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=stamp-gifts
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/pse/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/business/_/N-1y2576k
Source: chromecache_297.2.dr	String found in binary or memory: https://store.usps.com/store/results/cards-envelopes/_/N-qqbb5n
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/cards-envelopes/fruits-flowers/_/N-qqbb5nZ1dnrm08#content
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/clothing/gifts/_/N-1yueprwZnnxamr#content
Source: chromecache_297.2.dr	String found in binary or memory: https://store.usps.com/store/results/collector-s-zone/_/N-1j49vgd
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v#cont
Source: chromecache_297.2.dr	String found in binary or memory: https://store.usps.com/store/results/gifts/_/N-nnxamr
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/prepaid-priority-mail/_/N-1ved7wl?Dy=1#content
Source: chromecache_297.2.dr	String found in binary or memory: https://store.usps.com/store/results/shipping-supplies/_/N-7d0v8v
Source: chromecache_297.2.dr	String found in binary or memory: https://store.usps.com/store/results/stamps/_/N-9y93lv
Source: chromecache_294.2.dr	String found in binary or memory: https://store.usps.com/store/results/stamps/_/N-9y93lv#content
Source: chromecache_384.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_318.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/find-location.htm
Source: chromecache_279.2.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction?qtc_tLabels1=
Source: chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction_input
Source: chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/go/ZipLookupAction_input
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/redelivery.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/schedule-pickup-steps.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://tools.usps.com/zip-code-lookup.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://twitter.com/usps
Source: chromecache_374.2.dr, chromecache_208.2.dr	String found in binary or memory: https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;
Source: chromecache_314.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_306.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_384.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_177.2.dr, chromecache_385.2.dr, chromecache_398.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/978081151/?random
Source: chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_318.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_413.2.dr, chromecache_204.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_384.2.dr, chromecache_314.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.instagram.com/uspostalservice/?hl=en
Source: chromecache_381.2.dr, chromecache_241.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_223.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_349.2.dr, chromecache_234.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.threads.net/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.uspis.gov/
Source: chromecache_294.2.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/fake-usps-emails
Source: chromecache_294.2.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/smishing
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/#organization
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/calculate_price.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/change_address.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/featured_clicknship.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/find_zip.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/free_boxes.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/hamburger.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/holdmail.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/location.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/logo_mobile.svg
Source: chromecache_297.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/m_dropdown_carat_white.svg)
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/po_box.svg
Source: chromecache_354.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/premium/usps_littlemo_bg.jpg)
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/printcustomsforms.svg);
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/schedule_pickup.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/search.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/stamps.svg
Source: chromecache_354.2.dr, chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg
Source: chromecache_354.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg);
Source: chromecache_354.2.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/premium/lifestyle-person-on-phone-dsk.jpg);
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/usps-homepage.jpg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/assets/script/home/megamenu-additions.js
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/advertise-with-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/business-shipping.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/connect/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/connect/ecommerce.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/connect/local.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/customized-direct-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/every-door-direct-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/go-now.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/go-now.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/informed-delivery.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/international-shipping.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/label-broker.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/loyalty.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/manage-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/political-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/postage-options.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/prices.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/product-samples.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/promotions-incentives.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/return-services.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/shipping-consolidators.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/vendors.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/verify-postage.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/business/web-tools-apis/
Source: chromecache_354.2.dr	String found in binary or memory: https://www.usps.com/component-guide/blue-caret.svg
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/facebook_logo.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/instagram_logo.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/pinterest_logo.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/threads_logo.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/x_logo.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/youtube_logo.png
Source: chromecache_192.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/script/jquery-3.5.1
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Source: chromecache_192.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/script/
Source: chromecache_192.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script
Source: chromecache_192.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/helpers
Source: chromecache_192.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/require-jquery
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/globals/site-index.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/claims.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/contact-us.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/international-claims.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/international-refunds.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/missing-mail.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/help/refunds.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/customs-forms.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/first-class-mail-international.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/first-class-package-international-service.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/go-now.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/go-now.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/gxg.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/insurance-extra-services.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/international-how-to.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/letters.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/mail-shipping-services.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/money-transfers.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/passports.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/preparing-international-shipments.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-express-international.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-international.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/international/shipping-restrictions.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/forward.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/go-now.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/go-now.png
Source: chromecache_288.2.dr	String found in binary or memory: https://www.usps.com/manage/informed-delivery.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/mail-for-deceased.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/mailboxes.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/package-intercept.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/manage/po-boxes.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=PO%20Boxes
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Passports
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm?pov=international
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/custom-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/first-class-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/go-now.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/go-now.png
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/ground-advantage.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/insurance-extra-services.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/letters.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/mail-shipping-services.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/online-shipping.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/packages.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail-express.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/ship/shipping-restrictions.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/shop/money-orders.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/shop/returns-exchanges.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/store/go-now.htm
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/store/go-now.png
Source: chromecache_294.2.dr	String found in binary or memory: https://www.usps.com/topjobs
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.uspsoig.gov/
Source: chromecache_306.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: https://www.youtube.com/usps

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014

Source: unknown	HTTPS traffic detected: 23.11.208.106:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.11.208.106:443 -> 192.168.2.6:49717 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@26/422@144/54

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2004,i,14648356518188033823,13625772419691981786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uaqtu.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2004,i,14648356518188033823,13625772419691981786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://uaqtu.com	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe
https://getrockerbox.com/assets/xyz.js	0%	Avira URL Cloud	safe
https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$	0%	Avira URL Cloud	safe
https://getrockerbox.com/rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCP78-rSe6IUDFZgX-QAdWLsL3A%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D3240872018289%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D1376471778%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=52cc9d85-71e9-4e99-ac91-36403952324b&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b	0%	Avira URL Cloud	safe
https://getrockerbox.com/integrations?source=usps	0%	Avira URL Cloud	safe
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	0%	Avira URL Cloud	safe
https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421667821	0%	Avira URL Cloud	safe
https://getrockerbox.com/integrations?source=	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	142.250.191.134	true	false	high
d27f3qgc9anoq2.cloudfront.net	65.8.49.32	true	false	high
uaqtu.com	47.90.176.105	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.135.121	true	false	high
adservice.google.com	142.250.191.162	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
platform.twitter.map.fastly.net	146.75.80.157	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	50.17.194.92	true	false	unknown
stats.g.doubleclick.net	142.251.4.157	true	false	high
insight.adsrvr.org	15.197.193.217	true	false	high
cs1799.wpc.upsiloncdn.net	152.195.33.23	true	false	unknown
scontent.xx.fbcdn.net	157.240.249.8	true	false	high
crb.kargo.com	52.3.237.106	true	false	high
t.co	104.244.42.5	true	false	high
www.google.com	142.250.190.36	true	false	high
ara.paa-reporting-advertising.amazon	52.84.18.31	true	false	unknown
gcp.api.sc-gw.com	35.190.43.134	true	false	unknown
star-mini.c10r.facebook.com	157.240.254.35	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
s.twitter.com	104.244.42.67	true	false	high
ad.doubleclick.net	142.250.190.38	true	false	high
s.amazon-adsystem.com	52.46.155.104	true	false	high
urldefense.com	52.204.90.22	true	false	unknown
sc-static.net	18.160.218.246	true	false	unknown
usps.com	56.0.134.100	true	false	high
d1ykf07e75w7ss.cloudfront.net	18.160.235.239	true	false	high
www.googleoptimize.com	172.217.0.174	true	false	unknown
kds-pixel.kargo.com	3.225.229.68	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
dualstack.reddit.map.fastly.net	151.101.65.140	true	false	unknown
getrockerbox.com	104.26.9.177	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.128.84	true	false	unknown
fast.fonts.net	104.16.40.28	true	false	unknown
reddit.map.fastly.net	151.101.193.140	true	false	unknown
googleads.g.doubleclick.net	172.217.4.34	true	false	high
dualstack.pinterest.map.fastly.net	146.75.80.84	true	false	unknown
td.doubleclick.net	142.250.190.34	true	false	high
trkn.us	23.205.89.137	true	false	unknown
usc1-gcp-v61.api.sc-gw.com	35.190.43.134	true	false	unknown
ib.anycast.adnxs.com	68.67.160.75	true	false	high
alb.reddit.com	unknown	unknown	false	high
sp.analytics.yahoo.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
dap.digitalgov.gov	unknown	unknown	false	high
tr.snapchat.com	unknown	unknown	false	high
w3-reporting-nel.reddit.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
www.usps.com	unknown	unknown	false	high
3976941.fls.doubleclick.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
r.turn.com	unknown	unknown	false	high
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
s.pinimg.com	unknown	unknown	false	high
storage.cloud.kargo.com	unknown	unknown	false	high
tr6.snapchat.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.usps.com/test/nav/images/business.svg	false		high
https://www.usps.com/international/go-now.png	false		high
https://getrockerbox.com/rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCP78-rSe6IUDFZgX-QAdWLsL3A%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D3240872018289%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D1376471778%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=52cc9d85-71e9-4e99-ac91-36403952324b&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	false		high
https://w3-reporting-nel.reddit.com/reports	false		high
https://www.usps.com/assets/images/home/change_address.svg	false		high
https://www.usps.com/assets/images/home/printcustomsforms.svg	false		high
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	false		high
https://getrockerbox.com/assets/xyz.js	false	Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://www.usps.com/assets/script/components/scalable-table.js	false		high
https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$	false	Avira URL Cloud: safe	unknown
https://kds-pixel.kargo.com/api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://insight.adsrvr.org/track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=ftfeq77&upv=1.1.0	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=35b4fbbe-2ee5-4f14-b05d-44b789b7dbb6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9b410764-39f9-4da6-9812-68efc208dc7f&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	false		high
https://www.usps.com/assets/images/welcome/premium/id-hero-22-woodflooryellowsweater.jpg	false		high
https://s.amazon-adsystem.com/iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104&dcc=t	false		high
https://tr6.snapchat.com/p	false		high
https://www.usps.com/assets/images/home/free_boxes.svg	false		high
https://alb.reddit.com/rp.gif?ts=1714421670935&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=	false		high
https://www.usps.com/favicon.ico	false		high
https://crb.kargo.com/api/v1/sync/Tapad/495d9376-88dc-04c4-82c2-ee19830e53e1?rid=282e3bda-1ede-4ee1-8d3c-160ac8bc444c&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=94c23be1-d8f1-4c94-9d12-dd33fe005ad9	false		high
https://www.usps.com/assets/images/welcome/carousel/apr24-swag.jpg	false		high
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false		high
https://www.usps.com/manage/go-now.png	false		high
https://www.usps.com/assets/script/home/megamenu-additions.js	false		high
https://www.usps.com/assets/images/welcome/featured/pfs-roadtrip.jpg	false		high
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	Avira URL Cloud: safe	unknown
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=d15e05a2-8617-4813-b2ce-8375e71f8b33&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b1121a1c-d1fa-4240-afc9-bcbac49185ed&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30	false		high
https://www.usps.com/assets/images/home/holdmail.svg	false		high
https://s.amazon-adsystem.com/iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325	false		high
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	false		high
https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421668308	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1714421635179&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421634139&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=2047863913.1714421633&jid=2107282122&gjid=888467663&_gid=1339673146.1714421633&_u=YGDACUABBAAAAGAGqCC~&z=1481307962	false		high
https://ct.pinterest.com/v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421672137	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&_u=YGBAiEABBAAAAGAEq~&z=786459164	false		high
https://www.usps.com/	false		high
https://sc-static.net/scevent.min.js	false	URL Reputation: safe	unknown
https://www.usps.com/assets/script/components/faq.js	false		high
https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=251939a8-ae54-42c6-b40b-2e8075d7303a&u_sclid=fb8dd112-c192-4ccc-bb60-2cd0a4a651fa	false		high
https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce&u_sclid=fb8dd112-c192-4ccc-bb60-2cd0a4a651fa	false		high
https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	false		high
https://www.usps.com/assets/images/welcome/carousel/apr24-stamps.jpg	false		high
https://www.usps.com/assets/script/component-guide-init.js	false		high
https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js	false		high
https://connect.facebook.net/signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105	false		high
https://s.amazon-adsystem.com/iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104	false		high
https://www.usps.com/assets/images/home/utility_customer_service.png	false		high
https://getrockerbox.com/integrations?source=usps	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/lib/script/resize-manager.js	false		high
https://www.usps.com/ContentTemplates/common/css/globals/tooltips.css	false		high
https://ct.pinterest.com/user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714421634605&dep=2%2CPAGE_LOAD	false		high
https://www.usps.com/assets/script/components/utility-bar.js	false		high
https://insight.adsrvr.org/track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23endnav&upid=ftfeq77&upv=1.1.0	false		high
https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421667821	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/featured_clicknship.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/business/shipping-consolidators.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_384.2.dr	false		high
https://store.usps.com/store	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://secure.adnxs.com/px?	chromecache_215.2.dr	false		high
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_294.2.dr	false		high
http://github.com/jrburke/requirejs	chromecache_395.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_210.2.dr	false		high
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_349.2.dr, chromecache_234.2.dr	false		high
https://www.usps.com/business/manage-mail.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/international/	chromecache_294.2.dr	false		high
https://www.usps.com/global-elements/header/script/	chromecache_192.2.dr	false		high
http://www.amazon.com/b/?&node=7253015011.	chromecache_324.2.dr	false		high
https://store.usps.com/store/results/collector-s-zone/_/N-1j49vgd	chromecache_297.2.dr	false		high
https://www.usps.com/shop/money-orders.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/business/verify-postage.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://store.usps.com/store/results/clothing/gifts/_/N-1yueprwZnnxamr#content	chromecache_294.2.dr	false		high
https://getrockerbox.com/integrations?source=	chromecache_215.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://about.usps.com/what/government-services/	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://store.usps.com/store/results/gifts/_/N-nnxamr	chromecache_297.2.dr	false		high
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://postcalc.usps.com/?country=10440	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/business/label-broker.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/international/letters.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://informeddelivery.usps.com/	chromecache_294.2.dr	false		high
https://gateway.usps.com/	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://www.usps.com/#organization	chromecache_294.2.dr	false		high
https://postcalc.usps.com/business	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://store.usps.com/store/results/stamps/_/N-9y93lv	chromecache_297.2.dr	false		high
https://store.usps.com	chromecache_294.2.dr	false		high
https://store.usps.com/store/results/shipping-supplies/_/N-7d0v8v	chromecache_297.2.dr	false		high
https://www.usps.com/assets/images/welcome/usps-homepage.jpg	chromecache_294.2.dr	false		high
https://about.usps.com/newsroom/service-alerts/residential/welcome.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://about.usps.com/resources/	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://tools.usps.com/schedule-pickup-steps.htm	chromecache_294.2.dr	false		high
https://www.usps.com/manage/mail-for-deceased.htm	chromecache_297.2.dr, chromecache_294.2.dr	false		high
https://cns.usps.com	chromecache_297.2.dr	false		high
https://getbootstrap.com/)	chromecache_315.2.dr, chromecache_210.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	unknown	United States	54113	FASTLYUS	false
142.250.190.134	unknown	United States	15169	GOOGLEUS	false
68.67.160.26	unknown	United States	29990	ASN-APPNEXUS	false
56.0.134.100	usps.com	United States	5774	USPS-001US	false
152.195.33.23	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
52.84.18.31	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
52.3.237.106	crb.kargo.com	United States	14618	AMAZON-AESUS	false
151.101.128.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
151.101.193.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
151.101.65.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
104.26.9.177	getrockerbox.com	United States	13335	CLOUDFLARENETUS	false
52.204.90.22	urldefense.com	United States	14618	AMAZON-AESUS	false
172.217.0.174	www.googleoptimize.com	United States	15169	GOOGLEUS	false
142.250.191.134	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.254.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
52.46.155.104	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
18.160.235.239	d1ykf07e75w7ss.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
157.240.249.8	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.244.42.133	unknown	United States	13414	TWITTERUS	false
142.250.112.154	unknown	United States	15169	GOOGLEUS	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
18.172.135.121	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
68.67.160.75	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
47.90.176.105	uaqtu.com	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.88.71.74	unknown	United States	14618	AMAZON-AESUS	false
52.223.40.198	unknown	United States	8987	AMAZONEXPANSIONGB	false
52.205.109.183	unknown	United States	14618	AMAZON-AESUS	false
18.160.218.246	sc-static.net	United States	3	MIT-GATEWAYSUS	false
23.205.89.137	trkn.us	United States	20940	AKAMAI-ASN1EU	false
146.75.80.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false
52.84.18.96	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
142.250.190.4	unknown	United States	15169	GOOGLEUS	false
3.225.229.68	kds-pixel.kargo.com	United States	14618	AMAZON-AESUS	false
172.217.4.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.4.194	unknown	United States	15169	GOOGLEUS	false
142.250.190.36	www.google.com	United States	15169	GOOGLEUS	false
146.75.80.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
142.250.190.38	ad.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
142.250.190.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
104.244.42.5	t.co	United States	13414	TWITTERUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
65.8.49.32	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
52.46.151.131	unknown	United States	16509	AMAZON-02US	false
172.217.0.166	unknown	United States	15169	GOOGLEUS	false
50.17.194.92	spdc-global.pbp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
142.251.4.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.191.162	adservice.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1433686
Start date and time:	2024-04-29 22:12:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://uaqtu.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@26/422@144/54
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.usps.com/globals/site-index.htm Browse: https://www.usps.com/#endnav

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.123.94, 142.250.191.206, 142.251.4.84, 34.104.35.123, 40.127.169.103, 199.232.210.172, 192.229.211.108, 13.85.23.206, 142.250.191.168, 23.12.21.57, 13.107.21.237, 204.79.197.237, 23.200.156.207, 23.200.156.206, 23.200.156.213, 23.200.156.215, 23.200.156.208, 23.200.156.209, 23.200.156.216, 23.200.156.212, 172.217.4.206, 69.194.242.12, 13.107.42.14, 20.166.126.56, 23.33.85.250, 23.33.85.241, 172.217.4.40, 142.250.112.94, 23.46.30.28, 23.46.30.4, 23.46.30.37, 23.46.30.38, 23.46.30.22, 23.46.30.18
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, storage.cloud.kargo.com.akamaized.net, l-0005.l-msedge.net, r.turn.com.akadns.net, a1830.d.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, 2-01-37d2-0018.cdx.cedexis.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, resources.digital-cloud-gov.medallia.com.edgekey.net, download.windowsupdate.com.edgesuite.net, e15080.a.akamaiedge.net, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, dual-a-0034.a-msedge.net, clients.l.google.com, a1916.dscg2.a
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://uaqtu.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.6029812668426375
Encrypted:	false
SSDEEP:	384:yj8V+g2S44hNpafk4JCLgw/wEsD1UYg4s4+hDpQfe4rCZg6/yEKDnU/gB/4Nhwpy:86HqH4swTUNcdQhei6x2mTqv2xx1mNtc
MD5:	CB8079C485D6E1A1D77C703B4E787D27
SHA1:	78983956850C2E312A60B94C5693F2138CE9527B
SHA-256:	AE97DAAC50933AB570C21D012F61F82CD238633227F5CA234437CC5BB4D3ACD1
SHA-512:	DC8DD5A84ED38F85904306CB9740A2DDDDBD57D79821C62A0701F8E337D591BFA0CEA06A75608F5BE738EA00F9E4A689567771412C47FAA141B4AC5C25288DB9
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1714421670851&cv=11&fst=1714421670851&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sVDkHIw!2sZleMqQ!3sAAptDV5UFSOt"],"userBiddingSignals":[["806463764","76

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421656765
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1456
Entropy (8bit):	7.0245803751655105
Encrypted:	false
SSDEEP:	24:ojX1hJIwWwjx82lY2T3oVYNWMa1oW/yJ3VYHWG17opWIGXtkDMEisqqY5G4m4z9h:ykNNn2kWBUOJ3Wt7iBFu5xm4z9L5vUk
MD5:	410956805D5701E87299CFF412827E1A
SHA1:	5DE9A390649DFC12E3D6DF431140D499AD8ABD67
SHA-256:	6E727DBF5B0F4A3EC76762E445AD2C5CB750F7DE41AFB8B0342F903124D09826
SHA-512:	84CE9E5B113DFB743A0F9A96EB9F527987A925F4E93AC8C113C34E06E4BC16A7063582320A454DDAE5451547F5A6D82B4C01BCA06E71CB4BB73B249EAEBCF2C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............rP6.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9C4417A83D6A11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:9C4417A93D6A11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417A63D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:9C4417A73D6A11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..ym....IDATx...K.Q..g^.)..K]D.AX....(..;j.r&".\.E....pU+..4....T..~....6.&+&3.0jz..F....<........so<......p..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 70588, version 1.0
Category:	downloaded
Size (bytes):	70588
Entropy (8bit):	7.9896587023120755
Encrypted:	false
SSDEEP:	1536:UMVtGjRx/IMNbsWZthhCtBVkOXkEPtkc6nZIKLUNF0N:WROMNbsihG5XkatqnZzLUNeN
MD5:	071C48540FD727A032C53CE511EEA442
SHA1:	2FADBF8A560C6138C89D991D230ACACE5256B15C
SHA-256:	B51210361680DC35FE3FB44EE63B68651C29D35AE292554CDF9BB567F4AA576E
SHA-512:	35D079481210F8E86779DD05666AA5BEE926982DA1AB9B4C703C45F68242453FFC0D7BEB7919EE95E198DB05D96FF69761014F4607C21B1D5B50D04F69F0CEAB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/9a2e4855-380f-477f-950e-d98e8db54eac.woff
Preview:	wOFF..............{T...............+........OS/2...X...V...`..).cmap...........t.8..cvt .......D...D.O..fpgm.......8........gasp...4.........!..glyf...D...`..-./^.Ihead......6...6.@0.hhea.......!...$.>.ahmtx..............3.kern............=.6.loca.......%......S.maxp....... ... ....name......."...~}b;.post........... ...2prep............%...x.c`f..8.......).....B3.1.1.100q.03..K......./.(.....R....>..b8.\|.......cba:........>..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....5.d.(.[.j.v.-.:.p.?.(.T.v.:.5.p.....A.......S...y.............,..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2552
Entropy (8bit):	4.795851335551723
Encrypted:	false
SSDEEP:	48:czAuf36SGo2uuzJg3RpzGTpEEptnGJQ3gshZ6QrPjxJvYgd5lgak6L7KfKe:vufK6uJgTUEEjGe3gsh9rP7QS5lgaxGn
MD5:	5C5579A50964D4972D1954BFF4EE232D
SHA1:	C78B384713CF7A8A5515A54F17C6E70EBDDE98FC
SHA-256:	C12815F27ECDFD09B2920C1EEA21AE7ABB8E107349D6BB8B39707A0CD9A3E591
SHA-512:	3694C68BCDD136FCA9507445AE06556A7CD524F9AEA4B6EC53849E72A935306171B7F0A1A198EBAD37E5AAAC0FF219B69653141C95D32DF5BAC97B98824AED4E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 131.2 111.2" style="enable-background:new 0 0 131.2 111.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;stroke:#333366;stroke-width:2;stroke-miterlimit:10;}...st1{fill:#333366;stroke:#333366;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M42.5,92.3H10.1v-65h26.3v11.1c0,1.7,1.3,3,3,3h22.1c1.7,0,3-1.3,3-3V27.3h28v18l6.1,0.3l1.9,0.1V24.2...c0-0.9-0.3-1.9-0.9-2.6L83.9,3.2c-0.8-0.9-1.9-1.4-3.1-1.4h-59c-1.2,0-2.3,0.5-3.1,1.4L3,21.7c-0.6,0.7-0.9,1.6-0.9,2.6v72.1...c0,2.2,1.8,4,4,4h40.1C44.7,97.9,43.4,95.2,42.5,92.3z M79,9.8l9.8,11.6H64L62.1,9.8H79z M45.8,9.8H56l1.9,11.4H43.2L45.8,9.8z... M42.4,27.5h16.1v7.8H42.4V27.5z M23.6,9.8h16.1L37,21.3H13.8L23.6,9.8z"/>..<path class="st0" d="M70.3,55.1

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325
Preview:	{}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2584), with no line terminators
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	5.863887233398476
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08HFI51EQKRavyKKC6:wsbSUtJfxrqLWWWdV6j15IQlR5
MD5:	C3654375C2A9C5E62149C6E2C9D8BCF1
SHA1:	D80062B153F084455E277B92B784C42937A9DEA6
SHA-256:	7D42854B4CF0CE395041D4BCAD5FE26FB975792C78764BCEA654A88FA1A43441
SHA-512:	09B0C9E8E1562D343DED9BCCA4C7DC649D73FCB972461685C15943B64FB3D994CE2FED6F807BA2C1CE5C697F53A0FDCDF4E10516C8347D585200118351142348
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1714421657406&cv=11&fst=1714421657406&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/youtube_logo.png
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 626x277, components 3
Category:	downloaded
Size (bytes):	40507
Entropy (8bit):	7.944440377781344
Encrypted:	false
SSDEEP:	768:9/X7aiPxfgiS1d0mdZgztbfKgfV4jHKllkU6+yLj7uP9moKx/gm:9/egxS1dXWztfKsV47K3w+y/7uPzKx/x
MD5:	2636DF66D869E58AF2EE447AC7D53861
SHA1:	A6659397D1EC30D01A1FA178905C8B358DD30B8F
SHA-256:	D8E22E9E128007E03604465A44445B16A508EBE964747A466543D3B0D2A2CD17
SHA-512:	9571307CF15F5269919C458C0231F7FD9C2DC50C6F9277F079E7BC76B13D28521FB1AC9E8258CEEAD892C4D5351DAA38ECE4BA342E459C81F4B37D7978DA02C1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/supplies-dotcom8.jpg
Preview:	......Exif..II*.................Ducky.......P.....uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F3F706D8B7A11E98D82907679A821AC" xmpMM:DocumentID="xmp.did:BD7165A5EFE111EAB63896AF6BA545A7" xmpMM:InstanceID="xmp.iid:BD7165A4EFE111EAB63896AF6BA545A7" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2019681AD64711EA8DAA86F8C09A34DD" stRef:documentID="xmp.did:2019681BD64711EA8DAA86F8C09A34DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	98412
Entropy (8bit):	7.963762182600066
Encrypted:	false
SSDEEP:	1536:45sh0NQ0NjcX+aemW2P2CdzMnP0V3EpFkQPOod1eMzApvbtVibrNzbaslVu8koq2:4ahSpUeEzQPhhkpztVErEs3ucqmnwfA
MD5:	3C638BEFC7B6A75C2E3E540D5DC06E45
SHA1:	ABC603B4E3E28CB3F86B4868A4337456AAEB9370
SHA-256:	1F3B08D27591A755F7C339147307C9113C46DD7DFAC752E463864B82DAE10EB0
SHA-512:	7304C22488E05380A510E92D09B6EC264C91D25C517C4DA889BEB4BCE16D38A2402FE23F8551A8C431BF78048FC71A44368BF14E70AE1B05FCD5E244838397A6
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 34
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	5.876279499401526
Encrypted:	false
SSDEEP:	6:wvpRimsloM5NcFelVl5K/CnlGl+dAHqBJH:gpUlhRw/QMkdQGH
MD5:	1D286FA7B2A8B52CD9C56265A44E0B28
SHA1:	5BF16C199106556FA290E24833E31C745EBDAE5D
SHA-256:	D99EDA8435DC3777B6B06C691F1D55CDBC7D61E61C644BE140ACD60ACF8358A9
SHA-512:	86452ECB212E5FB262C71416A92361A5C86B66D2B5B9B0EB89A89DB7EEC63BE676A451D9C6A9E164C4B501D905E7A478EB2948A8F3E4CBA4722F2BE1EDEA5E1B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_pipe.gif
Preview:	GIF89a..".................................................................................................................................................................................................!.......,......"...9@...x..*Zr...J)P. .D>0..p1.8....2.H..e.`d...j.O..Z.%.{jA.;

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/schedule_pickup.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/schedule-redelivery.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ship/go-now.png
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1714421670961&url=https%3A%2F%2Fwww.usps.com%2F%23endnav
Preview:	{}

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	downloaded
Size (bytes):	123985
Entropy (8bit):	7.973603263546903
Encrypted:	false
SSDEEP:	3072:4At9E/zxhecTLB6oQL280D1hUCr9PBcuC/sda0c:lE/zxhecTl6oQL2dbUQap/ca0c
MD5:	A8F7D8E3325AAC0EDC8C51C151D980FC
SHA1:	B90447CF89AC91390C9DC52B4F3719161AE606F2
SHA-256:	C6846109092A0F90903D5E683274116680005A67E2CA274967BBF72CBFA7C51A
SHA-512:	5C036F704B356FA47CB2A6EC4106EB117C89947A9519E78CE65B8C4FBA12E1B3AE1964990C95A5C518411DD968F389F51BF8F858B09378C4D47C9904873F9EE4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-stamps.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	4.94544014004298
Encrypted:	false
SSDEEP:	48:sxWbgJPABPcJ09JseJel9yl47fFfeU2pYdEdfTz5+MOEei:sWuAB1ntJEYqWUxdmfvVOli
MD5:	F7337D7D3B1B1AF555348038D684BC08
SHA1:	0063EBB65EBEC0CD39E3D060D71CFE25398E41E2
SHA-256:	8C84EFD0A5E9BB67A1ECC895C6AB1FFE3731CF0664D1502D95234B0521CFB797
SHA-512:	7A6EB41B3023167D0F29A38DE85F203D34ADDD69EEE2172F01E60C74823BBD5341336E14FD70DD583CF309F09FD6788D4FF94124617A507EF6385C8B8ED96ED8
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><clipPath id="clip-path" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="389.35" width="20.62" height="2.75"/></clipPath><clipPath id="clip-path-2" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="403.35" width="17" height="2.75"/></clipPath></defs><rect class="cls-1" x="27.54" y="57.33" width="20.62" height="2.75"/><g class="cls-2"><rect class="cls-1" x="26.54" y="56.33" width="22.62" height="4.75"/></g><path class="cls-1" d="M656.46,396.35v2.75h24.89c.34-.93.72-1.85,1.15-2.75Z" transform="translate(-628.92 -332.02)"/><rect class="cls-1" x="27.54" y="71.33" width="17" height="2.75"/><g class="cls-3"><rect class="cls-1" x="26.54" y="70.33" width="19" height="4.75"/></g><path class="cls-1"

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.028268227589132
Encrypted:	false
SSDEEP:	24:rpRp1EANTMM+AeXQTMoAeR1nBejv3TUeX/eX4RHUTMEqBYoAylwT:dn1aMgPi/nErTz2iRxM
MD5:	D8CB563907E68E9649948C6F521EFE60
SHA1:	F5B7CF8123929DB8162A2AF51D07DD11C21FBAC3
SHA-256:	FD1E9EADB5698C1BC534EF8A75303B3B67F5E1AB7D1B217B27B09DA42AA5036A
SHA-512:	0C183CE2FA99910BBC54DB6E87579B8AB7C4B9840B327CFAC6FDA8975F9317CF8FFBD02175BB62FEE674F9FF4FAFBF3FF255E600818837CCF93519AFAA78E52C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/header-init-search.js
Preview:	var USPSGlobals = USPSGlobals \|\| {};..USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/lib/script",.. context: "global"..}), USPSGlobals.Require.requireHeader = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/header/script/",.. context: "header",.. paths: {.. jquery: "https://www.usps.com/global-elements/footer/script/jquery-3.5.1",.. "require-jquery": "https://www.usps.com/global-elements/lib/script/require-jquery",.. helpers: "https://www.usps.com/global-elements/lib/script/helpers".. },.. waitSeconds: 30..}), USPSGlobals.Require.requireHeader(["require", "require-jquery", "helpers","search-fe"], function(e, t, n, r) {.. var i = function() {.. var t = function() {};.. t().. }()..});

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/script/jquery-3.5.1.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/hamburger.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104
Preview:	{}

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/chinese_characters.gif
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/manage/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (48720)
Category:	downloaded
Size (bytes):	48723
Entropy (8bit):	5.458753370708165
Encrypted:	false
SSDEEP:	768:jSsoEqoizYCbqcgh0kSSXlWUwcTLtpPMNvPEDOT3CCZfVDFPY/BX/gCa086RS4:jqV00kSSX49vbTVZTwtgCa8RJ
MD5:	03DD8E3B1151F365D6E4504EAD1C92A2
SHA1:	2925F85CBFC5C12C355054A94B588B65B73280DB
SHA-256:	9941D2FF1CC99D68ACF87DB2BF00D461644F6A6F222AF62C2FBA71BE5A97B447
SHA-512:	A46B42F3234745145A1503FB942A6AD161C1EF43E851A0A89AFE9AA0B0D77B708A6A78AAE48F25562EDFD1AC458D10F6E60B5D4FA2E415D7DF6BD1656D01747F
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ir(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ir),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1456
Entropy (8bit):	7.0245803751655105
Encrypted:	false
SSDEEP:	24:ojX1hJIwWwjx82lY2T3oVYNWMa1oW/yJ3VYHWG17opWIGXtkDMEisqqY5G4m4z9h:ykNNn2kWBUOJ3Wt7iBFu5xm4z9L5vUk
MD5:	410956805D5701E87299CFF412827E1A
SHA1:	5DE9A390649DFC12E3D6DF431140D499AD8ABD67
SHA-256:	6E727DBF5B0F4A3EC76762E445AD2C5CB750F7DE41AFB8B0342F903124D09826
SHA-512:	84CE9E5B113DFB743A0F9A96EB9F527987A925F4E93AC8C113C34E06E4BC16A7063582320A454DDAE5451547F5A6D82B4C01BCA06E71CB4BB73B249EAEBCF2C2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/utility_languages.png
Preview:	.PNG........IHDR.............rP6.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9C4417A83D6A11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:9C4417A93D6A11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417A63D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:9C4417A73D6A11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..ym....IDATx...K.Q..g^.)..K]D.AX....(..;j.r&".\.E....pU+..4....T..~....6.&+&3.0jz..F....<........so<......p..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.601299620796221
Encrypted:	false
SSDEEP:	384:yj8V0gVH4OhTpgfu47Cpgq/iE6D3UYgpc4+hDpQfe4rCZg6/yEKDnU+gjV244hNo:gstgxuyqhmmcdQhei6x2+6HqH4swTUmg
MD5:	611813880521A65AB3BBE812465BD181
SHA1:	F5120587586ED3209ACF26910D4FFF19296D179D
SHA-256:	8230B7FD2D593A76E19C96D2AED1DB209463ACA5915FADB9156990333BF6690A
SHA-512:	ABB81FC42769E5DC21DC91571F726EAFDB2CC96A75C3608AD20156874C8DE567C022523CCCB8955D5F0E3BB110BA88FCE118CBC69378850B2A817083E2887412
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1714421634515&cv=11&fst=1714421634515&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44804419","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sTQtn_w!2sZleMgw!3sAAptDV7JcVGZ"],"userBiddingSignals":[["481529751","68

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	199527
Entropy (8bit):	5.527838135173343
Encrypted:	false
SSDEEP:	3072:LUQaf5qZ3fhO+AZcf8cG1LceF2/ea8LR9Wk9ARCzOQjSTnXDL9btIMPNuL:IQX5NAAYLceF+scTnXP9RIM1Y
MD5:	E097B3659E83FE6D03B27E3EA1925D48
SHA1:	1241D2E6D042E59493CF8171B234F16C95985CCC
SHA-256:	53E0A90319C010524208DFEFD667738613AD59EDB26C08F23B211A3B1E0AAB00
SHA-512:	BA31F1274F171022C5A17387A829057C2334508DC17752512B806C8EA27020A166CB12A451A095FD28AD046B9CFFDE1D3E1F526F087B053E1809D8DD787616D6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-3976941&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 671x450, components 3
Category:	dropped
Size (bytes):	59294
Entropy (8bit):	7.969822503765094
Encrypted:	false
SSDEEP:	1536:6ergEW4ri006HQVCnrg5AcxcAyJqXUmYQsTLO8weLs:XWAi006hM5vqAyWVYBL9ls
MD5:	7E6C404842BDA7A9BE95FF6DE989DC78
SHA1:	E491DB9D3AA75F30BB3EFD191D96F8B0AD66924F
SHA-256:	224AF3767ADA229ABE732231D42E23272E36A1783A2249B40A652367440F3B1A
SHA-512:	75698F7B7A1543E9C7FE4CBB06D4ED9108A142673C0FEF6A2B8C97FD8D09BBC771C4975C3B3688BED6419FBE3AAB1B10F60C9C9FF9F4263F79CEA33FA5C485CA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?....6}........+...6.l.1.\.B#.:.R..j..1.Rhi.q.{...L..\.c.R.."......q.k.=j ..q.x..i...x...a.......5.]....k.i.<g._$.p.....w.c...Z..M.......~DW.......g....c8..W......hx^.Bx......T..OC,..8.W.J.....>kCAh.....K.m....FE2.i..~isQ.\|.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1272)
Category:	downloaded
Size (bytes):	3079
Entropy (8bit):	5.7972907920988135
Encrypted:	false
SSDEEP:	48:NOiDITryfRN87cp5yMh55RN8gbg1fe4wz90vIPCJIb2fAmQpwa8VY82XuhfoPWyJ:DDcryfyS5yMh55tbgInZunThVYLuhq
MD5:	E8515E3F88060D8C773761DFC5838870
SHA1:	37FF05B78D2716C4183EA0CCE65811BB48885941
SHA-256:	9B53105DE23CED66FC0E5C5BA9FD8AFCA07B09CC7117E7CBAF4FD299CB467ED1
SHA-512:	07CDED41E3B1A94922B81EC082C8F3460CC361B963DFC4761E72FB406DE2A212AF845426735F08734C7932E1F132676E505AE75F289CA5347240869A78488400
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( function() {. if (typeof TTDUniversalPixelApi === 'function') {. var universalPixelApi = new TTDUniversalPixelApi();. universalPixelApi.init("v62w3xt", ["f2bxyaw"], "https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjL

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/facebook_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791), with CRLF line terminators
Category:	downloaded
Size (bytes):	58078
Entropy (8bit):	5.248934854412323
Encrypted:	false
SSDEEP:	768:BwYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGxV:BwTKktDLmTF8yJL45XtHjoGL
MD5:	0A958254DB529F99F475080FE2A6DCDB
SHA1:	EEBC17246F2BEDA813DD3372593CC54A152F9CB4
SHA-256:	3BCD802E9F77849E7C1E93C87279FBBB04D45949D2BE79B03566CEACDE29B158
SHA-512:	327BF409CDD167171A300EF7F95FAC5CBC802320B2872EA845EC434FF7987A21CB0F0346A8EB3CB891447B98E2E622C3D721BC295BF4F26E763659DBB8A09940
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/bootstrap.js
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescr

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/business/go-now.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4102), with no line terminators
Category:	downloaded
Size (bytes):	4102
Entropy (8bit):	5.5604920418730135
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALw97a:eMilPFfmo4+7Cpi49m
MD5:	1CA8EACC4DE983D84E1DDD81FA5B6635
SHA1:	CA019D963FEC121CAA4A94EB4B0457CBEB9FC706
SHA-256:	A1BAAC59DB8ACF46CA6D1A03B4C4B71917D3901363FFFEF4DC4F1675780E607E
SHA-512:	914C974D7DB0E8C2EA70E60922C8D06C830FFDD5653BC8D851BF8487DB8BB3F3B340AA6F1034152B5D0C4FD44479654FED5943F707CF84803B70F929A441F39E
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58690, version 1.0
Category:	downloaded
Size (bytes):	58690
Entropy (8bit):	7.990300789788035
Encrypted:	true
SSDEEP:	1536:ZiIC2RdNz6MiM5bTOdkI7HhsTTVjh1nbAzjKf5pmnuU888888888888888Uv2:1N5POdkIThsTT9h903I5pmnX2
MD5:	A6E2D3921C9EA0FD81897D9AE7A33BA4
SHA1:	BC31969F2FB1926A15CD678B3E573C37A44E5421
SHA-256:	F2E2EF638DD9AAC863F0F6027CEB784CD4C5A14A676BED909C8F2AC4B088D510
SHA-512:	3F8D647F4F157FE0A3D6BDCC4CB8330BB9A8559DD927C073E9C55C36A7F8847B57DCDAB80A310B1A3ADBD07A70FEBB478868E4D5B59EEF1EC192A05269EF94C1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
Preview:	wOFF.......B...............@.......+........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.C..fpgm.......8........gasp...8............glyf...H........}..nhead.......6...6.Z1yhhea...0...!...$.^..hmtx...T........ .8.kern...,............loca...,............maxp...,... ... ....name...L...)...~\|hN.post...x....... ...2prep............I..x.c`f.c..........................X.@....a}.......x...)..LL_..0.`>.p..g..1.2.bP.B..@..`..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....K.2.7.o.X...D.h.U.7.o...D.2.Z.K.....:.......J....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44445), with CRLF line terminators
Category:	downloaded
Size (bytes):	44447
Entropy (8bit):	4.955724189964028
Encrypted:	false
SSDEEP:	768:Xu077lg3puj1J+FAN3YlWCOwkfaU+2ay0m78e3MmOL2IHl7SGAz2oTqHEuJzZDDy:+sYA9jay0m78e3MZL2CAzfTqHEuFK1uu
MD5:	31AA5C3EBEF1BB2E79CD8DEE20262845
SHA1:	FD9CEB609F4C60E0E8C5561CB933C84A85AF12B7
SHA-256:	65E09EC697225883FB227B54F59A2C421B5AF7A3B4F557770AB15D8934FF44CE
SHA-512:	927E39C17F03851FD52A6A71A1425CEE4DBE62BF4E8AEAF7F17248B9416763AE1AC7DB1120B5F25871D8742DD091293118C875B0000EEF06B83013B49AFDEA94
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/css/megamenu-v4.css
Preview:	.global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big,.global--navigation blockquote,.global--navigation canvas,.global--navigation caption,.global--navigation center,.global--navigation cite,.global--navigation code,.global--navigation dd,.global--navigation del,.global--navigation details,.global--navigation dfn,.global--navigation div,.global--navigation dl,.global--navigation dt,.global--navigation em,.global--navigation embed,.global--navigation fieldset,.global--navigation figcaption,.global--navigation footer,.global--navigation form,.global--navigation h1,.global--navigation h2,.global--navigation h3,.global--navigation h4,.global--navigation h5,.global--navigation h6,.global--navigation header,.global--navigation hgroup,.global--navigation i,.global--navigation iframe,.global--n

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	50616
Entropy (8bit):	4.206777347868299
Encrypted:	false
SSDEEP:	384:rbaOtNSlMziPyqDJZLnu9cXjAuDCsITHFWe45pubifk3OOJOeZJYotj2+m5l5vM7:rbZtN8Ky/JZLnnXEWukeZulX5q25bvy
MD5:	5F3635ECE4F9CE1BB1538817E920E628
SHA1:	95BEF86056C4CC24E8A21FAB58F39BFBC388A5A5
SHA-256:	D1E8A1F74E308B3A1DBB63107DFD162276E0E00BA0F97FC8B398F8B727C67F82
SHA-512:	19B970BF375D1930B0157BFDF130C9B347839CCCB2B13271036CC2BF5A1319A3380B8183850146BC3742F30A8725D6D0C5D7F51AE29CFCA2DFE45AD9C291766C
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/assets/xyz.js
Preview:	(function(d,w,_RB) {.. var d = d. , w = w. , RB = _RB;.. w.RB = _RB;.. RB.logs = RB.logs \|\| [];.. RB.initErrorHandler = function(err) {. var a = d.createElement("script");. a.type="text/javascript";. a.async=!0;. f=d.getElementsByTagName("script")[0];. f.parentNode.insertBefore(a,f);. a.onload = function() {. RB.bugsnagClient = bugsnag({. apiKey: 'ea41baf0449e82ae968680854e7690eb',. autoNotify: false. });. if (err) RB.bugsnagClient.notify(err);. }. a.src="//d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js";. }.. var wrapError = function(fn) {. return function() {. try {. return fn.apply(null, arguments). } catch(e) {. RB.bugsnagClient ? RB.bugsnagClient.notify(e) : RB.initErrorHandler(e);. }. }. }.. var wrapErrorObj = function(obj) {. Object.keys(obj).map(function(key) {. if (typeof(obj[key]) === 'function') {. obj[key] = wrapError(obj[key]);. }. }). }... Array.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/x_logo.png
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2097
Entropy (8bit):	5.147089067116786
Encrypted:	false
SSDEEP:	48:ZLXRIBQonerZB64ycTMY1QBBWwMKxN1hDa:ZTR8wbIE12WEk
MD5:	A2B46DE8A265D9A26359B1FF4B08CE68
SHA1:	38E597ADFB52C7C79B6416AE53204F5BE8CF8F50
SHA-256:	AAF7FB19407872FE9FAB82ADAFB5C06C193AA2825CFBE8DC54224626F7BC36E3
SHA-512:	289F8D3C441A66418D8D4D7B3F79210B16639A025D5516BFDB1FC1D2156D1E73C9FC74F577786B50CDADABA0A2E3041AA961849CBBDC21DCE3E2AD4364EC8145
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/tooltips.css
Preview:	/.---------------------------------------------------------------....@filename..tooltips.css....@author...aziz.syed@akqa.com....@description.global tooltips style definitions........Content....1. Tool Tips../...=========== 1. Tool Tips ===========../.....toolIcon{...background:transparent url(/ContentTemplates/common/images/global/buttons/help_icon.gif) no-repeat 0px 0px;...position:relative;...height:15px;...width:15px;...vertical-align:top;...padding: 0 0 2px 0;...z-index:50;..}..../.. * Hack for FF2's bad inline-block support.. /...toolIcon, x:-moz-any-link {display:-moz-inline-box;}...toolIcon, x:-moz-any-link, x:default {display:inline-block;}....a.toolIcon:focus,a.toolIcon:hover{...text-decoration:none;...background-position:0px -20px;..}.....toolTipGroup {.. position: relative;.. height:15px;.. width:15px;..}.....toolTipHolder {...margin: 0;...padding: 0;..}.....toolTipHolder {...position: absolute;...top: -10000px;...left: -10000px;...width: 203px;...color:#2020

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4778), with no line terminators
Category:	downloaded
Size (bytes):	4778
Entropy (8bit):	5.427364743677547
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwuLMpn02MGkdtH9JeXy1pecbt:9++2y7CpRuyfM39JKiwcbt
MD5:	A2A93A7555E1E5D3D59E9AC8D0F42647
SHA1:	24A9D3862F135F90A06F38AB85CB0F766BC5D432
SHA-256:	5E377A70F415B4E1896EBBD9504B4F045E38283DCA192996096410229479B905
SHA-512:	C898E0BE095B8E423D3E9AE4A6A687158064ABE2B6B8A0A114DF92AC5AEE7A4FC649475A1CD197D27906ED9CA55CD756D3121C84F3B7E70A4954A05D2A5F532D
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/international/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (556), with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	86747
Entropy (8bit):	5.18161050209953
Encrypted:	false
SSDEEP:	1536:O2h88jQy9Qy9SQyYQywQyM/lnCtyenQVX6UDFLRKMBQyoXQC+X12QmXjQd:OYsyey9dyDy7y4FtKRyhC+lRmzQd
MD5:	BAD35E6B35A339AB50DA3584B92A30A1
SHA1:	5880489815B69566767CDD4AC55894ED24174242
SHA-256:	2E0A0A65CF2B7F81D22D21EE62321DC9F823B6F1C7128C3879850C53A63281D9
SHA-512:	BAF6560AEAA299EC330BB753CED861A51CED3081ED4D86285613F9FB410FBF2AB22FC2E654371EFB6B34AC804DDCC84BD123E19A7A4C7638FEC3404406AE2026
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/components/components.css
Preview:	/..SCSS variables are information about icon's compiled state, stored under its original file name.....icon-home {.. width: $icon-home-width;..}....The large array-like variables contain all information about a single icon..$icon-home: x y offset_x offset_y width height total_width total_height image_path;../../..The provided mixins are intended to be used with the array-like variables.....icon-home {.. @include sprite-width($icon-home);..}.....icon-email {.. @include sprite($icon-email);..}../../* line 1, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss /...section-wrap {.. border-top: 1px solid #e8e8e8;.. overflow: hidden;.. zoom: 1;.. padding-top: 50px;..}../* line 6, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss /...section-wrap:first-child {.. border-top: 0;.. padding-top: 0;..}..../ line 12, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss */...col--half-tablet .col {.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1714421634173&url=https%3A%2F%2Fwww.usps.com%2F
Preview:	{}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	5.165513438405942
Encrypted:	false
SSDEEP:	24:oML+xFreUR5lea9wk6zeC0V4SheF1zih4Ie2N6jy:oJxslaNC0/AF1eyvjy
MD5:	847CC8BD91110FF714275C5A29FBD404
SHA1:	CFF690CC070F9539CC1C325ED150B819018E8DF7
SHA-256:	A33554BD04B3364C1E47B719799AE0DF426BB17F9C8EC422BB346227534EBDBD
SHA-512:	F77AE53ADF26B92B34F7BC45893B6CAA63B9AD4FD10338B6162AAE5D283475D9D0BC0BECC46E35EC0F4273888DC44FF772535DA72914EFA569788498E5DF05D2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/home/megamenu-additions.js
Preview:	var USPS = USPS \|\| {};..USPS.Require = USPS.Require \|\| {};..document.addEventListener('touchstart', {passive: true});..global_elements_jq(document).ready(function($){...$('.international-addition img').attr('alt',' ');....a=$('.international-addition a').html()+"<span class=\"visuallyhidden\">Use our online scheduler to make a passport appointment. Schedule Today.</span>";...$('.international-addition a').html(a);.....$('.shop-addition img').attr('alt',' ');....a=$('.shop-addition a').html()+"<span class=\"visuallyhidden\">Shop Forever Stamps. Shop now.</span>";...$('.shop-addition a').html(a);.....$('.business-addition img').attr('alt',' ');....a=$('.business-addition a').html()+"<span class=\"visuallyhidden\">Grow your business with Every Door Direct Mail. Try EDDM now.</span>";...$('.business-addition a').html(a);.....$('.manage-addition img').attr('alt',' ');....a=$('.manage-addition a').html()+"<span class=\"visuallyhidden\">See what\'s coming to your mailbox using Informed Delive

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6175
Entropy (8bit):	5.033434161707406
Encrypted:	false
SSDEEP:	96:EekDlnD9r/SL5LNC0/1OGyqOvKZ6xTpxGPSDHY7U9Yib4aX2Kp04VLvf8F1Ih2Kx:bkB9pRhvP3qAifWpNvf8FKh2Kx
MD5:	484DC697137DA8CD45F5B67E20DDDEAB
SHA1:	DF2C5AC15AB5229EF14FDBE17166D6732EB92DD6
SHA-256:	6AFF11555C595B217372EDF5B6CDDD6257C84DB3EBBF321CC8E8CC735ECBF97B
SHA-512:	1E3EF8F7BBD09FD887A5FB84C58BE49CE3555E036B612B9C3E9FC83DD8C29D9E42EE1CC2CDEB8826C93CE9B52FC287C57AAF635045A98DE7B36F9BA5ECED2A6C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/customer.css
Preview:	/Enter User Defined CSS for TinyMCE Styles Drop Down /.....Test-Bold {font-weight:bold}...Test-Italic {font-style:italic}...Test-Red-Text {color:red}...Test-Large-Text {font-size:200%}........html {..font-size:62.5% !important;..}..#skip-nav {.. background: transparent;.. color: #fff;.. font-size: 13px;.. font-size: 1.3rem;.. height: 1px;.. height: 0.1rem;.. line-height: 34px;.. line-height: 3.4rem;.. overflow: hidden;.. position: absolute;.. text-align: center;.. text-decoration: none;.. -moz-transition: height 200ms ease-out,background 200ms linear;.. -ms-transition: height 200ms ease-out,background 200ms linear;.. -webkit-transition: height 200ms ease-out,background 200ms linear;.. -webkit-transition-property: height, background;.. -webkit-transition-duration: 200ms, 200ms;.. -webkit-transition-timing-function: ease-out, linear;.. -webkit-transition-delay: initial, initial;.. transition: height 200ms ease-out,background 200ms linear;.. transition-property: hei

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/free_boxes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65316)
Category:	downloaded
Size (bytes):	688341
Entropy (8bit):	5.470638822377522
Encrypted:	false
SSDEEP:	6144:pYTRbalmUsjWWfJQXBN88YLceF+8qTnXP9RIMAcHxZ:pMalmUoWcGS5xlU
MD5:	FC8DF23CF39510BF65E964DBE0AA8AE0
SHA1:	DF1A70C383DD7581C8DDC8FFC20147BF202F1C4E
SHA-256:	D77F1EA73749304B15299AF8F758DEBB75153816F2DF5EA509346751C28265C9
SHA-512:	A59225C95C5B72709C76070FA014517176762F6730C5282A9083C852E4765529DEA55C046AEDF273554AE3E1010DC363000C5292B73B88C6E4EDE1E0A7E45A99
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MVCC8H
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"671",. . "macros":[{"function":"__aev","vtp_setDefaultValue":false,"vtp_stripWww":false,"vtp_varType":"URL","vtp_component":"HOST"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",1],8,16],".match(\/[^.]*\\.[^.]{2,3}(?:\\.[^.]{2,3})?$\/)[0]})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){return-1!==",["escape",["macro",0],8,16],".indexOf(",["escape",["macro",2],8,16],")?!0:!1})();"]},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enabl

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52739)
Category:	downloaded
Size (bytes):	430462
Entropy (8bit):	5.623411848242444
Encrypted:	false
SSDEEP:	6144:YFHOrvrbrSrErorqrRrBrBrlrTkgbyiCdRCNg7kPdK6s7YbIinJVCR:YFoTkPiCdwNg7kVKgS
MD5:	6680D2F3E067D7601F4DE2C1CA4FF1F3
SHA1:	6D9549C58114AD747CD28C3D06F7AFF44D84C99F
SHA-256:	18ABFC3E1419A00DEBC8A4F29C6B361D9ADC7B0B775C629499DA5F34E4148642
SHA-512:	7D6679E506F25A1F4573CD93F2D7D48D37DD9D2C75C9854A58B162F8778541603EB224D47932D41AFD2182327DFE9D380C989A9A55513E4477D02907BA2509C8
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/generic1713817670580.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'years

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1307
Entropy (8bit):	6.862900930794217
Encrypted:	false
SSDEEP:	24:E1hJIwWwjx82lY2T3oVeMaf/yJ3VYmNvWGYIGofc5ByAkXMvcz2fROB:KkNNn2klTJ3WmN3nfcjkwRO
MD5:	3500D365CD94527C71FE9C70D5CDA435
SHA1:	0C7BEDE628D74CEFAF5FCE1B675C0CE3C72C78C9
SHA-256:	34B28A24C5414DAB68A15BE6613536D905FAF33FBF1AED8EE4702CAA60BE9BCA
SHA-512:	F8EDFD39A3E6402D2A546DEB0368297969C7AF02A61185D156E3158CAA1246AD2CCC19A523623185E1EB9F957DA3D026EF6751DCD6C13EBBDFB4D8ED16990FC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:8F605BC93D9E11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:8F605BCA3D9E11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417AA3D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:8F605BC83D9E11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+..M....IDATx..O(.a.....(../.._9Q..l.S.k&......9m....8H..\(n.....R".sp.}.9.i..k..4.....}.}fB.i...qt..!<...8

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13400), with no line terminators
Category:	downloaded
Size (bytes):	13400
Entropy (8bit):	4.929938929744303
Encrypted:	false
SSDEEP:	384:MM3i+31wPKu0LZ+5Cy/WfXWLc/Tk71mvIrKPlxQ8XxEAq/:MMS+31Ru0LPy/WfXWLc/I71mvIrKPlpI
MD5:	B62E27B15837B70E7DAB99846AC90AB3
SHA1:	9A49415C5E47149A5324705EAF78B4B68CE10EDF
SHA-256:	50764694EE2DA70F2D3CE0E8340ECA39B9E2760D293B47E4355C690A4769E781
SHA-512:	2000C6428FE6A0FF72D2F1AA37741F3DDC939CD50F4D748B3D3A1679BEE44FFB39756E6DDD95A59FEF19A55A43A2E0092790EA2A43B3E689443006DB253DAD53
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/megamenu-v3.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c(".search--wrapper-hidden,.mobile-search").removeClass("active"),c(".global--navigation nav,.mobile-hamburger").toggleClass("active")}),c(".mobile-search").on("touch click",function(e){e.preventDefault(),c(".global--navigation nav,.mobile-hamburger").removeClass("active"),c(".search--wrapper-hidden,.mobile-search").toggleClass("active")}),c(window).on("load resize",function(e){c("input").is(":focus")\|\|(c(window).width()<959?(c("nav ul.nav-list li a").off("touch click"),c("nav ul.nav-list li").off("touch click"),c(".g-alert").off("touch click"),c(".g-alert").on("touch click",function(e){e.preventDefault(),c(this).toggleClass("expand")}),c(".g-alert a").on("touch click",function(e){return window.open(c(this).attr("href")),!1}),c(".menuhe

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	dropped
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 300
Category:	downloaded
Size (bytes):	661
Entropy (8bit):	6.281263227489541
Encrypted:	false
SSDEEP:	12:pYiu5hypkcwGK2H0N4R+j2ymrIx9cAjj9qEjN9JspuSVbUTHGIGb:XurcwGK2HGkG2ymrT89hhXspu+Uk
MD5:	004B01A391B1C3C5C3BE3573D3AFC4A2
SHA1:	D6D354CDEC293D046723C2878C4460C17C564534
SHA-256:	AAA73B9D228AA041ABC298F87D9D23E9AF8836F3DB045F04EAE62211D5DFF32A
SHA-512:	5944EB8F28886CC5152637D3D000110B426A5C8840ED100B0E831E45E58F560BFA401814087100CEFD4A9F5D41B7FD022DC9A3BC8678E926FC04E310BC9D686D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/sprites/sprite_arrows.gif
Preview:	GIF89a..,..M.z................B@A5.....M............WUV...................................................lkl...............................f..r..www...............................wuv.........xxx.....................................................................................................................................................................................!.....M.,......,....1..M..7...M.C..=............................95.................*+.M.B......E..I..........@!...D.....)..2................,.....(.hq.....(.........qa..#.,1.....3..q`.......(......c.....8.x....:`.db.D...6. @...J...I...X.j....`.....;

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	262911
Entropy (8bit):	5.571734860687056
Encrypted:	false
SSDEEP:	6144:CvfQX5NzJ8YLceF+qKXjXP9RIMZPw5YDSJ:CH+xJ5Xw6J
MD5:	BC125B6FC828E073DA8D1BA4F59B6B29
SHA1:	58EE4A7F7E64094761EDEA6A0D96B972F6884EE4
SHA-256:	9947B865B985F850043FE67FC01C1C7EBD55514423E9ADDF2206D1E6D884FC48
SHA-512:	B1BD25AB701EDAFEA0BEA94B8032181123D57EE8E0177EC541D180DEFB924B4B4CEBB15348093E19284462FFB6363127592B7EC3D5E78692A142B51F6E076525
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1309), with no line terminators
Category:	downloaded
Size (bytes):	1309
Entropy (8bit):	5.121766355091043
Encrypted:	false
SSDEEP:	24:LDYlA2PJteXGX2yzFmgdmNR5UyInD0a+fcYuspAVNSGgl0fDcokI:LgAoJI2XhhmgqGL+k3w7Bl0rcs
MD5:	58194D729B7F996AC1CFBE9BBCBE53E7
SHA1:	502814F53FFD8512605BFF57C40F82B19368EE5A
SHA-256:	AC199D682B74E25BE4703B83514715C666711AC0E579B28D3C216E84D37169DA
SHA-512:	AAA2CA617F7FE9697F2EC5DD05137B98E0C2F2F5E39B2A104EFC0EBA45234EA71810D7D019C32497428D3409290DBA7C97653214CAE089F2EF878BE9A4B65531
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/component-guide-init.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.componentGuide=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"components",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min","magnific-popup":"/assets/script/lib/jquery.magnific-popup"},shim:{jquery:{exports:"$"}},waitSeconds:30}),USPS.Require.componentGuide(["jquery","components/faq","components/tips","components/tabs","components/learn-more","components/scalable-table","components/video-player","magnific-popup"],function(e,t,n,r,i,s,o){var u=function(){var a=function(){f()},f=function(){var a=e(".tips-component"),f=e(".faq-component"),l=e(".vertical-tabs"),c=e(".horizontal-tabs"),h=e(".learn-more"),p=e(".scalable-table"),d=e(".lightbox-image"),v=e(".video--section");c.each(function(e,t){new r(t,{type:"horizontal"})}),a.each(function(e,t){new n(t,{})}),f.each(function(e,n){new t(n,{})}),l.each(function(e,t){new r(t,{type:"vertical"})}),h.each(function(e,t){new i(t,{})}),p.each(function(e,t){

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 34
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.173794838194766
Encrypted:	false
SSDEEP:	3:C3Updr/7/l4EuokE9WlE:GKdrPuoOlE
MD5:	DA47A28BAEAEF3A8FEA7BDAF82150121
SHA1:	49F36F3803545262DA55A005DDE44DAD977F2547
SHA-256:	C04590AF8138779E0BBF0BE532CC9BF3E49BE1CFF64FA12F3FC8B4C30E92D42E
SHA-512:	BF7EF0C22319AA4428A0705AAC99CAD7F98AC05F6A045436BFC7344BD981A5A53F55BBA92446737FA1F2DECD3C58794DADA83102718B9711373E1268E832B3A7
Malicious:	false
Reputation:	low
Preview:	GIF89a.."................!.......,......"......0........;

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 626x277, components 3
Category:	dropped
Size (bytes):	40507
Entropy (8bit):	7.944440377781344
Encrypted:	false
SSDEEP:	768:9/X7aiPxfgiS1d0mdZgztbfKgfV4jHKllkU6+yLj7uP9moKx/gm:9/egxS1dXWztfKsV47K3w+y/7uPzKx/x
MD5:	2636DF66D869E58AF2EE447AC7D53861
SHA1:	A6659397D1EC30D01A1FA178905C8B358DD30B8F
SHA-256:	D8E22E9E128007E03604465A44445B16A508EBE964747A466543D3B0D2A2CD17
SHA-512:	9571307CF15F5269919C458C0231F7FD9C2DC50C6F9277F079E7BC76B13D28521FB1AC9E8258CEEAD892C4D5351DAA38ECE4BA342E459C81F4B37D7978DA02C1
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F3F706D8B7A11E98D82907679A821AC" xmpMM:DocumentID="xmp.did:BD7165A5EFE111EAB63896AF6BA545A7" xmpMM:InstanceID="xmp.iid:BD7165A4EFE111EAB63896AF6BA545A7" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2019681AD64711EA8DAA86F8C09A34DD" stRef:documentID="xmp.did:2019681BD64711EA8DAA86F8C09A34DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/stamps.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1701
Entropy (8bit):	5.019835948893838
Encrypted:	false
SSDEEP:	24:ZVbddI7ORzQtxN0uAKzfl1tQJAXfETcf5pNnxxAMN1lMNTQDp:ZV2gaOuAAMAPEqpxdN12NTQDp
MD5:	73421BB670290A96F15CCB3B93FDFCBC
SHA1:	981F49671F75FDACF6DA48296FD22C8EC3892400
SHA-256:	63A9D1C016BB4FFE062A704F167F26F8FAB8624077C7EB037AC121BD682263E9
SHA-512:	8B3E559E5F7819087052087C91703906EDA0762580D031AA771F3C81456BA4E8FFD0CF02FB32EF18A58207ECC82D62269BD832BA2C271FA3601F4BAE00CF34F2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/links.css
Preview:	/.---------------------------------------------------------------....@filename..links.css....@author...aziz.syed@akqa.com....@description.links global style definitions........Content....1. Links../...=========== 1 Links ===========..*/..a{...color:#2f6fa9;...text-decoration:underline;..}....a.primary,..a.standard,..a.tertiary{...font-size:12px;..}..a.primary{...font-weight:bold;...color:#2f6fa9;...text-decoration:none;..}..a.standard{...color:#2f6fa9;..}..a.tertiary{...color:#999;..}..a.standard,..a.tertiary{...text-decoration:underline;..}..a.primary:focus,..a.standard:focus,..a.tertiary:focus,..a.primary:hover,..a.standard:hover,..a.tertiary:hover{...color:#656565;..}..a.info-icon,..a.info-icon-end{...background:transparent url(/ContentTemplates/common/images/global/icons/info_tooltip_icon.gif) no-repeat 0px 0px;...line-height:16px;...display:block;...text-indent:20px;...text-decoration:none;..}..a.info-icon:focus,..a.info-icon-end:focus,..a.info-icon:hover,..a.info-icon-end:hover

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (650), with no line terminators
Category:	downloaded
Size (bytes):	650
Entropy (8bit):	5.384152767330336
Encrypted:	false
SSDEEP:	12:sDs/lojvYcOI99h4J7r1Zbr6YB2LUwOS7YEw6okzoRWF3U0xQJUSeGy4zg+C/:QYcOI97upxr6Y3xSEaoXRWNBx6U1GlzK
MD5:	32DD789522CC6923C80141FCF5D3A614
SHA1:	366B7E3FD63176E559D8B8C5F59BE6FD3388CF5A
SHA-256:	5C3C9DF8B8F0A80F863C53DEC5CBCA7DEDBDCC7697C6C6359520950774653960
SHA-512:	B3F46AD28DC9F531C2D417099D1D63919CC35DE478887847AE84B370C238CAAB993A72C59AC001DDBF4B556BD69D7E9CCB2A7C08B3D685412A33A1EF354D3CBE
Malicious:	false
Reputation:	low
URL:	https://fast.fonts.net/t/trackingCode.js
Preview:	eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]\|\|e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('4 7=g.b;4 2=3.p(\'r\');2.9=\'a/5\';2.c=\'d\';2.e=(\'6:\'==3.u.h?\'6:\':\'i:\')+\'//j.k.l/t/1.5?m=n&o=\'+7;(3.8(\'q\')[0]\|\|3.8(\'s\')[0]).f(2);',31,31,'\|\|mtiTracking\|document\|var\|css\|https\|projectId\|getElementsByTagName\|type\|text\|MTIProjectId\|rel\|stylesheet\|href\|appendChild\|window\|protocol\|http\|fast\|fonts\|net\|apiType\|css\|projectid\|createElement\|head\|link\|body\|\|location'.split('\|'),0,{}))

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1121
Entropy (8bit):	5.174262414442916
Encrypted:	false
SSDEEP:	24:2dzAQLf3SBTNtfwjrBGtAfwjrBWqVhxgaKjr7DqsVFm:czAgf3SBBtS8ASsQhxgaoesbm
MD5:	9105CFA1479096038365D18BEB23CB1F
SHA1:	648C5B01118CF059EEDE56D9DAE1713AB26D965C
SHA-256:	B2728704F99E68B8EDFA2B8EFCB1F40E77D3ABD5F6F04388C9A09232B1711043
SHA-512:	ABDEF81B6534A3F845F0EA1734EB237205DB8A9DAD9BF6F7A76D4F37C5A3D7B9A75B1ADD57CF9312D183B5817DD99DF41D2F251D38AB32432F7FBB2401252C17
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 75.8 86.7" style="enable-background:new 0 0 75.8 86.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M4.6,26.2h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.6C0.9,24.5,2.6,26.2,4.6,26.2z"/>..<path class="st0" d="M4.6,46.9h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.7C0.9,45.2,2.6,46.9,4.6,46.9z"/>..<path class="st0" d="M66.9,0.8H13.4c-4.4,0-8,3.6-8,8v7.8h8V8.9h34.4V33l5.6-5.6L59,33V8.8h7.9v69.1H13.5V67.6h1.1...c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2c0-3.4-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5H4.6c-2,0-3.7,1.6-3.7

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 300
Category:	dropped
Size (bytes):	661
Entropy (8bit):	6.281263227489541
Encrypted:	false
SSDEEP:	12:pYiu5hypkcwGK2H0N4R+j2ymrIx9cAjj9qEjN9JspuSVbUTHGIGb:XurcwGK2HGkG2ymrT89hhXspu+Uk
MD5:	004B01A391B1C3C5C3BE3573D3AFC4A2
SHA1:	D6D354CDEC293D046723C2878C4460C17C564534
SHA-256:	AAA73B9D228AA041ABC298F87D9D23E9AF8836F3DB045F04EAE62211D5DFF32A
SHA-512:	5944EB8F28886CC5152637D3D000110B426A5C8840ED100B0E831E45E58F560BFA401814087100CEFD4A9F5D41B7FD022DC9A3BC8678E926FC04E310BC9D686D
Malicious:	false
Reputation:	low
Preview:	GIF89a..,..M.z................B@A5.....M............WUV...................................................lkl...............................f..r..www...............................wuv.........xxx.....................................................................................................................................................................................!.....M.,......,....1..M..7...M.C..=............................95.................*+.M.B......E..I..........@!...D.....)..2................,.....(.hq.....(.........qa..#.,1.....3..q`.......(......c.....8.x....:`.db.D...6. @...J...I...X.j....`.....;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	5.0158771166375935
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxRTvABd3zI0/UBdM/Qftf22HhJzWLKjUSHJb4CNw1B:qQQjgYkedA/3zI+UX3ULA1Hx4CNw1B
MD5:	2C39ECCCD050F597BB7BC612C8EE9D26
SHA1:	20B0F60C777CA8DCDB52389A133F42BFCBCC42C0
SHA-256:	9704ABF2C5A43D5A594F6E2A6A3819EAA2A93ECE7C59BAD24A921FAB3787F59A
SHA-512:	1972D29708C5BD290C8B4BABDB28F6082B3B96D186E799C99D8794B6DE8FE3AF5BDD1D9A6BC951CE14B0CDECD8FEBCEF4A89C4774BAA88E2CF210C0320DBEE05
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.16.0-2404242003
Preview:	!function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421668308
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 34
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.173794838194766
Encrypted:	false
SSDEEP:	3:C3Updr/7/l4EuokE9WlE:GKdrPuoOlE
MD5:	DA47A28BAEAEF3A8FEA7BDAF82150121
SHA1:	49F36F3803545262DA55A005DDE44DAD977F2547
SHA-256:	C04590AF8138779E0BBF0BE532CC9BF3E49BE1CFF64FA12F3FC8B4C30E92D42E
SHA-512:	BF7EF0C22319AA4428A0705AAC99CAD7F98AC05F6A045436BFC7344BD981A5A53F55BBA92446737FA1F2DECD3C58794DADA83102718B9711373E1268E832B3A7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_sm_pipe.gif
Preview:	GIF89a.."................!.......,......"......0........;

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 102, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	6.008353781899314
Encrypted:	false
SSDEEP:	3:yionv//thPlEZtlHRg9RthwkBDsTBZt0aRSaQmwEK6QjevoHc86x5DTU5k6qHlVo:6v/lhPgxRgjnDspxTQmwr6QjL886x5PK
MD5:	53C79701060D3641D0E856AD99F0D07A
SHA1:	753919AB47F7F4F409819D3445E6CE78280B4F3B
SHA-256:	F603CA1572C9C8451191B5DD31340205E4ED3BCAA4A4F014379BD0733D92FC21
SHA-512:	539CD82E8D4EEE2042F321262F530832F405ED2A2AA3B67EBF7355ECFF1A5B7FA5D7C48DCCA948CE85003C70D87A727122BDD0F96B426F89087238DDFB7FD546
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_bkg.png
Preview:	.PNG........IHDR.......f.......l<....tEXtSoftware.Adobe ImageReadyq.e<...QIDATx.bz..=......?......a.h....:...........~..e.,....vT7.............hTs.b....0.i)z..`......IEND.B`.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=*;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3179), with CRLF line terminators
Category:	downloaded
Size (bytes):	3181
Entropy (8bit):	4.981532397736361
Encrypted:	false
SSDEEP:	48:OocqIQCwocCpEpiGWV20kA7/K65sFp5sFZd5sF75sF6XHFzyAhI:OocPQnocCpVGWV2Fi/K4azaVaFaqluX
MD5:	0466C7414C19B685BAFE055BCD1D9D7B
SHA1:	29EB107CA7C4DE31AAF2A9DF8D9C8294D2C234AE
SHA-256:	CCAEBFD542FBA2C3AF8D9397E265345E7C7BEC22C7C94F190EF7047E38479830
SHA-512:	D4162CBA8B07656B5004846386DEDD0ADE78BB3655974D12D54370230BE659C7BF618AAAF7CB5C5D26D07F61ACB746202EB7A7BF988FE8F92FD496AFEB0B85B7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/footer-sb.css
Preview:	.global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 250ms ease;-webkit-transition:left 250ms ease;transition:left 250ms ease}.global-footer--wrap {margin:0;padding:0;border:0}.global-footer--wrap ,.global-footer--wrap :before,.global-footer--wrap :after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}.global-footer{margin:0 auto;max-width:1024px;position:relative}.global-footer--navigation{margin:30px 0 0}.global-footer--navigation-category{color:#202020;display:inline-block;font-size:11px;font-size:1.1rem;font-family:"HelveticaNeueW02-75Bold","Helvetica Neue",Helvetica,Arial,sans-serif;line-height:20px;margin:0 0 30px;text-transform:uppercase;vertical-align:top;width:24.4%}.global-footer--navigation-options{list-style:none;text-transform:none}.global-f

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1800x400, components 3
Category:	downloaded
Size (bytes):	152495
Entropy (8bit):	7.955931843746033
Encrypted:	false
SSDEEP:	3072:ukobP/PmLhE4IfcOPBFE8pmPW4Dxg+2dEm7U+3NdkWSJbYbBsCa:uk83mIBFE8pmPW4DG+22mFdwbYa
MD5:	99D200A9B634D608BEB4EE32D49D335B
SHA1:	E0054150168454313E6DB66B36E0019752C8B784
SHA-256:	7629A558D1856DD529661C004275DDF2DF123E50BF3B00FF1083E4AC7BD0E49E
SHA-512:	75E4F3580003E5987ACC06ADEC64F6ABBC245E17803737060281B3FADE6D8BDB9B403CBBADC01F06908C879B92A388314948907C0B3CC7379314E779F2BF016A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/premium/id-hero-22-woodflooryellowsweater.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................q............?...R.v......p:..2z..z..n.zg.k...Y....+.iJ..G.\Z..0.5.=..%T.x.A..F..^.c..d..n...\...X~.3....lt..c....G.S.?..2{......q..J....I...0.u.&..^.1..;TE?.o.UUX~=..L..f..9.[A.g..5.....0=}=.2.#kg=..\.y.....e.*..:m.c..W......H.......h.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1121
Entropy (8bit):	5.174262414442916
Encrypted:	false
SSDEEP:	24:2dzAQLf3SBTNtfwjrBGtAfwjrBWqVhxgaKjr7DqsVFm:czAgf3SBBtS8ASsQhxgaoesbm
MD5:	9105CFA1479096038365D18BEB23CB1F
SHA1:	648C5B01118CF059EEDE56D9DAE1713AB26D965C
SHA-256:	B2728704F99E68B8EDFA2B8EFCB1F40E77D3ABD5F6F04388C9A09232B1711043
SHA-512:	ABDEF81B6534A3F845F0EA1734EB237205DB8A9DAD9BF6F7A76D4F37C5A3D7B9A75B1ADD57CF9312D183B5817DD99DF41D2F251D38AB32432F7FBB2401252C17
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/collectors.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 75.8 86.7" style="enable-background:new 0 0 75.8 86.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M4.6,26.2h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.6C0.9,24.5,2.6,26.2,4.6,26.2z"/>..<path class="st0" d="M4.6,46.9h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.7C0.9,45.2,2.6,46.9,4.6,46.9z"/>..<path class="st0" d="M66.9,0.8H13.4c-4.4,0-8,3.6-8,8v7.8h8V8.9h34.4V33l5.6-5.6L59,33V8.8h7.9v69.1H13.5V67.6h1.1...c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2c0-3.4-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5H4.6c-2,0-3.7,1.6-3.7

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2449), with no line terminators
Category:	downloaded
Size (bytes):	2449
Entropy (8bit):	4.911920819252327
Encrypted:	false
SSDEEP:	48:cOeIZuRzhmlkllFgKl+qqg/Lxx/mnLYsx:vN219W
MD5:	E8FE46EA7B4D034EFAA46EB26762DAE5
SHA1:	541C7E0424E2FE28C35043312D6D381BD2172F47
SHA-256:	7481EE4AFA2771109BD30E56FAB25C7899A270B73A50FD8E75EAD6D5AFC27E9B
SHA-512:	275330421D1ED883284BFD2CC1EB1226641E4617AD4CE27BE1310417F7CEA5D04884C5531A5D091F81852B119F7F40A34B0CE4741A9A9F520139D27221587A98
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/tips.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".tips-component--see-all-link",i),r.collapseAllLink=e(".tips-component--collapse-all-link",i),r.toggleAllToggle=e(".tips-component--header .tips-component--toggle-button",i),r.allTips=e(".tips-component--tip-content",i),r.allBlocks=e(".tips-component--tip-wrap",i),r.allTitles=e(".tips-component--tip-title",i),r.allContent=e(".tips-component--tip-content",i),r.hiddenText=e(".expanded-text",i),r.allToggles=e(".tips-component--tip-wrap .tips-component--toggle-button",i)},a=function(){r.collapseAllLink.on("click",c),r.seeAllLink.on("click",l),r.allTitles.on("click",f),r.allToggles.on("click",f),r.allTitles.keypress(function(e){if(e.which===13)return f(e),!1})},f=function(n){n.stopPropagation();var r=e(n.currentTarget).parent(),i=e(".tips-component--toggle-button",r);i.hasClass("open")?v(r):d(r)},l=function(t){t.pre

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (904), with no line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.0858674950376574
Encrypted:	false
SSDEEP:	24:fkBxpQpL8OtNTy5jBQpz1T7MzKabTI8TLNiXp0c60dDlb:cqhHdydBs7g/BTwZ5b
MD5:	1151374A56190F94E7B4BD45C6CEFAA4
SHA1:	A66886920541480CAE234A5474E7A9F9876EA636
SHA-256:	5028B8B5AC9C8DFF2E22FD12579D3E38F522705BA3B8DD63B072B15C88782B53
SHA-512:	6650EDFFD9EABFBC25311C485ACAA47CC3438CD0B5A2E91932CAF4C52FBB0524F6A2F09E3A12F69AF6308A6EF5E98E77937FA40CB4BC9A02351A74BA5CE0803A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/learn-more.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=!1,s=function(){o(),u()},o=function(){r.container=e(t),r.trigger=e("[href=#"+t.id+"]"),r.learnMoreSection=e(".learn-more--content",r.container),r.allLearnMore=e(".learn-more--content"),r.allLearnMoreLinks=e(".learn-more--link")},u=function(){r.trigger.on("click",a)},a=function(n){n.preventDefault();var s=e(this),o=s.find("span").html(),u=0,a=r.allLearnMoreLinks.length;r.learnMoreSection.hasClass("open")?i=!0:i=!1,r.allLearnMore.slideUp(400).removeClass("open");for(;u<a;u++){var f=e(r.allLearnMoreLinks[u]);f.html('Show Details<span class="visuallyhidden"> for '+f.attr("data-title")+"</span>")}i\|\|(r.learnMoreSection.slideDown(400).addClass("open"),s.html('Hide Details<span class="visuallyhidden">'+o+"</span>")),setTimeout(function(){e("body").addClass("paint").removeClass("paint")},401)};return s(),{init:s}};return t});

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8721
Entropy (8bit):	4.289483546265149
Encrypted:	false
SSDEEP:	96:aM5Vmloq5WIiXnlDDqAdSm6LuqV8Kg8ecRuRa:aM5Vixi1D2AdSXLuqprecb
MD5:	CDF0D5587B144E3FC9CCFF1159445664
SHA1:	24BFB47FEB86D8097BC6838DF596838C92D49294
SHA-256:	1917DA206D7308727B7ABD5B46AC330757527914EE101258C6364D0AF409313C
SHA-512:	FEE03BD10CE5646E5D37DB77DA72D46951FBC4C833350B8C78EFC7010A933647D46ED706826D0613FDA11E8FB6FF5EC8B143A854B5EB3E3D155409A414E8929C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css
Preview:	/.. =========== 11. Drop Downs ===========../...select-wrapper{.. font-size:12px;.. height: 28px;.. font-weight:normal;.. color:#2f6fa9;.. position:relative;...font-weight: bolder;..}...dj_safari .select-wrapper{.. height:29px;..}....select-wrapper select{.. .height:0;.. }.. .select-wrapper .select-options{.. position:absolute;.. top:0px;.. display:none;.. left:0px;.. }.... .select-wrapper ul,.. .select-wrapper ul.select-ul,.. #main .select-wrapper ul,.. #main .select-wrapper ul.select-ul{.. .width:100%;.....background:white;.....overflow-y:auto;.....overflow-x:hidden;.. ..margin:0px;.. ..list-style:none;.. }.. .select-wrapper .select-small ul,.. .select-wrapper .select-small ul.select-ul{.. background:#ebebeb;.. }.. .select-wrapper li,.. .select-wrapper li.select-li{.. width:100%;.. height:auto;..

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.6002769124252865
Encrypted:	false
SSDEEP:	384:yj8VYg4B4+hDpQfe4rCZg6/yEKDnU/gBS4Nhwp3fN4YCCgF/NEdDOU+g2544hNpl:/cdQhei6x2jTqv2xx1mNd6HqH4swTUZg
MD5:	FF1773050F649B96084AC48DD10C7472
SHA1:	245FD5CB4D15C48F12BFE6E48DE692381A3A6FCC
SHA-256:	C3E8316300950DE3AA4307E236FF0875335CC238EC8B67AD9F802C5BB5A0F302
SHA-512:	3C7007C7C1345C2B4A8C2D17CBA53A090201E26B5301589D79C7AC1B90BBF1F9C12EFA75CA86DED5A51F20E375DD22D27D9EA0CCA93043121C70A672B9D7D9B0
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1714421657406&cv=11&fst=1714421657406&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3GfHvg!2sZleMmg!3sAAptDV5SRaZU"],"userBiddingSignals":[["7639828228","6

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1006
Entropy (8bit):	5.232282735286602
Encrypted:	false
SSDEEP:	24:2dzATLf3UX7mXYTNkeEhgmyhTkTx3Qx7FEEZiP6Fx1f0Qz8:czAvf3UX7mXYBkRWmye93a7FEdPQf0Qo
MD5:	DF6FCAB6C4CAF86E8A1401A4FC36F885
SHA1:	860352CEA6899553CB4E7111097B35BD007C65E7
SHA-256:	986EBC6C0F0C4B5BDB2513352DBBF3F501A36ABD1DCD0C17A9C215EFD95191A7
SHA-512:	E263C5714A2BEFAC6DDDB15F1A2C4DDB3BEE22FDEF7DC05BA6794E6A0DB9EB8245E23E5742DE1E1F2EFCBCF07A4911138E36DFA06AECF0D826C955B836F07A0C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/gifts.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28.4 32.4" style="enable-background:new 0 0 28.4 32.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M26.7,9.9H1.6c-0.8,0-1.4,0.6-1.4,1.4v7.1c0,0.8,0.6,1.4,1.4,1.4h0.6v10.6c0,0.8,0.6,1.4,1.4,1.4h21.1..c0.8,0,1.4-0.6,1.4-1.4V19.8h0.6c0.8,0,1.4-0.6,1.4-1.4v-7.1C28.2,10.5,27.5,9.9,26.7,9.9z M12.2,29.9h-8v-10h8V29.9z M12.2,17.9..h-10v-6h10V17.9z M24.2,29.9h-8v-10h8V29.9z M26.2,17.9h-10v-6h10V17.9z"/>.<path class="st0" d="M9.2,8.5h10c2.5,0,5-0.5,5-4c0-2.2-1-4-4-4c-4,0-6,3-6,3s-2-3-6-3c-3,0-4,1.8-4,4C4.2,8,6.7,8.5,9.2,8.5z.. M16.2,4.5c1-1,2.4-2,3.5-2c1.4,0,1.5,1,1.5,2c0,1.8-0.6,2-2,2h-3V4.5z M8.7,2.5c1.2,0,2.5,1,3.5,2v2h-3c-1.4,0-2-0.2-2-2..C7.2,3.5,7.3,2.5,8.7,2.5z"/>.<

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6371
Entropy (8bit):	5.052295466732961
Encrypted:	false
SSDEEP:	192:rQYfSKRxWS/Z4O1OCbF6xtGi0PddO0XX2mdudi:rQu6xtG7
MD5:	ADCEFD7182F8BFEF107EFD3CF48E3D36
SHA1:	6B12F07DBE4E3F57258EAFFFA0155800C1FE35BA
SHA-256:	1B60408F18DE4D1C62DD5705C4EC9A01F08E4579D5D2CD4001E2B7DCBC08CB7C
SHA-512:	11723F502F6C23ED8B64C1D1B7170CD5EC1C1613E5C7B5228365FF2625A500634AE58B1E6261D1F75BB036123E08B3427173CE73FE157737FDB2CACED5BCF2ED
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/widgets/modal-box.css
Preview:	..#modal-box_overlay {...position: fixed;...z-index: 10000;...top: 0px;...left: 0px;...height: 100%;...width: 100%;...background-color: #000;...filter: alpha(opacity=40);...-moz-opacity: 0.40;...opacity: 0.40; ...background:#000;}.....#modal-box_overlay-progress{...position: fixed;...z-index: 10001;...top: 0px;...left: 0px;...height: 100%;...width: 100%;...filter: alpha(opacity=40);...-moz-opacity: 0.40;...opacity: 0.40; ...background:url(/ContentTemplates/common/images/global/modal/crt_rem_trans_dot_ani_whiteback.gif) no-repeat scroll center center;}......modal-box {...width: 400px;...position: absolute;...z-index: 10002; }.......modal-box #dialog-buttons{....height:26px;}.........modal-box #dialog-buttons .button-link{.....margin-right:12px}.........modal-box #dialog-buttons .last{.....margin-right:0;}.......modal-box p{....margin-bottom:10px;}.. ....modal-box .modal-box-header { }.. .....modal-box .modal-box-header .modal-box-header-left { background: url(/ContentTemplates/common/i

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/package-intercept.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	dropped
Size (bytes):	123985
Entropy (8bit):	7.973603263546903
Encrypted:	false
SSDEEP:	3072:4At9E/zxhecTLB6oQL280D1hUCr9PBcuC/sda0c:lE/zxhecTl6oQL2dbUQap/ca0c
MD5:	A8F7D8E3325AAC0EDC8C51C151D980FC
SHA1:	B90447CF89AC91390C9DC52B4F3719161AE606F2
SHA-256:	C6846109092A0F90903D5E683274116680005A67E2CA274967BBF72CBFA7C51A
SHA-512:	5C036F704B356FA47CB2A6EC4106EB117C89947A9519E78CE65B8C4FBA12E1B3AE1964990C95A5C518411DD968F389F51BF8F858B09378C4D47C9904873F9EE4
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2264), with no line terminators
Category:	downloaded
Size (bytes):	2264
Entropy (8bit):	5.261938173492137
Encrypted:	false
SSDEEP:	48:ctZ2wyq03m2B9AQtNiWpAihZbRmQSoYTWrKqBGru/U2+lueBwt+:sEmMBtYAAihVRmQSoJuvu/U2H2
MD5:	F7F70265F5CF47386622E433317412CB
SHA1:	E1B28284E51C848685C7EA6D19FF551284C58E8A
SHA-256:	766A3DFB7DAB82AF4FAE555132F7FDBACB7D167F17015FBB23C9591DAAAF698B
SHA-512:	683F77683FF3E270B034AF71D23B8174CE918C30DFC69530BB8B5DB02D71814B1611F21D4A3DEA439DC6540FBF4A1EC9483E67969BB4735B21AA82C0806AD351
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/search-fe.js
Preview:	USPSRequireNS.define(["require-jquery"],function(e){USPSGlobals.Require.requireGlobals(["resize-manager"],function(a){var t={},o=function(){n(),r()},n=function(){t.body=e("body"),t.search=e(".search"),t.searchToggle=e(".global-header--search-button"),t.searchWrap=e(".global-header--search-wrapper"),t.searchTrack=e(".search--track")},r=function(){a.addCallback(d),t.search.on("submit",c),t.searchToggle.on("touchstart click",s),t.searchTrack.on("touchstart click",function(e){e.stopPropagation()}),Modernizr.touch&&a.isTablet()&&t.searchTrack.attr("aria-hidden","true")},c=function(){var a=e(this),t=e(".search--track-input",a).val();t=t.replace(/zip/gi, "ZIP");return i(t)?(t.replace(/ /g,""),setTimeout(function(){window.top.location="https://tools.usps.com/go/TrackConfirmAction?qtc_tLabels1="+t},100)):""!==t?setTimeout(function(){endecaURL="www.usps.com",-1==document.location.hostname.indexOf("local")&&-1==document.location.hostname.indexOf("dusps")&&-1==document.location.hostname.indexOf("d

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 666x447, components 3
Category:	downloaded
Size (bytes):	68740
Entropy (8bit):	7.960247634660332
Encrypted:	false
SSDEEP:	1536:r2Kk6sRLPBW+fPBodxe2boGjogucnnIwCOLm5BmyvJfPzRc3GY/xTfJXu0L:yvJRLBWmp8vsQnIwCOLQMylc3GYZhL
MD5:	D4F93B86C15529D4C9BF95D0E3B3B319
SHA1:	57A62BF8FF262E87BE59B466E252240795EA8558
SHA-256:	EBA4B55C3BC029BE6FC5CAD436B10B5FC2747E2486AC6C199BBDB95D67B6B59F
SHA-512:	9273318D080DFCBC60C67371EF23BD76F75F1F633E3F4AF821D9218536904AB90A445FF5F57F462F3EDCBF4E73E5AFFB5EED076B9FBA24E3A1E973F0DA61C16A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/sb-shipshirts.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?..?..(.....`6x...z].....\|;_/.'.......:...o....Z1Y.._.h..z......W....1..&.........79q..........5......._o$...#.....}+..).{..0.Oa=..`..l-..S...5}.j.k.-...$s..d..+.B.[X......W.....`..,x{O....8..H.c...sZw.`...y..2Fk..6.[I#n.z?

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/featured_clicknship.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 48 x 525
Category:	downloaded
Size (bytes):	1604
Entropy (8bit):	7.798724253896392
Encrypted:	false
SSDEEP:	24:l10GcVC/v7yOx3okfT0DweVk1R+THymQEiE31T2W3+G09ymTJHwuRab:l1uEH7VNokmNVeR+THyIn4ONMFq1b
MD5:	96F1E590DDA6A1C9015CF229D3B5C7A5
SHA1:	8685CACD2315D200BCFCAD0684EABBE22F73FA10
SHA-256:	E68AB8B5FB42C11EE98CA8E32342FBD52733EA0C27766637386E45F4249B2DFC
SHA-512:	25B397C9C38EC15F17CCCD6815E5E4C487CF1FD6B8F7E8620AE1D54B21A542F1A8D2D33435CBD60717E4AF3F5B627EC7380D80AB954021FEE1148730DD329BA5
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif
Preview:	GIF89a0......................................................................................................!.......,....0....... .di.h:.l.p,.ma.x..\|....pH,..A.r.l:....@.Z..v[.x..xL....z.n...\|N.....~.........uf...^........................j*&j..p..i$4$i....+,....-#h.o..."..6B6....n....@...@..,#.m.....J...J......l.....".k.........e[.O.>~...tf...G..ABX`\.w...k.q.#...\.@.CG#..N..2e..%..+..K4.h...M.9.-h.&......(..@.I-9`.......8P.....^.<...Fe.VJ.v......ln.v...+ao^.v.....p[.j..U,.q(. ...r'.0o..3Y..A..=.ta.Q'V..uc.aG.=.ve.qg..wg.......g....~\y....m..9t.k.W.......C..=.t...S._..u...c.=.v...s...w....g.s..T.[.J.....".s.]..].n.Nw.U...M..P......r(...h..........(....h..........)`...8...2......t!..SbI.....".(.....q...'....+.../....3.Y..7..;...?....C.Z..GB)....5..I.Y".MR...Q....KZ.J.2Z%.Wr...[zz&.i....m....q..(............Y..............Z....&.k..v.m..^.j..Zn..~ZS....m....n...m............\...../...l...2....B...R,...bl...r..............

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=*;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	5.279084412534843
Encrypted:	false
SSDEEP:	24:2dzAfoLfsSWTNl88JfL6tE8BIno5CeOgo1U63d7VL6tvgf/yZ:czAfofsSWBlHL6tEqhUBS6N7VL6tYfq
MD5:	0D366834F312798111EBE3990766F8F4
SHA1:	E3CE708BF0B0B1924156674ACA900898D407331C
SHA-256:	DA2E0F69EB8EA4AA9FFE45C2AD6D330EB7922E0E14F8AACA4E577BE0FB8B4BEA
SHA-512:	95D855A18FD122BA724ED38E03103731B684647B1128C548CE440BAE0D6596B65457CC77CD000079299D300E274416BCE08613FAC00FAB308962EA4EEAAD86D1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/business.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="._xBA__x2264__x201E__x5F_1".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 74.3 62.6".. style="enable-background:new 0 0 74.3 62.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<path class="st0" d="M67.9,34.8v19.4c0,1.1-0.9,2-2,2H8.2c-1.1,0-2-0.9-2-2V34.8c-3.4,0-5.6-0.8-6.2-2.4v23.8....c0,3.4,2.8,6.2,6.2,6.2h61.7c3.4,0,6.2-2.8,6.2-6.2V32.4C73.1,34.2,70.7,34.8,67.9,34.8z"/>..</g>..<path class="st0" d="M41,27.5h-7.9c-1.4,0-2.4,1.3-2.4,3.1V32v2v3.9c0,1.8,1,3.1,2.4,3.1h7.8c1.2,0,2.4-1.1,2.4-3.1V34v-2v-1.4...C43.4,28.6,42.2,27.5,41,27.5z M39.5,32v5.1h-5V34l0,0v-2.7h5V32L39.5,32z"/>..<g>...<path class="st0" d="M47-0.1H27.1c-3.1,0-5.7,2.6-5.7,5.7v0.7v4.4h4.2V6.3V5.6c0-0.8,0.7-1.5,1.5-1.5h20c0.8,0,1.5,0.7,1.5,1.5....v0.7v4.4h4.2V6.3V5.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10379
Entropy (8bit):	5.360773136060479
Encrypted:	false
SSDEEP:	192:uzgyBVGVhf0AhxmySG8AxlDRw+8ilib61oXMeZ1ja3wlpZgowXw89/vtCNw0wFw5:eroasnR/wlpZdcF0pas
MD5:	08A569482E1DBEA1551C6A50C1F43547
SHA1:	C3D67A3EDEEAD66FD84F097DAA372B3E07D5C38E
SHA-256:	34881CE55F5559EA4A839C6B54D8901A01747AE970450BED5CFF67E3881304F3
SHA-512:	68A4DF497E579B541D33CBE28F4A6694D8CF759BD743B54E51212D1397721FAAADD8C403B43D7DFCA1040D07C2CCBE18A86C9629AFCA4E71597DC7512FAC3F84
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/ge-login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var pfslHost = "pfsl.usps.com"..var lowEnv = false;....// Get current URL..var currentPage = cleanURL(document.URL);..var currentPageIn=currentPage;..var hostname = cleanURL(document.location.hostname);..if (!appID) {...var appID = "Phoenix";..} else if (appID=="ATG") {...currentPage="https://"+storeHost+"/store";...currentPageIn="https://"+storeHost+document.location.pathname+document.location.search;...currentPageIn=prepURL(currentPageIn);..}..if (document.location.pathname.indexOf("holdmail")!=-1){...currentPageIn="https://"+storeHost+"/holdmail/";..}..if (document.location.pathname.indexOf("redelivery")!=-1) {...currentPageIn="https://"+toolsHost+"/redelivery.htm";..}..if (document.location.pathname.indexOf("pse")!=-1) {...currentPageIn="https://"+storeHost+"/store/pse/";..}..if (do

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/chinese_characters.gif
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28360)
Category:	downloaded
Size (bytes):	45911
Entropy (8bit):	5.50390226766743
Encrypted:	false
SSDEEP:	768:lIemuoTiQKPcQx28J54S5KjRtJBr1ji4RPtidM6kRsy0:lI1EcQFhKjRfrjpRPtidM6k2d
MD5:	B63285518F1BC28F01CFE8BFB4E6CA47
SHA1:	850CF5957261D3D7BC5484797F5EA6F32630F52F
SHA-256:	DAC99C71E943D58B4FAC29E7BED45DA2FC55CEEC4D6627ECCE863DEC95A520AA
SHA-512:	0AEA2B88D4C09C7E829B27DB1DF56EB8AA22556A100A0E9FA4DF1B8592C2A0661ADD2C7B5FC7451BDA6A27775EA16B262349EA119CB409C91FE5D9D61A90DE34
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 51685, version 1.0
Category:	downloaded
Size (bytes):	51685
Entropy (8bit):	7.9896700805739025
Encrypted:	false
SSDEEP:	1536:BX9dRjLEqvmCEPq9offjUe8ZGeHIXOptaFTbQGFvq3s:BdjCCEPq9iwtHaFTVKs
MD5:	A93E96BE336C174933E68EF61D56E0D3
SHA1:	48F7A75A367904FF4A9A79689A508E29EDDA462C
SHA-256:	CC469406025B7CE0913CDEFC664007CD0FC46BC66A740DC7AFF67CC041BCCDE0
SHA-512:	3BDD3533A6EB40E0BBE2A3E68E597B6D40969EC18257FDCB2A2CF06668961DEAC22DF830D40DE1DC01B5B1CED068D0BD936F7805F1AB47464291F36DCB121876
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
Preview:	wOFF...............................,........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.k.cfpgm.......8........gasp...8............glyf...H......w..Z.hhead...,...6...6.#..hhea...d...!...$.E..hmtx............2.4.kern...t...>...X.D..loca.............U8.maxp....... ... ...Lname.......-.....j.post........... ...2prep...........nU..x.c`f.b..........................X.@....a}.......x...)..LL..s3.`..p..g..1.2.bP.B..D..c..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....Z.l.A..d.....f...<.r.<....}...P.Z.f.......A.......~................x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1522), with CRLF line terminators
Category:	downloaded
Size (bytes):	92604
Entropy (8bit):	5.189982974029644
Encrypted:	false
SSDEEP:	1536:/Srza/dDyOvLF1+D8okpeU1oj7iisCEqOFk7yeN4l3XiCHjIa2t9F7g/t:1ZCEq49eoB
MD5:	F3B78937AA958077B082C81EAD2807BD
SHA1:	76E064911C51D216910B22D5BBBFCFD264A37382
SHA-256:	BF90F245D547D6DCDA08785F7D9E94A15F6D008E6932577158C68F102C4CFA43
SHA-512:	CE1EFB98F026255E480BCF24F980808C462AD5DA83075CF8971CA00907629A01B1BA862C63A9574BF1C9A760F293AEBC299C9A68F25881494A81C590BCE2D651
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/
Preview:	<!DOCTYPE html>..<html lang="en">...<head>... <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script>....<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">....<meta http-equiv="X-UA-Compatible" content="IE=edge">....<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">....<title>Welcome \| USPS</title>....<meta name="twitter:card" content="summary" /> ....<meta name="twitter:site" content="@USPS" /> ....<meta name="twitter:title" content="Welcome \| USPS" /> ....<meta name="twitter:description" content="Welcome to USPS.com. Track packages, pay and print postage with Click-N-Ship, schedule free package pickups, look up ZIP Codes, calculate postage prices, and find everything you need for sending mail and shipping packages." /> ....<meta name="twitter:image" content="https://www.usps.com/assets/images/welcome/usps-homepage.jpg" /> ....<meta property="og:url" content="https://www.usps.c

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543), with CRLF line terminators
Category:	downloaded
Size (bytes):	12670
Entropy (8bit):	5.334231186269264
Encrypted:	false
SSDEEP:	384:eP1ASw4p5ACbUWCbUAsXcXsmDxMZMeMRM0pG1/y610y:eP1ASwMNJN10y
MD5:	75C250864C79C06616870C68D668DDD8
SHA1:	C976670A8D0AAA4C014AC467E6A7D9C2F039B7B4
SHA-256:	424C02A40371BCC1373E7C3D8A189F850A4667246F2C9EDD68970A57C5645BD2
SHA-512:	9D903351778ACCDF7C36F9277D0C32221D0DEE1B6EFAE2774F58763464D1FEEDEB83F99A3AA849771728F7FA7DE068ABF8081C3CE904EF44B4D53F5091245C57
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/scripts/login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var lowEnv = false;....if ((document.location.hostname.indexOf("intpx") != -1) \|\| (document.location.hostname.indexOf("qusps") != -1) \|\| (document.location.hostname.indexOf("stage") != -1)) {...// CAT...regHost = "catpx-custreg.usps.com";...toolsHost = "cat-tools.usps.com";...storeHost = "ecom-cat.usps.com";...catStore = "-cat";...lowEnv = true;..} else if (document.location.hostname.indexOf("tusps") != -1) {...// SIT...regHost = "sitpx-custreg.usps.com";...toolsHost = "sit-tools.usps.com";...storeHost = "ecom-sit-int.usps.com";...catStore = "-sit";...lowEnv = true;..} else if (document.location.hostname.indexOf("dusps") != -1) {...// DEV...regHost = "devpx-custreg.usps.com";...toolsHost = "dev-tools.usps.com";...storeHost = "ecom-dev.usps.com";...catStore = "-dev";...lowEnv = true;..}.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (337), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68490
Entropy (8bit):	5.109236706664103
Encrypted:	false
SSDEEP:	1536:Xz/sfea/dD/OvLF1+DWPkpeUacKnvuzYSfz10qPV7XiCyjIr2t9F7HsX:T0TdGS
MD5:	E0FA5F7CC2A95210E4BEF7EC4A67C59E
SHA1:	D32FAF9B8809CB57931287F4947F9D2E6B6C294E
SHA-256:	8D6A7D92B3F6F0A89F2DCE360A9FF93CBCD2E066F717F0318A13E339CD6882AA
SHA-512:	3D49DAC7765549C092EA31651AEEE0A329AF6C71A3C3E75A0677FD7C365FC8AD85BBF6E7D8A061894FF7503CBE19A075A977788598AFF35E9914518777DB4097
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/globals/site-index.htm
Preview:	<!DOCTYPE html>..<html>..<head>..<META http-equiv="Content-Type" content="text/html; charset=UTF-8">..<title>Site Index \| USPS</title>.. ls:begin[stylesheet]-->..<link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[meta-keywords]-->..<meta name="keywords" content="USPS, Postal Service, Site Index, Site Map, United States Postal Service, Business Services, Shipping Services, Mailing Services, Extra Services">.. ls:end[meta-keywords]-->.. ls:begin[meta-description]-->..<meta name="description" content="Find it fast using the USPS.com site index.">.. ls:end[meta-description]-->.. ls:begin[custom-meta-data]-->.. ls:end[custom-meta-data]-->.. ls:begin[meta-vpath]-->..<meta name="vpath" content="">.. ls:end[meta-vpath]-->.. ls:begin[stylesheet]-->..<link type="text/css" href="/ContentTemplates/common/css/customer.css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[stylesheet]

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57727
Entropy (8bit):	5.325250679762348
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYmog8hU8Ep:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyqo
MD5:	BBF8AF76569775AA3CB8BB8F5B1E6BFA
SHA1:	B868E2B937F2BCD3A81AFD993C0D4DCDF013E96C
SHA-256:	5C0B08E722F006AC6A0FE594A23BFF4092EE9F58C81D6BAF78E69D55DE4F173D
SHA-512:	D3F7DB1828B076653D7482FD98807C206365C8EC652C5C24CA728FA147465457079E4648E82D168DAF3E9A71834CB4278780E96561E3B3F1E170A12A27E1EE5E
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421630640&ip=81.181.62.90&cuidchk=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	5.279084412534843
Encrypted:	false
SSDEEP:	24:2dzAfoLfsSWTNl88JfL6tE8BIno5CeOgo1U63d7VL6tvgf/yZ:czAfofsSWBlHL6tEqhUBS6N7VL6tYfq
MD5:	0D366834F312798111EBE3990766F8F4
SHA1:	E3CE708BF0B0B1924156674ACA900898D407331C
SHA-256:	DA2E0F69EB8EA4AA9FFE45C2AD6D330EB7922E0E14F8AACA4E577BE0FB8B4BEA
SHA-512:	95D855A18FD122BA724ED38E03103731B684647B1128C548CE440BAE0D6596B65457CC77CD000079299D300E274416BCE08613FAC00FAB308962EA4EEAAD86D1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="._xBA__x2264__x201E__x5F_1".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 74.3 62.6".. style="enable-background:new 0 0 74.3 62.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<path class="st0" d="M67.9,34.8v19.4c0,1.1-0.9,2-2,2H8.2c-1.1,0-2-0.9-2-2V34.8c-3.4,0-5.6-0.8-6.2-2.4v23.8....c0,3.4,2.8,6.2,6.2,6.2h61.7c3.4,0,6.2-2.8,6.2-6.2V32.4C73.1,34.2,70.7,34.8,67.9,34.8z"/>..</g>..<path class="st0" d="M41,27.5h-7.9c-1.4,0-2.4,1.3-2.4,3.1V32v2v3.9c0,1.8,1,3.1,2.4,3.1h7.8c1.2,0,2.4-1.1,2.4-3.1V34v-2v-1.4...C43.4,28.6,42.2,27.5,41,27.5z M39.5,32v5.1h-5V34l0,0v-2.7h5V32L39.5,32z"/>..<g>...<path class="st0" d="M47-0.1H27.1c-3.1,0-5.7,2.6-5.7,5.7v0.7v4.4h4.2V6.3V5.6c0-0.8,0.7-1.5,1.5-1.5h20c0.8,0,1.5,0.7,1.5,1.5....v0.7v4.4h4.2V6.3V5.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/location.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/logo_mobile.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (406), with no line terminators
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.857591442160839
Encrypted:	false
SSDEEP:	12:pzFkBxL56NiZAA8+gAyZ3DQbFAJE3SmmiaU7zuza:fkBxL56N53+grZzNECmmi//u+
MD5:	083CC1C71E1AC534541D2C8F2F4BB0BA
SHA1:	8436E1C786D998B56E0E80855E4320B357850524
SHA-256:	000647AF0E1592C4918CDB40F50B42F148462C0725E8FF85EAF8804FFFD1430E
SHA-512:	FB8A3BE12430D557B2C950F2CA3C987D2FCDE02F401015753B9F51160E336444C305D79E3FAE48FA2A9CE275A20429C63A758737AE6FC0380D380CC981D0DF7A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/video-player.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=function(){s(),o()},s=function(){var i=e(t);r.component=i,r.videoPoster=e(".video--poster",i),r.playButton=e(".video--play-button",i)},o=function(){r.videoPoster.one("click",function(e){e.preventDefault(),r.videoPoster.addClass("fade-out"),r.playButton.attr("aria-hidden",!0),r.component.addClass("video--open")})};i()};return t});

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	295986
Entropy (8bit):	5.608653344384065
Encrypted:	false
SSDEEP:	6144:C4gQX5NzJVYLceF+qKXjXP9RIMtuQ5Y0Ss:Lg+xJ8NlJs
MD5:	BD82CF171C7119262BAABE10341BEF0A
SHA1:	B49B4637072816FEB5CFD1284ACAF6E23139F673
SHA-256:	AAFC807BAEAA9E3F0452BAF56E755792B26154F9F48BA6D36D85CFA77C2F698A
SHA-512:	6D995329A8493DAB683719DB7B4A5A6F613389C05D973BEDDEA1C0BBD28F6872A3E4BF613D01C751491C8B3C59CF15EA7BFFE6D1342473BBD50B0417F539262A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","usps\\.com","uspsdelivers\\.com","uspsconnect\\.com","uspsmailjourney\\.com","usps\\.gov"],"tag_id":105},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","usps\\.com","uspsdelivers\\.com","delivercheer\\.com","irresistiblemail\\.com","deliveringinnovation\\.com","uspscalendar\\.com","paypal\\.com","usps\\.gov","uspsmailjourney\\.com","uspsconnect\\.com","uspsoperationsanta\\.com"],"tag_id":107},{"function":"__ogt_dma","priority":14,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map",

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/change_address.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://storage.cloud.kargo.com/kds/configs/8005988f.json
Preview:	{}.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386)
Category:	downloaded
Size (bytes):	227800
Entropy (8bit):	5.536702848849419
Encrypted:	false
SSDEEP:	3072:8fQaf5qZ3fhO+hPcr8GG1LceF2/ea8LR9Wk9AR6UOQPGA2STnXDL9btIMdUmxoRw:0QX5NhYYLceF+v9TnXP9RIMCm1
MD5:	3BE75A38C85C0F20F9C76837DB28FA50
SHA1:	4FDEFBFF98618E89D547BFDCE2201F5417DB909D
SHA-256:	90E0652122CCB01D78544EEA1E0712F5FB0CFE7D101806CB2AA38AB482E21DC7
SHA-512:	052C1C307435F056D1841CD4C806CA890C61BDBBFA5D3453B0196CD28EFE4AA9551722E38F05497D4B88FAC2CEB1F46DF13AABE3B5FD2ED6A537F4365F06DF48
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-978081151
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-978081151","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-978081151","tag_id":3},{"function":"__ogt_conv_def","vtp_matchingRules":"[\"and\",[\"contains\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"www.uspsdelivers.com\/contact_details\/what-was-the-result-of-your-last-shipping-audit\/?sgf=1\"],[\"startsWith\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"www.uspsdelivers.com\"]]","vtp_conversionLabel":"rUryCL2l8swDEP-qsdID","vtp_instanceDestinationId":"AW-978081151","tag_id":5}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1,2]]

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/tracking.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421633091
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (552), with CRLF line terminators
Category:	downloaded
Size (bytes):	28851
Entropy (8bit):	5.771311912057063
Encrypted:	false
SSDEEP:	768:B3v464PbyVqrYtdQ52pnbrwSmCsslOFFct0DMWbM/AR:Bf464PbyVqrYtdQcbrwSmCsQOrDMrM
MD5:	26433217E805A89CF41ADAC58221316E
SHA1:	BBF155E3C6D673D127021EF9B669338A5D9F3C24
SHA-256:	07AE623F7D42C8707E43608A6A946B0806C4753193CC29E89A296A7585556EBB
SHA-512:	6849E1896CCBA102880DD535BF3FB430F082E3CB12D4A649D038D673F31D85050B0781A416639BB38FBE669787D48CB655771097CF6F052A290250BC0D4CF35E
Malicious:	false
Reputation:	low
URL:	https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=USPS
Preview:	var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:"",URL_PROTOCOL:location.protocol,USE_MAIN_CUSTOM_DIMENSIONS:!0,MAIN_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",MAIN_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",MAIN_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",MAIN_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",..MAIN_SITE_PLATFORM_CUSTOM_DIMENSION_SLOT:"dimension5",MAIN_SCRIPT_SOURCE_URL_CUSTOM_DIMENSION_SLOT:"dimension6",MAIN_URL_PROTOCOL_CUSTOM_DIMENSION_SLOT:"dimension7",MAIN_INTERACTION_TYPE_CUSTOM_DIMENSION_SLOT:"dimension8",USE_PARALLEL_CUSTOM_DIMENSIONS:!1,PARALLEL_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",PARALLEL_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",PARALLEL_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",PARALLEL_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",PARALLE

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65319), with CRLF line terminators
Category:	downloaded
Size (bytes):	155764
Entropy (8bit):	5.066642470765085
Encrypted:	false
SSDEEP:	1536:M/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN264:M/Riz7G3q3SYiLENM6HN264
MD5:	8FE70898895271DDC62823321011273A
SHA1:	60F0159744E3B554A45DA027F9E7FAA992AED71A
SHA-256:	AE576713BC196098F7438DEDE6FF1F835A23291C32B745AD7E6FB6DB809A719B
SHA-512:	A37D9F7728554BB6C241D68303E0F09BD427F061A681CF61BDDDF1DDA40A0C77C10E3E0BF8E58F1D31C1AF14DF7E5941C26EE53B065E35454EA8CDFFB47392EE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/bootstrap.css
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors.. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-si

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16091
Entropy (8bit):	5.1527963616562245
Encrypted:	false
SSDEEP:	384:0smQx3cVYqZVlIlE5k+H4VviRi4kFAFLLF:0sDtcVY4P5k+Hhi4EAFLLF
MD5:	EE5E684540682D94C790DEA0AA5F930C
SHA1:	702D90AAB1EF761A656FC06317234BB2C2486C8A
SHA-256:	6C05C3BA3468273D8F29DCB27EA2E8948AD79F361C92F8F0BF0C0D2869699BA8
SHA-512:	24B2C46AEC1982E73D31B216A69B6718219B8902EB4E15953F7260AB28E2A36FE0FE10C350A5971F70F931CCD06B507A605E91B20D2836FA786EE1AFF5D77DE2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/qt-modals.css
Preview:	/.---------------------------------------------------------------....@filename..qt-modals.css....@author...aziz.syed@akqa.com....@description.quick tools modals style definitions........Content....1. Quick Tools Modals....2. PO Locator Modal....3. Caclulate Price Modal../...=========== 1. Quick Tools Modals ===========../...quick-zip-tmp #modalHeaderH2{.....background: transparent url(/ContentTemplates/common/images/global/quicktools/ZIP_icon.png) 0 10px no-repeat;.....padding-bottom:6px !important;.....padding-left:30px !important;}../.quick-zip { color:#333; padding-top:25px !important; }/...quick-zip { color:#333; }....quick-zip .select-wrapper .select-options{height:28px;}....quick-zip .select-wrapper .select-frame{top:-206px;}.......quick-zip #qzerror-box {....font-size:11px;}....quick-zip #qzerror-box{....font-weight:bold;....margin-left:0px;..../padding-bottom:18px;/....position:relative;}....quick-zip #qzerror-box .icn{....background:url("/ContentTemplates/common/image

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2642)
Category:	downloaded
Size (bytes):	125425
Entropy (8bit):	5.53587248400097
Encrypted:	false
SSDEEP:	3072:MEkzqGs0ft09/mu3GltArX7Qd7oNEGmjgOe32:ppKjso7oNEGmkG
MD5:	3ECC5D37293FA771E2910F3961FD1931
SHA1:	0D4FCC8BC95B98CD09F2F7E40B308DA716DE5FA4
SHA-256:	B28CDDCE315C5FFFF758334DD2B09426B20B91F9AC77CFA627672EB8269629C3
SHA-512:	CC92AB7D6C6D40553B611218CFD2F699A7199614870B6693FF33F8040FF60C49E4020686CD3BE88B44B1F5B5961F318931595D52161B5512A53445F5FD665BFC
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"49",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":6},{"function":"__asprv","tag_id":7}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ .]..,"blob":{"1":"49"}.........};...var aa,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2104), with no line terminators
Category:	downloaded
Size (bytes):	2104
Entropy (8bit):	5.105467457196061
Encrypted:	false
SSDEEP:	48:cFZ2K/muPu5zFIgTQN3m8W4fFAl/pGETeeyIqhMJKEga/I1Iq4l6f5:sAK/muGxMN3JWOGl/zHgawOtl6h
MD5:	637EDCA4B3D02123FBC6D2FC59E831EB
SHA1:	D5547335B8F1120DCB036A5D9BB76C136E7AC68F
SHA-256:	169BE8FA1720A56349AB9365F4AC5B081E700B6209928AFF2A48C623A368A401
SHA-512:	E535F10A13DF2E5CAA444B05C2E82F70261C27DD3DF32F4B20FF6C7E8B20135B1171CB98C9AF8A1672DB615E51D652C85B46607A09A7705791C8EE2B6746B555
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/scalable-table.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s,o,u,a,f,l,c={offset:15,columnMinWidth:75,columnMaxWidth:150},h=function(){e.extend(c,n),p(),v(),b(),d()},p=function(){i.component=e(t),i.columns=e("th, td",i.component),i.scrollingContainer=e(".scalable-table-scrolling-container",i.component),i.headerColumn=e(".scalable-table-header-column",i.component),i.content=e(".scalable-table-content",i.component),i.rightArrow=e(".scalable-table-right-arrow",i.component),i.leftArrow=e(".scalable-table-left-arrow",i.component)},d=function(){r.addCallback(E),i.scrollingContainer.on("scroll",y),i.rightArrow.on("click",w),i.leftArrow.on("click",w)},v=function(){i.component.is(":visible")?u=i.component.width():m(!0,!1),a=i.component.find("tr:first-child() th").length,s=Math.floor(u/c.columnMinWidth),f=u/s,l=f+c.offset,o=Math.floor(u/l),i.columns.css({"min-width":l+"px","max-width":l+"px"}),i.scrollingContainer.cs

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	5.3418082693072595
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nojHzNFLiiQUOqQUOHXPlEhM:2d3ATLf36TNFFQgQ9XPlV
MD5:	D85E71E5218D4464FE55AA786B29B0DF
SHA1:	3E7B370874022D561E0FCFBE0E9332E822A48523
SHA-256:	4EFFA9948EDE5C52F8A8F23BD3E4F05262725E1DA0D22B61ACA4DB3EE0629A70
SHA-512:	4E447DD2D87A10B7B609A5A3DBC56964953A9F0BC91F722ECF87A8825DE7D454C506F7CD6EFE13422E151EE737FEDBE896782B091FE7071DD0A13551857653F5
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/component-guide/blue-caret.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 6 11" style="enable-background:new 0 0 6 11;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M0.5,11c-0.1,0-0.3-0.1-0.4-0.2c-0.2-0.2-0.2-0.6,0-0.8l4.3-4.5L0.2,1c-0.2-0.2-0.2-0.6,0-0.8...c0.2-0.2,0.5-0.2,0.8,0L6,5.5l-5.1,5.3C0.8,10.9,0.7,11,0.5,11"/>.</g>.</svg>.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/store/go-now.png
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4678
Entropy (8bit):	4.954569458612852
Encrypted:	false
SSDEEP:	96:IzhCj3NM3NtEjD2x8Jeu5l2t8JeRD9e2u28JeEmq2N2cl2PsE210k2tA2tZ202NH:IzEDKEn2q32WUE2u2Y6q2N2U2Pn2112e
MD5:	51619D5BE620E900399C19D76299FB35
SHA1:	25FE87F0828F8C254C4BF5D56F8155C098B88269
SHA-256:	CEDF5F5CCC60CCCCC08540AD742054EF866AF25BCBCF2DE1511B780EB089B0F5
SHA-512:	B2B2FDADA1BAFE9A1445822FF9D2880ACBAF3844C21233EDA2E8BD02105D0DA85ABF3A0112F5C3D90331D3644D47666A0281DB7766F53EBAB497C3F46B9574F4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/elements.css
Preview:	/* line 5, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss /.html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed,.figure, figcaption, footer, header, hgroup,.menu, nav, output, ruby, section, summary,.time, mark, audio, video {. margin: 0;. padding: 0;. border: 0;. font: inherit;. font-size: 100%;. vertical-align: baseline;.}../ line 22, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss /.html {. line-height: 1;.}../ line 24, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scs

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2217
Entropy (8bit):	4.685783065646044
Encrypted:	false
SSDEEP:	48:czAuf3CBnRO02tVVdpuktDwJXZU6ViJ/EoJt9WI:vufSBnE02tV7cktDwJX+aiJ/fJuI
MD5:	EF48CE62CB3D361E1D8B2938C40E71DD
SHA1:	F2C96AC70AAB81500FA0D12F5AB61F07B79B8A54
SHA-256:	893B5448CDDE44B4DB29800AEED45E278B1E640EA4585A5F4A5E4725E64BAE84
SHA-512:	47042309BD5680845E3EAE1D70EAD0BD0586FD91FE9DBA8209727BB38CA205944C96399C47183B4814C235D6DD16096686B86FD04B4C1CBE42A6F0E43BD1B1E6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 88 126.5" style="enable-background:new 0 0 88 126.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<path class="st0" d="M33.8,59.4c-0.1-0.1-0.1-0.2-0.2-0.3c-0.3-0.6-0.7-1.1-1.2-1.6c-1.5-1.6-3.2-2.6-5.4-2.8......c-1.1-0.1-2.2,0.1-3.2,0.8c-1.8,1.3-2.6,3.1-2.5,5.3c0,1,0.2,1.9,0.5,2.8c0.5,1.6,1.3,3.2,2.1,4.6c1.2,2,2.5,3.9,4,5.8......c1.7,2.1,3.5,4.1,5.4,6c0.1,0.1,0.2,0.2,0.3,0.3c0.2-0.1,0.4-0.2,0.6-0.4c1.7-1,3.3-2.2,4.8-3.5s3-2.7,4.2-4.4......c1-1.3,1.8-2.7,2.3-4.2c0.5-1.6,0.6-3.3,0.2-4.9c-0.4-1.4-1.2-2.7-2.2-3.8c-1.6-1.7-3.5-2.4-5.8-2.2c-1.6,0.1-2.9,0.9-3.9,2.1......C33.9,59.2,33.9,59.3,33.8,59.4z"/>....</g>....<g>.....<path class="st0" d="M33.8,57.7c0.1-0.1,0.1

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2552
Entropy (8bit):	4.795851335551723
Encrypted:	false
SSDEEP:	48:czAuf36SGo2uuzJg3RpzGTpEEptnGJQ3gshZ6QrPjxJvYgd5lgak6L7KfKe:vufK6uJgTUEEjGe3gsh9rP7QS5lgaxGn
MD5:	5C5579A50964D4972D1954BFF4EE232D
SHA1:	C78B384713CF7A8A5515A54F17C6E70EBDDE98FC
SHA-256:	C12815F27ECDFD09B2920C1EEA21AE7ABB8E107349D6BB8B39707A0CD9A3E591
SHA-512:	3694C68BCDD136FCA9507445AE06556A7CD524F9AEA4B6EC53849E72A935306171B7F0A1A198EBAD37E5AAAC0FF219B69653141C95D32DF5BAC97B98824AED4E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/shipping-supplies.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 131.2 111.2" style="enable-background:new 0 0 131.2 111.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;stroke:#333366;stroke-width:2;stroke-miterlimit:10;}...st1{fill:#333366;stroke:#333366;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M42.5,92.3H10.1v-65h26.3v11.1c0,1.7,1.3,3,3,3h22.1c1.7,0,3-1.3,3-3V27.3h28v18l6.1,0.3l1.9,0.1V24.2...c0-0.9-0.3-1.9-0.9-2.6L83.9,3.2c-0.8-0.9-1.9-1.4-3.1-1.4h-59c-1.2,0-2.3,0.5-3.1,1.4L3,21.7c-0.6,0.7-0.9,1.6-0.9,2.6v72.1...c0,2.2,1.8,4,4,4h40.1C44.7,97.9,43.4,95.2,42.5,92.3z M79,9.8l9.8,11.6H64L62.1,9.8H79z M45.8,9.8H56l1.9,11.4H43.2L45.8,9.8z... M42.4,27.5h16.1v7.8H42.4V27.5z M23.6,9.8h16.1L37,21.3H13.8L23.6,9.8z"/>..<path class="st0" d="M70.3,55.1

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 800 x 272
Category:	dropped
Size (bytes):	8471
Entropy (8bit):	7.92054423319505
Encrypted:	false
SSDEEP:	192:kiWno1o0oCwfXgwa6G5L/TPIhd+HxhwpXvNCGhM0:3QLHfXgwu5P2duxhwpXlCGhM0
MD5:	4E7D7BD16B5D9EEBAE6981CAB2C0EF44
SHA1:	F3EC76DF944FA285490DD69AE778F261BAD766A9
SHA-256:	76C1BCF02803AD799E99D2F813783EDBDC656F7BB3143E0115C0FE0F9D3E3B82
SHA-512:	C77662ED1F3D6AB3D6A56631619C8625619F0299C10BC904EEA2FC2CD78365891DD40560C7A358E5361171E67E9A0796E39C4413B87EF194104B6B198E9CCA70
Malicious:	false
Reputation:	low
Preview:	GIF89a .........pppKJK...Z................>..xxx...... ..u.......j.....;;;.....n........{....]]]......YYY???.............SSS......\|\|\|...111...ssswww...S..D..{..y..#"#...WVWPOP9.......))).....}...................................................................................................I...~..v.".....ihi...L..+..444---%..DDDddd...bab............877(...v.lll......AAA......<..4..m..oooC...L..9...w.HGH.../..:..E..~~~...[..V...v..y...F..`..S...}....L........>...@..0//...,u....>..D..g.....e.....Z.....I..T...v.........O.....F..@..C..U.....:..y..J..........6....4v.B.......`.....A....."i.7..'n.<..D.....r..)........l..D.......B..4....8.........}.lkl...G..k...................uuu...dcc[..... ~.GGHo........H......e..L..R..X.................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1714421657334&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm
Preview:	{}

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	4.791699966797261
Encrypted:	false
SSDEEP:	3:CKBfNenKPRdIje2L7Xu:CglrAjxLq
MD5:	5EC990D80D653110E9A384FD85BB9FBA
SHA1:	945F7B841B58EB7059572BAFE43380922C88B0C3
SHA-256:	12A339DF7AC3638D66BF00D4B5F3A4E19575C53E6D6936AFC3C93084C7A536ED
SHA-512:	D3AE796DA4402BDF3760DEB0AF23FA9B2024503673AA1B870A4ACB32A0FA03FCD4820FEC6769732C3CEE282578639F98D6836A4162B8F56D4FE7B78641B87E71
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/jpuid?jsonp=RB.jsonPUID
Preview:	RB.jsonPUID({"rbuid":"rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b"}).

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1800x400, components 3
Category:	dropped
Size (bytes):	152495
Entropy (8bit):	7.955931843746033
Encrypted:	false
SSDEEP:	3072:ukobP/PmLhE4IfcOPBFE8pmPW4Dxg+2dEm7U+3NdkWSJbYbBsCa:uk83mIBFE8pmPW4DG+22mFdwbYa
MD5:	99D200A9B634D608BEB4EE32D49D335B
SHA1:	E0054150168454313E6DB66B36E0019752C8B784
SHA-256:	7629A558D1856DD529661C004275DDF2DF123E50BF3B00FF1083E4AC7BD0E49E
SHA-512:	75E4F3580003E5987ACC06ADEC64F6ABBC245E17803737060281B3FADE6D8BDB9B403CBBADC01F06908C879B92A388314948907C0B3CC7379314E779F2BF016A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................q............?...R.v......p:..2z..z..n.zg.k...Y....+.iJ..G.\Z..0.5.=..%T.x.A..F..^.c..d..n...\...X~.3....lt..c....G.S.?..2{......q..J....I...0.u.&..^.1..;TE?.o.UUX~=..L..f..9.[A.g..5.....0=}=.2.#kg=..\.y.....e.*..:m.c..W......H.......h.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421667821
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 671x451, components 3
Category:	downloaded
Size (bytes):	75706
Entropy (8bit):	7.946565748515388
Encrypted:	false
SSDEEP:	1536:Y0ma13u5Pm5dqZTqEQxO0Lijsj68k0o/F4W66D6piK5bd/1SHN+b0XrL:zZ3BnqZTh2lL2sj3k0od4Llpp5p/YC0X
MD5:	15ADC27337B127D896D85175F42F5DC1
SHA1:	E58C6874F1872CC47215689A4FEA72C6E7FD07A2
SHA-256:	5A92A6EE83B46F99E2ABF7ED137DA8074974182347F6731C4E50D501A96A06B4
SHA-512:	22B680C7535972357FE2759EE1C68D943B6A9295726541F984B293D31BD16B63DD1DE03BFA5EC95A39B0698DA7A01A1998DBD211052BA12ACB3FCD1FF289B285
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/pp-greendoor.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?...<]...'.o!.P...f.,.......c..\|\.MJ.......k..j..8.T.....W.tu..p...+ib.cm.O.....R.#....Z.g...4.f.t....Y1....YZi.!....V...r.......J.s.....k^*e-&.s..6~...kC....f.....j...V....%.kV;".....W;...%..!...:H..:.K.yC.{s...M..kGK.;K.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714421670935&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	4.7647254545399695
Encrypted:	false
SSDEEP:	3:p23xQLFkMVXcYCLGFfQRCpAML+mK1RNdI:pzFkMVKLkt+91RN+
MD5:	EA38E8196B75D9720BC3902D6D735130
SHA1:	165284464C58D7F213C1211F2C433873299E4527
SHA-256:	CDBF334E8E860AAF1665D2AC56113F51F1FF304B63CFF897BEB969C8DD5597D9
SHA-512:	72D45499ACB16AB463AC7D93368F349ABBF3DE6A6BC93719527AD160731213F0E10F4ED7A5627A00FD14D9F8F2988D7FFAB115B6BE5CAFA25C77D0E25F239707
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/require-jquery.js
Preview:	USPSRequireNS.define(["jquery"],function(){return jQuery.noConflict(!0)});

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	5.064383085599273
Encrypted:	false
SSDEEP:	48:7VtUpN2/WsVuaEJRbDWfBKyCaEGqfLaEiiOqaEwaENrt0dXFzx/:AN7dKJPqf8iOT0dR9
MD5:	B60628830A1D34363F98C9443B856555
SHA1:	BA386FDD91D2DB7FB6749982CAA78BEF59028077
SHA-256:	68482663E769A15815D142D88F7A4D8105C02FE2BD37A9899A019B518F17A2B3
SHA-512:	7E87EE73897DCC780023CF2D719209974522DC9C0DA9A117C8B688965275C098FD7DFD8B339E8A7E05BA4B50EA19973885843FB0BE8B082E968F1E66F5BBFE7B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Preview:	//..// OneLink() method for USPS site. Coded for staging and live sites...//..// History:..// arivard :: 10-Aug-2011 :: created....//----------------------------------------------------------------------..function kDebug (sMessage)..//----------------------------------------------------------------------..{...//alert (sMessage); //-- uncomment this line to debug logic....} // kDebug....//----------------------------------------------------------------------..function OneLink (sLanguage, /optional/sHostname)..//----------------------------------------------------------------------..{...sRedirectTo = sHostname; // by default.....if (!sHostname) {....// if hostname is not passed in, use the current location:....sHostname = document.location.hostname;...}......// is we are already on a translated domain: en-, zh- or en-...if (sHostname.match (/^[ze][hsn][-]/))...{....var sExistingLang = sHostname.slice(0,sHostname.indexOf("-"));....kDebug ("existing lang = " + sExistingLang);....

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17584)
Category:	downloaded
Size (bytes):	17585
Entropy (8bit):	5.227198474332325
Encrypted:	false
SSDEEP:	192:tdUnqK2Ils6WOmXoNIpMI8xQAuxwRo3NdPXOWVrD3PT7iO5xfg0yy3n5TpFUEKCP:tYL66eXoHMaRorPXHVrJJnhpiy3gtc
MD5:	69648FFA0E24777FD6C09273C1DA6B0E
SHA1:	B4A3604DAFA2560C9504FF52AFF06D2172FDFDDA
SHA-256:	CC0A16B9CC4DC240BCECF6D80B11432787E455E26E7463872DA2C343B21976C0
SHA-512:	9E45FAB78CDAC270B6C1F607DBCF3E9EC438C2429A91740C25B0E332743DE703935B65B6300FD78B0EFBFCDBDE7CE28308C5EDBB4B9B6AA6EB833633CBFC6746
Malicious:	false
Reputation:	low
URL:	https://storage.cloud.kargo.com/kds/kds-events.min.js
Preview:	(()=>{"use strict";var t=function(){this.FromKargoAd=!1,this.KrakenBidID=null,this.PegasusBidContext=null,this.PegasusBidID=null,this.KrakenBidID=i("krg_imp_id"),this.KrakenBidID&&this.KrakenBidID.length<=38&&this.KrakenBidID.length>=36\|\|(this.KrakenBidID=null),this.PegasusBidContext=i("krg_ctx"),this.PegasusBidContext\|\|(this.PegasusBidContext=i("krg_p_ctx")),this.PegasusBidID=i("krg_p_id"),(this.KrakenBidID\|\|this.PegasusBidContext\|\|this.PegasusBidID)&&(this.FromKargoAd=!0),i("utm_source")&&"kargo"==i("utm_source").toLowerCase()&&(this.FromKargoAd=!0),i("krg_src")&&(this.FromKargoAd=!0)};function i(t){var i=new URLSearchParams(window.location.search);if(i.get(t))return i.get(t);var e=new RegExp("".concat(t,"=([\\w-=]+)"));if(window.location.hash.includes(t)){var n=window.location.hash.match(e);if(n)return n[1]}return null}var e=function(){return e=Object.assign\|\|function(t){for(var i,e=1,n=arguments.length;e<n;e++)for(var r in i=arguments[e])Object.prototype.hasOwnProperty.call(i,r)&&(

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1133
Entropy (8bit):	4.887351854092952
Encrypted:	false
SSDEEP:	24:EhGAmI+3yqcxHbwbBEXRb7BEzirVMCTXplfvHVpMLpnq/LIlMk3xHWhg6nqTkvLO:aY3yzYuFrVv5p1aLJaaxHrtoC
MD5:	5C56BE7D9529952B52D9733B1A01AD61
SHA1:	CE49BF25BA12FF232E372E284F4776E3E7AFDA5F
SHA-256:	F823628595E886F2E279E5A40621D6BDB2C47512A8B29F4556ED450018B7C7DA
SHA-512:	E5DA2BAB56E7B62905F613E6E98985EAA19D9C92212CD0ABF58FFF047437505AD035DE3B1A42B4DE02A8256773A6DE4E6292B88A039B37BC457A3DDD31A93A7F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/welcome/welcome.js
Preview:	./* when user goes to a new slide focus on that slide /... ....$('.carouselslide').on('slid.bs.carousel', function (e) {.....$('.carousel-item').removeAttr('tabindex');.....$('.carousel-item').attr('aria-hidden', 'true');.....$('.carousel-item.active').attr('tabindex', '0');.....$('.carousel-item.active').attr('aria-hidden', 'false');.....$('.carousel-indicators li').attr('aria-checked','false');.....$('.carousel-indicators li.active').attr('aria-checked','true');.....$('.carousel-item.active').focus();....})........ .. / Add active class so that arrow doesn't dissappear after it fades in /.. ..setTimeout(function(){......if (($(window).scrollTop()<$(window).height().2)) {.......$('.false-arrow.opt3').addClass('active');......} else {.......$('.false-arrow.opt3').addClass('fadeaway');......}.....}, 800);..../* when user scrolls fade the arrow away */.....$(window).scroll(function(){......if ($(this).scrollTop()) {.......if ($('.false-arrow.opt3').hasClass('active

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	55179
Entropy (8bit):	7.924643088030909
Encrypted:	false
SSDEEP:	1536:4m9koO4LhgRHqkxfVocdKMkh/M0pri7WEc4V1D:4Mkolh1MfEe0prFUl
MD5:	7B29DE5BED8001EA03B5D3DE99516090
SHA1:	50F39287F023E8FA46FB1189C88D2AE6B4474061
SHA-256:	BA681C87D547769342E976B5D1FA00E5E53D22178CA6BDC1E6B86E6732CA4167
SHA-512:	7C6A14FC2717001439FC481593B944A1DCF794098FA8F8CE8EC09D2010BA294915B3B2CB99129F025CB7A60081E78E9E426ACB693C3916DB868BD2BA7C8FEF3E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-swag.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/threads_logo.png
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/instagram_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10291
Entropy (8bit):	4.416944708176675
Encrypted:	false
SSDEEP:	96:ZfBjgcxZKFu/PJGfGOi8fsQORbMruCJ0y:XjguguJWKsUCT0y
MD5:	4D6E9F5F24A5D9AEC64D39B867CAD890
SHA1:	29F3AC2225872CB7B3B01450762820943350D710
SHA-256:	97B16B9F172577EC2517229343B013F6716386FA8B927D6C339345BEC662B973
SHA-512:	698F71B81D8AC04C92B89F6DFF99110D49926FC3C8D5F7CA84FECFB0419D513735CF3DADDE711E67803201DFB98567DD90072C5AEEBF022AC245B1F2BD2F6732
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/button-styles.css
Preview:	/.---------------------------------------------------------------....@filename..button-styles.css....@author...aziz.syed@akqa.com....@description.buttonss global style definitions........Content....1. Buttons../...=========== 1 Buttons ===========../../.. * Large text box.. /..div.input-text-lg span {...height:27px;..}..div.input-text-lg span.input-cap-left {...background-position: 0px 0px;..}..div.input-text-lg span.input-field {...background-repeat: repeat-x;...background-position: 0px -32px;..}..div.input-text-lg span.input-cap-right {...background-position: 0px -64px;..}..div.input-text-lg input{.. margin: 7px 3px 0;...height:14px;..}...dj_ie7 div.input-text-lg input{...margin-top:5px;..}..../.. * Large text box w/ bold border.. */..div.input-text-lg.too-long span.input-cap-left {...background-position: 0px -168px;..}..div.input-text-lg.too-long span.input-field {...background-repeat: repeat-x;...background-position: 0px -200px;..}..div.input-text-lg.too-long span.input-ca

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 34
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.876279499401526
Encrypted:	false
SSDEEP:	6:wvpRimsloM5NcFelVl5K/CnlGl+dAHqBJH:gpUlhRw/QMkdQGH
MD5:	1D286FA7B2A8B52CD9C56265A44E0B28
SHA1:	5BF16C199106556FA290E24833E31C745EBDAE5D
SHA-256:	D99EDA8435DC3777B6B06C691F1D55CDBC7D61E61C644BE140ACD60ACF8358A9
SHA-512:	86452ECB212E5FB262C71416A92361A5C86B66D2B5B9B0EB89A89DB7EEC63BE676A451D9C6A9E164C4B501D905E7A478EB2948A8F3E4CBA4722F2BE1EDEA5E1B
Malicious:	false
Reputation:	low
Preview:	GIF89a..".................................................................................................................................................................................................!.......,......"...9@...x..*Zr...J)P. .D>0..p1.8....2.H..e.`d...j.O..Z.%.{jA.;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2535
Entropy (8bit):	4.94544014004298
Encrypted:	false
SSDEEP:	48:sxWbgJPABPcJ09JseJel9yl47fFfeU2pYdEdfTz5+MOEei:sWuAB1ntJEYqWUxdmfvVOli
MD5:	F7337D7D3B1B1AF555348038D684BC08
SHA1:	0063EBB65EBEC0CD39E3D060D71CFE25398E41E2
SHA-256:	8C84EFD0A5E9BB67A1ECC895C6AB1FFE3731CF0664D1502D95234B0521CFB797
SHA-512:	7A6EB41B3023167D0F29A38DE85F203D34ADDD69EEE2172F01E60C74823BBD5341336E14FD70DD583CF309F09FD6788D4FF94124617A507EF6385C8B8ED96ED8
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/printcustomsforms.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><clipPath id="clip-path" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="389.35" width="20.62" height="2.75"/></clipPath><clipPath id="clip-path-2" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="403.35" width="17" height="2.75"/></clipPath></defs><rect class="cls-1" x="27.54" y="57.33" width="20.62" height="2.75"/><g class="cls-2"><rect class="cls-1" x="26.54" y="56.33" width="22.62" height="4.75"/></g><path class="cls-1" d="M656.46,396.35v2.75h24.89c.34-.93.72-1.85,1.15-2.75Z" transform="translate(-628.92 -332.02)"/><rect class="cls-1" x="27.54" y="71.33" width="17" height="2.75"/><g class="cls-3"><rect class="cls-1" x="26.54" y="70.33" width="19" height="4.75"/></g><path class="cls-1"

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28255
Entropy (8bit):	5.163440981851425
Encrypted:	false
SSDEEP:	384:ORhVDUV+Sw0FKrUQ/yj1W5+y/8C+p5/PC0pfRGtBaHp9aQ:ORh5UkSw0FcUQT5uC+p58/89aQ
MD5:	37D25CA3E365511BDBC7ECEEF2288B84
SHA1:	62D2E54FBD00C42D6DAD82A735E37E92C1D7B651
SHA-256:	95DB3553D078A2F46B475D396C2E07DC1933B6E5433658BB9BAD71E8EED93CCC
SHA-512:	883B97721EF2C16EC66E39F2A838D6986B2232F6D18D17B86782999226A067209AF625AA31D4DF53BC005E09142A56DCB6AF99057106439D511A76B5E9F0E06F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/welcome-styles.css
Preview:	/* FONT STYLES / ..body {...font-size:16px;..}..::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /...color: #000000;.. opacity: 1; / Firefox /..}....:-ms-input-placeholder { / Internet Explorer 10-11 /...color: #000000;.. }....::-ms-input-placeholder { / Microsoft Edge /...color: #000000;..}....input#home-input, input.form-control::placeholder {...color: #000000;..}..input#home-input::placeholder, input.form-control::placeholder {...color: #000000;..}..h2,h1 {.../font-size:3.0rem;...line-height:3.25rem;/...font-size: 32px;...line-height:36px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;...color:#333366;..}..h3 {.../font-size: 2.25rem;*/...font-size:22px;...line-height: 24px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;.. color:#333366;....}..p {...line-height:22px;...font-size:16px;...font-family: "HelveticaNeueW02-55Roma", "Helvetica Neue", Helvetica, Arial, sans-serif;...c

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5326
Entropy (8bit):	5.014199483319042
Encrypted:	false
SSDEEP:	96:ZvsMWmzPbCkmWWr9+fUcdhkecjxrqhi56m4qv9heiqvDWuhcdWxhC8hcmoMjIhFL:NsMvb+HMBhkdxehism4mheimWuGWxc8U
MD5:	18B1052B7E301A57EE5805DD9AF70D8F
SHA1:	9E6FF41353798773474192CFF7788786E420DC9E
SHA-256:	686EAC49F1849FF94E7311D7A888A71EBB522D97179F96ACC2B66B8CFC55B3BD
SHA-512:	169299F381142BB10D30F831EFF3DDA8832D01D1F50706AB4067AB88A74FB3876A89019E880D6B04953156DB8CC9B4E116C0CE603ED7E768B20F03E736105265
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/modals.css
Preview:	/.---------------------------------------------------------------....@filename..modals.css....@author...aziz.syed@akqa.com....@description.global modals style definitions........Content....1. Modals....2. Product Added Modals../...=========== 8. Modal ===========..*/....div.force-modal-close{...display:none;..}..#modals{...position:absolute;...z-index:10000;...top:0px;...left:0px;...display:none;...min-width:960px;..}...#lightbox-background{....position:absolute;....z-index:10001;....top:0px;....left:0px;....height:500px;....width:700px;...}...#modal-positioner{....margin:0 auto;....position:relative;....z-index:10002;...}....#modal-window{.....position:absolute;.....z-index:10003;....}.....#modal-window-inner{.....}...........#modal-window-inner div{.......position:absolute;......}..........#modal-corner-tl{.......background:transparent url(/ContentTemplates/common/images/global/modal/popup_top_l_corner.png) no-repeat 0px 0px;.......height:38px;.......width:9px;.......top:0px;......

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/footer-logo.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/find_zip.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714421634124&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	98412
Entropy (8bit):	7.963762182600066
Encrypted:	false
SSDEEP:	1536:45sh0NQ0NjcX+aemW2P2CdzMnP0V3EpFkQPOod1eMzApvbtVibrNzbaslVu8koq2:4ahSpUeEzQPhhkpztVErEs3ucqmnwfA
MD5:	3C638BEFC7B6A75C2E3E540D5DC06E45
SHA1:	ABC603B4E3E28CB3F86B4868A4337456AAEB9370
SHA-256:	1F3B08D27591A755F7C339147307C9113C46DD7DFAC752E463864B82DAE10EB0
SHA-512:	7304C22488E05380A510E92D09B6EC264C91D25C517C4DA889BEB4BCE16D38A2402FE23F8551A8C431BF78048FC71A44368BF14E70AE1B05FCD5E244838397A6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-cards.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 679x450, components 3
Category:	downloaded
Size (bytes):	129966
Entropy (8bit):	7.983046244150859
Encrypted:	false
SSDEEP:	3072:4X6I8O0ga06S54jlxRtCKo/Ja+QYcHqEsgmYsy9XGEPAFoPL:FIv0tg8LtCKgiYY9xPMa
MD5:	28E841E073520AE2EF071E1EB7C30896
SHA1:	FC00F10EC5CB17DF34094990DAB37CEC337F5B88
SHA-256:	D4E0163066F1513C8A06AE6026EE4EF15F8E62975C67DF6CD1F310CCF88933D9
SHA-512:	1A6A8CB7DAF8A40BD2DEB9748DF7366E530DA79DE84A66D5A5AA417537177F9C5A7D67B1A85DDCF0D5149653534B7DA0C8C44CDF6A854C0B588E7FF706C75C74
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/pfs-roadtrip.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2476), with no line terminators
Category:	downloaded
Size (bytes):	2476
Entropy (8bit):	4.976190200151306
Encrypted:	false
SSDEEP:	24:fkBx5I5o/Duy0b8J92pJF7J9+DSMIyeRJ+afhmCDIDVB62IUVDVFSAIg2XDKyJTo:cOkMsWdRnhmLzLF184z/ynNTI1pn3Ysx
MD5:	F44D6E241FB7FA2BDB02EA7E3C72F3C6
SHA1:	E47E84A9C4CDB39FAB90556D67B67A9B7BD8B032
SHA-256:	E52AE672F622291EB1A23862F52F9B1ADEACD8262B1155EEE454D468C320D016
SHA-512:	1CE02E951F09C0A5FB0E1421BAE9AA7EEC311894F62CF49867925D6B15931979E17941C600D2C5D136736C61DFA2F091D6CCFB5EC74ECDDDC5076D899D8F8489
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/faq.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".faq-component--see-all-link",i),r.collapseAllLink=e(".faq-component--collapse-all-link",i),r.toggleAllToggle=e(".faq-component--header .faq-component--toggle-button",i),r.allAnswers=e(".faq-component--answer",i),r.allBlocks=e(".faq-component--question-wrap",i),r.allQuestions=e(".faq-component--question",i),r.hiddenText=e(".expanded-text",i),r.allToggles=e(".faq-component--question-wrap .faq-component--toggle-button",i)},a=function(){r.collapseAllLink.on("click",c),r.seeAllLink.on("click",l),r.allQuestions.on("click",f),r.allToggles.on("click",f),r.allQuestions.keypress(function(e){if(e.which===13)return f(e),!1})},f=function(n){n.stopPropagation();var r=e(n.currentTarget).parent(),i=e(".faq-component--toggle-button",r);i.hasClass("open")?v(r):d(r)},l=function(t){t.preventDefault(),t.stopPropagation(),p()},c=fu

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2217
Entropy (8bit):	4.685783065646044
Encrypted:	false
SSDEEP:	48:czAuf3CBnRO02tVVdpuktDwJXZU6ViJ/EoJt9WI:vufSBnE02tV7cktDwJX+aiJ/fJuI
MD5:	EF48CE62CB3D361E1D8B2938C40E71DD
SHA1:	F2C96AC70AAB81500FA0D12F5AB61F07B79B8A54
SHA-256:	893B5448CDDE44B4DB29800AEED45E278B1E640EA4585A5F4A5E4725E64BAE84
SHA-512:	47042309BD5680845E3EAE1D70EAD0BD0586FD91FE9DBA8209727BB38CA205944C96399C47183B4814C235D6DD16096686B86FD04B4C1CBE42A6F0E43BD1B1E6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/cards-and-envelopes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 88 126.5" style="enable-background:new 0 0 88 126.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<path class="st0" d="M33.8,59.4c-0.1-0.1-0.1-0.2-0.2-0.3c-0.3-0.6-0.7-1.1-1.2-1.6c-1.5-1.6-3.2-2.6-5.4-2.8......c-1.1-0.1-2.2,0.1-3.2,0.8c-1.8,1.3-2.6,3.1-2.5,5.3c0,1,0.2,1.9,0.5,2.8c0.5,1.6,1.3,3.2,2.1,4.6c1.2,2,2.5,3.9,4,5.8......c1.7,2.1,3.5,4.1,5.4,6c0.1,0.1,0.2,0.2,0.3,0.3c0.2-0.1,0.4-0.2,0.6-0.4c1.7-1,3.3-2.2,4.8-3.5s3-2.7,4.2-4.4......c1-1.3,1.8-2.7,2.3-4.2c0.5-1.6,0.6-3.3,0.2-4.9c-0.4-1.4-1.2-2.7-2.2-3.8c-1.6-1.7-3.5-2.4-5.8-2.2c-1.6,0.1-2.9,0.9-3.9,2.1......C33.9,59.2,33.9,59.3,33.8,59.4z"/>....</g>....<g>.....<path class="st0" d="M33.8,57.7c0.1-0.1,0.1

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/pinterest_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18860), with CRLF line terminators
Category:	downloaded
Size (bytes):	19036
Entropy (8bit):	5.213400178865669
Encrypted:	false
SSDEEP:	384:L+vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnMEAF:S17bd7iq07ftxivbuzGQvBx1jknrTcbr
MD5:	B18556921E79D50BC26A3F42F33F1C16
SHA1:	FBA9AB5F86F2B90933FC6A735DE391E619FA1752
SHA-256:	282539CF8196A5E940746F43F640E02C16B6AF711CF2486D8E08FFCD39E7F9B8
SHA-512:	67B74BAE7B3E157292F54F503C70582E683C4B3D33CB388805EF483CC4BBEE9F71ACA7273C6D91C8EF06795CB3EF39C3EB038FE0A4D85A60ADEEE99CD6FD1910
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/popper.min.js
Preview:	/.. Copyright (C) Federico Zivolo 2017.. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT)... /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=window.getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e\|\|-1!==['HTML','BODY','#document'].indexOf(e.nodeName))return window.document.body;var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:window.document.documentElement}function p(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t\|\|r

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 102, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	175
Entropy (8bit):	6.008353781899314
Encrypted:	false
SSDEEP:	3:yionv//thPlEZtlHRg9RthwkBDsTBZt0aRSaQmwEK6QjevoHc86x5DTU5k6qHlVo:6v/lhPgxRgjnDspxTQmwr6QjL886x5PK
MD5:	53C79701060D3641D0E856AD99F0D07A
SHA1:	753919AB47F7F4F409819D3445E6CE78280B4F3B
SHA-256:	F603CA1572C9C8451191B5DD31340205E4ED3BCAA4A4F014379BD0733D92FC21
SHA-512:	539CD82E8D4EEE2042F321262F530832F405ED2A2AA3B67EBF7355ECFF1A5B7FA5D7C48DCCA948CE85003C70D87A727122BDD0F96B426F89087238DDFB7FD546
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......f.......l<....tEXtSoftware.Adobe ImageReadyq.e<...QIDATx.bz..=......?......a.h....:...........~..e.,....vT7.............hTs.b....0.i)z..`......IEND.B`.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2471), with no line terminators
Category:	downloaded
Size (bytes):	2471
Entropy (8bit):	4.938116433252691
Encrypted:	false
SSDEEP:	48:cFZvm723d+17soBDu0jmuwC1nWjCJWjk+cb42lBfQfQLBaovl+LaK7J+cb42lB/F:sJm72+dY0c6WuJZc2J8Bc2jJpL2C1
MD5:	60D17495A964265631CE851EE688D5FD
SHA1:	E4C22708CF917FB3CFF933019754114C123D1C87
SHA-256:	B0E7855B3A3CED63120E1912CC9C886377CEFAAFCD9D454BF79EB40F7F23623C
SHA-512:	D9938EA4880C42C508DDFBFA1DBEFA904412AD718270752C0FB1D9EC5888B9F476B1D744C4F5C0A1A65225F21BFBCB00AA1E463CE1E18DD23C50ED68EC0AD598
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/tabs.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s={type:"horizontal"},o=function(){e.extend(s,n),u(),a(),c(),s.type==="vertical"&&r.isDesktop()&&(i.container.is(":visible")?l():f())},u=function(){i.body=e("body"),i.container=e(t),i.tabId=i.container[0].id,i.tabWrapper=e("."+s.type+"-tabs--wrap",i.container),i.tabSets=e("#"+i.tabId+" ."+s.type+"-tabs--wrap > ol > li"),i.tabLinks=e("."+s.type+"-tabs--tab-link",i.tabSets),i.tabContents=e("."+s.type+"-tabs--tab-content",i.tabSets)},a=function(){r.addCallback(d),i.tabLinks.on("click",p)},f=function(){var t=i.container.parents(".horizontal-tabs--tab-content");t.css({visibility:"hidden",display:"block",width:"auto"}),l(),t.css({visibility:"visible",display:"none",width:"100%"})},l=function(){var n=0,r=i.tabContents.length,s=i.tabWrapper.height();for(;n<r;n++){var o=e(i.tabContents[n]),u=o.height();u>s&&(s=u)}i.tabWrapper.height(s+10+"px")},c=function(){

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 666x447, components 3
Category:	dropped
Size (bytes):	68740
Entropy (8bit):	7.960247634660332
Encrypted:	false
SSDEEP:	1536:r2Kk6sRLPBW+fPBodxe2boGjogucnnIwCOLm5BmyvJfPzRc3GY/xTfJXu0L:yvJRLBWmp8vsQnIwCOLQMylc3GYZhL
MD5:	D4F93B86C15529D4C9BF95D0E3B3B319
SHA1:	57A62BF8FF262E87BE59B466E252240795EA8558
SHA-256:	EBA4B55C3BC029BE6FC5CAD436B10B5FC2747E2486AC6C199BBDB95D67B6B59F
SHA-512:	9273318D080DFCBC60C67371EF23BD76F75F1F633E3F4AF821D9218536904AB90A445FF5F57F462F3EDCBF4E73E5AFFB5EED076B9FBA24E3A1E973F0DA61C16A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?..?..(.....`6x...z].....\|;_/.'.......:...o....Z1Y.._.h..z......W....1..&.........79q..........5......._o$...#.....}+..).{..0.Oa=..`..l-..S...5}.j.k.-...$s..d..+.B.[X......W.....`..,x{O....8..H.c...sZw.`...y..2Fk..6.[I#n.z?

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	55179
Entropy (8bit):	7.924643088030909
Encrypted:	false
SSDEEP:	1536:4m9koO4LhgRHqkxfVocdKMkh/M0pri7WEc4V1D:4Mkolh1MfEe0prFUl
MD5:	7B29DE5BED8001EA03B5D3DE99516090
SHA1:	50F39287F023E8FA46FB1189C88D2AE6B4474061
SHA-256:	BA681C87D547769342E976B5D1FA00E5E53D22178CA6BDC1E6B86E6732CA4167
SHA-512:	7C6A14FC2717001439FC481593B944A1DCF794098FA8F8CE8EC09D2010BA294915B3B2CB99129F025CB7A60081E78E9E426ACB693C3916DB868BD2BA7C8FEF3E
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (408), with no line terminators
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	5.086570908959327
Encrypted:	false
SSDEEP:	12:h9DY37MkzkA2rUyJtIJXUittjM0bV1/CQX1Z:LDYLMzA2rUyJteX1jM0bV1aQX1Z
MD5:	37E481EC5C6728104460FA509F5C40C4
SHA1:	E6A184281992422B95128F19AB8BB70DED7D66F0
SHA-256:	81C3260306362D095DE1C7F8B3CB99C03FD47FD50C5249175DB67B8C170D5150
SHA-512:	7F532CDC6AFDE374B1D7124E4A37AA04C1B15A6597CCBC542630A805D1FC9DB24C3E165753D26AC7E7F84E86073117E5861E78D1FECC90E48CB033EC7F5CFEEA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/utility-bar-init.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.requireUtilityBar=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"utility-bar",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min"},shim:{jquery:{exports:"$"}},waitSeconds:30}),USPS.Require.requireUtilityBar(["require","jquery","components/utility-bar"],function(e,t,n){var r=function(){var t=function(){};t()}()});

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1714421657310&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1462), with CRLF line terminators
Category:	downloaded
Size (bytes):	2764
Entropy (8bit):	5.020301420784013
Encrypted:	false
SSDEEP:	48:gUTCkcJwOL1LP76sq7H2VpEB5dKjWcFa8tmCdDVLQFXFAs:NBc+OL1LP76su2VqvdKqchRZV8Vv
MD5:	093DE3978BF0E7FFF8F8E0B5172E00B4
SHA1:	1430C36C48694F688AB7F470F5102A732AA4F606
SHA-256:	B58BE67C2D32606785B1DE7A101DAF82DC1BAB7C4043D1BB7FA5A0562762078D
SHA-512:	327001948EFE710254C561D383C374B02CC2F0A4626EED66D3D2936E57C5B027E6A91111BD7F10A225BDF4A9EBF7561A26438C311227E61BD2C3735568D03CB1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/welcome/jq.roughly.js
Preview:	window.addEventListener('load', function () {...var counterData, index;.. .counterData = document.getElementsByClassName("roughly");...for (index = 0; index < counterData.length; ++index) {......var startDate .= "November 20, 2023 00:00:00 UTC",.. latestCount = counterData[index].getAttribute("data-start-count"),.. latestDate.= counterData[index].getAttribute("data-start-date"),.. .. ..sd..= Math.round(new Date(startDate).getTime() / 1e3),.....ld..= Math.round(new Date(latestDate).getTime() / 1e3),.. daySec.= 86400; //86400 secs in a day.. ....var days = (ld - sd) / daySec;.. .var ir = (latestCount / days) / daySec;.. .. .counterData[index].setAttribute("data-increase-by", ir);...}...var bind=function(t,e){return function(){return t.apply(e,arguments)}};!function(t){var e;return e=function(){function t(t,e){var s,i,n,a,r,o,u,h,d;this.element=t,this.u

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	5.796913279238727
Encrypted:	false
SSDEEP:	48:NOiDITryfRN87cp5yMh55RN8gbg1fe4wz90vIPCJIb2fAmQpwa8VY82XuhfE0p4O:DDcryfyS5yMh55tbgInZunThVYLuhJV
MD5:	5B2B847463F204D4F86A387290C2409B
SHA1:	D0B64DDE458BAF29FF01B29CD27F18018B59FE2A
SHA-256:	532ACFF1CC394358AC17B37D471951D61E803A9379C162D1C60D2C76C419F01A
SHA-512:	6EFAB64B8F3E56D0283D8C13EEC8E85A11196CFBB0147104FA7F0823FCA5F604449DBD552D8EA96B842BAC8454F066F7CC4AA243AC486DC33A509556A8EADE63
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( function() {. if (typeof TTDUniversalPixelApi === 'function') {. var universalPixelApi = new TTDUniversalPixelApi();. universalPixelApi.init("v62w3xt", ["f2bxyaw"], "https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjL

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 679x450, components 3
Category:	dropped
Size (bytes):	129966
Entropy (8bit):	7.983046244150859
Encrypted:	false
SSDEEP:	3072:4X6I8O0ga06S54jlxRtCKo/Ja+QYcHqEsgmYsy9XGEPAFoPL:FIv0tg8LtCKgiYY9xPMa
MD5:	28E841E073520AE2EF071E1EB7C30896
SHA1:	FC00F10EC5CB17DF34094990DAB37CEC337F5B88
SHA-256:	D4E0163066F1513C8A06AE6026EE4EF15F8E62975C67DF6CD1F310CCF88933D9
SHA-512:	1A6A8CB7DAF8A40BD2DEB9748DF7366E530DA79DE84A66D5A5AA417537177F9C5A7D67B1A85DDCF0D5149653534B7DA0C8C44CDF6A854C0B588E7FF706C75C74
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 46657, version 1.0
Category:	downloaded
Size (bytes):	46657
Entropy (8bit):	7.988657559309873
Encrypted:	false
SSDEEP:	768:rLCl6g82cavjKflqsY7nrNNkc2tFgPZfVv79dfpaweqfbIT8N3JADxAOW3zITqjG:n3acyKflqVrNqltFgRtv5dxawrcTSADt
MD5:	3BEB1CF49DC702CD4DE8618EEB344DD4
SHA1:	080E1B4DC8B43DDB06961A3490857CDB936A8C2A
SHA-256:	FFD7AF6177837790E2620C429DCE0DA6DC7D18BBDCF87A7ED2C033A03513E947
SHA-512:	008EE624857F9F7DA939719B44E9146177471A9861BEA10C1065C134A2AF888C5D2E151E04EA0A8949738E2F0901EAB33AA5746207F52E6399119E69F4744D63
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
Preview:	wOFF.......A...............@...............OS/2...X...V...`..-.cmap...........t.8..cvt .......@...@....fpgm.......8........gasp...0............glyf...@......Ih.{4.head.......6...6.\2.hhea.......!...$.o..hmtx...(........I.-.kern...........L....loca...,......... ..maxp...H... ... ....name...h...%...r..j-post........... ...2prep................x.c`f.d.........................9X.@....a}.......x...)..LL...3.`..p..g..1.2.bP.B..L.....x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....k.u.H.A.P.4.....Z...4.k.....J.......S....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....*o..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	51652
Entropy (8bit):	5.178883310843248
Encrypted:	false
SSDEEP:	768:vX3Ua6jTxIzPO7gg6Db5CMSjlEKsyWk2SKJPh13ilIBjhiD8FPuKR7AIAJjo39MN:vX3Ua6jiKMdYm7oBLl
MD5:	6BACAA677935DA6C6C09848DF305BFD6
SHA1:	1FE3194BED68C90D47286C451EEEDA08D6F9F229
SHA-256:	28249D9F54771E39F1A427ED863CEAD9D33FF495FBDC6E48E52EEA6763FCDB05
SHA-512:	CE672720678202AB511A3E027AE06276AE74761D1B0CC34FB8BF5F9D07E733FA40AE17C6E83A5449DAB440C086E1C116BBFFFC0DD9B0CA709240E1EE95D9373A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/usps.css
Preview:	./.---------------------------------------------------------------....@filename..usps.css....@author...aziz.syed@akqa.com....@description.Page layout + global style definitions........Contents....1. Page Layout....2. Generic Styles....3. Header....4. Footer....5. Navigation....6. Miscellaneous....7. Quick Tools....8. Left Panel....9. Caps...--------------------------------------------------------------- /..@import url(/ContentTemplates/common/css/globals/widgets/select-box.css);..@import url(/ContentTemplates/common/css/globals/widgets/modal-box.css);..@import url(/ContentTemplates/common/css/globals/text-fields.css);..@import url(/ContentTemplates/common/css/globals/links.css);..@import url(/ContentTemplates/common/css/globals/button-styles.css);..@import url(/ContentTemplates/common/css/globals/modals.css);..@import url(/ContentTemplates/common/css/globals/qt-modals.css);..@import url(/ContentTemplates/common/css/globals/tooltips.css);../*....=========== 1. Page Layout ===========

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	downloaded
Size (bytes):	95921
Entropy (8bit):	5.395590795061247
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmI:ENMyqhJvN32cBC7M6Whca98Hrl
MD5:	FB6CE399E3E05C48005737E8AE94437D
SHA1:	4DE67539C3047E728710D5958A7730FC04F2F9D2
SHA-256:	61419A9C82B9F4894A9FA8F92684630AB3F85EC69202567BDAC82C5CF11148B9
SHA-512:	FA40D3C4432D50ECC44CB70E80A719B0E5DF728D9CF141FCBDD7772ADD87FF524E1B73CAF12E092ADD9D3A35976E0FFE5115E0769F526959F6AD7FC53DF62AF4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	262932
Entropy (8bit):	5.571686343212572
Encrypted:	false
SSDEEP:	6144:CvfQX5NzJSYLceF+qKXjXP9RIM6Pw5YDSK:CH+xJPXd6K
MD5:	A58E5C67EAD5CC4C1E5DF88E3CB4B3B5
SHA1:	B3124EB1784E790FBBB428FB1E248D6399105F30
SHA-256:	9B0B9922CBC66F61959AF964E90A3D418446FBAE6672C52576AE687068FDD150
SHA-512:	EE86368B670EBE4A956B9A4D7C893D1F69BD3C9945A30F562666D2FF8A9A3C999DAE8E060851DA30425F6FE14179363E908DB425CA2518698B6ECDDABEE43354
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 671x450, components 3
Category:	downloaded
Size (bytes):	59294
Entropy (8bit):	7.969822503765094
Encrypted:	false
SSDEEP:	1536:6ergEW4ri006HQVCnrg5AcxcAyJqXUmYQsTLO8weLs:XWAi006hM5vqAyWVYBL9ls
MD5:	7E6C404842BDA7A9BE95FF6DE989DC78
SHA1:	E491DB9D3AA75F30BB3EFD191D96F8B0AD66924F
SHA-256:	224AF3767ADA229ABE732231D42E23272E36A1783A2249B40A652367440F3B1A
SHA-512:	75698F7B7A1543E9C7FE4CBB06D4ED9108A142673C0FEF6A2B8C97FD8D09BBC771C4975C3B3688BED6419FBE3AAB1B10F60C9C9FF9F4263F79CEA33FA5C485CA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/passport-g.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?....6}........+...6.l.1.\.B#.:.R..j..1.Rhi.q.{...L..\.c.R.."......q.k.=j ..q.x..i...x...a.......5.]....k.i.<g._$.p.....w.c...Z..M.......~DW.......g....c8..W......hx^.Bx......T..OC,..8.W.J.....>kCAh.....K.m....FE2.i..~isQ.\|.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2556), with no line terminators
Category:	downloaded
Size (bytes):	2556
Entropy (8bit):	5.8515463445996225
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08HhIlEQjFyKKP6:wsbSUtJfxrqLWWWdV6j11Iyo
MD5:	21C78D62FF8717915809840FB4BC2AA5
SHA1:	82BBCD3CB7CA1C2AADB574B2B8009EB46D78AF51
SHA-256:	6EC51ACA678B0F809034A4C19BE705F90A7503F856C9F73AB8986B5452CC689D
SHA-512:	C40CFB6A1D1208677B13BA0F1265DB1633A6A53D135F79A4434A25C5894382F3031C23CC31F2A2FC8B5F1F39C2B8B0547992E6316ABD328D392342E3F0FCC869
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1714421634515&cv=11&fst=1714421634515&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1818
Entropy (8bit):	4.993572197370397
Encrypted:	false
SSDEEP:	24:Z7Icb5Id91KfQeYT6G5ihq37kPL37iEu58MJpo2MVG6WAMnE+QVt2V4hEfO9LMQu:Z091ULnZTPc5lS9MnXq9IQu
MD5:	AFF56C53169C7974F6425A26FE29E52A
SHA1:	ABEC50E2C3D40B928D4470B53B5D87D83FD560CB
SHA-256:	43F4403CDB461B4BECC5035EB15CCE19F083459546DAFA6F2C405832D9D75EE9
SHA-512:	C991F2950BAAC08F772C7318098CCAA438C61E400254DC98B1540E38A23E857A27653AF432AFF32B1E7C6FA9F2E540F8378DBCA66F591FC3CFD44ADCCC0D42F6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/text-fields.css
Preview:	/.---------------------------------------------------------------....@filename..text-fields.css....@author...aziz.syed@akqa.com....@description.text fields global style definitions........Content....1. Text fields../....=========== 1. Text fields ===========../../.. * Styled text fields. Container must have the class "input-text-wrapper".. * and one of the variant classes (input-text-lg, input-text-sm, etc.).. */..input.text {.. border:none;.. background:transparent url(/ContentTemplates/common/images/global/blank.gif) repeat;.. color:#636363;.. font-family:Arial;.. font-size:12px;.. padding:0;..}....div.input-text-wrapper {.. display: inline-block;..}....div.input-text-wrapper span.input-dollar-sign{...width:1.3em;...height:27px;...line-height:27px;...float:left;...display:inline-block;..}....div.input-text-wrapper span.input-cap-left,..div.input-text-wrapper span.input-field,..div.input-text-wrapper span.input-cap-right {...float:left;...background-image: url

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 39243
Category:	downloaded
Size (bytes):	11214
Entropy (8bit):	7.980660611226627
Encrypted:	false
SSDEEP:	192:8hrg3oYWnxKUgzCi0SeLJHs+R+lfgJ3TNBrSuWtlnlavH2syP1ouLksJAD:8hrgYYWnxKTQXYlfgd5gzavVymu4L
MD5:	C4D61FBB6E730A840C7F140CBB9BCD06
SHA1:	E424F981EEF8F250C3C7E0D4B60CF4E39424FC4A
SHA-256:	37D6272EA625E9FEAAD12822FF9099767915BB0DBB4019700E8EABAA95617AFF
SHA-512:	FB3D361F61356EB2DA3A7D9B871973BD081A8A100593DA0047D184817B34273DBBC878319141D7B52CA3C5C962F3F56765D15591A3186EDCED239D316DE7FE09
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8......k]....<.l.XJ..P..+.8.....%.....w?.T..t...kzzF..d.;....P..G..N ....&...X...w;,8."H....8..B....q...u2fR,:Z..U...`zP..\|%`+.#\m...+..PU....qa..na...9..[)y%..V.ga.X.u'p...t[.kk.....a.. {K.-M"...?.A.G.z......#..su.s.............f.j[.D..1.m95.I ..P.....3!.,..X.c....^...jLl]..l.u.O..#.]..V[o.z;B..T...<x..2..8...Ml'..:......Q7.e...7Ec.I(n.x.V.......D.H$(.F9.&z....."{.XTY..5..C...y.wg...?.Yd....i{...JC...'.ZD..j....{.....b=#..q..B-...\|4....+..cg.....6.Z.;...l.v..c9...\|r..3-..S...w.\|.#.H.{)T......T.ah?..M.e.....C...S.w6...4=..&s][j..[.y.<.c.;.D.r...-...........J...v.6_._-.p.....s...>\|.N.......\|...u.\|..-.h.@....R_.A....4..i..D2._......j..O...`6u....v.M..i.Rk.}.H...v.\0.,...QI.I.. .u.....-....3;.>..a..a..*...V,..:........rW.Q..W..f.......J..p.Z`.r.VC.&..8X.LXf...4r......L.uf751......$...-"...[D.....Z...8.c/0.Y.h.f... .9.......,B.?.V.L...?U.S]@$~....y.g...DA."a`.q.-....M.<z.>.cA...........5.3..&..l.G...%]K...^..Q;.#.N.EB.tJ

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	dropped
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/holdmail.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/favicon.ico
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 671x451, components 3
Category:	dropped
Size (bytes):	75706
Entropy (8bit):	7.946565748515388
Encrypted:	false
SSDEEP:	1536:Y0ma13u5Pm5dqZTqEQxO0Lijsj68k0o/F4W66D6piK5bd/1SHN+b0XrL:zZ3BnqZTh2lL2sj3k0od4Llpp5p/YC0X
MD5:	15ADC27337B127D896D85175F42F5DC1
SHA1:	E58C6874F1872CC47215689A4FEA72C6E7FD07A2
SHA-256:	5A92A6EE83B46F99E2ABF7ED137DA8074974182347F6731C4E50D501A96A06B4
SHA-512:	22B680C7535972357FE2759EE1C68D943B6A9295726541F984B293D31BD16B63DD1DE03BFA5EC95A39B0698DA7A01A1998DBD211052BA12ACB3FCD1FF289B285
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?...<]...'.o!.P...f.,.......c..\|\.MJ.......k..j..8.T.....W.tu..p...+ib.cm.O.....R.#....Z.g...4.f.t....Y1....YZi.!....V...r.......J.s.....k^*e-&.s..6~...kC....f.....j...V....%.kV;".....W;...%..!...:H..:.K.yC.{s...M..kGK.;K.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	592
Entropy (8bit):	5.3418082693072595
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nojHzNFLiiQUOqQUOHXPlEhM:2d3ATLf36TNFFQgQ9XPlV
MD5:	D85E71E5218D4464FE55AA786B29B0DF
SHA1:	3E7B370874022D561E0FCFBE0E9332E822A48523
SHA-256:	4EFFA9948EDE5C52F8A8F23BD3E4F05262725E1DA0D22B61ACA4DB3EE0629A70
SHA-512:	4E447DD2D87A10B7B609A5A3DBC56964953A9F0BC91F722ECF87A8825DE7D454C506F7CD6EFE13422E151EE737FEDBE896782B091FE7071DD0A13551857653F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 6 11" style="enable-background:new 0 0 6 11;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M0.5,11c-0.1,0-0.3-0.1-0.4-0.2c-0.2-0.2-0.2-0.6,0-0.8l4.3-4.5L0.2,1c-0.2-0.2-0.2-0.6,0-0.8...c0.2-0.2,0.5-0.2,0.8,0L6,5.5l-5.1,5.3C0.8,10.9,0.7,11,0.5,11"/>.</g>.</svg>.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17192)
Category:	downloaded
Size (bytes):	17423
Entropy (8bit):	5.227415277419737
Encrypted:	false
SSDEEP:	384:Ekh4TtpqsBojXi8Vq5EJN+bcTxHFED/5y13t3UoBtliGIHrXyVtMrveb8POe6Y+:V2bqooDi8SeEbEHFEDhy13t3vXxEyDMY
MD5:	16E572A4F80526DF4BC3CC7FF056A9A8
SHA1:	F23B5C2FD52E855245E3D2586CD911051561E64C
SHA-256:	75237772A7BC8C6EAADBE642BE69503335C5842AF8981688250A8D4F0F61C377
SHA-512:	8AE4B57782C5A5A6CE2190D8C02901AD83B24CA9FA1E2427C8B6CB5981D98146C9A6E2E4B7F77ADF954198D540ADE5F5FEDA0FFE919356338CC56B67EF40A26B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/requirejs/require.js
Preview:	/** . vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */..var USPSRequireNS;(function(){if(!USPSRequireNS\|\|!USPSRequireNS.requirejs){USPSRequireNS?require=USPSRequireNS:USPSRequireNS={};var requirejs,require,define;(function(global){function isFunction(e){return ostring.call(e)==="[object Function]"}function isArray(e){return ostring.call(e)==="[object Array]"}function each(e,t){if(e){var n;for(n=0;n<e.length;n+=1)if(e[n]&&t(e[n],n,e))break}}function eachReverse(e,t){if(e){var n;for(n=e.length-1;n>-1;n-=1)if(e[n]&&t(e[n],n,e))break}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var n;for(n in e)if(hasProp(e,n)&&t(e[n],n))break}function mixin(e,t,n,r){return t&&eachProp(t,function(t,i){if(n\|\|!hasProp(e,i))r&&typeof t=="object"&&t&&!isArray(t)&&!isF

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1006
Entropy (8bit):	5.232282735286602
Encrypted:	false
SSDEEP:	24:2dzATLf3UX7mXYTNkeEhgmyhTkTx3Qx7FEEZiP6Fx1f0Qz8:czAvf3UX7mXYBkRWmye93a7FEdPQf0Qo
MD5:	DF6FCAB6C4CAF86E8A1401A4FC36F885
SHA1:	860352CEA6899553CB4E7111097B35BD007C65E7
SHA-256:	986EBC6C0F0C4B5BDB2513352DBBF3F501A36ABD1DCD0C17A9C215EFD95191A7
SHA-512:	E263C5714A2BEFAC6DDDB15F1A2C4DDB3BEE22FDEF7DC05BA6794E6A0DB9EB8245E23E5742DE1E1F2EFCBCF07A4911138E36DFA06AECF0D826C955B836F07A0C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28.4 32.4" style="enable-background:new 0 0 28.4 32.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M26.7,9.9H1.6c-0.8,0-1.4,0.6-1.4,1.4v7.1c0,0.8,0.6,1.4,1.4,1.4h0.6v10.6c0,0.8,0.6,1.4,1.4,1.4h21.1..c0.8,0,1.4-0.6,1.4-1.4V19.8h0.6c0.8,0,1.4-0.6,1.4-1.4v-7.1C28.2,10.5,27.5,9.9,26.7,9.9z M12.2,29.9h-8v-10h8V29.9z M12.2,17.9..h-10v-6h10V17.9z M24.2,29.9h-8v-10h8V29.9z M26.2,17.9h-10v-6h10V17.9z"/>.<path class="st0" d="M9.2,8.5h10c2.5,0,5-0.5,5-4c0-2.2-1-4-4-4c-4,0-6,3-6,3s-2-3-6-3c-3,0-4,1.8-4,4C4.2,8,6.7,8.5,9.2,8.5z.. M16.2,4.5c1-1,2.4-2,3.5-2c1.4,0,1.5,1,1.5,2c0,1.8-0.6,2-2,2h-3V4.5z M8.7,2.5c1.2,0,2.5,1,3.5,2v2h-3c-1.4,0-2-0.2-2-2..C7.2,3.5,7.3,2.5,8.7,2.5z"/>.<

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10158)
Category:	downloaded
Size (bytes):	10159
Entropy (8bit):	5.258869481621991
Encrypted:	false
SSDEEP:	192:LnmBNp87rbM3DM15HKoFIqfezsAVTwUZ/hR79BWbbQGVaC5hRyhGWS44qpK7YXW:LmBN+M3DMfWzf79BWbcotDRsG14X4
MD5:	D6F0435164AEFE6CF324147B77C7B6BB
SHA1:	41050F6640694E4FB214881216207B0B2A080137
SHA-256:	3A95689E90E588B166F7B3ECD334959A2D6A3DA1D73D557C8FB72FA10CF465DD
SHA-512:	74A349346D3FFC1AC88DAF1B614859233D2D3B8315913F1D7B73DCD31AD85E7513BC1509778866B812936FDBDB78E11D4A751CB0007A51071678A93EF356C70F
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function u(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2556), with no line terminators
Category:	downloaded
Size (bytes):	2556
Entropy (8bit):	5.860536002673484
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08HXaINUEQjFyKKPD6:wsbSUtJfxrqLWWWdV6j1baIBw
MD5:	8B36399A9C6B2FD110E13412C48F56B8
SHA1:	A021E1A8A1EFCACA076FAB6451318939F5EC2383
SHA-256:	362C24CA38859C4B22B688076DDB0520AAB008E394E11CE185D0109CEED35BBE
SHA-512:	7CA8E6F6EFC277CAA9B9DE332CE2B31985C04A3857098AB8EA303E33E596A8E3D163EA2F8EFFCD2FB7E697714CFA6A37762C3AB9949E694B57EFD39123A22E2C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1714421670851&cv=11&fst=1714421670851&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 48 x 525
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	7.798724253896392
Encrypted:	false
SSDEEP:	24:l10GcVC/v7yOx3okfT0DweVk1R+THymQEiE31T2W3+G09ymTJHwuRab:l1uEH7VNokmNVeR+THyIn4ONMFq1b
MD5:	96F1E590DDA6A1C9015CF229D3B5C7A5
SHA1:	8685CACD2315D200BCFCAD0684EABBE22F73FA10
SHA-256:	E68AB8B5FB42C11EE98CA8E32342FBD52733EA0C27766637386E45F4249B2DFC
SHA-512:	25B397C9C38EC15F17CCCD6815E5E4C487CF1FD6B8F7E8620AE1D54B21A542F1A8D2D33435CBD60717E4AF3F5B627EC7380D80AB954021FEE1148730DD329BA5
Malicious:	false
Reputation:	low
Preview:	GIF89a0......................................................................................................!.......,....0....... .di.h:.l.p,.ma.x..\|....pH,..A.r.l:....@.Z..v[.x..xL....z.n...\|N.....~.........uf...^........................j*&j..p..i$4$i....+,....-#h.o..."..6B6....n....@...@..,#.m.....J...J......l.....".k.........e[.O.>~...tf...G..ABX`\.w...k.q.#...\.@.CG#..N..2e..%..+..K4.h...M.9.-h.&......(..@.I-9`.......8P.....^.<...Fe.VJ.v......ln.v...+ao^.v.....p[.j..U,.q(. ...r'.0o..3Y..A..=.ta.Q'V..uc.aG.=.ve.qg..wg.......g....~\y....m..9t.k.W.......C..=.t...S._..u...c.=.v...s...w....g.s..T.[.J.....".s.]..].n.Nw.U...M..P......r(...h..........(....h..........)`...8...2......t!..SbI.....".(.....q...'....+.../....3.Y..7..;...?....C.Z..GB)....5..I.Y".MR...Q....KZ.J.2Z%.Wr...[zz&.i....m....q..(............Y..............Z....&.k..v.m..^.j..Zn..~ZS....m....n...m............\...../...l...2....B...R,...bl...r..............

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1540
Entropy (8bit):	7.832163693681832
Encrypted:	false
SSDEEP:	24:9Z82jiSiBDHqnvmiVtYySIHHULLd7smB0rTc5n7rBtVA4fFW4GzcQ0zoa:c2ji3HqvmiVHSTLCmB0aApfGzoa
MD5:	DDED8E2E38057EA9183FF095BC2E6CED
SHA1:	E12CE587F18839ED139D59774E5FEF8B793DBFD7
SHA-256:	A3BB919A80DAE6A64CB25FD18E689ACAE58A81737E21ABFBBC851B83C60BF578
SHA-512:	EE0B8DCB4AEDE78441ED1B75931F0F44DDF0E999495166D522ED049342DF37ADFCA33CAA02074AFBE937B72C68410F5349127E97FCFB3FF2F6FEA739D5614441
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/scroll-red.png
Preview:	.PNG........IHDR...<...<.....:..r....sRGB.........IDATh..[h.U..s.n.kB.4.M".f......Bm........M..AzAA..@.}......o. .[z..B.Kq.4.&{....m2s...;.......Nvgs ..s...7g...9.e.S...#Y..GJ}.dr......$.................c.r.t^`..Wsu...._J.....\|..^A.O..m..3v..]..+D.d..L...Fu..>..^].b.. A.,.x.b.6......u....<..7..8504......5...3v.8.$.L....E%O.K..j.wOJ)G-l....;-...w.]I.u..8;8.........Y=.#.-..hOr..7v.....a]..o4,.L1P,.....zX......8(..1.iu...C,..[.gE..x...U.7).J..Y..\./"^.H$...p....jS..k..toD.8...=L.qP`..bU..q.,...j0h.{.....1;.d...z..h.`{B...p..t..KV..2..K.fx..r..9./';./'e=...j.KE-.F[.0b1..mI......M..-..b.....u..,.01......6.8 ...KN.....5]?..F./fS.p~.b.....4.U...6@3'...i.:.T..6.X.!#...sP...8x...B..7...hv1.7o..m..C.m.g...U..}.\^.`.e.....NS.....l.......=V..%VN...M....r.$.\...&V..-.L...?<...5CV..i.gk$b.......N`.Ue..z.....J...M.../?C..G...G 49...u.Wk!..Z.8._....k..8..eU1.6.7_We..-....8........@<.,@G;..].!...a.!r...@.7..O.a.}\H.}.pp..t.."No>...h....?...7r..;v

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/po_box.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	4.347691161328113
Encrypted:	false
SSDEEP:	3:CKBrRHMadxWBv:CgVMaeBv
MD5:	BD704719699C2453FD0009EAC80CB86E
SHA1:	69E9772BCA3C433D08BF16A7DC0E848CD158ACC1
SHA-256:	A6E9E1722CFFA254DC5061E3D89FC40A4FAEC0CD7D44819923657D498E8DF822
SHA-512:	9374FB6E51EC60E1BC1A17EAA9757925868B0DC73D45F1C280AF691ED66383B553ECCD61B906F2E65835E6D03C506B0CBE2C94035F0646EAD3C84E385E432F19
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/integrations?source=usps
Preview:	RB.jsonPIntegrations({"integrations":[]}).

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/calculate_price.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1040), with no line terminators
Category:	downloaded
Size (bytes):	1040
Entropy (8bit):	5.156160192967715
Encrypted:	false
SSDEEP:	24:fkcgIDf9BUDjF5WGmRcQUmR4sXsz/BLbWX6S5urmRsZRdWT985sTaZRMwB:c8fgGlbyssdbWqSHWAmGT4t
MD5:	90D8FB00194D91E9DD20281817C285D6
SHA1:	E7E37421B14A39E0D3787988A52A45D27EC3761F
SHA-256:	479B585BB1F3CA011746467C115B58CA0CD6AC62AA68C9D953635B3344953887
SHA-512:	D57E2DFDF3109961597FCE60F576E3460A22A83FBA00432510D53579FD4D8D238046F105AD1B700FE39F13C385D2042781E0897F5F40B978DA38ECFAFF5B7B39
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/resize-manager.js
Preview:	USPSRequireNS.define([],function(){var e=function(){var e={resizeThrottle:50,callbackThrottle:100,breakpoints:[{name:"tablet","min-width":500},{name:"desktop","min-width":959}]},t=[],n=null,r=function(){i(),u(),s(u)},i=function(){var r=null,i=window.innerWidth\|\|document.documentElement.clientWidth;window.onresize=function(){var n=window.innerWidth\|\|document.documentElement.clientWidth;i!=n&&(clearTimeout(r),r=setTimeout(function(){var e=0;for(;e<t.length;e++)o(e)},e.resizeThrottle)),i=n}},s=function(n){t.push(n)},o=function(r){setTimeout(function(){t[r]()},r*e.callbackThrottle)},u=function(){var r=0,i=window.innerWidth\|\|document.documentElement.clientWidth;for(;r<e.breakpoints.length;r++){var s=e.breakpoints[r],o=r+1<e.breakpoints.length?e.breakpoints[r+1]:{name:"ERROR","min-width":1e4};if(i>=s["min-width"]&&i<o["min-width"]){n=s.name;break}}},a=function(){return n},f=function(){return n==="tablet"?!0:!1},l=function(){return n==="desktop"?!0:!1};return r(),{addCallback:s,getBreakpoint:

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1307
Entropy (8bit):	6.862900930794217
Encrypted:	false
SSDEEP:	24:E1hJIwWwjx82lY2T3oVeMaf/yJ3VYmNvWGYIGofc5ByAkXMvcz2fROB:KkNNn2klTJ3WmN3nfcjkwRO
MD5:	3500D365CD94527C71FE9C70D5CDA435
SHA1:	0C7BEDE628D74CEFAF5FCE1B675C0CE3C72C78C9
SHA-256:	34B28A24C5414DAB68A15BE6613536D905FAF33FBF1AED8EE4702CAA60BE9BCA
SHA-512:	F8EDFD39A3E6402D2A546DEB0368297969C7AF02A61185D156E3158CAA1246AD2CCC19A523623185E1EB9F957DA3D026EF6751DCD6C13EBBDFB4D8ED16990FC3
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/utility_customer_service.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:8F605BC93D9E11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:8F605BCA3D9E11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417AA3D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:8F605BC83D9E11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+..M....IDATx..O(.a.....(../.._9Q..l.S.k&......9m....8H..\(n.....R".sp.}.9.i..k..4.....}.}fB.i...qt..!<...8

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20915)
Category:	downloaded
Size (bytes):	21045
Entropy (8bit):	5.3006986272139685
Encrypted:	false
SSDEEP:	384:vo2reVRW28ONZJVDf6k92pFsw1ayjFJoQuQnL/CtxFsnbsWQqSbBwEcIi5tLRC:g33vLB2oAbuQnL46nYBiI+LRC
MD5:	34E7DA1594CC0B9A17A3FFD31CFF3659
SHA1:	F477CF7A2D41E3FEC10B7A6F388CDC2AD1137C90
SHA-256:	BB03D3C049264991AEDE291D80E23367722BFDA8C2C6F097E85BE85A46022ECF
SHA-512:	483D6C8D2E715418645F509EADD84BC1D35B955E468D1DC684AE225D70CD3F1460704982F84A512A712F58A4D65FA05EAF527F738AD9FAED29966193369B9D90
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/lib/jquery.magnific-popup.js
Preview:	/! Magnific Popup - v0.9.9 - 2013-12-27. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */..USPSRequireNS.define("magnific-popup",["jquery"],function(e){(function(){var t="Close",n="BeforeClose",r="AfterClose",i="BeforeAppend",s="MarkupParse",o="Open",u="Change",a="mfp",f="."+a,l="mfp-ready",c="mfp-removing",h="mfp-prevent-close",p,d=function(){},v=!!window.jQuery,m,g=e(window),y,b,w,E,S,x=function(e,t){p.ev.on(a+e+f,t)},T=function(t,n,r,i){var s=document.createElement("div");return s.className="mfp-"+t,r&&(s.innerHTML=r),i?n&&n.appendChild(s):(s=e(s),n&&s.appendTo(n)),s},N=function(t,n){p.ev.triggerHandler(a+t,n),p.st.callbacks&&(t=t.charAt(0).toLowerCase()+t.slice(1),p.st.callbacks[t]&&p.st.callbacks[t].apply(p,e.isArray(n)?n:[n]))},C=function(t){if(t!==S\|\|!p.currTemplate.closeBtn)p.currTemplate.closeBtn=e(p.st.closeMarkup.replace("%title%",p.st.tClose)),S=t;return p.currTemplate.closeBtn},k=function(){e.magnificPopup.instance\|\|(p=new d,p.init(),

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.1b7f3d0e.js", last modified: Tue Apr 23 21:28:13 2024, from Unix, original size modulo 2^32 70670
Category:	downloaded
Size (bytes):	23080
Entropy (8bit):	7.9913802967544
Encrypted:	true
SSDEEP:	384:d8oJAmWxXkqVzQi6rFUPfBrrQGvxQ/ZPV1FfSjA9xB7+q1MlkKiJZwM8DxftFy8b:KoKdXklBUXNsGvxQPMuxB7x1MlkKDMu7
MD5:	51780471BD680082C3977720B56DF64F
SHA1:	65CEBF33BB7DCD9D735E25CD3B83D846DB809FAB
SHA-256:	C7FB2D336F11F19DD6D39A97DE97857F56E733DF99A899FA7365201B333363B1
SHA-512:	CAB8885FED19182D2FF62BE9E46CF399E8A3527FC010721B04C0FB88CE0C929709C6B552B4BF6F09EA179F808B71B9648F46CDCFF0842E164F141EA2D9B95998
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.1b7f3d0e.js
Preview:	.....'(f..main.1b7f3d0e.js..\.o......b%...8.,.Hw3..[[..... Pl:..Py..,7.>.;..%..4....D......?.C.`Y.HRn3.p.g..>l.....B5.i.D.q;9...)^.$..:<.]..M..<\|.n]....x....lw.[_g.n...s9!.u...)s..&.sA+d.^.t.0.K..\|.....p...g...e.^v{`..fY\|.f!..b"d[..z.A.<X.Wo/...oX..}...L....=....%..k\|..w.....v...Z...b.-q.^..K.>..JQ....L.....>.;..Y.q_....$.t.O.T.`Q=........h.e..X0...5A..X.....%.......a...K..,.d.f...^.(..+.K\s-4D....2....M.)e..5...R&).)..zP...@....V.F8.b....8J....37YR..p.....v\|.i.P.r3`jN}.l.3..7.3J_.z.+X.......H...O....#R+%....~.....N~...../.}..........G..Q.{G.............;P.8..,..qv..5.W.4.`...V7Y.p..^.e.}o...XY...o...~K.8>..Pr....{..tU.1....Dw./..o(.P.DA.j.+m.....:.f#VI......Q.W...I^.@..@./YVKk.Y..T\.k)...L..Z............'..X'V...2.r......w]..%...z.....sO.p...z+...0....Z;c..WQy...b.../.K..51.j<QB.Q....2.../...Y..[D.fc.DE..J...W....=..2.`.Ev.F.c'..G.H).j%U.9..)....W...u2....<t....B....K..I...7..Rg.....Pi.W.$WK`'..........z........j.....<...F.....$X

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8795)
Category:	downloaded
Size (bytes):	8796
Entropy (8bit):	5.485222342795602
Encrypted:	false
SSDEEP:	96:ehJhWbXOuTuAPwNnNengM8T2Te7u7f6+q4Trjl1ocYXocKg4u98Ea6hDEfcyFloW:dSlJiRJGXr98IhDEfcjxACA
MD5:	FF67EAC943614EF903C2E84419A60F4C
SHA1:	565109B98747417724DAFA5462A731C692178381
SHA-256:	0863D2C590D46AD4B990232414EEF23349EE4316AC4CCBF6F4618329539FB65A
SHA-512:	12D1FD9B2CA31FE7DB2D8474BBCCF310F922CC447DF716CBA43720520CAC8C906A3ADA2DEBBFC10E9B94020BE7339F11473B1573DCB88C1C5702BAF1408B8477
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/main-sb.css
Preview:	@font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb335665f88") format("svg"),url("https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff") format("woff"),url("https://www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf") format("truetype")}@font-face{font-family:"HelveticaNeueW01-77BdCn 692722";src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix");src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/d90b3358-e1e2-4abb-ba96-356983a54c22.svg#d90b3358-e1e2-4abb-ba96-356983a54c22") format("svg"),url("https://www.usps.com/asse

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	7.832163693681832
Encrypted:	false
SSDEEP:	24:9Z82jiSiBDHqnvmiVtYySIHHULLd7smB0rTc5n7rBtVA4fFW4GzcQ0zoa:c2ji3HqvmiVHSTLCmB0aApfGzoa
MD5:	DDED8E2E38057EA9183FF095BC2E6CED
SHA1:	E12CE587F18839ED139D59774E5FEF8B793DBFD7
SHA-256:	A3BB919A80DAE6A64CB25FD18E689ACAE58A81737E21ABFBBC851B83C60BF578
SHA-512:	EE0B8DCB4AEDE78441ED1B75931F0F44DDF0E999495166D522ED049342DF37ADFCA33CAA02074AFBE937B72C68410F5349127E97FCFB3FF2F6FEA739D5614441
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sRGB.........IDATh..[h.U..s.n.kB.4.M".f......Bm........M..AzAA..@.}......o. .[z..B.Kq.4.&{....m2s...;.......Nvgs ..s...7g...9.e.S...#Y..GJ}.dr......$.................c.r.t^`..Wsu...._J.....\|..^A.O..m..3v..]..+D.d..L...Fu..>..^].b.. A.,.x.b.6......u....<..7..8504......5...3v.8.$.L....E%O.K..j.wOJ)G-l....;-...w.]I.u..8;8.........Y=.#.-..hOr..7v.....a]..o4,.L1P,.....zX......8(..1.iu...C,..[.gE..x...U.7).J..Y..\./"^.H$...p....jS..k..toD.8...=L.qP`..bU..q.,...j0h.{.....1;.d...z..h.`{B...p..t..KV..2..K.fx..r..9./';./'e=...j.KE-.F[.0b1..mI......M..-..b.....u..,.01......6.8 ...KN.....5]?..F./fS.p~.b.....4.U...6@3'...i.:.T..6.X.!#...sP...8x...B..7...hv1.7o..m..C.m.g...U..}.\^.`.e.....NS.....l.......=V..%VN...M....r.$.\...&V..-.L...?<...5CV..i.gk$b.......N`.Ue..z.....J...M.../?C..G...G 49...u.Wk!..Z.8._....k..8..eU1.6.7_We..-....8........@<.,@G;..].!...a.!r...@.7..O.a.}\H.}.pp..t.."No>...h....?...7r..;v

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 800 x 272
Category:	downloaded
Size (bytes):	8471
Entropy (8bit):	7.92054423319505
Encrypted:	false
SSDEEP:	192:kiWno1o0oCwfXgwa6G5L/TPIhd+HxhwpXvNCGhM0:3QLHfXgwu5P2duxhwpXlCGhM0
MD5:	4E7D7BD16B5D9EEBAE6981CAB2C0EF44
SHA1:	F3EC76DF944FA285490DD69AE778F261BAD766A9
SHA-256:	76C1BCF02803AD799E99D2F813783EDBDC656F7BB3143E0115C0FE0F9D3E3B82
SHA-512:	C77662ED1F3D6AB3D6A56631619C8625619F0299C10BC904EEA2FC2CD78365891DD40560C7A358E5361171E67E9A0796E39C4413B87EF194104B6B198E9CCA70
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_icons_roll.gif
Preview:	GIF89a .........pppKJK...Z................>..xxx...... ..u.......j.....;;;.....n........{....]]]......YYY???.............SSS......\|\|\|...111...ssswww...S..D..{..y..#"#...WVWPOP9.......))).....}...................................................................................................I...~..v.".....ihi...L..+..444---%..DDDddd...bab............877(...v.lll......AAA......<..4..m..oooC...L..9...w.HGH.../..:..E..~~~...[..V...v..y...F..`..S...}....L........>...@..0//...,u....>..D..g.....e.....Z.....I..T...v.........O.....F..@..C..U.....:..y..J..........6....4v.B.......`.....A....."i.7..'n.<..D.....r..)........l..D.......B..4....8.........}.lkl...G..k...................uuu...dcc[..... ~.GGHo........H......e..L..R..X.................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62472)
Category:	downloaded
Size (bytes):	432703
Entropy (8bit):	5.566916575321849
Encrypted:	false
SSDEEP:	3072:IokOuf9Qaf5qZ3fPO+AUca81G1LceF2/ea8LR9Wk9AR6nOQPGA2STnXDL9btIMaD:IrTQXXNAvYLceF+89TnXP9RIM93y
MD5:	8ED24CE7E0BB02D320B066A03EA760E0
SHA1:	5EECFAEF8CB166748E2CD06807AC83F41985CB2C
SHA-256:	0F39070084F6C9FB192DE7CEAA91320CB2BD7FF815025A238CFCDA144A06928A
SHA-512:	8C8659CF70F37A03612D9B3950285944B0A076615792F7F1070A8BCC37899C5F5406DB4982612857952625A9A2495351E85BD8BDAE8284C872E560DFA6AD2EC1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K2FRZL4&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"305",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__c","vtp_value":"3976941"},{"function":"__r"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__t"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.oldUrlFragment","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"func

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (695), with no line terminators
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	4.935433026459156
Encrypted:	false
SSDEEP:	12:pzFkbDx1XY9Au3j0Au7HpQk1656N54A2ULDX6TzHbXX6TgnKMR6TOPXIglaX3EIq:fkbDx1XY9Au3j0Au7HpQk1656NOArHXs
MD5:	5372347B4F98F60B33579180EF6A3567
SHA1:	02064F1641C40B35C14A0DA9EE310DE54FF76CD5
SHA-256:	7FA317B049ED33139394313ABA29F27B7F11A226270BF10CE1C26D674C0177E4
SHA-512:	EADD1CE2E874B7D3BF7E8CA3A600FE3A8524AD67E0B4A67E4990244261E1B0DD53578EC1DF077E510A9E4E66672FF1845D3075A6C9AD391277B19B8302502D6D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/helpers.js
Preview:	USPSRequireNS.define(["require-jquery"],function(e){var t=function(){var t="placeholder"in document.createElement("input"),n="placeholder"in document.createElement("textarea"),r=function(){e(document).ready(function(){i()})},i=function(){s(),o()},s=function(){var i=e("input[type!=submit], textarea");if(!t\|\|!n)t\|\|(i.on("focus",function(){var t=e(this),n=t.val();n===t.attr("placeholder")&&t.val("")}),i.on("blur",function(){var t=e(this),n=t.val();n===""&&t.val(t.attr("placeholder"))}),i.trigger("blur"))},o=function(){if(!Modernizr.svg){var n=e(".svg-image"),r=0;for(;r<n.length;r++){var i=e(n[r]).attr("data-fallback");e(n[r]).attr("src",i)}}};return r(),{pollyfillElements:i}}();return t});

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1800), with no line terminators
Category:	downloaded
Size (bytes):	1800
Entropy (8bit):	4.929106826900858
Encrypted:	false
SSDEEP:	48:cGApyNwcpBmZYk2xP0TjeqwgAyhKqIKYvYkXn9:CyNPpBmfTLwttvj9
MD5:	F3BAD0F0625BD99F9C9366A61A368026
SHA1:	EBDD535A7A4349DBB0AE26267EECEB109846F40E
SHA-256:	211FE8AAB721E19F2AF0872228B28635C738B7B30AE225F1CF5BA72A9D188E1B
SHA-512:	2BC0E59178622FDF04BA152FD31F9BFDAD2023C57FB027C6A581C7BD4B3C53952A8FB76D1AA8626D9852CD72F1FE83AAF178E9C69F2C56689737D6164C0E7161
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/utility-bar.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(){var t={},n=function(){r(),i(),f()},r=function(){t.utilityBar=e("#utility-bar"),t.languageTool=e("#nav-tool-multilingual",t.utilityBar),t.languageToolLink=e(".anchor, .multi-link",t.languageTool),t.languageToolContent=e(".nav-window",t.languageTool),t.loginTool=e("#nav-tool-login",t.utilityBar),t.loginToolLink=e("a, input",t.loginTool),t.loginToolContent=e(".nav-window",t.loginTool),t.loginForm=e("#login-form"),t.buttonSubmit=e("#btn-header-hidden-input-signin"),t.buttonLogin=e("#btn-header-input-signin"),t.tUsername=e("#input-username"),t.tPassword=e("#input-password"),t.errorMessage=e("#login-error-message")},i=function(){t.languageTool.hover(s,o),t.languageToolLink.on("focus",s),t.languageToolLink.on("blur",o),t.loginTool.hover(u,a),t.loginToolLink.on("focus",u),t.loginToolLink.on("blur",a)},s=function(){t.languageToolContent.css({height:"auto"}),t.languageTool.addClass("hover")},o=function(){t.languageToolContent.css({heig

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 29, 2024 22:13:16.699429035 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:16.699431896 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:17.027535915 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:26.384727955 CEST	49674	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:26.400389910 CEST	49673	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:26.681611061 CEST	49672	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:27.491750956 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.491790056 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.491866112 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.492161036 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.492181063 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.494745970 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.494771004 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.494829893 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.495064020 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.495078087 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.759459972 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.760472059 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.760500908 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.761457920 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.761610985 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.761678934 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.762121916 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.762146950 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.765566111 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.765660048 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.765791893 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.765856028 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.766355038 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.766367912 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.767136097 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.767225027 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.875989914 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.876000881 CEST	443	49707	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:27.900398970 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:27.985995054 CEST	49707	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:28.018438101 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:28.018536091 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:28.018588066 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:28.021995068 CEST	49706	443	192.168.2.6	47.90.176.105
Apr 29, 2024 22:13:28.022011995 CEST	443	49706	47.90.176.105	192.168.2.6
Apr 29, 2024 22:13:28.087199926 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 29, 2024 22:13:28.087275028 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:28.139611006 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.139632940 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.139695883 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.140459061 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.140471935 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.512867928 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.514914989 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.514936924 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.516006947 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.516069889 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.518789053 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.518867970 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.519197941 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.519207954 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.640610933 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.640870094 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.658404112 CEST	49708	443	192.168.2.6	56.0.134.100
Apr 29, 2024 22:13:28.658422947 CEST	443	49708	56.0.134.100	192.168.2.6
Apr 29, 2024 22:13:28.776300907 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:28.776334047 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:28.776602983 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:28.776602983 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:28.776635885 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.113540888 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.115504980 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.115520954 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.116492033 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.116590023 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.118119001 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.118177891 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.122819901 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.164129019 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.198431969 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.198453903 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.233633995 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:29.233674049 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:29.233830929 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:29.237154961 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:29.237174988 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:29.332849026 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332865000 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332895041 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332907915 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332921028 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.332928896 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332936049 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332954884 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332972050 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.332979918 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333002090 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333003044 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.333009005 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333014965 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333026886 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333035946 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.333040953 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333050966 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.333054066 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.333101034 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.333101034 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442270041 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442284107 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442315102 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442338943 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442348003 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442358017 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442401886 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442401886 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442536116 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442555904 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442625046 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442625999 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442630053 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442641020 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442658901 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442662954 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442667007 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442712069 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442733049 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442733049 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442739010 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442750931 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442755938 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442768097 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.442823887 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:29.442846060 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.444860935 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:29.474497080 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:29.601064920 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:31.178530931 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:31.178550005 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:31.179949045 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:31.179958105 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:31.179999113 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:31.181226015 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:31.254978895 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:31.255153894 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:31.395154953 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:31.395169020 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:31.588072062 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:35.309437990 CEST	49709	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.309482098 CEST	443	49709	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.325601101 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.325635910 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.325697899 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.326433897 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.326461077 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.423573971 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.423600912 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.423655987 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.423912048 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.423922062 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.558794975 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.558826923 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.558895111 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.560784101 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.560800076 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.662225962 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.662493944 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.662519932 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.663409948 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.663463116 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.663471937 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.663573027 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.666932106 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.667202950 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.667227030 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.667562008 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.667890072 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.667956114 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.668025970 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.708120108 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.779460907 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.779498100 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.779731989 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.780061007 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.780075073 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.780666113 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.780697107 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.780759096 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.781027079 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.781042099 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.781837940 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.781871080 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.781929970 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.782109976 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.782125950 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.788640022 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.794584036 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.794646978 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.795922995 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.796021938 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.796536922 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.796545029 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.811465025 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.811479092 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.811880112 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.888498068 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888602018 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888608932 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888622046 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888628960 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888633966 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888649940 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.888672113 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888700008 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.888706923 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888722897 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.888823032 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888849974 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888858080 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888874054 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.888880968 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888890028 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.888911963 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.888931990 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.922938108 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:35.924238920 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.924276114 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.924313068 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.924314022 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.924325943 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.924355984 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.924410105 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.924505949 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.924513102 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.931746960 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.931824923 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.931834936 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.939507961 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.939593077 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.939599991 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.947314978 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.947379112 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:35.947386980 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:35.968113899 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:35.998347998 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998369932 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998415947 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998430014 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998456955 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998475075 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998480082 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998492002 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998495102 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998511076 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998548031 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998773098 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998786926 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:35.998836040 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:35.998845100 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.033653975 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.033684015 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.033704996 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.033729076 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.033819914 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.034483910 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.034610987 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.034702063 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.036516905 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.036549091 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.036569118 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.036577940 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.036612988 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.037465096 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.045203924 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.045229912 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.045272112 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.045280933 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.045799971 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.052095890 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.052110910 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.052122116 CEST	49713	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.052126884 CEST	443	49713	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.052838087 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.060657978 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.060687065 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.060700893 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.060709953 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.060755014 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.068707943 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.076061964 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.076106071 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.076129913 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.076138020 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.076183081 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.083153963 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.090336084 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.090373039 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.090379000 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.090389967 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.090428114 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.095839977 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.097430944 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.104609013 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.104655027 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.104655981 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.104667902 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.104706049 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.107975006 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.107989073 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108011007 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108036041 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.108043909 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108073950 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.108093977 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.108396053 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108423948 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108453989 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.108459949 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.108485937 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.108505964 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.111737013 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.113580942 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.114610910 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.118913889 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.118968010 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.118993044 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.119004011 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.119071007 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.119229078 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.126236916 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.143151045 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.143176079 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.143193007 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.143202066 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.143254995 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.146007061 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146037102 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146064997 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.146074057 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146092892 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.146100998 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.146101952 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146116972 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.146122932 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146153927 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.146179914 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.146182060 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.146277905 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.151622057 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.151653051 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.151670933 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.151679039 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.151913881 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.155483007 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.155495882 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.155736923 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.155750036 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.155963898 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.156131029 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.156146049 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.156176090 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.156820059 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.157227993 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.157310963 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.158561945 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.158628941 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.159228086 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.159567118 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.159816980 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.159889936 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.161853075 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.161878109 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.161900997 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.161910057 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.161956072 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.166810036 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.170948029 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.171128035 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.171766043 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.171796083 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.171843052 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.171850920 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.171904087 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.176704884 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.178798914 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.178809881 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.179771900 CEST	49711	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.179784060 CEST	443	49711	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.181648970 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.181679010 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.181714058 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.181723118 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.181762934 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.186600924 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.191554070 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.191601038 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.191608906 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.194114923 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.194191933 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.194200039 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.199384928 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.199431896 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.199440002 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.204093933 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.204118013 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.204122066 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.204386950 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.204395056 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.209023952 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.209655046 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.209661961 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.213912010 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.214052916 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.214059114 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.219172955 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.219306946 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.219315052 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.223800898 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.223864079 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.223870993 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.225286007 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.225322962 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.225390911 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.225843906 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.225856066 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.228792906 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.229001045 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.229008913 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.233778954 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.233823061 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.233834982 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.238234997 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.238289118 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.238297939 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.242872000 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.242922068 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.242929935 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.247179985 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.247253895 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.247279882 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.253500938 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.253526926 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.253571987 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.253580093 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.253616095 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.257757902 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.262032032 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.262080908 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.262089968 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.262098074 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.262149096 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.262155056 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.264703989 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.264770985 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.264780045 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.267504930 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.267563105 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.267570972 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.269886971 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.270005941 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.270014048 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.272496939 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.272547960 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.272556067 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.272631884 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.272855997 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.278786898 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.294820070 CEST	49712	443	192.168.2.6	172.217.0.174
Apr 29, 2024 22:13:36.294846058 CEST	443	49712	172.217.0.174	192.168.2.6
Apr 29, 2024 22:13:36.335556030 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.335625887 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.335676908 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.335697889 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.335711002 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.335738897 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.335769892 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.335990906 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336232901 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336283922 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336294889 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336322069 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336348057 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336360931 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336368084 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336369038 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336391926 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336399078 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336405039 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336411953 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336462975 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.336474895 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.336544037 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.339993954 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.340080023 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.340221882 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.369869947 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.369901896 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.369976044 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.371053934 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.371062994 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.371988058 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.372014999 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.372112989 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.372416973 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.372436047 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.373023987 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.373042107 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.373112917 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.373377085 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.373385906 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.377609015 CEST	49716	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.377631903 CEST	443	49716	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.383816004 CEST	49714	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.383825064 CEST	443	49714	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.391365051 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.391386986 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.391488075 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.391875029 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.391887903 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.394012928 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.394040108 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.394386053 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.394767046 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.394793987 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.445521116 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.445596933 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.445599079 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.445626974 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.445637941 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.445652962 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.445688963 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.446055889 CEST	49715	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.446064949 CEST	443	49715	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.450614929 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.450680017 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.471431971 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.471445084 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.471684933 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.474956989 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.474978924 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.475075006 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.475282907 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.475296974 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.535432100 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.538290024 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.538316011 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.538470030 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.538677931 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.538702965 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.538815975 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.539302111 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.539314032 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.539690018 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.539702892 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.576148033 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.672483921 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.672574997 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.673569918 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.696218967 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.696238995 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.696249008 CEST	49717	443	192.168.2.6	23.11.208.106
Apr 29, 2024 22:13:36.696254969 CEST	443	49717	23.11.208.106	192.168.2.6
Apr 29, 2024 22:13:36.704266071 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.704758883 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.704777956 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.705127954 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.705771923 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.705857992 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.706140041 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.709211111 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.709527016 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.709538937 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.710378885 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.710534096 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.710589886 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.710671902 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.710683107 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.711198092 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.711348057 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.711410046 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.711752892 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.711832047 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.712070942 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.712079048 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.712236881 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.724061966 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.724540949 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.724556923 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.725512028 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.725569010 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.726005077 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.726058006 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.726145029 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.727854967 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.728064060 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.728080988 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.729131937 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.729197979 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.729985952 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.730051041 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.730145931 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.730150938 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.752115011 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.760108948 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.768116951 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.805952072 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.805964947 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.808259964 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.809035063 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.809056044 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.810112000 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.810173035 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.810791969 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.810853004 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.811384916 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.811391115 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.873500109 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.873785973 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.881174088 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.881195068 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.881284952 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.881297112 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.882222891 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.882277966 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.882283926 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.882319927 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.882899046 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.882966042 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.883332968 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.883398056 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.883765936 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.883773088 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.883830070 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.883841991 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.900007010 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.900010109 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.928277969 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.928376913 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.928431988 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.928455114 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.928505898 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.929594994 CEST	49718	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.929609060 CEST	443	49718	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.929997921 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.930053949 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.930094004 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.930111885 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.930116892 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.930121899 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.930161953 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.930200100 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.930802107 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.930815935 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.931278944 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.931510925 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.931564093 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.931574106 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.931709051 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.931761026 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.932898045 CEST	49720	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.932909012 CEST	443	49720	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.933290005 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.933300972 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.933418989 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.934672117 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.934683084 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.934886932 CEST	49719	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.934896946 CEST	443	49719	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.935208082 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.935223103 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.935275078 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.935920000 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.935929060 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.948715925 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.948782921 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.948843956 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.948852062 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.948887110 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.949629068 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949639082 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949671030 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949687958 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949687958 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.949709892 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949721098 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949728966 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.949744940 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949759960 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.949851990 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949860096 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949898958 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.949906111 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949915886 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.949945927 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.953886032 CEST	49722	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.953901052 CEST	443	49722	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.954310894 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.954334021 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.954411983 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.955594063 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.955606937 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.955944061 CEST	49721	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.955956936 CEST	443	49721	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.956518888 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.956536055 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.956865072 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.957626104 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.957638979 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:36.975400925 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:36.975451946 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.032201052 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.032325029 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.032397985 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.033128977 CEST	49723	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.033143997 CEST	443	49723	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.033504009 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.033534050 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.033597946 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.034137011 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.034149885 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.088124037 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.088171959 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.094289064 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.094362974 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.094415903 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.094425917 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.094521999 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.095422983 CEST	49724	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.095433950 CEST	443	49724	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.096014023 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.096111059 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.096159935 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.097584009 CEST	49725	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.097605944 CEST	443	49725	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.263576031 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.263840914 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.263853073 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.264208078 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.264524937 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.264586926 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.264700890 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.267376900 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.267683983 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.267698050 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.267997980 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.268424034 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.268492937 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.268722057 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.271765947 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.272000074 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.272021055 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.273086071 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.273152113 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.273510933 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.273571014 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.273689985 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.273696899 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.289071083 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.289268017 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.289287090 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.290321112 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.290379047 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.290946960 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.291017056 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.291208029 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.291214943 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.295308113 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.295543909 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.295572042 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.299366951 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.299437046 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.304189920 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.304311991 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.310766935 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.310786009 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.312114000 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.312124014 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.367084026 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.367475986 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.367487907 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.368531942 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.368607044 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.369118929 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.369177103 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.369395971 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.369402885 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.394064903 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.474013090 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.474118948 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.487056971 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.487109900 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.487173080 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.487185955 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.487199068 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.487234116 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.487901926 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.487951040 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.488023043 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.488033056 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.488240004 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.488859892 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.494899035 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.495021105 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.495074034 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.509725094 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.509788036 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.509855986 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.509857893 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.509907961 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.517008066 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517077923 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517085075 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517117023 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517127037 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517127991 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.517137051 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517149925 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517162085 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517163992 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.517174959 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.517180920 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517196894 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.517240047 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.517277002 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.576126099 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.577158928 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.590744019 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.590873957 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:37.590883017 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.590895891 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:37.594887972 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.503606081 CEST	49729	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.503638029 CEST	443	49729	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.504019022 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.504061937 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.504117012 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.504401922 CEST	49728	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.504443884 CEST	443	49728	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.504657030 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.504699945 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.504754066 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.504771948 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:39.504839897 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:39.504882097 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:39.505299091 CEST	49727	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.505310059 CEST	443	49727	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.505661011 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.505691051 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.505800009 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.506845951 CEST	49726	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.506876945 CEST	443	49726	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.507168055 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.507194996 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.507251024 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.507626057 CEST	49731	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.507637024 CEST	443	49731	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.508017063 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.508039951 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.508085012 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.509253979 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.509269953 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.509445906 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.509469032 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.509859085 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.509877920 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.516889095 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.516907930 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.521107912 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.521126032 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.629673958 CEST	49730	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.629704952 CEST	443	49730	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.630254030 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.630294085 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.630347013 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.633311987 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.633336067 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.671931028 CEST	49710	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:39.671957970 CEST	443	49710	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:39.679852009 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.679884911 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.679965973 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.680294991 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.680308104 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.685034037 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.685079098 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.685137033 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.685535908 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.685551882 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.687985897 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.688026905 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.688081980 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.688472033 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.688487053 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.690562010 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.690597057 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.690648079 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.691010952 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.691020012 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.692910910 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.692931890 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.692985058 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.693454027 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.693468094 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.695410967 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.695419073 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.695466995 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.695801973 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.695815086 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.845375061 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.845451117 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.845724106 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.847332001 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.847352028 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.847466946 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.847489119 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.847729921 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.847749949 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.847759962 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.847883940 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.848541021 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.848608017 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.848872900 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.848893881 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.848943949 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.848953009 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.849308968 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.850009918 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.850081921 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.850414038 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.850517035 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.850524902 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.855500937 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.856348038 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.856358051 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.857839108 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.860541105 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.860630989 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.867769957 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.867974997 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.868005991 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.868022919 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.872504950 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.872582912 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.892119884 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.892132044 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.910604954 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.910628080 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.912184954 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.912342072 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.912355900 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.912434101 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.966310978 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.974756956 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.974854946 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.974889994 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.985120058 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.985151052 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.986299992 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.986355066 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.986967087 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.987036943 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:39.987132072 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:39.987142086 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.015083075 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.015474081 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.015486956 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.015857935 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.016619921 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.016700983 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.017137051 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.018192053 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.018645048 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.018670082 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.019002914 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.019989967 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.020066023 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.020122051 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.024399042 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.029406071 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.029948950 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.034106970 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.050103903 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.050136089 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.050401926 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.050410986 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.050539970 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.050559044 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.050975084 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.051006079 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.051651955 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.051708937 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.052114964 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.052172899 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.052715063 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.052818060 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.054124117 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.054207087 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.054222107 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.054281950 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.054378033 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.054388046 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.054466009 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.054481983 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.055074930 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.055147886 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.055566072 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.055757046 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.058619022 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.058723927 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.059011936 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.059036016 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.060118914 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.064117908 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066291094 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066365957 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066412926 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.066421032 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066432953 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066476107 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.066726923 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066796064 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066864967 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.066864967 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.066909075 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.069973946 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.070024967 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.070058107 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.070080042 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.070096016 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.070136070 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.076154947 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.076173067 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.079305887 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.079464912 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.079514980 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.079534054 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.079610109 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.079654932 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.080202103 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080210924 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080249071 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080279112 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.080291986 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080302954 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080318928 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.080324888 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.080355883 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.080409050 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.088185072 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.131984949 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.132010937 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.159333944 CEST	49735	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.159348011 CEST	443	49735	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.159908056 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.159950018 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.160038948 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.161349058 CEST	49734	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.161374092 CEST	443	49734	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.161746979 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.161796093 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.161849976 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.162245035 CEST	49733	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.162271023 CEST	443	49733	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.162600994 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.162637949 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.162683010 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.164432049 CEST	49736	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.164458036 CEST	443	49736	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.164653063 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.164671898 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.164730072 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.165513992 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.165524960 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.166100979 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.166119099 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.167642117 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.167653084 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.171020985 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.171039104 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.189874887 CEST	49737	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.189892054 CEST	443	49737	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190186977 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190264940 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190323114 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.190334082 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190346003 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190383911 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.190387964 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.190407991 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.190414906 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.190470934 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.192470074 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.192486048 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.201028109 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.205090046 CEST	49738	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.205100060 CEST	443	49738	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.205336094 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.205373049 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.205441952 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.206473112 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.206489086 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.236583948 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.236639023 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.236705065 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.236733913 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.236747980 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.239245892 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.239308119 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.239351988 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.239365101 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.239378929 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.239427090 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.239988089 CEST	49739	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.240000963 CEST	443	49739	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.240262985 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.240286112 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.240334988 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.241601944 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.241615057 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.244962931 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.245012045 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.245052099 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.245071888 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.245084047 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.245143890 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.247778893 CEST	49740	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.247790098 CEST	443	49740	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.248219013 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.248245001 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.248295069 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.249356985 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.249372959 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.252027988 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.252079010 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.252084017 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.252142906 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.253144979 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.253194094 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.253205061 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.253241062 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.254606962 CEST	49742	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.254626036 CEST	443	49742	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255045891 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255057096 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255111933 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255124092 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255135059 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255156994 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255167961 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255178928 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255182028 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255202055 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255203009 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255225897 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255242109 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255314112 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.255342960 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.255429983 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.256542921 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.256552935 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.260215044 CEST	49744	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.260224104 CEST	443	49744	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.260457039 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.260488033 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.260536909 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.261759043 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.261774063 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.263145924 CEST	49741	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.263164043 CEST	443	49741	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.263523102 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.263544083 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.263597965 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.264432907 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.264441967 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.267286062 CEST	49743	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.267290115 CEST	443	49743	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.267683983 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.267699957 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.267744064 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.268780947 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.268793106 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.499428034 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.499671936 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.499691010 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.500174999 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.500835896 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.500900984 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.501008987 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.501162052 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.501527071 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.501539946 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.501884937 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.501919985 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.502157927 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.502168894 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.502510071 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.502573013 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.502602100 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.503130913 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.503200054 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.503546000 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.503607988 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.503626108 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.509865999 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.510073900 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.510099888 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.511610985 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.511667013 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.512357950 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.512435913 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.512625933 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.512645960 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.525600910 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.528922081 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.528942108 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.530047894 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.530105114 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.531658888 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.531801939 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.531805992 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.531858921 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.539566994 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.540391922 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.540410995 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.541466951 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.541524887 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.544116974 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.544123888 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.548125029 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.550947905 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.551018000 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.551270962 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.551276922 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.573152065 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.573234081 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.573239088 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.575087070 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.576329947 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.576345921 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.576693058 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.578712940 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.578783035 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.578943968 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.582483053 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.584777117 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.584801912 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.585134983 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.587083101 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.587162971 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.587321997 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.594325066 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.594953060 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.594964027 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.595477104 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.596215010 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.596230984 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.597165108 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.597223043 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.597332954 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.597392082 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.597969055 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.598618031 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.598681927 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.598977089 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.599040985 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.599122047 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.599131107 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.599278927 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.599288940 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.600172997 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.600650072 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.600745916 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.602123976 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.602189064 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.602425098 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.602431059 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.602483034 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.602781057 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.602796078 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.603830099 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.603903055 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.605047941 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.605108976 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.605439901 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.605446100 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.620151043 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.632118940 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.681613922 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.681616068 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.682315111 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697460890 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697463989 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697468996 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697469950 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697485924 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.697495937 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.697500944 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.721214056 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.721257925 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.721316099 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.721338034 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.721349001 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.721390009 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.723007917 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.723090887 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.723103046 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.723171949 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.723396063 CEST	49749	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.723408937 CEST	443	49749	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.723967075 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.723993063 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.724139929 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.724359989 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.724415064 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.724483013 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.724500895 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.724550962 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.730101109 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.730114937 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.730916977 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.731298923 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.731425047 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.733149052 CEST	49750	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.733169079 CEST	443	49750	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.733547926 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.733566046 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.733638048 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.735238075 CEST	49748	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.735251904 CEST	443	49748	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.735586882 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.735610962 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.735690117 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.736576080 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.736591101 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.739516973 CEST	49751	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.739528894 CEST	443	49751	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.740119934 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.740137100 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.740302086 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.741056919 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.741072893 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.741674900 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.741687059 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.748740911 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.748836994 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.748899937 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.753484964 CEST	49752	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.753498077 CEST	443	49752	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.753700018 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.753720045 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.753771067 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.754501104 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.754513979 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763654947 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763731956 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763741970 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763767004 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763791084 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.763801098 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763813972 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.763824940 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.763863087 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.766740084 CEST	49753	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.766747952 CEST	443	49753	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.767378092 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.767399073 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.767606020 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.768683910 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.768695116 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.797920942 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.797985077 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.798039913 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.798058987 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.798073053 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.798167944 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.800585032 CEST	49754	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.800609112 CEST	443	49754	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.801287889 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.801301956 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.801573992 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.802320957 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.802335978 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.808496952 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.808610916 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.808866024 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.816535950 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.816601038 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.816663980 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.816664934 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.816706896 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.818571091 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.818717003 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.818821907 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.820087910 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.820225954 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.821063995 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.826576948 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826805115 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826814890 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826834917 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826843023 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826848030 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826889992 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.826904058 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826913118 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826936007 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.826941967 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.826977968 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.826987028 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.841269016 CEST	49758	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.841285944 CEST	443	49758	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.841576099 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.841612101 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.841737986 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.842528105 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.842541933 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.843689919 CEST	49756	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.843707085 CEST	443	49756	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.843914986 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.843952894 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.844065905 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.844822884 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.844836950 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.845990896 CEST	49757	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.846010923 CEST	443	49757	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.846206903 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.846215010 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.846270084 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.847148895 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.847158909 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.847877979 CEST	49755	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.847886086 CEST	443	49755	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.848155975 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.848175049 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.848238945 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.848927021 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.848964930 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.849600077 CEST	49759	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.849615097 CEST	443	49759	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.849942923 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.849970102 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:40.850018978 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.851078033 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:40.851092100 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.064078093 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.064295053 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.064313889 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.064646006 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.065206051 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.065289974 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.065439939 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.069919109 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.073486090 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.082107067 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.082119942 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.082350969 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.082382917 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.082813978 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.082834005 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.083348989 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.083409071 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.083411932 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.083472967 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.083741903 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.083753109 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.084094048 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.084197998 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.084214926 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.084336042 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.084347010 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.087371111 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.087426901 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.088465929 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.088541031 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.089319944 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.102617979 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.108119011 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.108890057 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.108910084 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.109067917 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.109086037 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.109246969 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.109255075 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.109911919 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.109985113 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.110016108 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.110065937 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.110912085 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.111494064 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.111612082 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.111675024 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.111778021 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.111783981 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.111960888 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.111967087 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.132114887 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.135881901 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.155493975 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.155508041 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.155913115 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.156990051 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.157063961 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.157243967 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.175910950 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.176989079 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.177004099 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.177386999 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.178328037 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.178333998 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.178366899 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.178370953 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.178992033 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.179069042 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.179394007 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.179406881 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.179883957 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.180478096 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.180563927 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.181113958 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.181207895 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.181286097 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.181293011 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.182118893 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.182423115 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.183747053 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.183758974 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.184020996 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.184027910 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.184778929 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.184844971 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.185061932 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.185107946 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.185561895 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.185622931 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.186108112 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.186167955 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.186178923 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.186316013 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.186322927 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.186372995 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.186378956 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.186489105 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.186503887 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.187546015 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.187643051 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.188108921 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.188165903 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.188184977 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.197652102 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.200120926 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.220119953 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.232121944 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.280005932 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.285408020 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.285463095 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.285521984 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.285526991 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.285559893 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.290615082 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.290999889 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291017056 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291172981 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.291172981 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.291188002 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291239977 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.291731119 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291783094 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.291790009 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291801929 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.291843891 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.294807911 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.294914961 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.294924021 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.294955969 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.294996977 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.295001984 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.295047045 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.311083078 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.311177969 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.313075066 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.319401026 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.319618940 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.319845915 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.319900036 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.329009056 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.329054117 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.329121113 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.329125881 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.329221964 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.357595921 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.357649088 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.357700109 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.357716084 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.357727051 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.357791901 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.388119936 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.388166904 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.390889883 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.393062115 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.393076897 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.396414995 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.396466017 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.396538973 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.396588087 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.401283026 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.401357889 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.401401043 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.401412010 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.401426077 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.401474953 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403590918 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403693914 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403702974 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403718948 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403728008 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403737068 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403758049 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403769016 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403788090 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403791904 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403808117 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403820038 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403862953 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403867006 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403893948 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403904915 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403939009 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.403954029 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.403999090 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.404048920 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.408186913 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.408221960 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.408265114 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.408286095 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.408298016 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:41.408425093 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:41.408504009 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.354474068 CEST	49767	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.354500055 CEST	443	49767	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.360549927 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.360595942 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.360656023 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.371242046 CEST	49777	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.371284008 CEST	443	49777	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.371817112 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.371849060 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.371901035 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.372658014 CEST	49775	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.372684956 CEST	443	49775	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.372890949 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.372922897 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.372977972 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.373367071 CEST	49774	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.373380899 CEST	443	49774	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.373836040 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.373857975 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.373917103 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.374943972 CEST	49773	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.374957085 CEST	443	49773	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.375308990 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.375327110 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.375376940 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.379638910 CEST	49772	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.379663944 CEST	443	49772	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.380283117 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.380305052 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.380373001 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.380798101 CEST	49770	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.380810976 CEST	443	49770	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.381098032 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.381114006 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.381170988 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.381550074 CEST	49771	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.381560087 CEST	443	49771	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.382322073 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.382348061 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.382399082 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.383549929 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.383563042 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.383701086 CEST	49769	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.383711100 CEST	443	49769	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.385999918 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.386008024 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.386059999 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.386496067 CEST	49768	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.386508942 CEST	443	49768	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.386903048 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.386918068 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.387202024 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.387212038 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.389139891 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.389151096 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.389430046 CEST	49776	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.389436007 CEST	443	49776	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.389744997 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.389758110 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.389800072 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.390691996 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.390702963 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.391129971 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.391150951 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.391508102 CEST	49778	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.391521931 CEST	443	49778	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.392016888 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.392025948 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.392075062 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.392728090 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.392740965 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.393842936 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.393868923 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.399698973 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.399710894 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.402643919 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.402657986 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.405308962 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.405318022 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.421231985 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.421255112 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.421330929 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.421636105 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.421649933 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.716691971 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.717117071 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.717140913 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.717511892 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.718528986 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.718596935 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.719261885 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.723273993 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.724982023 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.730809927 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.731025934 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.731494904 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.731719017 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.731973886 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.733516932 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.733536959 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.733961105 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.734700918 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.736047029 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.737838984 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.745687008 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.745760918 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.745860100 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.745881081 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.745965004 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.745984077 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746066093 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746078968 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746181011 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746191978 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746279955 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746294975 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746385098 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746519089 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746535063 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746563911 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746618986 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746629000 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746711969 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746720076 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746813059 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.746819973 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.746856928 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747018099 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747072935 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747076035 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747113943 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747183084 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747206926 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747262955 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747400045 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747539997 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747589111 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747616053 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747674942 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747694969 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747720957 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747778893 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747874975 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.747936010 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.747991085 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.748037100 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.748434067 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.748522043 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.748838902 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.748905897 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.749032974 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.749039888 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.749135971 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.749142885 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.749182940 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.749313116 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.749322891 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.749654055 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.749716997 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.750408888 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.750577927 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.750597000 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.750710964 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.750794888 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.750859976 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.751034021 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.751040936 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.751079082 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.751085997 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.751338959 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.751347065 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.751805067 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.751915932 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.751975060 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.760121107 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.762855053 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.765625954 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.765635967 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.769228935 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.769435883 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.771437883 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.771517992 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.771800041 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.771806955 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.792114973 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.792148113 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.793308973 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.793308973 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.793309927 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.793308973 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.793312073 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.793324947 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.884527922 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.884532928 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.885826111 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.899836063 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.899878025 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.940489054 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.940541029 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.940608978 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.940630913 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.940644026 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.940685987 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.942228079 CEST	49780	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.942244053 CEST	443	49780	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945260048 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945329905 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945410013 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945415020 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.945447922 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.945569038 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945625067 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945692062 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.945732117 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.951581955 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.951637983 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.951673031 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.951713085 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.951746941 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.951785088 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.951987028 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.951994896 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952017069 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952028990 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952037096 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952038050 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952049971 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952068090 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952083111 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952109098 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952248096 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952265024 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952296019 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952303886 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952327013 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952362061 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952405930 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952455997 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952467918 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952524900 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952569008 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952636957 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952668905 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952826023 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952832937 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952847004 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952853918 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952856064 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952877998 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952896118 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952909946 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952909946 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952915907 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952955008 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952960968 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.952995062 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.952996969 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.953027964 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.953041077 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.953059912 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.953296900 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.953525066 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.956774950 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.956871033 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.956959009 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.959003925 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959083080 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959117889 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959161043 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.959168911 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959173918 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959191084 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.959213018 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.959233999 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.959233999 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.970786095 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.970808983 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.970875025 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.972596884 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.972609997 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.984844923 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.984968901 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.984977961 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.984992981 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.985002995 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.985024929 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.985035896 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.985094070 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.985110044 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.985135078 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.987945080 CEST	49781	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.987962961 CEST	443	49781	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.988197088 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.988223076 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.988279104 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.988653898 CEST	49782	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.988666058 CEST	443	49782	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.989006042 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.989031076 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.989193916 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.990411043 CEST	49784	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.990420103 CEST	443	49784	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.990950108 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.990981102 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.991043091 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.991445065 CEST	49785	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.991453886 CEST	443	49785	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.992500067 CEST	49789	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.992513895 CEST	443	49789	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.992885113 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.992902994 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:43.992981911 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.993743896 CEST	49790	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:43.993767977 CEST	443	49790	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.017204046 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.017245054 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.017350912 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.019155025 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.019186974 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.019921064 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.019942045 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.020961046 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.020994902 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.021605968 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.021631956 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.022363901 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.022377968 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.032875061 CEST	49787	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.032893896 CEST	443	49787	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.034137011 CEST	49783	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.034154892 CEST	443	49783	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.034727097 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.034748077 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.034862995 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.035408020 CEST	49788	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.035418987 CEST	443	49788	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.038433075 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.038444996 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062455893 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062483072 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062519073 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.062527895 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062557936 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.062591076 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062601089 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062609911 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062627077 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062638044 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.062647104 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.062681913 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.063028097 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063045979 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063075066 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063085079 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.063091993 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063101053 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063127995 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.063127995 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.063149929 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.063154936 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.063256025 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.066379070 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.066412926 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.066498041 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.066800117 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.066812992 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.096976995 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.096993923 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.097093105 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.097726107 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.097734928 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.113383055 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.113406897 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.113456964 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.113905907 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.113923073 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.114938974 CEST	49791	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.114957094 CEST	443	49791	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.116395950 CEST	49786	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.116406918 CEST	443	49786	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.150518894 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.150542021 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.150607109 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.151804924 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.151818037 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.158229113 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.158255100 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.158492088 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.158799887 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.158814907 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.305439949 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.313798904 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.313812017 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.314493895 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.323323965 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.323400021 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.323798895 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.352839947 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.353996038 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.354686975 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.357003927 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.362075090 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.364124060 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.364898920 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.364918947 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.365170956 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.365181923 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.365632057 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.365654945 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.365884066 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.365899086 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366056919 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.366077900 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366322041 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366329908 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366406918 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.366471052 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366699934 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.366750956 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.368257999 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.368324041 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.368814945 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.368870974 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.369384050 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.369489908 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.369944096 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.370018005 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.371418953 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.371483088 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.371546984 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.372186899 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.372195959 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.372246027 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.372364998 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.372665882 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.372673988 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.373028994 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.373044968 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.373955965 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.374058962 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.374162912 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.374217033 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.374232054 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.374243021 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.375037909 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.375111103 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.375372887 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.375379086 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.400368929 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.400748014 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.400769949 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.401119947 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.401925087 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.401983976 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.402746916 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.416115046 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.416124105 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.426075935 CEST	49698	443	192.168.2.6	173.222.162.64
Apr 29, 2024 22:13:44.430797100 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.431052923 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.431061029 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.432068110 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.432164907 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.433573008 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.433633089 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.434182882 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.434189081 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.444122076 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.449234962 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.449848890 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.449860096 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.450948954 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.451019049 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.451841116 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.451910019 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.452241898 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.452250004 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.479989052 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.480001926 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.480153084 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.484754086 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.486223936 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.486238003 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.487241030 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.487323046 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.488004923 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.488064051 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.488398075 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.488403082 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.500677109 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.501044989 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.501061916 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.504945040 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.505012035 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.513422012 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.513509035 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.513875008 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.513889074 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.526442051 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.526885986 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.526907921 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.526964903 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.526974916 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.527012110 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.527040958 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.527045012 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.527127981 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.536806107 CEST	49792	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.536817074 CEST	443	49792	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.553599119 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.553628922 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.553685904 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.554038048 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.554049969 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.574398994 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.574527025 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.574599981 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.574615002 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.574657917 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.575315952 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.575364113 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.575414896 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.575424910 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.575436115 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.575484037 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.577501059 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.577555895 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.577569962 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.577624083 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.577629089 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.577641010 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.577667952 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.577668905 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.577704906 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.581706047 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.581912041 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.581933022 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.581950903 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.581973076 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.581985950 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.582006931 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.582083941 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.582134962 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.583817005 CEST	443	49698	173.222.162.64	192.168.2.6
Apr 29, 2024 22:13:44.587773085 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.587995052 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.592078924 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592272043 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592278957 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592345953 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.592354059 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592369080 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592375994 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592408895 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592417955 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592417002 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.592417002 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.592442989 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.592473984 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.592498064 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.607568979 CEST	49793	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.607584000 CEST	443	49793	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.607938051 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.607976913 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.608124018 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.608330011 CEST	49797	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.608345985 CEST	443	49797	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.608612061 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.608632088 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.608932018 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.609251976 CEST	49796	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.609267950 CEST	443	49796	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.609591961 CEST	49794	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.609601021 CEST	443	49794	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.610992908 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.611005068 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.611398935 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.611412048 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.611866951 CEST	49795	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.611881018 CEST	443	49795	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.612289906 CEST	49798	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.612303019 CEST	443	49798	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.624885082 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.624979973 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.625114918 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.625811100 CEST	49799	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.625828981 CEST	443	49799	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.627330065 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.627346992 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.627490997 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.627633095 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.627646923 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.653944016 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.654014111 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.654062033 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.654073000 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.654082060 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.654119968 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.654732943 CEST	49800	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.654741049 CEST	443	49800	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.656590939 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.656615019 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.656785011 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.657135010 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.657145977 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.664114952 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.664228916 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.670769930 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.670856953 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.670865059 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.670939922 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.670959949 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671032906 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.671041965 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671052933 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671072006 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671107054 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.671113014 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671124935 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.671127081 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.671169043 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.671262980 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.672688961 CEST	49801	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.672698021 CEST	443	49801	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.676377058 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.676400900 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.676487923 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.680258989 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.680269957 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708095074 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708169937 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708178997 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708203077 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708208084 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708226919 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.708244085 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708249092 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.708275080 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.708298922 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.709084988 CEST	49802	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.709100008 CEST	443	49802	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.710602045 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.710625887 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.710716963 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.710850000 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.710859060 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.720546007 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.720690966 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.720751047 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.720772028 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.720844030 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.720845938 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.720906019 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.721549988 CEST	49803	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.721560001 CEST	443	49803	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.722759962 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.722781897 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.722872972 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.723042965 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.723052025 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.888510942 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.888847113 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.888864994 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.889216900 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.889616966 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.889677048 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.889741898 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.936114073 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.944000959 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.944276094 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.944288015 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.944611073 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.944947004 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.945031881 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.945090055 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.946485043 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.946669102 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.946686029 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.947000980 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.947283983 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.947344065 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.947369099 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.967972994 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.968198061 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.968209982 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.968661070 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.969016075 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.969124079 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.969146013 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.990782976 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.991033077 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.991044044 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.992033958 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.992126942 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.992139101 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.992139101 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.992569923 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.992630005 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:44.992973089 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:44.992980957 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.012141943 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.014475107 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.014710903 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.014729023 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.016289949 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.016357899 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.016721964 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.016799927 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.016900063 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.016906023 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.033425093 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.033519983 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.043837070 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.044085026 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.044104099 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.045195103 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.045340061 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.046437025 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.046497107 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.047239065 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.047255039 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.056067944 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.056401968 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.056454897 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.057600021 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.057676077 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.058177948 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.058235884 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.058305025 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.095072031 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.095072031 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.095072031 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.095072031 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.104115009 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109556913 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109750032 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109757900 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109791040 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109802008 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.109803915 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109811068 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109826088 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109857082 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.109868050 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109877110 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.109905958 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109913111 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109929085 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109936953 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109954119 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.109961987 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.109983921 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.164586067 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.164640903 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.164705038 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.164731979 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.164743900 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.168056011 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.168103933 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.168164015 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.168216944 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.186799049 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.186799049 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.186799049 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.186810017 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.186820030 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188277960 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188441992 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188462019 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188481092 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188489914 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188507080 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188530922 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188545942 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188565016 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188590050 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188596964 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188601017 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188612938 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188671112 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188676119 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188721895 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188791037 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188838959 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.188843012 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188925028 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.188967943 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.211973906 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212158918 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212166071 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212178946 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212186098 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212188005 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212208986 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.212220907 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212251902 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.212256908 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212292910 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.212348938 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212392092 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212400913 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.212404013 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212431908 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212439060 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.212451935 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.212479115 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219016075 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219028950 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219053984 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219069004 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219069958 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219077110 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219090939 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219115019 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219115973 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219161034 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219418049 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219424963 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219459057 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219465017 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219468117 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219484091 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219507933 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219772100 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219803095 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219810009 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219825983 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219830990 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219839096 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219855070 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219877958 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219896078 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219898939 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.219922066 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.219944954 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.235378981 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.235641956 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.235696077 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.267313004 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.267493010 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.267596006 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.267608881 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.267667055 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.267695904 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.267731905 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.276909113 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.276921988 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.276947975 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.276962042 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.276981115 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.276992083 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.276998997 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277015924 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277023077 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277034998 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277043104 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277051926 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277062893 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277070045 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277072906 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277076960 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277082920 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277091026 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277103901 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.277110100 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277136087 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.277149916 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.321832895 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.321854115 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.321918011 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.321934938 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.322006941 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.323123932 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.323179960 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.323240042 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.323244095 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.323295116 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.386547089 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386562109 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386590004 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386619091 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386655092 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.386668921 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386699915 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386713982 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.386718988 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386730909 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386745930 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.386751890 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.386775017 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.386805058 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.387021065 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.387036085 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.387070894 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.387077093 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.387096882 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.387115955 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.433191061 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.433211088 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.433310032 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.433342934 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.436851025 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496092081 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496114969 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496157885 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496176004 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496201038 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496220112 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496664047 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496679068 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496721029 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496725082 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496834993 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496942043 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496968031 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.496993065 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.496998072 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.497021914 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.497034073 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.497077942 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.497123003 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:45.497127056 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.497163057 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:45.497205019 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.592259884 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.592293978 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.592351913 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.594211102 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.594244003 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.594290018 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.595093012 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.595112085 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.595571995 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.595583916 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.642014980 CEST	49806	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.642036915 CEST	443	49806	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.642925024 CEST	49805	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.642946005 CEST	443	49805	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.644984961 CEST	49809	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.644992113 CEST	443	49809	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.645843983 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.645870924 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.646080971 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.647525072 CEST	49810	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.647531033 CEST	443	49810	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.648129940 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.648158073 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.648236990 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.648793936 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.652472019 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.652489901 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.653284073 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.653297901 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.665205956 CEST	49807	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.665220022 CEST	443	49807	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.665585995 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.665602922 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.665687084 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.669800997 CEST	49808	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.669810057 CEST	443	49808	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.684387922 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.684405088 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.684494019 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.693059921 CEST	49804	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.693068981 CEST	443	49804	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.693950891 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.693964005 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.699745893 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.699758053 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.704889059 CEST	49811	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.704895020 CEST	443	49811	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.707623005 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.707639933 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.707698107 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.708755016 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.708780050 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.708893061 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.709484100 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.709496975 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.824479103 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.829546928 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.876586914 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.891674042 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.899804115 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.899823904 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.913405895 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.913418055 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.913826942 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.913852930 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.915188074 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.915210009 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.915249109 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.915841103 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.915858984 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.915893078 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.955192089 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.955298901 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.956971884 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.957112074 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.957762957 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:47.957778931 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:47.985747099 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.987410069 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.989379883 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.989404917 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.989737988 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.989751101 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.990185976 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.990819931 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.990972042 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.991031885 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.991602898 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.991689920 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:47.992568970 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:47.992676020 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.027261019 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.029074907 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.029095888 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.030963898 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.031025887 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.032262087 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.032381058 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.032409906 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.034434080 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.035120964 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.035142899 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.036626101 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.036700010 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.039757967 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.039836884 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.040112972 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.040127993 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.040132999 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.040133953 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.052925110 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.069360018 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.069385052 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.070491076 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.070547104 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.073004961 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.073072910 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.073582888 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.073590040 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.080159903 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.086344957 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:48.086355925 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:48.086359024 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.087941885 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:48.087996006 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.088021040 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.106348038 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:48.106489897 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:48.106539011 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:48.114111900 CEST	49812	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:48.114129066 CEST	443	49812	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:48.196393967 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.206749916 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.207043886 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.207060099 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.207133055 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.207145929 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.207154036 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.207231045 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.207854033 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208035946 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208055019 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208122015 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.208146095 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208204031 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.208281994 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208300114 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208343983 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.208352089 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.208395004 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.217731953 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.217895985 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:48.237019062 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.237508059 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.237519026 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.239087105 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.239144087 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.239670992 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.239753008 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.239859104 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.239866972 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250150919 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250248909 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250257969 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250267982 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250288010 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250294924 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250297070 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250310898 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250334978 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250343084 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250365973 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250637054 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250647068 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250675917 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250684023 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250685930 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250709057 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250727892 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250747919 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.250760078 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.250845909 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.255264997 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.255440950 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.255590916 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.255614996 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.255645037 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.256566048 CEST	49817	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.256584883 CEST	443	49817	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.257873058 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.257896900 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.258063078 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.258443117 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.258455992 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274488926 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274693966 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274703026 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274723053 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274730921 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274738073 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274741888 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.274750948 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274765968 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.274772882 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.274797916 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.275083065 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.275093079 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.275120020 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.275129080 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.275139093 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.275144100 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.275162935 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.316416979 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.316462994 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.316488981 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.316514969 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.316608906 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.316864014 CEST	49814	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.316874027 CEST	443	49814	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317492962 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317513943 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317554951 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317588091 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317591906 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.317606926 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317621946 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.317712069 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.320148945 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.320185900 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.320287943 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.321192980 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.321208954 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.321505070 CEST	49815	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.321515083 CEST	443	49815	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.324522018 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.324551105 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.324659109 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.324932098 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.324949026 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.341340065 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.341357946 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.359893084 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.359920979 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.359968901 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.359970093 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.359982014 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.360048056 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.360049963 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.360229969 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.360244036 CEST	443	49816	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.360259056 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.360327005 CEST	49816	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.362601042 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.362613916 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.362760067 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.363182068 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.363200903 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384140015 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384150982 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384181023 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384191036 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384200096 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.384206057 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384253025 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.384272099 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.384685993 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384691954 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384707928 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384735107 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.384738922 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384793043 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.384795904 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.384905100 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.385875940 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.385910988 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.385937929 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.385942936 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.385973930 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.385984898 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.386024952 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.386301994 CEST	49819	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.386312962 CEST	443	49819	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.388384104 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.388410091 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.388467073 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.388642073 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.388655901 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.458873034 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459109068 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459130049 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459151030 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459162951 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459182024 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459197998 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459202051 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459220886 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459238052 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459247112 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459261894 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459264994 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459279060 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459510088 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459528923 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459572077 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459573030 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459595919 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459619045 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.459626913 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.459645033 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.547357082 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568161011 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568183899 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568228006 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568232059 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568248034 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568259001 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568276882 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568275928 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568303108 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568310022 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568485022 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568504095 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568541050 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568552017 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568563938 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.568586111 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.568598986 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.594351053 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.607326984 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.607372046 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.607389927 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.607399940 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.607419014 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.607454062 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.610575914 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.610590935 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.611141920 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.614816904 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.614897966 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.615231991 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.649652004 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.649710894 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.649736881 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.649743080 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.649775028 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.649784088 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.653927088 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.657957077 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.660111904 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.677937984 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.677983999 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678008080 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678020954 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678035021 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678061008 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678155899 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678211927 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678229094 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678232908 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678266048 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678270102 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678308010 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.678390026 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.678436041 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.696762085 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.724906921 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.787396908 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.787452936 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.793824911 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.793833017 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794126987 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.794147968 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794722080 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794751883 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.794756889 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794929028 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.794935942 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794943094 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794955015 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.794992924 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.795572042 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.795639992 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796197891 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.796261072 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796360970 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.796361923 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796376944 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796395063 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.796405077 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796425104 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.796621084 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796636105 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.796677113 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.796948910 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.797035933 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.797379971 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.797456026 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.797708988 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.797719002 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.797756910 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.797763109 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.814955950 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815028906 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815047026 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815079927 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.815114021 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815114975 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.815161943 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.815301895 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815324068 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815349102 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.815356016 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.815371990 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.844124079 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.854671001 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.902658939 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.902662039 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.902662039 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.907980919 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908178091 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908185959 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908216000 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908232927 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908241987 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908242941 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908276081 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908301115 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908305883 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908319950 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908375025 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908380032 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908381939 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908402920 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908412933 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908416033 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908425093 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908435106 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908447027 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908453941 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908477068 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908608913 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908616066 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908628941 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908636093 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908638000 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908647060 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908657074 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908684015 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908690929 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908709049 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.908961058 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908987045 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.908998013 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.909008980 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.909013033 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.909029007 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.909043074 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.909056902 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.918406963 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918921947 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918931007 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918960094 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918973923 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.918973923 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918982983 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.918993950 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919003963 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919011116 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919014931 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.919027090 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919034004 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.919043064 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919049978 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919050932 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.919058084 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919070005 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.919074059 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.919083118 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.919110060 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.924868107 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924880028 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924901009 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924910069 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924942017 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.924964905 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924982071 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.924992085 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.925002098 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.925013065 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.925025940 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.925039053 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.925049067 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.925086021 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.925122976 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947141886 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947240114 CEST	49820	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947263956 CEST	443	49820	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947297096 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947307110 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947329044 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947360039 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947359085 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947377920 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947391033 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947391987 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947410107 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947428942 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947494984 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947504044 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947524071 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947534084 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947541952 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947556973 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947566986 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:48.947580099 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.947606087 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:48.983228922 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.017688990 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.017698050 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.017754078 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.017760992 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.017770052 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.017786026 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.017801046 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.017815113 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018018961 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018039942 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018062115 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018066883 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018076897 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018101931 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018335104 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018347025 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018383026 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018390894 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018409967 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018565893 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018582106 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018587112 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018595934 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018611908 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018619061 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018645048 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018655062 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018656015 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018656969 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018675089 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018702030 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018723011 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018846989 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018855095 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018879890 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018903971 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018913984 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018923998 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018934965 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018946886 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.018954992 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018964052 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.018990993 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028104067 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028127909 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028166056 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028172016 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028224945 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028316021 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028328896 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028397083 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028403044 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028440952 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028856039 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028872013 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.028937101 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.028940916 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.029040098 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.056591034 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.056685925 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.056689978 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.056731939 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.071196079 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.071233034 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.071304083 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.071315050 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.071379900 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.093837023 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.127547979 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.127556086 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.127593040 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.127623081 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.127624035 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.127645969 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.127665997 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.127681017 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.128266096 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.128315926 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.128328085 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.128340006 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.128380060 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.224502087 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:49.268121958 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:49.336270094 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.336304903 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.336391926 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.336564064 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.336572886 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.359203100 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.360687971 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.369314909 CEST	49821	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.369350910 CEST	443	49821	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.373348951 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:49.373420000 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:49.373461008 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:49.374474049 CEST	49825	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.374495029 CEST	443	49825	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.385705948 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.385750055 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.385813951 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.386154890 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.386173964 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.386626005 CEST	49822	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.386640072 CEST	443	49822	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.388794899 CEST	49823	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.388801098 CEST	443	49823	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.390456915 CEST	49824	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.390465021 CEST	443	49824	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.395036936 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.395075083 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.395155907 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.395407915 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.395425081 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.405751944 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.405790091 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.405839920 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.406291008 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.406301975 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.428504944 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.428534985 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.428658009 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.429120064 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.429132938 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.431361914 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.431399107 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.431572914 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.434468985 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.434483051 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.435149908 CEST	49813	443	192.168.2.6	104.16.40.28
Apr 29, 2024 22:13:49.435175896 CEST	443	49813	104.16.40.28	192.168.2.6
Apr 29, 2024 22:13:49.675604105 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.695530891 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.695550919 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.696150064 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.698822021 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.698909044 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.718895912 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.728285074 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.739003897 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.761452913 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.768410921 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.777122021 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.800575972 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.801103115 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.837248087 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.837266922 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.838885069 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.838901043 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.838933945 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.883573055 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.885272980 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:49.972136021 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:49.973619938 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.939125061 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.939373016 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.944011927 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.944032907 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.944380999 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.944405079 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.945116997 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.945178032 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.945386887 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.945400000 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.945441961 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.948409081 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.948431969 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.948687077 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.948712111 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.949090004 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.949403048 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.949414968 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.949457884 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.955372095 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.956151009 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:50.956167936 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:50.994203091 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.000118971 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067028999 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067162991 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067171097 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067195892 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067210913 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067218065 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067234993 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067260027 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067286015 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067286968 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067301989 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067401886 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067424059 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067449093 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067452908 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067459106 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067481041 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067493916 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.067498922 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.067536116 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.068162918 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.068228960 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.068247080 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.068280935 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.073765039 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.073879957 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.074049950 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.074163914 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.074548006 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.074625969 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.074783087 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.074888945 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.116075039 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.116092920 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.136432886 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.136478901 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.138010025 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.138160944 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.138462067 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.138494015 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178076982 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178113937 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178148985 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.178167105 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178190947 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178200006 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.178215981 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.178224087 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178239107 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.178282022 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.178323030 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.180134058 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.180150986 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.198935032 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.199065924 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.247734070 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.247772932 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.247829914 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.247834921 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.247880936 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.249600887 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.249644041 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.249694109 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.249711037 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.249752998 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.251521111 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.251559973 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.251601934 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.251616955 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.251627922 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.251682043 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.252712011 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.252751112 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.252799988 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:51.252851009 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:51.253051043 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.109482050 CEST	49831	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.109508038 CEST	443	49831	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.117830038 CEST	49829	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.117857933 CEST	443	49829	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.119349003 CEST	49830	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.119369984 CEST	443	49830	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.120455027 CEST	49827	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.120477915 CEST	443	49827	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.121690989 CEST	49828	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.121718884 CEST	443	49828	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.122566938 CEST	49826	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.122590065 CEST	443	49826	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.125788927 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.125811100 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.125900984 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.126141071 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.126151085 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.126785994 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.126813889 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.126873970 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.127043962 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.127057076 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.127885103 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.127907038 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.127973080 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.128209114 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.128233910 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.128763914 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.128789902 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.128870964 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.129095078 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.129107952 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.129719019 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.129740000 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.129863977 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.130032063 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.130047083 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.131464005 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.131480932 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.131531954 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.131710052 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.131725073 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.214854002 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.214893103 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.215164900 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.215378046 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.215394020 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.446084976 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.446367025 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.446397066 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.447273016 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.447325945 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.462595940 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.462955952 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.462970972 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.463314056 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.463623047 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.463742018 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.463799000 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.468967915 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.469177008 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.469286919 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.469304085 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.469453096 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.469465971 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.469818115 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470133066 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.470191002 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470201969 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470266104 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.470339060 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470380068 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470412970 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.470436096 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470436096 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.470479012 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470619917 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.470638037 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.470966101 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471024990 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.471136093 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471148968 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.471250057 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471260071 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.471429110 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.471482038 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471590996 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.471640110 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471788883 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.471841097 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472094059 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.472146034 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472167969 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472206116 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.472284079 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.472294092 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472322941 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.472330093 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472635984 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.472693920 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.472780943 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.504141092 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.512118101 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.516164064 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.555569887 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.555613995 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.555682898 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.555979013 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.555986881 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.558374882 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.558497906 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.558510065 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.558717966 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.570749044 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.570774078 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.571000099 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.571482897 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.571497917 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.571840048 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.572041035 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.576200962 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.576229095 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.576304913 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.577022076 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.577035904 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.583151102 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.583177090 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.583265066 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.583467960 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.583478928 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.586941957 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.586970091 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.587045908 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.587083101 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.587213993 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.587232113 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.587764025 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.587780952 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.587835073 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.588112116 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.588124990 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.588363886 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.588376999 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.679208994 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.679224968 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.684813976 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.684920073 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.684974909 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.688513041 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688523054 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688544035 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688553095 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.688555956 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688565969 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688581944 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688595057 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.688595057 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.688601971 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.688608885 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.688616037 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.689240932 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.689275980 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.689282894 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.689307928 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.689313889 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.689326048 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.689327955 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.689357996 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.690323114 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.690409899 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.690459013 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.690756083 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.690853119 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.690907955 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.691349030 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.691447020 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.691499949 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.693861008 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.693912029 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.693924904 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.693955898 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.700875998 CEST	49838	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.700901985 CEST	443	49838	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.701427937 CEST	49835	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.701437950 CEST	443	49835	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.701832056 CEST	49839	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.701843023 CEST	443	49839	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.702240944 CEST	49837	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.702250957 CEST	443	49837	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.702641010 CEST	49834	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.702660084 CEST	443	49834	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.704261065 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.704323053 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.704327106 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.704355001 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.704377890 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.704488039 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.704528093 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.707993031 CEST	49836	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.708000898 CEST	443	49836	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.783126116 CEST	49841	443	192.168.2.6	65.8.49.32
Apr 29, 2024 22:13:52.783138990 CEST	443	49841	65.8.49.32	192.168.2.6
Apr 29, 2024 22:13:52.785547972 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.785573006 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.785624981 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.787796974 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.787806988 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.890408039 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.891460896 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.891472101 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.891766071 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.892185926 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.892239094 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.892507076 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.894088030 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:52.894134045 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:52.894206047 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:52.894361973 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:52.894377947 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:52.905661106 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.909261942 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.915857077 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.920748949 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.927916050 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.940119028 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:52.980633020 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:52.980633974 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.030901909 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.030910969 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.031481028 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.031486988 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.031586885 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.031601906 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.031903028 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.031939983 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032090902 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.032121897 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032569885 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032648087 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032660961 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032700062 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.032702923 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032711029 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032747984 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.032771111 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032790899 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.032821894 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.033031940 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.033046007 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.033091068 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.034573078 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.034646988 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.035105944 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.035193920 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.035887957 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.035965919 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.036223888 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.036293983 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.036593914 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.036689043 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.036891937 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.036901951 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.037017107 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.037024021 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.037041903 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.037053108 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.037311077 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.037318945 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.037358046 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.080140114 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.089202881 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.089267015 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.112932920 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113166094 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113182068 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113224983 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.113235950 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113248110 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.113276958 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.113436937 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113451958 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113480091 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.113485098 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.113504887 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.113562107 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.120928049 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.123586893 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.123605013 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.123979092 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.124375105 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.124445915 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.125633001 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.148832083 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.148845911 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.148886919 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.148926020 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.148947954 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.148958921 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.148964882 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.148998976 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149003029 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149040937 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149086952 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149112940 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149394035 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149400949 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149420977 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149420977 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149429083 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149451017 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149460077 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149494886 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149494886 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149519920 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149647951 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149842024 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149849892 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149866104 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149873018 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149878025 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149899960 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149928093 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149943113 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.149949074 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.149964094 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.150125027 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150146961 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150154114 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150171041 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.150171995 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150194883 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150218010 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.150218010 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.150278091 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150885105 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150892973 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150913954 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150926113 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150937080 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.150995970 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151012897 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151046038 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151155949 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151170015 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151216984 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151245117 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151261091 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151273966 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151283979 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151300907 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151314974 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151361942 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151371002 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151434898 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151443958 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151448011 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151469946 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151473045 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151489019 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151541948 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151549101 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151555061 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151587963 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151597023 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151609898 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151617050 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.151634932 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.151654959 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.172122002 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.199539900 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.222588062 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.222610950 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.222692966 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.222702980 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.222737074 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.222959042 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.222975016 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223020077 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.223027945 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223227978 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223251104 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223273993 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.223278999 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223294020 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.223320961 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.223509073 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223522902 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.223565102 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.223571062 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.224812984 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.233516932 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.256628036 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.256660938 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.256720066 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.256934881 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.256958961 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.257024050 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.257453918 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.257463932 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.257668018 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.257678032 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.257975101 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.257977962 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.257985115 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.258054972 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.258667946 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.258707047 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.260181904 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260193110 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260221004 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260243893 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260256052 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260263920 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260272980 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260296106 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260704041 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.260749102 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260761976 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.260771036 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260804892 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260811090 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.260845900 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260884047 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.260884047 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.260898113 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.261149883 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261168003 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261199951 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261207104 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261244059 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261271954 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261280060 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261303902 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261329889 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261445045 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261456966 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261507988 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261522055 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261537075 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261580944 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261691093 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261713982 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261758089 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261766911 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261780977 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261838913 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261900902 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261919022 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261950016 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261954069 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261977911 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.261980057 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.261996984 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262001038 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262032986 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262058973 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262059927 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262156963 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262157917 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262165070 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262181044 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262204885 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262223959 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262240887 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262244940 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262258053 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262267113 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262274981 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262283087 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262306929 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.262312889 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262329102 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.262420893 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.264909983 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.265816927 CEST	49844	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.265826941 CEST	443	49844	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.266181946 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.266206980 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.266267061 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.266467094 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.267429113 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.267436981 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333070040 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333087921 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333128929 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.333134890 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333163977 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.333688021 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333703041 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333729029 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.333731890 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.333762884 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.334188938 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334202051 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334238052 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334254026 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.334259987 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334286928 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.334290028 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334336042 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.334367037 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.344033957 CEST	49843	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.344048977 CEST	443	49843	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.344533920 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.344552994 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.344611883 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.344923019 CEST	49847	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.344945908 CEST	443	49847	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.345347881 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.345379114 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.345479012 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.346455097 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.346544027 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.346604109 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.352679014 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.352688074 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.368931055 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.368940115 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369718075 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369743109 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369812012 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.369827032 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369910955 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369927883 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369959116 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.369966984 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.369975090 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.369999886 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.370122910 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.472111940 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.472172976 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.489645958 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.489757061 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.489830017 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.527846098 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.528295040 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.528309107 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.529071093 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.529366016 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.529416084 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.529457092 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.529472113 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.530543089 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.530596018 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.530981064 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.531045914 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.531316042 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.531326056 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.532594919 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.532664061 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.532783031 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.532792091 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.591231108 CEST	49846	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.591252089 CEST	443	49846	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.591597080 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.591628075 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.591717958 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.591909885 CEST	49842	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.591921091 CEST	443	49842	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.592160940 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.592190981 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.592231989 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.592648983 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.592660904 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.592967033 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.592978954 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.600886106 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.604090929 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.605072975 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.605077982 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.605411053 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.605808020 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.605855942 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.606051922 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.610881090 CEST	49845	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.610896111 CEST	443	49845	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.611144066 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.611150026 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.611191988 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.612087965 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.612095118 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.613181114 CEST	49852	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.613193989 CEST	443	49852	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.615684986 CEST	49848	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.615690947 CEST	443	49848	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.623214006 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.623248100 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.623295069 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.623905897 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.623919010 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.633127928 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.652107000 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.691924095 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.707359076 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.717984915 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.718007088 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.718365908 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.718385935 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.718837023 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.719115019 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.719168901 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.719711065 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.719778061 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.720240116 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.720303059 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.720501900 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.720609903 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.720617056 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.723256111 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.723274946 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.723434925 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.723853111 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.723865986 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.738991022 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:53.739001036 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:53.739166021 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:53.739527941 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:53.739540100 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:53.754864931 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.754893064 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.754939079 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.755126953 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.755141020 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.764147043 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.778258085 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.806822062 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.806905031 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.806962967 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.809226036 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.809340000 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.809386015 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.827414036 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.827855110 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.827898979 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.827929020 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.827953100 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.827981949 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.828005075 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.828063011 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.828125000 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.828186989 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.828250885 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.844435930 CEST	49859	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.844455004 CEST	443	49859	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.845093012 CEST	49858	443	192.168.2.6	142.251.4.157
Apr 29, 2024 22:13:53.845108986 CEST	443	49858	142.251.4.157	192.168.2.6
Apr 29, 2024 22:13:53.916076899 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916215897 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916238070 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916275024 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.916297913 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916316032 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.916336060 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.916449070 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916465044 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916491985 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.916496992 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.916516066 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.916532040 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.926111937 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.926522017 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.928675890 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929040909 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929049969 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929078102 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929096937 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929096937 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929109097 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929138899 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929153919 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929153919 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929168940 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929182053 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929189920 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929203033 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.929215908 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929259062 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.929265976 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937012911 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937038898 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937092066 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.937115908 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937134981 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.937356949 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937377930 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937410116 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.937413931 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937422037 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937441111 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.937464952 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.937474012 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937496901 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.937526941 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.945846081 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.950841904 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.958115101 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.980355978 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.980355978 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.983375072 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.984710932 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.984723091 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.984958887 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.984980106 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.985044003 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.985049009 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.985083103 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.985088110 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.985368013 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.985392094 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.985425949 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.985651016 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.985656023 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.985667944 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.985693932 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.985763073 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.985892057 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.985902071 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.986084938 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.986144066 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.986867905 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.986880064 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.986922979 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.987235069 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.987251997 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.987288952 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.989203930 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.989290953 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.989454031 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.989516020 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.990633965 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.990708113 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.990833998 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.990914106 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.991133928 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.991204023 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:53.991918087 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.991966963 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:53.992269039 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.992280960 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.992343903 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.992353916 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:53.992372036 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:53.992409945 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:53.992419004 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:53.992448092 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:53.992486954 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:53.992492914 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.025752068 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.025788069 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.025860071 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.025872946 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026042938 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026042938 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026144028 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026158094 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026206970 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026211977 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026252031 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026391029 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026403904 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026441097 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026443958 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.026468992 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.026485920 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.036122084 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.036123991 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.038633108 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038647890 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038680077 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038759947 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.038784981 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038822889 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.038921118 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038940907 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.038970947 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.038975954 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.039001942 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.039016008 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.039021015 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.056509018 CEST	49860	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.056531906 CEST	443	49860	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.056971073 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.056989908 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.057284117 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.059768915 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.059787035 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.063580990 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.063611031 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.063636065 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.063657045 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.063672066 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.063987017 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079284906 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079313040 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079355955 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079371929 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079392910 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079577923 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079591036 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079610109 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079623938 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079631090 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079642057 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079655886 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.079706907 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.079749107 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.089675903 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.102394104 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.102411985 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.103902102 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.103986025 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.108273983 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.108355045 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.108766079 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.108777046 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.109276056 CEST	49862	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.109302998 CEST	443	49862	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.109822035 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.109853029 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.109903097 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.110671043 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.110686064 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.135483027 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.135508060 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.135586023 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.135611057 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.135651112 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.135958910 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.135989904 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.136028051 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.136035919 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.136069059 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.136070967 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.136116028 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.137237072 CEST	49861	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.137253046 CEST	443	49861	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.137738943 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.137769938 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.138098001 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.139177084 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.139189005 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.147119999 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.147176981 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.147197008 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.147211075 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.147259951 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.148870945 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.148879051 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.148917913 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.148938894 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.148958921 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.148971081 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.148983955 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.148994923 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.149019003 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.149082899 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149090052 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149104118 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149110079 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149117947 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149126053 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.149131060 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.149144888 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.149157047 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.149178982 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.153045893 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.153083086 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.153306961 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.153461933 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.153475046 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.154309988 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.154340029 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.154397964 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.154547930 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.154556990 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.156363010 CEST	49865	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.156374931 CEST	443	49865	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.156689882 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.156717062 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.156785011 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.157694101 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.157711029 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.166425943 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.166481972 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.166537046 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.166552067 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.166579962 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.166620016 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.168418884 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.168464899 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.168483019 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.168502092 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.168540955 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.168550014 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.175812006 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.191832066 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.192672968 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.192826033 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.193001032 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.200167894 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.200242996 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.200284958 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.200313091 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.200323105 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.200346947 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.200364113 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.202519894 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.203908920 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.221164942 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.221349955 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.221381903 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.221431017 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.221462965 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.221503019 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.222448111 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.225056887 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.225089073 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.225142002 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.225156069 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.225254059 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.225953102 CEST	49867	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.225977898 CEST	443	49867	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.226356030 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.226389885 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.226443052 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.227442980 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.227456093 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.228977919 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.230401039 CEST	49868	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.230426073 CEST	443	49868	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.232732058 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.232809067 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.232825041 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.233422041 CEST	49871	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.233436108 CEST	443	49871	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.236500025 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.236577034 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.236591101 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.240367889 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.240437984 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.240447044 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.244259119 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.244904995 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.244914055 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.248003960 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.248054981 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.248069048 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.251925945 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.252022028 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.252038956 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.258800030 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258812904 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258852005 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258882046 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.258887053 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258900881 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258917093 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258918047 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.258941889 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.258955956 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.258970022 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.259000063 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.259048939 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.259556055 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.259603024 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.259615898 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.259651899 CEST	49864	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.259665966 CEST	443	49864	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.259880066 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.259913921 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.259964943 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.260767937 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.260780096 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.263261080 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.263330936 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.263345957 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.267095089 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.267143965 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.267158985 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.278497934 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278513908 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278527021 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.278543949 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278556108 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278568029 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.278568983 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278580904 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278599024 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.278620958 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.278625965 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.278652906 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.327755928 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327766895 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327797890 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327806950 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327814102 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327821970 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327841997 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.327863932 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.327889919 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.331608057 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.331696033 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.331710100 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.333384991 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.333458900 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.333472013 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.340015888 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.340075016 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.340090036 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.343101025 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.343177080 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.343183994 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.343213081 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.343357086 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.346183062 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.348869085 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.348912954 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.348925114 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.351500988 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.351577044 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.351624966 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.351638079 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.351680994 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.353936911 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.354104042 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.354213953 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.354229927 CEST	443	49870	146.75.80.157	192.168.2.6
Apr 29, 2024 22:13:54.354243994 CEST	49870	443	192.168.2.6	146.75.80.157
Apr 29, 2024 22:13:54.362210035 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.362251043 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.362565041 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.363229036 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.363249063 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.364397049 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.364428043 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.364489079 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.364805937 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.364821911 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.382635117 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.384162903 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.385776997 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.385795116 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.386842012 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.386904001 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.388354063 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.388422966 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.388817072 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388828039 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388833046 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.388839006 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.388859987 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388864994 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.388875008 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388900995 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388925076 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.388926983 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.388942003 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.388962030 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.393059969 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.393261909 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.393285990 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.393625021 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.393923044 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.393986940 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.394349098 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.394795895 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.394815922 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.395088911 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.395849943 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.395932913 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.397126913 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.397192001 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.397322893 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.397341967 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.420274973 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420284033 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420301914 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420312881 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420346022 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.420350075 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420363903 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.420377970 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.420413017 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.429588079 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.429624081 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.429825068 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.429866076 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.429893970 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.429935932 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.430448055 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.430469036 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.430691957 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.430708885 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.436136007 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.444510937 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.444715023 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.444729090 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.445203066 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.445549011 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.445627928 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.445646048 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.451045990 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.451101065 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.451121092 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.451148987 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.451164961 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.451184988 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.451225996 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.451235056 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.451508999 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.469103098 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.469130039 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.469290018 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.469569921 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.469582081 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.474736929 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.474956989 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.475018978 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.477338076 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.477392912 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.477672100 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.477777004 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.477786064 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.479464054 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.479480028 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.479505062 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.479526043 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.479547024 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.479562044 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.479628086 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.489759922 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.489773035 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.489823103 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.490003109 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.490011930 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.492116928 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.493359089 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.493557930 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.493576050 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.494580030 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.494642019 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.494970083 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.495034933 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.495687962 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.495697975 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.508074999 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.508096933 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.508136034 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.508152008 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.508167028 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.508181095 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.519108057 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.519162893 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.519185066 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.524384022 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.524435997 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.524455070 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.524472952 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.524490118 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.526947975 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.527000904 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.527012110 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.527081013 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.542510033 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.542558908 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.542603970 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.542619944 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.542654037 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.542665958 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.557926893 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.557960033 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.558011055 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.558029890 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.558063030 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.558084965 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.560257912 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.560560942 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.560585976 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.561455965 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.561522007 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.562952042 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.563004971 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.563076973 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.563082933 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.570847988 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.570871115 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.570938110 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.570955038 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.570971966 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.570991993 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.585870981 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.585906029 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.585935116 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.585952997 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.585969925 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.585985899 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.587898016 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.587945938 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.589202881 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.589618921 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.589620113 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.594494104 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.594707012 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.594728947 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.595581055 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.595644951 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.595899105 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.595951080 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.596203089 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.596211910 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.596307039 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.596630096 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.596637964 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.597532988 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.597579956 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.598254919 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.598300934 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.598325014 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.598349094 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.598366022 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.598536015 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.598592997 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.598830938 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.598843098 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.601674080 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601711988 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601737022 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601756096 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.601778984 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601809978 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601876974 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.601885080 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.601891994 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.601924896 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.602238894 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.602247000 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.603439093 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.603532076 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.604942083 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.605007887 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.605169058 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.605364084 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.605369091 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.608778000 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.608830929 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.608850956 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.608872890 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.608889103 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.608912945 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.608941078 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.609251022 CEST	49878	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.609263897 CEST	443	49878	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.610074043 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.610111952 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.610153913 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.610177994 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.610191107 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.610194921 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.610234976 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.612358093 CEST	49869	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.612373114 CEST	443	49869	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.615586996 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.615645885 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.615706921 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.615756989 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.618525028 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.618561983 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.618613958 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.618942022 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.618952036 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.619046926 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.619395018 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.619410992 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.620219946 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.620237112 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.621113062 CEST	49873	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.621120930 CEST	443	49873	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.647099972 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647156954 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647176981 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647193909 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647207022 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.647228956 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647239923 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.647243977 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647263050 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647280931 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647290945 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.647308111 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.647317886 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.656065941 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.656076908 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.656084061 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.665499926 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665520906 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665538073 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665585995 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.665600061 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665617943 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665638924 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665663004 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.665664911 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.665664911 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.665697098 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.666219950 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.666296005 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.666349888 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.666364908 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.666408062 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.666490078 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.671097040 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.671150923 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.671216965 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.672365904 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.672374964 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.673367023 CEST	49874	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.673388958 CEST	443	49874	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.673861027 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.673891068 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.674190044 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.674421072 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.674429893 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.696114063 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.696180105 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.696265936 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.696278095 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.696281910 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.696340084 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.696480036 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.696496010 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.696985006 CEST	49875	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.696997881 CEST	443	49875	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.697660923 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.697671890 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.698344946 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.698415041 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.698909998 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.699857950 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.699866056 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.700298071 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.700397015 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.700421095 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.702033043 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.702244997 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.702258110 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.703470945 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.703531027 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.704375982 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.704438925 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.704586983 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.704597950 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.711299896 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.711370945 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.711622000 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.711690903 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.711714983 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.715009928 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.715104103 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.715147972 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.715944052 CEST	49879	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.715960979 CEST	443	49879	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.727919102 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.727952957 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.728019953 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.728219986 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.728230000 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.748126030 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.749027967 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.749056101 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.749098063 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.749103069 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.749134064 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.749144077 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.749336958 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.749387980 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.756127119 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.756855011 CEST	49877	443	192.168.2.6	18.160.218.246
Apr 29, 2024 22:13:54.756865978 CEST	443	49877	18.160.218.246	192.168.2.6
Apr 29, 2024 22:13:54.773063898 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.773102045 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.783963919 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.784086943 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.784215927 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:54.784239054 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.784243107 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:54.784413099 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:54.787518978 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:54.787529945 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:54.796601057 CEST	49881	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.796612978 CEST	443	49881	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818571091 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818658113 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818670034 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818713903 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.818725109 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818747044 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.818828106 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.818872929 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.819969893 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.820394993 CEST	49882	443	192.168.2.6	152.195.33.23
Apr 29, 2024 22:13:54.820404053 CEST	443	49882	152.195.33.23	192.168.2.6
Apr 29, 2024 22:13:54.826567888 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826591969 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826601028 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826622009 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826638937 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.826644897 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826677084 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.826679945 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.826721907 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.830741882 CEST	49884	443	192.168.2.6	18.172.135.121
Apr 29, 2024 22:13:54.830751896 CEST	443	49884	18.172.135.121	192.168.2.6
Apr 29, 2024 22:13:54.832263947 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.832396030 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832431078 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832448959 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832458973 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832479954 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832488060 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832498074 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832531929 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832554102 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832583904 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832592964 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832602024 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832815886 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.832928896 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.832951069 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.832962990 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.834291935 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.834369898 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.836920023 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.837075949 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.837898970 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.837964058 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.839725971 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.839737892 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:54.841994047 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.842000008 CEST	443	49883	18.160.235.239	192.168.2.6
Apr 29, 2024 22:13:54.842009068 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.842042923 CEST	49883	443	192.168.2.6	18.160.235.239
Apr 29, 2024 22:13:54.850080967 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.850102901 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.850276947 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.850744963 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.850831032 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.852159023 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.852173090 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.852953911 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.852962971 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.853120089 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.853127956 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.853530884 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.854685068 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.854738951 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.855367899 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.855437994 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.855535984 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:54.856021881 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.856113911 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.856121063 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:54.867491961 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.867522955 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.867589951 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.867782116 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:54.867796898 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:54.882842064 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:54.882860899 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:54.882942915 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:54.883383036 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:54.883398056 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:54.886077881 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.900113106 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:54.900141001 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:54.901740074 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.901758909 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.901793003 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.901793003 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:54.912307978 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:54.912326097 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:54.912548065 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:54.912730932 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:54.912746906 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:54.913403988 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.913590908 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.913599014 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.914575100 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.914654016 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.915502071 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.915548086 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.915667057 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:54.915672064 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:54.939102888 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.939218998 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.939270020 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.939975023 CEST	49892	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:54.939991951 CEST	443	49892	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:54.946532965 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.946739912 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.946748018 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.948293924 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.948363066 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.949246883 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.949321985 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.949390888 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:54.949397087 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:54.952893019 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:54.952905893 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:54.952975035 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:54.953130960 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:54.953136921 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:54.962250948 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:54.962275028 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:54.963223934 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:54.963593006 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:54.963612080 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:54.964721918 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.965008020 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.965022087 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.966507912 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.966574907 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.966896057 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.966974974 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:54.966998100 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:54.978255987 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.978349924 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.978905916 CEST	49890	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.978921890 CEST	443	49890	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.981910944 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.981988907 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:54.982055902 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.982422113 CEST	49891	443	192.168.2.6	142.250.112.154
Apr 29, 2024 22:13:54.982429981 CEST	443	49891	142.250.112.154	192.168.2.6
Apr 29, 2024 22:13:55.012125015 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.032758951 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.032789946 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.032903910 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.033096075 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.033107996 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.053687096 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:55.054574966 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:55.054675102 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:55.054922104 CEST	49893	443	192.168.2.6	23.205.89.137
Apr 29, 2024 22:13:55.054941893 CEST	443	49893	23.205.89.137	192.168.2.6
Apr 29, 2024 22:13:55.059165001 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.059210062 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.059577942 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.059974909 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.059999943 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.064121008 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.064169884 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.071589947 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071646929 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071675062 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071695089 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.071707010 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071722031 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071758986 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.071772099 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.071818113 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.074103117 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.074282885 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.074291945 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.074294090 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.074307919 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.076642990 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.076762915 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.076800108 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.076857090 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.076864958 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:55.076874971 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.076975107 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.076975107 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.077002048 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.077214003 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.077784061 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:55.077841997 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.078392982 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:55.078597069 CEST	49895	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.078613043 CEST	443	49895	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.080480099 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.080564022 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.080583096 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.081749916 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.082056046 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.082154036 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.082160950 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.082587004 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.082602978 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.084258080 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.084340096 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.084666014 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.084813118 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.084820986 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.085478067 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.085562944 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.085648060 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.087466002 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.087521076 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.087528944 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.089983940 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.090048075 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.090051889 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.090104103 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.090373039 CEST	49894	443	192.168.2.6	146.75.80.84
Apr 29, 2024 22:13:55.090379953 CEST	443	49894	146.75.80.84	192.168.2.6
Apr 29, 2024 22:13:55.096925020 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.097523928 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.097541094 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.098022938 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.099051952 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.099138021 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.099694967 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.101169109 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.101187944 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.101242065 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.101465940 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.101478100 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.124130011 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.132122040 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.140124083 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.141382933 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.141638041 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.141648054 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.142668962 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.142736912 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.143830061 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.143893003 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.144018888 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.144037962 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.153390884 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.153567076 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.153628111 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.154999018 CEST	49898	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.155034065 CEST	443	49898	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.174212933 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.174447060 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.174463034 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.175803900 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.175910950 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.175956011 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.175972939 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.175981045 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.177613020 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.177695990 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.177896023 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.177903891 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.187340975 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.187833071 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.187839985 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.189344883 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.189425945 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.191194057 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.192626953 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.192754030 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.193095922 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.193101883 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.194252014 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.194281101 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.194348097 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.194539070 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.194552898 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.212783098 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.212817907 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.212882042 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.213009119 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.213027000 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.213203907 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.213218927 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.213237047 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.213377953 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.213392973 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.218266964 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.219696045 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.219753981 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.220139027 CEST	49897	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.220146894 CEST	443	49897	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.222364902 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.222378016 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.222450018 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.222624063 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.222637892 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.236329079 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.236474991 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.236650944 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.237003088 CEST	49899	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.237023115 CEST	443	49899	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.274198055 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.274466038 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.274494886 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.274987936 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.275283098 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.275368929 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.275409937 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.275965929 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.276344061 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.284740925 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.284934998 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.284948111 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.285809040 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.285866976 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.286142111 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.286190987 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.286287069 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.286293983 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.291330099 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.299463034 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.299598932 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.299681902 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:55.300290108 CEST	49902	443	192.168.2.6	151.101.193.140
Apr 29, 2024 22:13:55.300307035 CEST	443	49902	151.101.193.140	192.168.2.6
Apr 29, 2024 22:13:55.304423094 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.304440022 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.304594040 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.304779053 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.304790974 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.320110083 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.328109026 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.328315020 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.328340054 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.329339027 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.329402924 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.329843044 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.329909086 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.329977989 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.329988003 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.354557037 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.354598045 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.354675055 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.355429888 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.355472088 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.355539083 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.355691910 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.355705023 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.355819941 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.355835915 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.369874954 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.370110035 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.370135069 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.371509075 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.371575117 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.372596025 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.372665882 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.372850895 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.372864008 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.384412050 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.384711981 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.391390085 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.391470909 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.391525984 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.392021894 CEST	49900	443	192.168.2.6	104.244.42.5
Apr 29, 2024 22:13:55.392044067 CEST	443	49900	104.244.42.5	192.168.2.6
Apr 29, 2024 22:13:55.393326998 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.393363953 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.393467903 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.393830061 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.393841982 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.400016069 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.400834084 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.401060104 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.401132107 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.401603937 CEST	49905	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.401631117 CEST	443	49905	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.413203955 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413266897 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.413337946 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413393974 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413434982 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413449049 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.413464069 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413487911 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413520098 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.413527966 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.413572073 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.419235945 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.420234919 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.420244932 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.420989037 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.421057940 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.421078920 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.421135902 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.421192884 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.421520948 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.421572924 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.421684980 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.421690941 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.427637100 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.427696943 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.427719116 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.435184956 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.435240030 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.435249090 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.435421944 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.435467958 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.435475111 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.439347029 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.439661980 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.439685106 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.440080881 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.440140009 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.440701008 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.440824986 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.441837072 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.441921949 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.442058086 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.442069054 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.442929029 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.443003893 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.443011999 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.444858074 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.445116043 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.445128918 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.446429014 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.446496010 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.448265076 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.448331118 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.448690891 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.448750019 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.449013948 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.449021101 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.463041067 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.463116884 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.463138103 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.463162899 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.463218927 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.463896036 CEST	49907	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.463905096 CEST	443	49907	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.507707119 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.507725954 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.507935047 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.507950068 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.507955074 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.508740902 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.508852959 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.509823084 CEST	49908	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.509846926 CEST	443	49908	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.510683060 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.510705948 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.510792971 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.511044025 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.511054993 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.520874977 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.520895004 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.520894051 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.522751093 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.522808075 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.522861958 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.522880077 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.522922039 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.526650906 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.526712894 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.528065920 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528326035 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528366089 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528412104 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.528438091 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528480053 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528518915 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.528527021 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.528561115 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.528851986 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.528970957 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.529050112 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.529443979 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.531646967 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.531660080 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.532197952 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.534101009 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.534205914 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.534255028 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.534315109 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.534322977 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.534583092 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.534925938 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.539820910 CEST	49910	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.539841890 CEST	443	49910	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.542001009 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.542059898 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.542061090 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.542076111 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.542325020 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.544265985 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.544312000 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.544352055 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.544377089 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.544456959 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.545538902 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.545726061 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.545739889 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.546200991 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.546572924 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.546648979 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.547255039 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.549560070 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.549621105 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.549628019 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.549644947 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.549702883 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.550394058 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.557281017 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.557341099 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.557389021 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.557396889 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.558130980 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.558209896 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.558233023 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.562509060 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.562650919 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.562701941 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.563155890 CEST	49904	443	192.168.2.6	104.244.42.67
Apr 29, 2024 22:13:55.563174009 CEST	443	49904	104.244.42.67	192.168.2.6
Apr 29, 2024 22:13:55.565066099 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.565129042 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.565135956 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.572694063 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.572753906 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.572762012 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.572774887 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.572849989 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.572855949 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.579492092 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.579545021 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.579560995 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.580115080 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.581075907 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.581110001 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.581176043 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.581352949 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.581367016 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.584389925 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.584398031 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.584484100 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.584891081 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.584903955 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.586482048 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.586522102 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.586536884 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.586549997 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.586599112 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.589442015 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.589682102 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.589695930 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.591151953 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.591209888 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.592127085 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.592185020 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.592288971 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.592343092 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.592353106 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.593511105 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.593564987 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.593570948 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.594068050 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.594239950 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.594249964 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.595113993 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.595175028 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.595479965 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.595546007 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.595582008 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.600524902 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.600621939 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.600630999 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.603166103 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.603234053 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.603341103 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.603876114 CEST	49912	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.603900909 CEST	443	49912	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.607513905 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.607594967 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.607605934 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.610975981 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.611028910 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.611038923 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.618896008 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.619103909 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.619117975 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.620573997 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.620639086 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.620954037 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.621031046 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.621099949 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.621107101 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.621124029 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.632314920 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.632375956 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.632379055 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.632390976 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.632433891 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.635401011 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.635432005 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.635567904 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.635576963 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.636120081 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.637881041 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.637947083 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.637960911 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.641433001 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.641493082 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.641499996 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.641750097 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.641808033 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.641917944 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.641942978 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.641973972 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.641987085 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.642024994 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.642111063 CEST	49909	443	192.168.2.6	142.250.190.34
Apr 29, 2024 22:13:55.642115116 CEST	443	49909	142.250.190.34	192.168.2.6
Apr 29, 2024 22:13:55.645852089 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.645956039 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.646035910 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.647551060 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.647599936 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.647608042 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.647681952 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.647723913 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.650141001 CEST	49903	443	192.168.2.6	157.240.249.8
Apr 29, 2024 22:13:55.650152922 CEST	443	49903	157.240.249.8	192.168.2.6
Apr 29, 2024 22:13:55.655100107 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.655126095 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.655200005 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.656212091 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.656227112 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.664695024 CEST	49914	443	192.168.2.6	151.101.65.140
Apr 29, 2024 22:13:55.664714098 CEST	443	49914	151.101.65.140	192.168.2.6
Apr 29, 2024 22:13:55.668154001 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.678491116 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.678519011 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.678610086 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.678792953 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.678808928 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.697968006 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.697968006 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.697982073 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.697993040 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.748506069 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.748667002 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.749001026 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.749629974 CEST	49919	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.749650955 CEST	443	49919	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.769037008 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.769169092 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.769295931 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.769676924 CEST	49915	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:55.769694090 CEST	443	49915	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:55.776211977 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.776784897 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.776809931 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.777293921 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.777556896 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.777642965 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.777993917 CEST	49925	443	192.168.2.6	52.46.155.104
Apr 29, 2024 22:13:55.784779072 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.785073996 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785114050 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:55.785175085 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785347939 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785371065 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:55.785531044 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785609961 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785618067 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:55.785794020 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.785820007 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.785970926 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:55.785984039 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:55.786782026 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.786848068 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.787307978 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.787368059 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.787539005 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.787545919 CEST	443	49924	104.244.42.133	192.168.2.6
Apr 29, 2024 22:13:55.816247940 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.816474915 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.816500902 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.817929029 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.817984104 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.818358898 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.818427086 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.818521976 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.818528891 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:55.820704937 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.820888042 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.820904016 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.821737051 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.821754932 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.821806908 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.821809053 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.821847916 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.821861982 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.821976900 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.822022915 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.822141886 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.822191954 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.822376966 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.822382927 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:55.823278904 CEST	49917	443	192.168.2.6	142.250.191.134
Apr 29, 2024 22:13:55.823290110 CEST	443	49917	142.250.191.134	192.168.2.6
Apr 29, 2024 22:13:55.824110985 CEST	443	49925	52.46.155.104	192.168.2.6
Apr 29, 2024 22:13:55.830158949 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.830216885 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.830252886 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.830261946 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.830617905 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.830754042 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.854444027 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.854684114 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.854800940 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.855146885 CEST	49923	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.855159044 CEST	443	49923	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.870332003 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.870394945 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.870954990 CEST	49922	443	192.168.2.6	142.250.190.36
Apr 29, 2024 22:13:55.870968103 CEST	443	49922	142.250.190.36	192.168.2.6
Apr 29, 2024 22:13:55.876543045 CEST	49924	443	192.168.2.6	104.244.42.133
Apr 29, 2024 22:13:55.876753092 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:55.880675077 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.880877018 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.880886078 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.882314920 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.882371902 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.886189938 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.886264086 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.886701107 CEST	49934	443	192.168.2.6	151.101.0.84
Apr 29, 2024 22:13:55.886723042 CEST	443	49934	151.101.0.84	192.168.2.6
Apr 29, 2024 22:13:55.886818886 CEST	49934	443	192.168.2.6	151.101.0.84
Apr 29, 2024 22:13:55.888211012 CEST	49921	443	192.168.2.6	172.217.4.34
Apr 29, 2024 22:13:55.888226032 CEST	443	49921	172.217.4.34	192.168.2.6
Apr 29, 2024 22:13:55.888885021 CEST	49934	443	192.168.2.6	151.101.0.84
Apr 29, 2024 22:13:55.888900042 CEST	443	49934	151.101.0.84	192.168.2.6
Apr 29, 2024 22:13:55.889202118 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:55.889208078 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:55.892543077 CEST	49935	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.892576933 CEST	443	49935	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.892636061 CEST	49935	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.892921925 CEST	49935	443	192.168.2.6	142.250.190.4
Apr 29, 2024 22:13:55.892931938 CEST	443	49935	142.250.190.4	192.168.2.6
Apr 29, 2024 22:13:55.901106119 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:55.914974928 CEST	49936	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.914997101 CEST	443	49936	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.915071011 CEST	49936	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.915239096 CEST	49936	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.915247917 CEST	443	49936	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.955235004 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.955434084 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.955450058 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.956372976 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.956427097 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.957051992 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.957129002 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.957232952 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:55.957242012 CEST	443	49931	104.244.42.131	192.168.2.6
Apr 29, 2024 22:13:55.989691973 CEST	49937	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.989722013 CEST	443	49937	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.989799023 CEST	49937	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.990268946 CEST	49937	443	192.168.2.6	35.190.43.134
Apr 29, 2024 22:13:55.990281105 CEST	443	49937	35.190.43.134	192.168.2.6
Apr 29, 2024 22:13:55.993052006 CEST	49938	443	192.168.2.6	50.17.194.92
Apr 29, 2024 22:13:55.993092060 CEST	443	49938	50.17.194.92	192.168.2.6
Apr 29, 2024 22:13:55.993180037 CEST	49938	443	192.168.2.6	50.17.194.92
Apr 29, 2024 22:13:55.993366003 CEST	49938	443	192.168.2.6	50.17.194.92
Apr 29, 2024 22:13:55.993379116 CEST	443	49938	50.17.194.92	192.168.2.6
Apr 29, 2024 22:13:55.996582031 CEST	49939	443	192.168.2.6	142.250.191.162
Apr 29, 2024 22:13:55.996608973 CEST	443	49939	142.250.191.162	192.168.2.6
Apr 29, 2024 22:13:55.996743917 CEST	49939	443	192.168.2.6	142.250.191.162
Apr 29, 2024 22:13:55.997253895 CEST	49940	443	192.168.2.6	52.204.90.22
Apr 29, 2024 22:13:55.997261047 CEST	443	49940	52.204.90.22	192.168.2.6
Apr 29, 2024 22:13:55.997488976 CEST	49940	443	192.168.2.6	52.204.90.22
Apr 29, 2024 22:13:55.997781038 CEST	49941	443	192.168.2.6	68.67.160.75
Apr 29, 2024 22:13:55.997811079 CEST	443	49941	68.67.160.75	192.168.2.6
Apr 29, 2024 22:13:55.997859955 CEST	49941	443	192.168.2.6	68.67.160.75
Apr 29, 2024 22:13:55.998141050 CEST	49939	443	192.168.2.6	142.250.191.162
Apr 29, 2024 22:13:55.998153925 CEST	443	49939	142.250.191.162	192.168.2.6
Apr 29, 2024 22:13:55.998336077 CEST	49940	443	192.168.2.6	52.204.90.22
Apr 29, 2024 22:13:55.998347044 CEST	443	49940	52.204.90.22	192.168.2.6
Apr 29, 2024 22:13:55.998557091 CEST	49941	443	192.168.2.6	68.67.160.75
Apr 29, 2024 22:13:55.998573065 CEST	443	49941	68.67.160.75	192.168.2.6
Apr 29, 2024 22:13:55.999722958 CEST	49943	443	192.168.2.6	15.197.193.217
Apr 29, 2024 22:13:55.999744892 CEST	443	49943	15.197.193.217	192.168.2.6
Apr 29, 2024 22:13:55.999803066 CEST	49943	443	192.168.2.6	15.197.193.217
Apr 29, 2024 22:13:56.000056982 CEST	49943	443	192.168.2.6	15.197.193.217
Apr 29, 2024 22:13:56.000070095 CEST	443	49943	15.197.193.217	192.168.2.6
Apr 29, 2024 22:13:56.010221004 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.010447979 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.011590004 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.011605024 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.011933088 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.011944056 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.012499094 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.012562037 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.013499022 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.013559103 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.014173985 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.014240980 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.014503002 CEST	49932	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.014508963 CEST	443	49932	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.014749050 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.014832020 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.014934063 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.014941931 CEST	443	49933	157.240.254.35	192.168.2.6
Apr 29, 2024 22:13:56.038656950 CEST	49930	443	192.168.2.6	151.101.1.140
Apr 29, 2024 22:13:56.088426113 CEST	49931	443	192.168.2.6	104.244.42.131
Apr 29, 2024 22:13:56.088547945 CEST	49933	443	192.168.2.6	157.240.254.35
Apr 29, 2024 22:13:56.089149952 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:56.090287924 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:56.090329885 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:56.090708017 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:56.090722084 CEST	443	49929	142.250.190.38	192.168.2.6
Apr 29, 2024 22:13:56.090791941 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:56.090804100 CEST	49929	443	192.168.2.6	142.250.190.38
Apr 29, 2024 22:13:56.091456890 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:56.091511011 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:56.091520071 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:56.091612101 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:56.091670990 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:56.092742920 CEST	49928	443	192.168.2.6	142.250.190.134
Apr 29, 2024 22:13:56.092752934 CEST	443	49928	142.250.190.134	192.168.2.6
Apr 29, 2024 22:13:56.098932028 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:56.099025011 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:56.099081039 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:56.099848986 CEST	49916	443	192.168.2.6	151.101.128.84
Apr 29, 2024 22:13:56.099855900 CEST	443	49916	151.101.128.84	192.168.2.6
Apr 29, 2024 22:13:56.099932909 CEST	443	49930	151.101.1.140	192.168.2.6
Apr 29, 2024 22:13:56.099992037 CEST	443	49930	151.101.1.140	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 29, 2024 22:13:26.961920977 CEST	192.168.2.6	1.1.1.1	0xc085	Standard query (0)	uaqtu.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:26.962203979 CEST	192.168.2.6	1.1.1.1	0xf647	Standard query (0)	uaqtu.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:28.024688005 CEST	192.168.2.6	1.1.1.1	0xb817	Standard query (0)	usps.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:28.025036097 CEST	192.168.2.6	1.1.1.1	0xba6b	Standard query (0)	usps.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:28.663749933 CEST	192.168.2.6	1.1.1.1	0x8c58	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:28.663749933 CEST	192.168.2.6	1.1.1.1	0xf2f8	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:29.109224081 CEST	192.168.2.6	1.1.1.1	0xd5b4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:29.109719038 CEST	192.168.2.6	1.1.1.1	0x30c7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:35.307706118 CEST	192.168.2.6	1.1.1.1	0xe592	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:35.307841063 CEST	192.168.2.6	1.1.1.1	0x2ba3	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:36.399837971 CEST	192.168.2.6	1.1.1.1	0xed42	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:36.400192976 CEST	192.168.2.6	1.1.1.1	0xdb7c	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:47.006958008 CEST	192.168.2.6	1.1.1.1	0xf75	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:47.007376909 CEST	192.168.2.6	1.1.1.1	0x7680	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:52.101593971 CEST	192.168.2.6	1.1.1.1	0xde7a	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.101836920 CEST	192.168.2.6	1.1.1.1	0x19b2	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 29, 2024 22:13:52.708807945 CEST	192.168.2.6	1.1.1.1	0xcd2f	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.709322929 CEST	192.168.2.6	1.1.1.1	0xfe43	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:52.780129910 CEST	192.168.2.6	1.1.1.1	0xbbb1	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.780505896 CEST	192.168.2.6	1.1.1.1	0x24bc	Standard query (0)	trkn.us	65	IN (0x0001)	false
Apr 29, 2024 22:13:53.095765114 CEST	192.168.2.6	1.1.1.1	0xda73	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.096174955 CEST	192.168.2.6	1.1.1.1	0x218	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:53.610316038 CEST	192.168.2.6	1.1.1.1	0x8d9b	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.610508919 CEST	192.168.2.6	1.1.1.1	0x533	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:53.625252008 CEST	192.168.2.6	1.1.1.1	0xd0dc	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.625498056 CEST	192.168.2.6	1.1.1.1	0xfcb	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:53.642282009 CEST	192.168.2.6	1.1.1.1	0xbf1a	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.642632008 CEST	192.168.2.6	1.1.1.1	0xec17	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.040790081 CEST	192.168.2.6	1.1.1.1	0x2382	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.040998936 CEST	192.168.2.6	1.1.1.1	0x104a	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.041420937 CEST	192.168.2.6	1.1.1.1	0x9111	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.041625023 CEST	192.168.2.6	1.1.1.1	0xff65	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.054788113 CEST	192.168.2.6	1.1.1.1	0x761e	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.055063009 CEST	192.168.2.6	1.1.1.1	0xd359	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.247984886 CEST	192.168.2.6	1.1.1.1	0xb679	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.248333931 CEST	192.168.2.6	1.1.1.1	0x74b6	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.252345085 CEST	192.168.2.6	1.1.1.1	0xcbb0	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.252486944 CEST	192.168.2.6	1.1.1.1	0x1053	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.316415071 CEST	192.168.2.6	1.1.1.1	0x80de	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.316560984 CEST	192.168.2.6	1.1.1.1	0x6068	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.357160091 CEST	192.168.2.6	1.1.1.1	0x5728	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.357285023 CEST	192.168.2.6	1.1.1.1	0x5162	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.376092911 CEST	192.168.2.6	1.1.1.1	0x3d72	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.376324892 CEST	192.168.2.6	1.1.1.1	0x6566	Standard query (0)	trkn.us	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.530400991 CEST	192.168.2.6	1.1.1.1	0x780a	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.530559063 CEST	192.168.2.6	1.1.1.1	0x4538	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.553864002 CEST	192.168.2.6	1.1.1.1	0x219d	Standard query (0)	3976941.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.554260969 CEST	192.168.2.6	1.1.1.1	0x2b42	Standard query (0)	3976941.fls.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.562123060 CEST	192.168.2.6	1.1.1.1	0xace5	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.562378883 CEST	192.168.2.6	1.1.1.1	0x98db	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.611799955 CEST	192.168.2.6	1.1.1.1	0x19e3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.611955881 CEST	192.168.2.6	1.1.1.1	0x2478	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.671525002 CEST	192.168.2.6	1.1.1.1	0xfdf2	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.671664953 CEST	192.168.2.6	1.1.1.1	0x7e67	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.672043085 CEST	192.168.2.6	1.1.1.1	0xa0a6	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.672153950 CEST	192.168.2.6	1.1.1.1	0xe173	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.766964912 CEST	192.168.2.6	1.1.1.1	0x2af7	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.767083883 CEST	192.168.2.6	1.1.1.1	0x2a27	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.800556898 CEST	192.168.2.6	1.1.1.1	0xa9b6	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.800865889 CEST	192.168.2.6	1.1.1.1	0xfdea	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.841460943 CEST	192.168.2.6	1.1.1.1	0x6b45	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.841711044 CEST	192.168.2.6	1.1.1.1	0xa298	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.850769043 CEST	192.168.2.6	1.1.1.1	0x961c	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.850992918 CEST	192.168.2.6	1.1.1.1	0x1216	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.943942070 CEST	192.168.2.6	1.1.1.1	0x6cfd	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.944071054 CEST	192.168.2.6	1.1.1.1	0x289b	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:54.989670992 CEST	192.168.2.6	1.1.1.1	0xb41d	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.989799023 CEST	192.168.2.6	1.1.1.1	0x8962	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.082134008 CEST	192.168.2.6	1.1.1.1	0xe174	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.082389116 CEST	192.168.2.6	1.1.1.1	0xcf0e	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.100317955 CEST	192.168.2.6	1.1.1.1	0x2548	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100481987 CEST	192.168.2.6	1.1.1.1	0x30b4	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.195480108 CEST	192.168.2.6	1.1.1.1	0xcd00	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.195832014 CEST	192.168.2.6	1.1.1.1	0x7209	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.239794970 CEST	192.168.2.6	1.1.1.1	0xfd17	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.239964008 CEST	192.168.2.6	1.1.1.1	0x902b	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.240809917 CEST	192.168.2.6	1.1.1.1	0x2d62	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.241128922 CEST	192.168.2.6	1.1.1.1	0x509f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.396109104 CEST	192.168.2.6	1.1.1.1	0x5749	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.396260023 CEST	192.168.2.6	1.1.1.1	0x4cbc	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.423635006 CEST	192.168.2.6	1.1.1.1	0xe28	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.423810005 CEST	192.168.2.6	1.1.1.1	0x4504	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.468288898 CEST	192.168.2.6	1.1.1.1	0x1767	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.468436956 CEST	192.168.2.6	1.1.1.1	0x9a3d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.472405910 CEST	192.168.2.6	1.1.1.1	0x1b3d	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.472539902 CEST	192.168.2.6	1.1.1.1	0x1e1f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.541112900 CEST	192.168.2.6	1.1.1.1	0x81ce	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.541352987 CEST	192.168.2.6	1.1.1.1	0xa784	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.566556931 CEST	192.168.2.6	1.1.1.1	0xf29f	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.566709995 CEST	192.168.2.6	1.1.1.1	0xe098	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.672844887 CEST	192.168.2.6	1.1.1.1	0xfe35	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.673113108 CEST	192.168.2.6	1.1.1.1	0xa6fc	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.772449970 CEST	192.168.2.6	1.1.1.1	0x4b12	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.772842884 CEST	192.168.2.6	1.1.1.1	0x3ccf	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.803312063 CEST	192.168.2.6	1.1.1.1	0x526d	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.803493023 CEST	192.168.2.6	1.1.1.1	0xd2ae	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.881567001 CEST	192.168.2.6	1.1.1.1	0xbc52	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.881772041 CEST	192.168.2.6	1.1.1.1	0xbefd	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.882103920 CEST	192.168.2.6	1.1.1.1	0x16be	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882237911 CEST	192.168.2.6	1.1.1.1	0x8d57	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.882729053 CEST	192.168.2.6	1.1.1.1	0x612e	Standard query (0)	urldefense.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882848978 CEST	192.168.2.6	1.1.1.1	0xf68b	Standard query (0)	urldefense.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.883240938 CEST	192.168.2.6	1.1.1.1	0xcc76	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883399010 CEST	192.168.2.6	1.1.1.1	0x8764	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.883758068 CEST	192.168.2.6	1.1.1.1	0x61b9	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883889914 CEST	192.168.2.6	1.1.1.1	0x43ee	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:55.884378910 CEST	192.168.2.6	1.1.1.1	0x475b	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.884510040 CEST	192.168.2.6	1.1.1.1	0x5fd6	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.083550930 CEST	192.168.2.6	1.1.1.1	0x1478	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.083724976 CEST	192.168.2.6	1.1.1.1	0xb5b2	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.116960049 CEST	192.168.2.6	1.1.1.1	0xb953	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.117090940 CEST	192.168.2.6	1.1.1.1	0x5573	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.125144958 CEST	192.168.2.6	1.1.1.1	0xc2a2	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.125266075 CEST	192.168.2.6	1.1.1.1	0x3f5b	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.250394106 CEST	192.168.2.6	1.1.1.1	0xdcc4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.250590086 CEST	192.168.2.6	1.1.1.1	0x47d1	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.506704092 CEST	192.168.2.6	1.1.1.1	0xe7b3	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.506836891 CEST	192.168.2.6	1.1.1.1	0x4a58	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.542102098 CEST	192.168.2.6	1.1.1.1	0xc04c	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.542239904 CEST	192.168.2.6	1.1.1.1	0x441d	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.543766022 CEST	192.168.2.6	1.1.1.1	0x9b12	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.543910980 CEST	192.168.2.6	1.1.1.1	0x7806	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.551646948 CEST	192.168.2.6	1.1.1.1	0x1749	Standard query (0)	getrockerbox.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.551784039 CEST	192.168.2.6	1.1.1.1	0x76df	Standard query (0)	getrockerbox.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.553091049 CEST	192.168.2.6	1.1.1.1	0x9613	Standard query (0)	storage.cloud.kargo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.553291082 CEST	192.168.2.6	1.1.1.1	0xd225	Standard query (0)	storage.cloud.kargo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:56.707067966 CEST	192.168.2.6	1.1.1.1	0xf5f6	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.707190037 CEST	192.168.2.6	1.1.1.1	0xa86a	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 29, 2024 22:13:57.650531054 CEST	192.168.2.6	1.1.1.1	0x9910	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.650820971 CEST	192.168.2.6	1.1.1.1	0xefe	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:57.678210974 CEST	192.168.2.6	1.1.1.1	0x77fc	Standard query (0)	kds-pixel.kargo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.678579092 CEST	192.168.2.6	1.1.1.1	0xcb87	Standard query (0)	kds-pixel.kargo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:57.693352938 CEST	192.168.2.6	1.1.1.1	0xbb66	Standard query (0)	storage.cloud.kargo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.693989038 CEST	192.168.2.6	1.1.1.1	0x99da	Standard query (0)	storage.cloud.kargo.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:58.334333897 CEST	192.168.2.6	1.1.1.1	0xcebb	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.334450006 CEST	192.168.2.6	1.1.1.1	0xb70b	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 29, 2024 22:13:58.770642042 CEST	192.168.2.6	1.1.1.1	0x6133	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.771356106 CEST	192.168.2.6	1.1.1.1	0xb429	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 29, 2024 22:14:00.305587053 CEST	192.168.2.6	1.1.1.1	0x4578	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.305711985 CEST	192.168.2.6	1.1.1.1	0x512b	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 29, 2024 22:14:00.478960037 CEST	192.168.2.6	1.1.1.1	0xc8d2	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.479331017 CEST	192.168.2.6	1.1.1.1	0xe0a0	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 29, 2024 22:14:33.087949991 CEST	192.168.2.6	1.1.1.1	0x9cd5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:33.091595888 CEST	192.168.2.6	1.1.1.1	0x9f6c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 29, 2024 22:13:27.468668938 CEST	1.1.1.1	192.168.2.6	0xc085	No error (0)	uaqtu.com		47.90.176.105	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:28.135996103 CEST	1.1.1.1	192.168.2.6	0xb817	No error (0)	usps.com		56.0.134.100	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:28.775000095 CEST	1.1.1.1	192.168.2.6	0x8c58	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:28.775000095 CEST	1.1.1.1	192.168.2.6	0x8c58	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:28.775883913 CEST	1.1.1.1	192.168.2.6	0xf2f8	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:29.220264912 CEST	1.1.1.1	192.168.2.6	0x30c7	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:29.220760107 CEST	1.1.1.1	192.168.2.6	0xd5b4	No error (0)	www.google.com		142.250.190.36	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:35.419179916 CEST	1.1.1.1	192.168.2.6	0xe592	No error (0)	www.googleoptimize.com		172.217.0.174	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:36.510394096 CEST	1.1.1.1	192.168.2.6	0xdb7c	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:36.511197090 CEST	1.1.1.1	192.168.2.6	0xed42	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:36.511197090 CEST	1.1.1.1	192.168.2.6	0xed42	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:39.751935005 CEST	1.1.1.1	192.168.2.6	0x696e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:39.751935005 CEST	1.1.1.1	192.168.2.6	0x696e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:40.343914032 CEST	1.1.1.1	192.168.2.6	0x3bce	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:40.343914032 CEST	1.1.1.1	192.168.2.6	0x3bce	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:47.118115902 CEST	1.1.1.1	192.168.2.6	0xf75	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:47.118115902 CEST	1.1.1.1	192.168.2.6	0xf75	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:47.119342089 CEST	1.1.1.1	192.168.2.6	0x7680	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Apr 29, 2024 22:13:52.213845968 CEST	1.1.1.1	192.168.2.6	0x19b2	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:52.214472055 CEST	1.1.1.1	192.168.2.6	0xde7a	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:52.214472055 CEST	1.1.1.1	192.168.2.6	0xde7a	No error (0)	d27f3qgc9anoq2.cloudfront.net		65.8.49.32	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.214472055 CEST	1.1.1.1	192.168.2.6	0xde7a	No error (0)	d27f3qgc9anoq2.cloudfront.net		65.8.49.6	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.214472055 CEST	1.1.1.1	192.168.2.6	0xde7a	No error (0)	d27f3qgc9anoq2.cloudfront.net		65.8.49.64	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.214472055 CEST	1.1.1.1	192.168.2.6	0xde7a	No error (0)	d27f3qgc9anoq2.cloudfront.net		65.8.49.74	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.819726944 CEST	1.1.1.1	192.168.2.6	0xfe43	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:52.820854902 CEST	1.1.1.1	192.168.2.6	0xcd2f	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:52.893707037 CEST	1.1.1.1	192.168.2.6	0xbbb1	No error (0)	trkn.us		23.205.89.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:52.893707037 CEST	1.1.1.1	192.168.2.6	0xbbb1	No error (0)	trkn.us		23.205.89.136	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.207334042 CEST	1.1.1.1	192.168.2.6	0xda73	No error (0)	stats.g.doubleclick.net		142.251.4.157	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.207334042 CEST	1.1.1.1	192.168.2.6	0xda73	No error (0)	stats.g.doubleclick.net		142.251.4.155	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.207334042 CEST	1.1.1.1	192.168.2.6	0xda73	No error (0)	stats.g.doubleclick.net		142.251.4.156	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.207334042 CEST	1.1.1.1	192.168.2.6	0xda73	No error (0)	stats.g.doubleclick.net		142.251.4.154	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.721432924 CEST	1.1.1.1	192.168.2.6	0x533	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.721709967 CEST	1.1.1.1	192.168.2.6	0x8d9b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.721709967 CEST	1.1.1.1	192.168.2.6	0x8d9b	No error (0)	scontent.xx.fbcdn.net		157.240.249.8	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.735564947 CEST	1.1.1.1	192.168.2.6	0xd0dc	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.735564947 CEST	1.1.1.1	192.168.2.6	0xd0dc	No error (0)	platform.twitter.map.fastly.net		146.75.80.157	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.738002062 CEST	1.1.1.1	192.168.2.6	0xfcb	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.753619909 CEST	1.1.1.1	192.168.2.6	0xbf1a	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.753619909 CEST	1.1.1.1	192.168.2.6	0xbf1a	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.753619909 CEST	1.1.1.1	192.168.2.6	0xbf1a	No error (0)	dualstack.pinterest.map.fastly.net		146.75.80.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:53.754209995 CEST	1.1.1.1	192.168.2.6	0xec17	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:53.754209995 CEST	1.1.1.1	192.168.2.6	0xec17	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152439117 CEST	1.1.1.1	192.168.2.6	0x2382	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152439117 CEST	1.1.1.1	192.168.2.6	0x2382	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152439117 CEST	1.1.1.1	192.168.2.6	0x2382	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152439117 CEST	1.1.1.1	192.168.2.6	0x2382	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152439117 CEST	1.1.1.1	192.168.2.6	0x2382	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.152569056 CEST	1.1.1.1	192.168.2.6	0x9111	No error (0)	sc-static.net		18.160.218.246	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.153944969 CEST	1.1.1.1	192.168.2.6	0x104a	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.165143967 CEST	1.1.1.1	192.168.2.6	0x761e	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.166286945 CEST	1.1.1.1	192.168.2.6	0xd359	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.358932972 CEST	1.1.1.1	192.168.2.6	0x74b6	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.359222889 CEST	1.1.1.1	192.168.2.6	0xb679	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.359222889 CEST	1.1.1.1	192.168.2.6	0xb679	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.160.235.239	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.362867117 CEST	1.1.1.1	192.168.2.6	0x1053	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.363990068 CEST	1.1.1.1	192.168.2.6	0xcbb0	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.363990068 CEST	1.1.1.1	192.168.2.6	0xcbb0	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.135.121	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.428389072 CEST	1.1.1.1	192.168.2.6	0x80de	No error (0)	stats.g.doubleclick.net		142.250.112.154	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.428389072 CEST	1.1.1.1	192.168.2.6	0x80de	No error (0)	stats.g.doubleclick.net		142.250.112.156	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.428389072 CEST	1.1.1.1	192.168.2.6	0x80de	No error (0)	stats.g.doubleclick.net		142.250.112.157	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.428389072 CEST	1.1.1.1	192.168.2.6	0x80de	No error (0)	stats.g.doubleclick.net		142.250.112.155	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.467356920 CEST	1.1.1.1	192.168.2.6	0x5728	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.467356920 CEST	1.1.1.1	192.168.2.6	0x5728	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.467356920 CEST	1.1.1.1	192.168.2.6	0x5728	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.467356920 CEST	1.1.1.1	192.168.2.6	0x5728	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.467356920 CEST	1.1.1.1	192.168.2.6	0x5728	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.468692064 CEST	1.1.1.1	192.168.2.6	0x5162	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.489381075 CEST	1.1.1.1	192.168.2.6	0x3d72	No error (0)	trkn.us		23.205.89.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.489381075 CEST	1.1.1.1	192.168.2.6	0x3d72	No error (0)	trkn.us		23.205.89.136	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.641252041 CEST	1.1.1.1	192.168.2.6	0x780a	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.642342091 CEST	1.1.1.1	192.168.2.6	0x4538	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.666341066 CEST	1.1.1.1	192.168.2.6	0x219d	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.666341066 CEST	1.1.1.1	192.168.2.6	0x219d	No error (0)	dart.l.doubleclick.net		142.250.191.134	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.669173956 CEST	1.1.1.1	192.168.2.6	0x2b42	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.672684908 CEST	1.1.1.1	192.168.2.6	0xace5	No error (0)	td.doubleclick.net		142.250.190.34	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.727328062 CEST	1.1.1.1	192.168.2.6	0x2478	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:54.727349043 CEST	1.1.1.1	192.168.2.6	0x19e3	No error (0)	www.google.com		142.250.190.4	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.781910896 CEST	1.1.1.1	192.168.2.6	0xfdf2	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.783149958 CEST	1.1.1.1	192.168.2.6	0xe173	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.783149958 CEST	1.1.1.1	192.168.2.6	0xe173	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.783965111 CEST	1.1.1.1	192.168.2.6	0xa0a6	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.783965111 CEST	1.1.1.1	192.168.2.6	0xa0a6	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.881625891 CEST	1.1.1.1	192.168.2.6	0x2af7	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.881625891 CEST	1.1.1.1	192.168.2.6	0x2af7	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.881625891 CEST	1.1.1.1	192.168.2.6	0x2af7	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.881948948 CEST	1.1.1.1	192.168.2.6	0x2a27	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.881948948 CEST	1.1.1.1	192.168.2.6	0x2a27	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.911521912 CEST	1.1.1.1	192.168.2.6	0xa9b6	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.911521912 CEST	1.1.1.1	192.168.2.6	0xa9b6	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.911521912 CEST	1.1.1.1	192.168.2.6	0xa9b6	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.911839962 CEST	1.1.1.1	192.168.2.6	0xfdea	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.911839962 CEST	1.1.1.1	192.168.2.6	0xfdea	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:54.952440977 CEST	1.1.1.1	192.168.2.6	0x6b45	No error (0)	ad.doubleclick.net		142.250.190.38	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:54.952495098 CEST	1.1.1.1	192.168.2.6	0xa298	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 29, 2024 22:13:54.961828947 CEST	1.1.1.1	192.168.2.6	0x961c	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.056830883 CEST	1.1.1.1	192.168.2.6	0x6cfd	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.056830883 CEST	1.1.1.1	192.168.2.6	0x6cfd	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.056830883 CEST	1.1.1.1	192.168.2.6	0x6cfd	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.056830883 CEST	1.1.1.1	192.168.2.6	0x6cfd	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.056830883 CEST	1.1.1.1	192.168.2.6	0x6cfd	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.057409048 CEST	1.1.1.1	192.168.2.6	0x289b	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100634098 CEST	1.1.1.1	192.168.2.6	0x8962	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100634098 CEST	1.1.1.1	192.168.2.6	0x8962	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100689888 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100689888 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.100689888 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193403959 CEST	1.1.1.1	192.168.2.6	0xe174	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193403959 CEST	1.1.1.1	192.168.2.6	0xe174	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193403959 CEST	1.1.1.1	192.168.2.6	0xe174	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193403959 CEST	1.1.1.1	192.168.2.6	0xe174	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193403959 CEST	1.1.1.1	192.168.2.6	0xe174	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.193536043 CEST	1.1.1.1	192.168.2.6	0xcf0e	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.210980892 CEST	1.1.1.1	192.168.2.6	0x2548	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.212333918 CEST	1.1.1.1	192.168.2.6	0x30b4	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.212333918 CEST	1.1.1.1	192.168.2.6	0x30b4	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.212333918 CEST	1.1.1.1	192.168.2.6	0x30b4	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.307385921 CEST	1.1.1.1	192.168.2.6	0xcd00	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.314280987 CEST	1.1.1.1	192.168.2.6	0x7209	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.353276968 CEST	1.1.1.1	192.168.2.6	0x902b	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 29, 2024 22:13:55.353565931 CEST	1.1.1.1	192.168.2.6	0xfd17	No error (0)	googleads.g.doubleclick.net		172.217.4.34	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.354650974 CEST	1.1.1.1	192.168.2.6	0x2d62	No error (0)	www.google.com		142.250.190.36	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.354769945 CEST	1.1.1.1	192.168.2.6	0x509f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:55.507210016 CEST	1.1.1.1	192.168.2.6	0x5749	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.534389019 CEST	1.1.1.1	192.168.2.6	0xe28	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.534389019 CEST	1.1.1.1	192.168.2.6	0xe28	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.534677029 CEST	1.1.1.1	192.168.2.6	0x4504	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.534677029 CEST	1.1.1.1	192.168.2.6	0x4504	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.579245090 CEST	1.1.1.1	192.168.2.6	0x9a3d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 29, 2024 22:13:55.580671072 CEST	1.1.1.1	192.168.2.6	0x1767	No error (0)	ad.doubleclick.net		142.250.190.134	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.583261967 CEST	1.1.1.1	192.168.2.6	0x1e1f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 29, 2024 22:13:55.584007025 CEST	1.1.1.1	192.168.2.6	0x1b3d	No error (0)	ad.doubleclick.net		142.250.190.38	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.652918100 CEST	1.1.1.1	192.168.2.6	0x81ce	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.652918100 CEST	1.1.1.1	192.168.2.6	0x81ce	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.652918100 CEST	1.1.1.1	192.168.2.6	0x81ce	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.652918100 CEST	1.1.1.1	192.168.2.6	0x81ce	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.652918100 CEST	1.1.1.1	192.168.2.6	0x81ce	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.653949022 CEST	1.1.1.1	192.168.2.6	0xa784	No error (0)	w3-reporting-nel.reddit.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.676635027 CEST	1.1.1.1	192.168.2.6	0xf29f	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.676635027 CEST	1.1.1.1	192.168.2.6	0xf29f	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.676635027 CEST	1.1.1.1	192.168.2.6	0xf29f	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.678093910 CEST	1.1.1.1	192.168.2.6	0xe098	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.678093910 CEST	1.1.1.1	192.168.2.6	0xe098	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.784157991 CEST	1.1.1.1	192.168.2.6	0xfe35	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.784157991 CEST	1.1.1.1	192.168.2.6	0xfe35	No error (0)	star-mini.c10r.facebook.com		157.240.254.35	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.784459114 CEST	1.1.1.1	192.168.2.6	0xa6fc	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.882924080 CEST	1.1.1.1	192.168.2.6	0x4b12	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883915901 CEST	1.1.1.1	192.168.2.6	0x3ccf	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883915901 CEST	1.1.1.1	192.168.2.6	0x3ccf	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883915901 CEST	1.1.1.1	192.168.2.6	0x3ccf	No error (0)	www-pinterest-com.gslb.pinterest.com	www.gslb.pinterest.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.883915901 CEST	1.1.1.1	192.168.2.6	0x3ccf	No error (0)	www.gslb.pinterest.net	prod.pinterest.global.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.913605928 CEST	1.1.1.1	192.168.2.6	0x526d	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.913605928 CEST	1.1.1.1	192.168.2.6	0x526d	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.914638996 CEST	1.1.1.1	192.168.2.6	0xd2ae	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.992322922 CEST	1.1.1.1	192.168.2.6	0xbefd	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.992608070 CEST	1.1.1.1	192.168.2.6	0xbc52	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.992608070 CEST	1.1.1.1	192.168.2.6	0xbc52	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.992608070 CEST	1.1.1.1	192.168.2.6	0xbc52	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993141890 CEST	1.1.1.1	192.168.2.6	0x16be	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993141890 CEST	1.1.1.1	192.168.2.6	0x16be	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993141890 CEST	1.1.1.1	192.168.2.6	0x16be	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993141890 CEST	1.1.1.1	192.168.2.6	0x16be	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993390083 CEST	1.1.1.1	192.168.2.6	0x612e	No error (0)	urldefense.com		52.204.90.22	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993390083 CEST	1.1.1.1	192.168.2.6	0x612e	No error (0)	urldefense.com		52.6.56.188	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.993390083 CEST	1.1.1.1	192.168.2.6	0x612e	No error (0)	urldefense.com		52.71.28.102	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994396925 CEST	1.1.1.1	192.168.2.6	0xcc76	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994415998 CEST	1.1.1.1	192.168.2.6	0x43ee	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:55.994844913 CEST	1.1.1.1	192.168.2.6	0x5fd6	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:55.995687962 CEST	1.1.1.1	192.168.2.6	0x475b	No error (0)	adservice.google.com		142.250.191.162	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:55.997571945 CEST	1.1.1.1	192.168.2.6	0x61b9	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.045116901 CEST	1.1.1.1	192.168.2.6	0x3970	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.045116901 CEST	1.1.1.1	192.168.2.6	0x3970	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.194220066 CEST	1.1.1.1	192.168.2.6	0xb5b2	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.194220066 CEST	1.1.1.1	192.168.2.6	0xb5b2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.194669962 CEST	1.1.1.1	192.168.2.6	0x1478	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.194669962 CEST	1.1.1.1	192.168.2.6	0x1478	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.230303049 CEST	1.1.1.1	192.168.2.6	0xb953	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.31	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.230303049 CEST	1.1.1.1	192.168.2.6	0xb953	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.33	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.230303049 CEST	1.1.1.1	192.168.2.6	0xb953	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.96	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.230303049 CEST	1.1.1.1	192.168.2.6	0xb953	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.105	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.237159014 CEST	1.1.1.1	192.168.2.6	0xc2a2	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.361844063 CEST	1.1.1.1	192.168.2.6	0xdcc4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.361844063 CEST	1.1.1.1	192.168.2.6	0xdcc4	No error (0)	star-mini.c10r.facebook.com		157.240.254.35	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.361963987 CEST	1.1.1.1	192.168.2.6	0x47d1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.617337942 CEST	1.1.1.1	192.168.2.6	0x4a58	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:56.617739916 CEST	1.1.1.1	192.168.2.6	0xe7b3	No error (0)	adservice.google.com		172.217.4.194	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.652343988 CEST	1.1.1.1	192.168.2.6	0x441d	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.652465105 CEST	1.1.1.1	192.168.2.6	0xc04c	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.652465105 CEST	1.1.1.1	192.168.2.6	0xc04c	No error (0)	spdc-global.pbp.gysm.yahoodns.net		54.88.71.74	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.652465105 CEST	1.1.1.1	192.168.2.6	0xc04c	No error (0)	spdc-global.pbp.gysm.yahoodns.net		50.17.194.92	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.654951096 CEST	1.1.1.1	192.168.2.6	0x9b12	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.654951096 CEST	1.1.1.1	192.168.2.6	0x9b12	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.654951096 CEST	1.1.1.1	192.168.2.6	0x9b12	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.654951096 CEST	1.1.1.1	192.168.2.6	0x9b12	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.663041115 CEST	1.1.1.1	192.168.2.6	0x1749	No error (0)	getrockerbox.com		104.26.9.177	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.663041115 CEST	1.1.1.1	192.168.2.6	0x1749	No error (0)	getrockerbox.com		172.67.71.65	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.663041115 CEST	1.1.1.1	192.168.2.6	0x1749	No error (0)	getrockerbox.com		104.26.8.177	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.663211107 CEST	1.1.1.1	192.168.2.6	0xd225	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.663516045 CEST	1.1.1.1	192.168.2.6	0x76df	No error (0)	getrockerbox.com			65	IN (0x0001)	false
Apr 29, 2024 22:13:56.665901899 CEST	1.1.1.1	192.168.2.6	0x9613	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:56.819554090 CEST	1.1.1.1	192.168.2.6	0xf5f6	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.96	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.819554090 CEST	1.1.1.1	192.168.2.6	0xf5f6	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.31	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.819554090 CEST	1.1.1.1	192.168.2.6	0xf5f6	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.105	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:56.819554090 CEST	1.1.1.1	192.168.2.6	0xf5f6	No error (0)	ara.paa-reporting-advertising.amazon		52.84.18.33	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		52.3.237.106	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.761153936 CEST	1.1.1.1	192.168.2.6	0x9910	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.792560101 CEST	1.1.1.1	192.168.2.6	0x77fc	No error (0)	kds-pixel.kargo.com		3.225.229.68	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.792560101 CEST	1.1.1.1	192.168.2.6	0x77fc	No error (0)	kds-pixel.kargo.com		54.159.173.72	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:57.805013895 CEST	1.1.1.1	192.168.2.6	0x99da	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:57.805152893 CEST	1.1.1.1	192.168.2.6	0xbb66	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:58.444786072 CEST	1.1.1.1	192.168.2.6	0xcebb	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:13:58.881644964 CEST	1.1.1.1	192.168.2.6	0x6133	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.416120052 CEST	1.1.1.1	192.168.2.6	0x512b	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.416120052 CEST	1.1.1.1	192.168.2.6	0x512b	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.416120052 CEST	1.1.1.1	192.168.2.6	0x512b	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.417787075 CEST	1.1.1.1	192.168.2.6	0x4578	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		52.3.237.106	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:00.591689110 CEST	1.1.1.1	192.168.2.6	0xc8d2	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:21.311523914 CEST	1.1.1.1	192.168.2.6	0xeef	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 29, 2024 22:14:21.311523914 CEST	1.1.1.1	192.168.2.6	0xeef	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:33.198266983 CEST	1.1.1.1	192.168.2.6	0x9cd5	No error (0)	ad.doubleclick.net		172.217.0.166	A (IP address)	IN (0x0001)	false
Apr 29, 2024 22:14:33.201755047 CEST	1.1.1.1	192.168.2.6	0x9f6c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49706	47.90.176.105	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:27 UTC	652	OUT	GET / HTTP/1.1 Host: uaqtu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:28 UTC	403	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 29 Apr 2024 20:13:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c9rja23pccn9gl9um0742qj10h; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache location: https://usps.com/ Strict-Transport-Security: max-age=31536000
2024-04-29 20:13:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49708	56.0.134.100	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:28 UTC	651	OUT	GET / HTTP/1.1 Host: usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:28 UTC	150	IN	HTTP/1.1 301 MOVED PERMANENTLY Location: https://www.usps.com/ Strict-Transport-Security: max-age=31536000;includeSubDomains Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49709	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:29 UTC	655	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:29 UTC	1094	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 1034 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Mon, 29 Apr 2024 20:13:29 GMT Last-Modified: Mon, 29 Apr 2024 19:56:15 GMT Server: ECAcc (chd/0796) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 92604 Connection: close
2024-04-29 20:13:29 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 6f 70 74 69 6d 69 7a 65 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 2e 6a 73 3f 69 64 3d 47 54 4d 2d 54 33 35 4e 39 52 4c 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 Data Ascii: <!DOCTYPE html><html lang="en"><head> <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><meta http-equiv="X-UA-Compatible" content="I
2024-04-29 20:13:29 UTC	1	IN	Data Raw: 54 Data Ascii: T
2024-04-29 20:13:29 UTC	16383	IN	Data Raw: 72 61 63 6b 69 6e 67 20 4e 75 6d 62 65 72 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 2d 74 72 61 63 6b 2d 69 6e 70 75 74 20 69 6e 70 75 74 2d 2d 66 69 65 6c 64 20 71 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 22 20 69 64 3d 22 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 2d 6d 61 69 6c 2d 73 68 69 70 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 35 36 22 20 6e 61 6d 65 3d 22 71 22 20 74 79 70 65 3d 22 74 65 78 74 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 75 74 6f 63 6f 72 72 65 63 74 22 3e 3c 75 6c 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 69 6e 70 75 74 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 22 Data Ascii: racking Number" class="search--track-input input--field q global-header--search-track" id="global-header--search-track-mail-ship" maxlength="256" name="q" type="text"><div class="autocorrect"><ul></ul></div><input tabindex="-1" value="Search"
2024-04-29 20:13:29 UTC	16383	IN	Data Raw: 65 61 72 63 68 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 73 65 61 72 63 68 22 3e 0d 0a 09 09 3c 73 70 61 6e 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 2d 77 72 61 70 22 3e 0d 0a 09 09 09 3c 6c 61 62 65 6c 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 22 20 20 66 6f 72 3d 22 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 3e 53 65 61 72 63 68 20 55 53 50 53 2e 63 6f 6d 3c 2f 6c 61 62 65 6c 3e 0d 0a 09 09 09 3c 69 6e 70 75 74 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 Data Ascii: earch" action="https://www.usps.com/search"><span tabindex="-1" aria-hidden="false" class="input--wrap"><label tabindex="-1" class="visuallyhidden" for="global-header--search-track-international">Search USPS.com</label><input tabindex="-1"
2024-04-29 20:13:29 UTC	16383	IN	Data Raw: 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 09 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 61 64 64 65 64 2d 6c 69 6e 6b 20 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 0d 0a 7d 0d 0a 2e 61 64 64 65 64 2d 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b Data Ascii: sition: absolute;top: 10px;transition: transform 0.2s ease-out;}} .added-link a {text-decoration:underline;color:#337ab7;}.added-link a:hover {text-decoration:none;color:#337ab7;
2024-04-29 20:13:29 UTC	16383	IN	Data Raw: 6e 65 22 3e 53 63 68 65 64 75 6c 65 20 61 20 70 69 63 6b 75 70 20 6f 6e 6c 69 6e 65 2c 20 70 6c 61 63 65 20 79 6f 75 72 20 55 53 50 53 20 70 61 63 6b 61 67 65 73 20 6f 6e 20 79 6f 75 72 20 64 6f 6f 72 73 74 65 70 2c 20 61 6e 64 20 77 65 27 6c 6c 20 63 6f 6d 65 20 70 69 63 6b 20 74 68 65 6d 20 75 70 20 66 6f 72 20 66 72 65 65 20 64 75 72 69 6e 67 20 72 65 67 75 6c 61 72 20 64 65 6c 69 76 65 72 79 2e 3c 2f 70 3e 0d 0a 0d 0a 09 09 09 3c 70 3e 0d 0a 09 09 09 09 3c 61 20 64 61 74 61 2d 67 74 6d 2d 73 65 63 74 69 6f 6e 3d 22 66 65 61 74 75 72 65 64 2d 75 73 70 73 22 20 64 61 74 61 2d 67 74 6d 2d 73 75 62 73 65 63 74 69 6f 6e 3d 22 70 61 63 6b 61 67 65 2d 70 69 63 6b 75 70 22 20 64 61 74 61 2d 67 74 6d 2d 6c 61 62 65 6c 3d 22 67 6f 2d 6e 6f 77 22 20 68 72 65 66 Data Ascii: ne">Schedule a pickup online, place your USPS packages on your doorstep, and we'll come pick them up for free during regular delivery.</p><p><a data-gtm-section="featured-usps" data-gtm-subsection="package-pickup" data-gtm-label="go-now" href
2024-04-29 20:13:29 UTC	10688	IN	Data Raw: 72 69 70 74 3e 20 55 53 50 53 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 3c 2f 64 69 76 3e 0d 0a 09 09 0d 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 73 6f 63 69 61 6c 22 3e 0d 0a 3c 6c 69 3e 0d 0a 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 55 53 50 53 3f 72 66 3d 31 30 38 35 30 31 33 35 35 38 34 38 36 33 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 69 6d 67 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 46 61 63 65 62 6f 6f 6b 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 63 6f 6e 2e 22 20 Data Ascii: ript> USPS. All Rights Reserved.</div><ul class="global-footer--social"><li> <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> <img alt="Image of Facebook social media icon."

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49711	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:35 UTC	555	OUT	GET /assets/css/welcome/bootstrap.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:35 UTC	1178	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 68343 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 155764 Date: Mon, 29 Apr 2024 20:13:35 GMT Etag: "26074-58f0f21542f80+ident" Last-Modified: Thu, 01 Aug 2019 14:33:50 GMT Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 155764 Connection: close
2024-04-29 20:13:35 UTC	16383	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-29 20:13:35 UTC	16383	IN	Data Raw: 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 Data Ascii: 33%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-first{-ms-flex-order:-1;order:-1}.order-xl-last{-ms-flex-order:13;order:13}.order-xl-0{-ms-flex-order:0;ord
2024-04-29 20:13:35 UTC	16383	IN	Data Raw: 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 Data Ascii: ed .form-check-input:invalid~.invalid-tooltip{display:block}.custom-control-input.is-invalid~.custom-control-label,.was-validated .custom-control-input:invalid~.custom-control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::bef
2024-04-29 20:13:35 UTC	16383	IN	Data Raw: 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 6c 65 66 74 2c 2e 64 72 6f 70 72 69 67 68 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 Data Ascii: tion:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid transpar
2024-04-29 20:13:35 UTC	16383	IN	Data Raw: 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 63 6f 6e 74 65 6e 74 3a 22 42 72 6f 77 73 65 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 2e 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 30 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 72 65 6d 20 2b 20 2e 34 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f Data Ascii: 375rem .75rem;line-height:1.5;color:#495057;content:"Browse";background-color:#e9ecef;border-left:inherit;border-radius:0 .25rem .25rem 0}.custom-range{width:100%;height:calc(1rem + .4rem);padding:0;background-color:transparent;-webkit-appearance:none;-mo
2024-04-29 20:13:35 UTC	5	IN	Data Raw: 69 6e 65 2d 68 Data Ascii: ine-h
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 35 36 62 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c Data Ascii: eight:1.25;color:#007bff;background-color:#fff;border:1px solid #dee2e6}.page-link:hover{z-index:2;color:#0056b3;text-decoration:none;background-color:#e9ecef;border-color:#dee2e6}.page-link:focus{z-index:2;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 73 63 72 6f 6c 6c 62 61 72 2d 6d 65 61 73 75 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 39 39 39 39 70 78 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 Data Ascii: er-bottom-right-radius:.3rem;border-bottom-left-radius:.3rem}.modal-footer>:not(:first-child){margin-left:.25rem}.modal-footer>:not(:last-child){margin-right:.25rem}.modal-scrollbar-measure{position:absolute;top:-9999px;width:50px;height:50px;overflow:scr
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 Data Ascii: lay:table-cell!important}.d-print-flex{display:-ms-flexbox!important;display:flex!important}.d-print-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}.embed-responsive{position:relative;display:block;width:100%;padding:0;ove
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 78 65 64 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 33 30 7d 2e 66 69 78 65 64 2d 62 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 33 30 7d 40 73 75 70 70 6f 72 74 73 20 28 28 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 29 20 6f 72 20 28 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 29 29 7b 2e 73 74 69 63 6b 79 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 3b Data Ascii: portant;position:sticky!important}.fixed-top{position:fixed;top:0;right:0;left:0;z-index:1030}.fixed-bottom{position:fixed;right:0;bottom:0;left:0;z-index:1030}@supports ((position:-webkit-sticky) or (position:sticky)){.sticky-top{position:-webkit-sticky;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49712	172.217.0.174	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:35 UTC	544	OUT	GET /optimize.js?id=GTM-T35N9RL HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:35 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Mon, 29 Apr 2024 20:13:35 GMT Expires: Mon, 29 Apr 2024 20:13:35 GMT Cache-Control: private, max-age=900 Last-Modified: Mon, 29 Apr 2024 18:46:18 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-04-29 20:13:35 UTC	601	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 34 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"49", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 22 6f 62 Data Ascii: rn function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["ob
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 6a 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 61 7d 29 3b 76 61 72 20 71 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 72 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: r e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ja("Object.assign",function(a){return a\|\|pa});var qa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ra;if("function"==typ
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 26 2d 31 21 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 6e 61 74 69 76 65 20 63 6f 64 65 22 29 3f 42 61 3a 43 61 3b 72 65 74 75 72 6e 20 44 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 45 61 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 0a 20 6a 51 75 65 72 79 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 76 61 72 20 46 61 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 Data Ascii: &-1!=Function.prototype.bind.toString().indexOf("native code")?Ba:Ca;return Da.apply(null,arguments)},Ea=function(a){return a};/* jQuery (c) 2005, 2012 jQuery Foundation, Inc. jquery.org/license.*/var Fa=/\[object (Boolean\|Number\|String\|Function\|Array
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 68 61 72 43 6f 64 65 41 74 28 63 2b 32 29 3a 30 2c 6d 3d 66 3e 3e 32 2c 6e 3d 28 66 26 33 29 3c 3c 34 7c 68 3e 3e 34 2c 70 3d 28 68 26 31 35 29 3c 3c 32 7c 6c 3e 3e 36 2c 71 3d 6c 26 36 33 3b 65 7c 7c 28 71 3d 36 34 2c 64 7c 7c 28 70 3d 36 34 29 29 3b 62 2e 70 75 73 68 28 4b 61 5b 6d 5d 2c 4b 61 5b 6e 5d 2c 4b 61 5b 70 5d 2c 4b 61 5b 71 5d 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6d 29 7b 66 6f 72 28 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 61 2e 63 68 61 72 41 74 28 64 2b 2b 29 2c 70 3d 4d 61 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 21 3d 70 29 72 65 74 75 72 6e 20 70 3b 69 66 28 21 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 74 65 73 74 28 6e 29 Data Ascii: harCodeAt(c+2):0,m=f>>2,n=(f&3)<<4\|h>>4,p=(h&15)<<2\|l>>6,q=l&63;e\|\|(q=64,d\|\|(p=64));b.push(Ka[m],Ka[n],Ka[p],Ka[q])}return b.join("")}function Oa(a){function b(m){for(;d<a.length;){var n=a.charAt(d++),p=Ma[n];if(null!=p)return p;if(!/^[\s\xa0]*$/.test(n)
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 34 38 33 36 34 37 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 62 2d 61 2b 31 29 2b 61 29 7d 2c 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 5a 61 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2e 73 65 74 28 61 5b 64 5d 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 63 2e 67 65 74 28 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 0a 63 29 26 26 Data Ascii: 483647;return Math.floor(Math.random()*(b-a+1)+a)},$a=function(a,b){for(var c=new Za,d=0;d<a.length;d++)c.set(a[d],!0);for(var e=0;e<b.length;e++)if(c.get(b[e]))return!0;return!1},B=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 63 3d 7b 7d 2c 64 3d 63 2c 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 64 3d 64 5b 65 5b 66 5d 5d 3d 7b 7d 3b 64 5b 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 62 3b 72 65 74 75 72 6e 20 63 7d 2c 6d 62 3d 2f 5e 5c 77 7b 31 2c 39 7d 24 2f 2c 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 7c 7c 7b 7d 3b 62 3d 62 7c 7c 22 2c 22 3b 76 61 72 20 63 3d 5b 5d 3b 42 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 6d 62 2e 74 65 73 74 28 64 29 26 26 0a 65 26 26 63 2e 70 75 73 68 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 62 29 7d 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 2b 2b 64 3d 3d 3d 62 Data Ascii: {for(var c={},d=c,e=a.split("."),f=0;f<e.length-1;f++)d=d[e[f]]={};d[e[e.length-1]]=b;return c},mb=/^\w{1,9}$/,nb=function(a,b){a=a\|\|{};b=b\|\|",";var c=[];B(a,function(d,e){mb.test(d)&&e&&c.push(d)});return c.join(b)},ob=function(a,b){function c(){++d===b
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 3b 76 61 72 20 41 62 3d 7b 7d 2c 42 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 44 3d 61 7d 3b 42 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 22 41 52 54 49 43 4c 45 20 53 45 43 54 49 4f 4e 20 4e 41 56 20 41 53 49 44 45 20 48 31 20 48 32 20 48 33 20 48 34 20 48 35 20 48 36 20 48 45 41 44 45 52 20 46 4f 4f 54 45 52 20 41 44 44 52 45 53 53 20 50 20 48 52 20 50 52 45 20 42 4c 4f 43 4b 51 55 4f 54 45 20 4f 4c 20 55 4c 20 4c 48 20 4c 49 20 44 4c 20 44 54 20 44 44 20 46 49 47 55 52 45 20 46 49 47 43 41 50 54 49 4f 4e 20 4d 41 49 4e 20 44 49 56 20 45 4d 20 53 54 Data Ascii: b)return c;return-1};var Ab={},Bb=function(a){this.D=a};Bb.prototype.toString=function(){return this.D.toString()};"ARTICLE SECTION NAV ASIDE H1 H2 H3 H4 H5 H6 HEADER FOOTER ADDRESS P HR PRE BLOCKQUOTE OL UL LH LI DL DT DD FIGURE FIGCAPTION MAIN DIV EM ST
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 65 72 74 79 28 64 29 7c 7c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 64 2c 65 29 7d 29 7d 0a 76 61 72 20 4c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 46 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 4b 62 28 66 2c 64 2c 49 62 29 3b 66 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 66 2e 61 73 79 6e 63 3d 64 26 26 21 31 3d 3d 3d 64 2e 61 73 79 6e 63 3f 21 31 3a 21 30 3b 76 61 72 20 68 2c 6c 3d 43 62 28 61 29 2c 6d 3d 71 62 28 29 2c 6e 3d 6d 3f 6d 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 6c 29 3a 6c 3b 68 3d 6e 65 77 20 72 62 28 6e 2c 73 62 29 3b 66 2e 73 72 63 3d 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 62 26 26 68 2e 63 6f 6e 73 74 72 75 63 74 6f Data Ascii: erty(d)\|\|a.setAttribute(d,e)})}var Lb=function(a,b,c,d,e){var f=F.createElement("script");Kb(f,d,Ib);f.type="text/javascript";f.async=d&&!1===d.async?!1:!0;var h,l=Cb(a),m=qb(),n=m?m.createScriptURL(l):l;h=new rb(n,sb);f.src=h instanceof rb&&h.constructo
2024-04-29 20:13:35 UTC	1255	IN	Data Raw: 28 29 7b 65 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 63 26 26 63 28 29 7d 3b 65 2e 73 72 63 3d 61 7d 2c 50 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 21 64 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 3a 61 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 2c 49 Data Ascii: (){e.onerror=null;c&&c()};e.src=a},Pb=function(a,b,c,d){a.addEventListener?a.addEventListener(b,c,!!d):a.attachEvent&&a.attachEvent("on"+b,c)},Qb=function(a,b,c){a.removeEventListener?a.removeEventListener(b,c,!1):a.detachEvent&&a.detachEvent("on"+b,c)},I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49713	23.11.208.106	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-29 20:13:36 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=39012 Date: Mon, 29 Apr 2024 20:13:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49715	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	565	OUT	GET /global-elements/header/css/megamenu-v4.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1194	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42110 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "ad9f-5fdb1f8841e00+ident" Last-Modified: Fri, 09 Jun 2023 13:01:44 GMT ntCoent-Length: 44447 Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 44447 Connection: close
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 62 62 72 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 63 72 6f 6e 79 6d 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 70 70 6c 65 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 72 74 69 63 6c 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 73 69 64 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 75 64 69 6f 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 69 67 Data Ascii: .global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 2e 61 63 74 69 76 65 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 6e 61 76 2d 73 65 61 72 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 69 6d 61 67 65 73 2f 75 74 69 6c 69 74 79 2d 68 65 61 64 65 72 2f 73 65 61 72 63 68 2e 73 76 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 7a 2d 69 6e 64 65 78 3a 35 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 Data Ascii: .active.nav-first-element{color:#336}.global--navigation nav .nav-search{background:url(https://www.usps.com/global-elements/header/images/utility-header/search.svg) no-repeat;background-repeat:no-repeat;z-index:5;text-indent:-9999px;background-position:5
2024-04-29 20:13:36 UTC	2	IN	Data Raw: 20 61 Data Ascii: a
2024-04-29 20:13:36 UTC	11679	IN	Data Raw: 2e 6d 75 6c 74 69 2d 6c 61 6e 67 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 63 68 69 6e 65 73 65 5f 63 68 61 72 61 63 74 65 72 73 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 23 6c 69 6e 6b 2d 6c 61 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 Data Ascii: .multi-lang-link{background:url(https://www.usps.com/assets/images/home/chinese_characters.gif);background-repeat:no-repeat;width:80px;height:25px;left:20px;position:relative}.nav-utility #link-lang:before{content:"";display:inline-block;height:15px;width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49714	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	625	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42721 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "de5-549b1263b1ac0+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (chd/0778) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-04-29 20:13:36 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49716	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	601	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42128 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "222-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0772) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-04-29 20:13:36 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49717	23.11.208.106	443

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-29 20:13:36 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=39013 Date: Mon, 29 Apr 2024 20:13:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-29 20:13:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49718	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	600	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42775 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "5a8-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT Server: ECAcc (chd/0709) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-04-29 20:13:36 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49720	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	666	OUT	GET /global-elements/header/images/utility-header/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42102 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "5b9-549b126599f40+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:05 GMT Server: ECAcc (chd/0758) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-29 20:13:36 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49719	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	648	OUT	GET /test/nav/images/shipping-supplies.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42148 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "9f8-560f10eaa9b40+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:13 GMT Server: ECAcc (chd/074C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2552 Connection: close
2024-04-29 20:13:36 UTC	2552	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49721	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	593	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42736 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (chd/076E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-04-29 20:13:36 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-29 20:13:36 UTC	5750	IN	Data Raw: 1a 8c f8 1e 11 12 55 c4 85 ae 15 e4 15 d9 8a 0b 52 39 60 83 61 e1 0e 51 b9 9d 70 b6 87 23 ca a9 91 97 e6 37 ca 9c 46 a1 1f 86 94 a0 c8 cc 90 1b b1 aa 91 39 23 4c 1f 4c 4f 4b c4 a5 97 5d 80 ad 1f ee c3 fe fa dd ac 9d 0d 83 7d 83 f8 d5 6d 97 21 99 01 32 e0 f3 e3 9c 53 4b b1 f9 bd 26 2c 9a 9b 8d ac ac 44 74 76 b9 78 00 7b 1b d3 1b 97 2e ca c6 d3 af ef 63 7a 67 00 4a 82 ac 30 ae 9e c3 20 82 df c7 c4 f1 10 e3 e8 64 68 32 f1 bf ad 16 13 46 06 07 d0 d3 d5 5d 8a f2 02 7d 66 e9 74 d8 62 6a 58 8a 4e 5b d8 f1 01 3b 72 eb f7 d6 53 31 97 79 99 19 fb e7 1b cd 71 e5 05 f9 0b 4b 03 61 47 f6 c0 c0 b0 c1 6a b3 23 18 64 7a 16 03 98 dd 6e 17 89 b9 14 32 17 09 5b 03 2f 91 2f 94 bc a0 e4 78 22 ce 93 1b 5d 64 7a 92 2a 82 72 c9 57 11 f5 6b 08 c0 b4 bf 46 28 52 9d 3c c8 8b 41 51 Data Ascii: UR9`aQp#7F9#LLOK]}m!2SK&,Dtvx{.czgJ0 dh2F]}ftbjXN[;rS1yqKaGj#dzn2[//x"]dz*rWkF(R<AQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49722	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	600	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:36 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42679 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "5bf-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0775) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-04-29 20:13:36 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49723	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	636	OUT	GET /test/nav/images/gifts.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42733 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:36 GMT Etag: "3ee-560f10e9b5900+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:12 GMT Server: ECAcc (chd/078A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1006 Connection: close
2024-04-29 20:13:37 UTC	1006	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49725	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	368	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42129 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "222-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0772) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-04-29 20:13:37 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49724	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:36 UTC	392	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42722 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "de5-549b1263b1ac0+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (chd/0778) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-04-29 20:13:37 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49726	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	607	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42119 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "8fe-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (chd/072C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-04-29 20:13:37 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49727	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	598	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42721 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "667-5494e7f259740+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (chd/076E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-04-29 20:13:37 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49728	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	641	OUT	GET /test/nav/images/collectors.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42734 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "461-560f10f803ac0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:27 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1121 Connection: close
2024-04-29 20:13:37 UTC	1121	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 63 6f 6e 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49729	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	651	OUT	GET /assets/images/home/utility_languages.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42093 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "5b0-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (chd/071B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1456 Connection: close
2024-04-29 20:13:37 UTC	1456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 06 00 00 00 72 50 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRrP6tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49730	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	585	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 68323 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (chd/075D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-04-29 20:13:37 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-04-29 20:13:37 UTC	3098	IN	Data Raw: f4 6e 17 8a dd 2c f0 b5 b7 93 7c d3 8f 30 25 26 86 dc d3 5d df c0 b6 2f 9d 49 c0 e9 c2 5a 34 0d 59 15 84 48 23 81 56 77 a4 ef b2 92 99 3b b2 93 d3 a1 45 1b 05 b4 8e a3 0f e0 6f aa 5c b6 76 15 ea 7e 6e 95 cb d6 2e 27 34 92 6d 09 ca 6c d1 1a f6 19 9a 11 2c ab 51 a5 9b c9 5a ae 9e 1b 2b 04 54 3f 8a ad 61 64 44 4a 0a 6b cb fc ca 65 6b 0b d5 c4 01 87 3d 39 da 94 12 86 c6 b2 b9 8f 0a 21 be 39 56 78 a7 29 36 16 5f eb 1e f6 fc f8 16 2c 39 39 48 51 a1 d3 9d 91 04 42 fb 5f 76 bb 31 25 24 92 78 49 a8 e1 ec 6e d8 c2 b6 af 9c 4d 60 68 08 5b 71 11 01 8f 27 a4 9e b1 5c b6 47 1d 93 41 48 e2 7f 4b 1b ea 96 1d e8 ef 3e 08 b4 0e a5 bd 61 97 e8 a6 45 c3 99 8f 62 1b cc 57 cb 57 ab 79 99 9a 50 37 49 dc 47 c0 50 b0 b3 eb cb a8 f9 98 9a 18 23 a9 59 58 7d 8e f0 73 95 cb d6 de 87 Data Ascii: n,\|0%&]/IZ4YH#Vw;Eo\v~n.'4ml,QZ+T?adDJkek=9!9Vx)6_,99HQB_v1%$xInM`h[q'\GAHK>aEbWWyP7IGP#YX}s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49731	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:37 UTC	611	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:37 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42141 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:37 GMT Etag: "436-5494e7bfce000+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (chd/075F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-04-29 20:13:37 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49734	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	607	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42768 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "6ef-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-04-29 20:13:40 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49733	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	650	OUT	GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42206 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "8a9-560f10e8c16c0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:11 GMT Server: ECAcc (chd/0731) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2217 Connection: close
2024-04-29 20:13:40 UTC	2217	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49735	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	652	OUT	GET /assets/images/home/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42699 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "87d-547e11c4438c0" Last-Modified: Mon, 06 Feb 2017 18:50:51 GMT Server: ECAcc (chd/0763) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-29 20:13:40 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49737	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	588	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42128 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (chd/0736) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-04-29 20:13:40 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-29 20:13:40 UTC	3586	IN	Data Raw: fd 28 e5 b7 66 89 77 31 2f 25 19 4c 5b 54 51 b1 54 59 a3 d4 2f 98 9f e2 8f 6c 55 40 a4 48 41 f9 3c 9b 54 32 67 cb 65 f2 d9 d5 72 6e 73 9a e7 55 5e 1c e9 06 32 d6 28 20 52 31 62 aa a9 eb 58 d4 c9 ec 53 2f fb 47 9b 87 92 e2 05 4a bb f3 99 f2 f6 4c 57 73 40 18 66 40 db f9 00 38 92 1e 7b 66 a0 e6 e6 e6 0a fa cc 65 00 b0 b4 e2 06 bb 6d db 36 b0 34 fa d2 97 be 24 01 e3 95 57 5e 91 02 00 66 bd 11 27 9b 9a 30 9d 98 c9 70 e4 a8 c4 3c 2c 9d 94 6b 79 89 c5 26 96 97 e3 9b df f8 57 e8 12 61 9c 39 56 83 bd af be 88 8e b6 e6 64 0d 07 93 09 a6 8c 4c e4 17 94 48 29 42 7c ac 95 d8 e9 f5 5d af c3 e3 0f 49 63 94 1c 99 0e b8 0a 0a 51 3d 7f 21 26 56 4c 42 80 64 1c ff 3e 1c a0 60 90 3f f9 e4 93 83 52 8d ae ef 20 16 2a e0 47 a1 df 2d 96 fa a2 3a df 6f 7f 2e a0 c9 6c b3 45 69 f8 Data Ascii: (fw1/%L[TQTY/lU@HA<T2gernsU^2( R1bXS/GJLWs@f@8{fem64$W^f'0p<,ky&Wa9VdLH)B\|]IcQ=!&VLBd>`?R *G-:o.lEi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49736	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	609	OUT	GET /assets/images/home/printcustomsforms.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42072 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "9e7-5cfbe96b910c0+gzip+ident" Last-Modified: Mon, 01 Nov 2021 18:46:03 GMT Server: ECAcc (chd/0732) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2535 Connection: close
2024-04-29 20:13:40 UTC	2535	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 2e 31 36 20 31 30 33 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 2d 32 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 63 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49738	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:39 UTC	664	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42692 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "efd-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0777) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3837 Connection: close
2024-04-29 20:13:40 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49739	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	367	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42779 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "5a8-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT Server: ECAcc (chd/0709) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-04-29 20:13:40 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49740	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	391	OUT	GET /global-elements/header/images/utility-header/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42106 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "5b9-549b126599f40+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:05 GMT Server: ECAcc (chd/0758) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-29 20:13:40 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49744	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	373	OUT	GET /test/nav/images/shipping-supplies.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42152 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "9f8-560f10eaa9b40+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:13 GMT Server: ECAcc (chd/074C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2552 Connection: close
2024-04-29 20:13:40 UTC	2552	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49742	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	367	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42683 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "5bf-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0775) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-04-29 20:13:40 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49743	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	360	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42740 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (chd/076E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-04-29 20:13:40 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-29 20:13:40 UTC	1	IN	Data Raw: 1a Data Ascii:
2024-04-29 20:13:40 UTC	5749	IN	Data Raw: 8c f8 1e 11 12 55 c4 85 ae 15 e4 15 d9 8a 0b 52 39 60 83 61 e1 0e 51 b9 9d 70 b6 87 23 ca a9 91 97 e6 37 ca 9c 46 a1 1f 86 94 a0 c8 cc 90 1b b1 aa 91 39 23 4c 1f 4c 4f 4b c4 a5 97 5d 80 ad 1f ee c3 fe fa dd ac 9d 0d 83 7d 83 f8 d5 6d 97 21 99 01 32 e0 f3 e3 9c 53 4b b1 f9 bd 26 2c 9a 9b 8d ac ac 44 74 76 b9 78 00 7b 1b d3 1b 97 2e ca c6 d3 af ef 63 7a 67 00 4a 82 ac 30 ae 9e c3 20 82 df c7 c4 f1 10 e3 e8 64 68 32 f1 bf ad 16 13 46 06 07 d0 d3 d5 5d 8a f2 02 7d 66 e9 74 d8 62 6a 58 8a 4e 5b d8 f1 01 3b 72 eb f7 d6 53 31 97 79 99 19 fb e7 1b cd 71 e5 05 f9 0b 4b 03 61 47 f6 c0 c0 b0 c1 6a b3 23 18 64 7a 16 03 98 dd 6e 17 89 b9 14 32 17 09 5b 03 2f 91 2f 94 bc a0 e4 78 22 ce 93 1b 5d 64 7a 92 2a 82 72 c9 57 11 f5 6b 08 c0 b4 bf 46 28 52 9d 3c c8 8b 41 51 28 Data Ascii: UR9`aQp#7F9#LLOK]}m!2SK&,Dtvx{.czgJ0 dh2F]}ftbjXN[;rS1yqKaGj#dzn2[//x"]dz*rWkF(R<AQ(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49741	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	361	OUT	GET /test/nav/images/gifts.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42737 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "3ee-560f10e9b5900+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:12 GMT Server: ECAcc (chd/078A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1006 Connection: close
2024-04-29 20:13:40 UTC	1006	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49749	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	606	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42735 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "74d-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-04-29 20:13:40 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49748	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	658	OUT	GET /assets/images/home/utility_customer_service.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42773 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "51b-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT nnCoection: close Server: ECAcc (chd/0728) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1307 Connection: close
2024-04-29 20:13:40 UTC	1307	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49750	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	625	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42718 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (chd/0720) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-04-29 20:13:40 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49751	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	639	OUT	GET /test/nav/images/business.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42729 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "4d2-560f10e7cd480+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:10 GMT Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1234 Connection: close
2024-04-29 20:13:40 UTC	1234	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 c3 95 5f 78 42 41 5f 5f 78 32 32 36 34 5f 5f 78 32 30 31 45 5f 5f 78 35 46 5f 31 22 0a 09 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_xBA__x2264__x201E__x5F_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49752	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	602	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42712 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "42a-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0788) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-04-29 20:13:40 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49753	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	586	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42168 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-04-29 20:13:40 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49754	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	376	OUT	GET /assets/images/home/utility_languages.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42096 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "5b0-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (chd/071B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1456 Connection: close
2024-04-29 20:13:40 UTC	1456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 06 00 00 00 72 50 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRrP6tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49755	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	366	OUT	GET /test/nav/images/collectors.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42737 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "461-560f10f803ac0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:27 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1121 Connection: close
2024-04-29 20:13:40 UTC	1121	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 63 6f 6e 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49757	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	374	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42122 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "8fe-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (chd/072C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-04-29 20:13:40 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49756	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	365	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42724 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "667-5494e7f259740+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (chd/076E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-04-29 20:13:40 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49758	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	378	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42144 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "436-5494e7bfce000+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (chd/075F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-04-29 20:13:40 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49759	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:40 UTC	352	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:40 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 68326 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:40 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (chd/075D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-04-29 20:13:40 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-04-29 20:13:40 UTC	4201	IN	Data Raw: 36 12 2e ba 00 6b 71 d1 3e eb b4 cf 28 1f 15 23 11 21 ca 4d 4b 15 f3 ea b8 bf d3 60 4a 32 b5 84 41 32 5d 4c c0 7f 1f b0 c8 d7 d1 49 fc 79 67 93 ff b7 bf ee f7 e5 7d 4f 3f 47 ef d3 6b b0 97 ce 08 55 87 50 3b ae 3c 12 bc 2f cb 32 b2 df 4f d2 e5 17 8f 5b af bb 79 a7 e2 1a 3e 06 41 c1 90 e5 9b 1a cb e7 39 4a eb 37 fc 6d bf 1b 6d 30 65 98 52 53 ab a5 9b d7 6f 41 96 ef 06 30 65 a4 33 f0 fa 9b b4 dd fc 53 02 83 43 e3 5e eb eb ea a6 f5 07 3f c6 92 96 85 10 a1 3f 4b e8 3e 68 46 b8 6f 6f 27 51 f3 66 13 fb e5 2f 8d 5b 77 ff 8b 2f 29 46 fb f8 fe 1f 79 72 20 60 c4 3f 7f 4e 99 52 c2 d0 58 3e ef 52 21 c4 53 00 92 45 49 1d df 7e ef 2f f0 34 ef 1c f7 da b6 9f dc 8a b7 75 37 e6 f4 34 64 39 b0 ef 3e 2b c0 ef e8 21 f1 f2 4b c6 0d 11 1d 5c f7 06 7d 4f 3f 87 25 3b 0b 21 94 91 Data Ascii: 6.kq>(#!MK`J2A2]LIyg}O?GkUP;</2O[y>A9J7mm0eRSoA0e3SC^??K>hFoo'Qf/[w/)Fyr `?NRX>R!SEI~/4u74d9>+!K\}O?%;!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49767	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	600	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1155	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42788 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "a1a-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (chd/0728) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-04-29 20:13:41 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49768	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	584	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42139 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (chd/0775) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-04-29 20:13:41 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-04-29 20:13:41 UTC	3951	IN	Data Raw: fb df ef 28 2f af f8 fc 6d b7 dd ba f1 e5 97 d7 3d dc d0 d0 50 3c 71 e2 c4 3e f5 44 ae 5a d7 d3 d3 43 6b 6b 2b 5f f9 ca 57 fe fb a2 8b 2e fa fa b3 cf 3e db 31 82 04 5a ec 58 97 fe 38 5e e3 91 07 e8 25 91 db fd a7 88 de f5 63 bf 53 5d bd f8 78 35 49 b7 02 2e c9 dc ed ab 9d 97 db cd c8 6d 0f e6 1e 6b 35 1c d3 c1 68 a0 e3 ae ac a9 a9 ad 3f 5b 96 e9 2f 9e 48 e0 74 16 0a 04 94 e9 f3 69 4f 3e f9 93 e7 2c cb ba f3 5b df 59 f6 7d c3 30 66 7f fc 13 37 20 2d 3b eb da cd 57 33 0c 83 bc bc 3c ba ba ba 58 b1 62 05 8f 3c f2 08 25 25 25 5b ff e5 e1 87 7f b1 71 d3 a6 3b f7 ec d9 33 23 95 4a 61 9a 66 ec ae bb ee 7a 70 c2 84 09 8f 55 54 54 c4 9c 6c 6c 74 5d 97 a6 69 d2 72 b4 25 b1 ee a5 17 ff eb 33 b7 df be fe 95 57 5e 5b fe e7 3f ff f9 23 25 25 25 14 14 14 78 ad 90 3b 3a Data Ascii: (/m=P<q>DZCkk+_W.>1ZX8^%cS]x5I.mk5h?[/HtiO>,[Y}0f7 -;W3<Xb<%%%[q;3#JafzpUTTllt]ir%3W^[?#%%%x;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49769	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	679	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1137	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42219 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0720) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 7250 Connection: close
2024-04-29 20:13:41 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49770	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	662	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42044 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0729) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2340 Connection: close
2024-04-29 20:13:41 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49771	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	598	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42758 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "44f-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/0754) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-04-29 20:13:41 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49772	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	603	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42749 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "80c-547ddea221540+gzip+ident" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (chd/0771) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-04-29 20:13:41 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49773	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	377	OUT	GET /assets/images/home/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42700 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "87d-547e11c4438c0" Last-Modified: Mon, 06 Feb 2017 18:50:51 GMT Server: ECAcc (chd/0763) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-29 20:13:41 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49774	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	374	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42769 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "6ef-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-04-29 20:13:41 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49775	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	375	OUT	GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42207 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "8a9-560f10e8c16c0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:11 GMT Server: ECAcc (chd/0731) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2217 Connection: close
2024-04-29 20:13:41 UTC	2217	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49777	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	376	OUT	GET /assets/images/home/printcustomsforms.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42073 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "9e7-5cfbe96b910c0+gzip+ident" Last-Modified: Mon, 01 Nov 2021 18:46:03 GMT Server: ECAcc (chd/0732) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2535 Connection: close
2024-04-29 20:13:41 UTC	2535	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 2e 31 36 20 31 30 33 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 2d 32 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 63 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49776	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	355	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42129 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (chd/0736) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-04-29 20:13:41 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-29 20:13:41 UTC	3586	IN	Data Raw: fd 28 e5 b7 66 89 77 31 2f 25 19 4c 5b 54 51 b1 54 59 a3 d4 2f 98 9f e2 8f 6c 55 40 a4 48 41 f9 3c 9b 54 32 67 cb 65 f2 d9 d5 72 6e 73 9a e7 55 5e 1c e9 06 32 d6 28 20 52 31 62 aa a9 eb 58 d4 c9 ec 53 2f fb 47 9b 87 92 e2 05 4a bb f3 99 f2 f6 4c 57 73 40 18 66 40 db f9 00 38 92 1e 7b 66 a0 e6 e6 e6 0a fa cc 65 00 b0 b4 e2 06 bb 6d db 36 b0 34 fa d2 97 be 24 01 e3 95 57 5e 91 02 00 66 bd 11 27 9b 9a 30 9d 98 c9 70 e4 a8 c4 3c 2c 9d 94 6b 79 89 c5 26 96 97 e3 9b df f8 57 e8 12 61 9c 39 56 83 bd af be 88 8e b6 e6 64 0d 07 93 09 a6 8c 4c e4 17 94 48 29 42 7c ac 95 d8 e9 f5 5d af c3 e3 0f 49 63 94 1c 99 0e b8 0a 0a 51 3d 7f 21 26 56 4c 42 80 64 1c ff 3e 1c a0 60 90 3f f9 e4 93 83 52 8d ae ef 20 16 2a e0 47 a1 df 2d 96 fa a2 3a df 6f 7f 2e a0 c9 6c b3 45 69 f8 Data Ascii: (fw1/%L[TQTY/lU@HA<T2gernsU^2( R1bXS/GJLWs@f@8{fem64$W^f'0p<,ky&Wa9VdLH)B\|]IcQ=!&VLBd>`?R *G-:o.lEi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49778	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:41 UTC	389	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:41 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42693 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:41 GMT Etag: "efd-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0777) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3837 Connection: close
2024-04-29 20:13:41 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49780	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	598	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42135 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "5b9-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/0711) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-29 20:13:43 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49785	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	600	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42738 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "619-5494e7f71e280+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (chd/0719) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-04-29 20:13:43 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49781	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	373	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42738 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "74d-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-04-29 20:13:43 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49784	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	392	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42721 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (chd/0720) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-04-29 20:13:43 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49786	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	554	OUT	GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42781 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "15d84-5affcd6633ac0+gzip+ident" Last-Modified: Wed, 23 Sep 2020 15:35:47 GMT Server: ECAcc (chd/0772) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-04-29 20:13:43 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-29 20:13:43 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c Data Ascii: (e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{val
2024-04-29 20:13:44 UTC	3	IN	Data Raw: 74 65 73 Data Ascii: tes
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 Data Ascii: t(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:func
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 41 Data Ascii: tend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.removeA
2024-04-29 20:13:44 UTC	7558	IN	Data Raw: 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 Data Ascii: in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49782	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	383	OUT	GET /assets/images/home/utility_customer_service.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42776 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "51b-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT nnCoection: close Server: ECAcc (chd/0728) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1307 Connection: close
2024-04-29 20:13:43 UTC	1307	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49787	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	553	OUT	GET /global-elements/header/script/megamenu-v3.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42120 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "3458-5b39a71ac3540" Last-Modified: Sun, 08 Nov 2020 15:53:17 GMT Server: ECAcc (chd/0743) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 13400 Connection: close
2024-04-29 20:13:43 UTC	13400	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 22 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 3d 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 63 28 22 2e 6d 6f 62 69 6c 65 2d 68 61 6d 62 75 72 67 65 72 22 29 2e 6f 6e 28 22 74 6f 75 63 68 20 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49788	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	555	OUT	GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42718 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "e37-5875dc5375780+gzip+ident" Last-Modified: Thu, 25 Apr 2019 17:01:34 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3639 Connection: close
2024-04-29 20:13:43 UTC	3639	IN	Data Raw: 2f 2f 0d 0a 2f 2f 20 4f 6e 65 4c 69 6e 6b 28 29 20 6d 65 74 68 6f 64 20 66 6f 72 20 55 53 50 53 20 73 69 74 65 2e 20 20 43 6f 64 65 64 20 66 6f 72 20 73 74 61 67 69 6e 67 20 61 6e 64 20 6c 69 76 65 20 73 69 74 65 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 48 69 73 74 6f 72 79 3a 0d 0a 2f 2f 20 20 20 20 61 72 69 76 61 72 64 20 20 20 3a 3a 20 20 31 30 2d 41 75 67 2d 32 30 31 31 20 20 3a 3a 20 63 72 65 61 74 65 64 0d 0a 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 66 75 6e 63 74 69 6f 6e 20 6b 44 65 62 75 67 20 28 73 4d 65 73 73 61 67 65 29 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: //// OneLink() method for USPS site. Coded for staging and live sites.//// History:// arivard :: 10-Aug-2011 :: created//----------------------------------------------------------------------function kDebug (sMessage)//------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49789	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	364	OUT	GET /test/nav/images/business.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42732 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "4d2-560f10e7cd480+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:10 GMT Server: ECAcc (chd/070A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1234 Connection: close
2024-04-29 20:13:43 UTC	1234	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 c3 95 5f 78 42 41 5f 5f 78 32 32 36 34 5f 5f 78 32 30 31 45 5f 5f 78 35 46 5f 31 22 0a 09 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_xBA__x2264__x201E__x5F_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49790	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	369	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42715 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "42a-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (chd/0788) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-04-29 20:13:43 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49783	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	353	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42171 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (chd/0746) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-04-29 20:13:43 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49791	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:43 UTC	550	OUT	GET /global-elements/header/script/ge-login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:43 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42120 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:43 GMT Etag: "288b-5ebf9ca4d4940+gzip+ident" Last-Modified: Thu, 27 Oct 2022 01:09:17 GMT Server: ECAcc (chd/0712) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10379 Connection: close
2024-04-29 20:13:43 UTC	10379	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 70 66 73 6c 48 6f 73 74 20 3d 20 22 70 66 73 6c 2e 75 73 70 73 2e 63 6f 6d 22 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var pfslHost = "pfsl.usps.com"var lowEnv = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49792	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	556	OUT	GET /global-elements/lib/script/requirejs/require.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42167 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "440f-5057c2658f140+gzip+ident" Last-Modified: Wed, 15 Oct 2014 20:41:01 GMT Server: ECAcc (chd/071B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 17423 Connection: close
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 2f 2a 2a 20 0a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 31 35 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 0a 76 61 72 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 3b 28 66 75 6e 63 74 Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var USPSRequireNS;(funct
2024-04-29 20:13:44 UTC	1040	IN	Data Raw: 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 73 72 63 2e 70 6f 70 28 29 2c 73 75 62 50 61 74 68 3d 73 72 63 2e 6c 65 6e 67 74 68 3f 73 72 63 2e 6a 6f 69 6e 28 22 2f 22 29 2b 22 2f 22 3a 22 2e 2f 22 2c 63 66 67 2e 62 61 73 65 55 72 6c 3d 73 75 62 50 61 74 68 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 6d 61 69 6e 53 63 72 69 70 74 2e 72 65 70 6c 61 63 65 28 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 2c 22 22 29 2c 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 2e 74 65 73 74 28 6d 61 69 6e 53 63 72 69 70 74 29 26 26 28 6d 61 69 6e 53 63 72 69 70 74 3d 64 61 74 61 4d 61 69 6e 29 2c 63 66 67 2e 64 65 70 73 3d 63 66 67 2e 64 65 70 73 3f 63 66 67 2e 64 65 70 73 2e 63 6f 6e 63 61 74 28 6d 61 69 6e 53 63 72 69 70 74 29 3a 5b 6d 61 69 6e 53 63 Data Ascii: t.split("/"),mainScript=src.pop(),subPath=src.length?src.join("/")+"/":"./",cfg.baseUrl=subPath),mainScript=mainScript.replace(jsSuffixRegExp,""),req.jsExtRegExp.test(mainScript)&&(mainScript=dataMain),cfg.deps=cfg.deps?cfg.deps.concat(mainScript):[mainSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49796	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	367	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1155	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42791 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "a1a-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (chd/0728) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-04-29 20:13:44 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49794	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	387	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42047 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0729) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2340 Connection: close
2024-04-29 20:13:44 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49793	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	370	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42752 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "80c-547ddea221540+gzip+ident" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (chd/0771) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-04-29 20:13:44 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49797	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	365	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42761 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "44f-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/0754) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-04-29 20:13:44 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49795	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	404	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1137	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42222 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (chd/0720) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 7250 Connection: close
2024-04-29 20:13:44 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49798	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	351	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42142 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (chd/0775) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-04-29 20:13:44 UTC	3951	IN	Data Raw: fb df ef 28 2f af f8 fc 6d b7 dd ba f1 e5 97 d7 3d dc d0 d0 50 3c 71 e2 c4 3e f5 44 ae 5a d7 d3 d3 43 6b 6b 2b 5f f9 ca 57 fe fb a2 8b 2e fa fa b3 cf 3e db 31 82 04 5a ec 58 97 fe 38 5e e3 91 07 e8 25 91 db fd a7 88 de f5 63 bf 53 5d bd f8 78 35 49 b7 02 2e c9 dc ed ab 9d 97 db cd c8 6d 0f e6 1e 6b 35 1c d3 c1 68 a0 e3 ae ac a9 a9 ad 3f 5b 96 e9 2f 9e 48 e0 74 16 0a 04 94 e9 f3 69 4f 3e f9 93 e7 2c cb ba f3 5b df 59 f6 7d c3 30 66 7f fc 13 37 20 2d 3b eb da cd 57 33 0c 83 bc bc 3c ba ba ba 58 b1 62 05 8f 3c f2 08 25 25 25 5b ff e5 e1 87 7f b1 71 d3 a6 3b f7 ec d9 33 23 95 4a 61 9a 66 ec ae bb ee 7a 70 c2 84 09 8f 55 54 54 c4 9c 6c 6c 74 5d 97 a6 69 d2 72 b4 25 b1 ee a5 17 ff eb 33 b7 df be fe 95 57 5e 5b fe e7 3f ff f9 23 25 25 25 14 14 14 78 ad 90 3b 3a Data Ascii: (/m=P<q>DZCkk+_W.>1ZX8^%cS]x5I.mk5h?[/HtiO>,[Y}0f7 -;W3<Xb<%%%[q;3#JafzpUTTllt]ir%3W^[?#%%%x;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49799	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	560	OUT	GET /global-elements/header/script/header-init-search.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42121 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "388-5b3971b6b3e40+gzip+ident" Last-Modified: Sun, 08 Nov 2020 11:54:25 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-04-29 20:13:44 UTC	904	IN	Data Raw: 76 61 72 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 2c 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 22 2c 0d 0a 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 22 67 6c 6f 62 61 6c 22 0d 0a 7d 29 2c 20 55 53 50 53 47 6c 6f Data Ascii: var USPSGlobals = USPSGlobals \|\| {};USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({ baseUrl: "https://www.usps.com/global-elements/lib/script", context: "global"}), USPSGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49800	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	549	OUT	GET /assets/script/home/megamenu-additions.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42729 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "541-591d1c7fd1e40+gzip+ident" Last-Modified: Thu, 05 Sep 2019 17:37:53 GMT Server: ECAcc (chd/071F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1345 Connection: close
2024-04-29 20:13:44 UTC	1345	IN	Data Raw: 76 61 72 20 55 53 50 53 20 3d 20 55 53 50 53 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 7b 70 61 73 73 69 76 65 3a 20 74 72 75 65 7d 29 3b 0d 0a 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 69 6d 67 27 29 2e 61 74 74 72 28 27 61 6c 74 27 2c 27 20 27 29 3b 0d 0a 09 09 61 3d 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 61 27 29 2e Data Ascii: var USPS = USPS \|\| {};USPS.Require = USPS.Require \|\| {};document.addEventListener('touchstart', {passive: true});global_elements_jq(document).ready(function($){$('.international-addition img').attr('alt',' ');a=$('.international-addition a').

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49801	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	560	OUT	GET /assets/css/welcome/welcome-styles.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42144 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "6e5f-597b4cb57f540+ident" Last-Modified: Tue, 19 Nov 2019 15:34:05 GMT ntCoent-Length: 28255 Server: ECAcc (chd/076B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 28255 Connection: close
2024-04-29 20:13:44 UTC	16383	IN	Data Raw: 2f 2a 20 46 4f 4e 54 20 53 54 59 4c 45 53 20 2a 2f 20 0d 0a 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0d 0a 7d 0d 0a 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 4f 70 65 72 61 2c 20 53 61 66 61 72 69 20 31 30 2e 31 2b 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 2f 2a 20 46 69 72 65 66 6f 78 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 31 30 2d 31 31 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 7d 0d 0a 0d 0a 3a 3a 2d 6d 73 2d 69 6e 70 75 74 2d Data Ascii: /* FONT STYLES / body {font-size:16px;}::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /color: #000000; opacity: 1; / Firefox /}:-ms-input-placeholder { / Internet Explorer 10-11 */color: #000000; }::-ms-input-
2024-04-29 20:13:44 UTC	11872	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 2c 20 20 7b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 20 68 33 20 7b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 33 33 33 33 36 36 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 61 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 09 2e 6a 75 6d 62 6f 74 72 6f 6e 2e 70 72 65 6d 69 75 6d 20 2e 61 72 74 69 63 6c 65 3a 61 66 74 65 72 20 7b 0d 0a 09 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 Data Ascii: splay:none;}.featured-usps .article, {text-align: center;}.featured-usps .article h3 {color:#333366;display:block;}.featured-usps a {display:inline-block;}.jumbotron.premium .article:after {left: 0;transf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49802	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	561	OUT	GET /global-elements/footer/css/main-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1192	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42737 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "225c-522270bf185c0+ident" Last-Modified: Thu, 15 Oct 2015 16:19:43 GMT ntCoent-Length: 8796 Server: ECAcc (chd/073F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8796 Connection: close
2024-04-29 20:13:44 UTC	8796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 2c 75 72 6c 28 22 68 Data Ascii: @font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49803	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	563	OUT	GET /global-elements/footer/css/footer-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:44 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42063 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 3181 Date: Mon, 29 Apr 2024 20:13:44 GMT Etag: "c6d-5b371de5f09c0+ident" Last-Modified: Fri, 06 Nov 2020 15:28:47 GMT Server: ECAcc (chd/070B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3181 Connection: close
2024-04-29 20:13:44 UTC	3181	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 32 30 70 78 20 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 35 30 6d 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 Data Ascii: .global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49804	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	544	OUT	GET /assets/script/globals/jquery.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42783 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "15d84-5c237dc443280+gzip+ident" Last-Modified: Thu, 13 May 2021 15:34:18 GMT Server: ECAcc (chd/0767) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-04-29 20:13:45 UTC	2	IN	Data Raw: 28 65 Data Ascii: (e
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 Data Ascii: ){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{value
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e Data Ascii: st(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:fun
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 Data Ascii: xtend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remove
2024-04-29 20:13:45 UTC	7559	IN	Data Raw: 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d Data Ascii: n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49805	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	365	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42137 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "5b9-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (chd/0711) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-29 20:13:45 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49806	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	367	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42740 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "619-5494e7f71e280+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (chd/0719) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-04-29 20:13:45 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49807	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	544	OUT	GET /assets/script/globals/popper.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42102 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "4a5c-5c1ab1e365980+gzip+ident" Last-Modified: Thu, 06 May 2021 15:39:34 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19036 Connection: close
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 2f 2a 0d 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0d 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0d 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 Data Ascii: /* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&de
2024-04-29 20:13:45 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-04-29 20:13:45 UTC	2652	IN	Data Raw: 29 3e 6c 28 6f 2e 72 69 67 68 74 29 2c 67 3d 6c 28 61 2e 74 6f 70 29 3c 6c 28 6f 2e 74 6f 70 29 2c 75 3d 6c 28 61 2e 62 6f 74 74 6f 6d 29 3e 6c 28 6f 2e 62 6f 74 74 6f 6d 29 2c 62 3d 27 6c 65 66 74 27 3d 3d 3d 69 26 26 68 7c 7c 27 72 69 67 68 74 27 3d 3d 3d 69 26 26 63 7c 7c 27 74 6f 70 27 3d 3d 3d 69 26 26 67 7c 7c 27 62 6f 74 74 6f 6d 27 3d 3d 3d 69 26 26 75 2c 79 3d 2d 31 21 3d 3d 5b 27 74 6f 70 27 2c 27 62 6f 74 74 6f 6d 27 5d 2e 69 6e 64 65 78 4f 66 28 69 29 2c 77 3d 21 21 74 2e 66 6c 69 70 56 61 72 69 61 74 69 6f 6e 73 26 26 28 79 26 26 27 73 74 61 72 74 27 3d 3d 3d 72 26 26 68 7c 7c 79 26 26 27 65 6e 64 27 3d 3d 3d 72 26 26 63 7c 7c 21 79 26 26 27 73 74 61 72 74 27 3d 3d 3d 72 26 26 67 7c 7c 21 79 26 26 27 65 6e 64 27 3d 3d 3d 72 26 26 75 29 3b 28 Data Ascii: )>l(o.right),g=l(a.top)<l(o.top),u=l(a.bottom)>l(o.bottom),b='left'===i&&h\|\|'right'===i&&c\|\|'top'===i&&g\|\|'bottom'===i&&u,y=-1!==['top','bottom'].indexOf(i),w=!!t.flipVariations&&(y&&'start'===r&&h\|\|y&&'end'===r&&c\|\|!y&&'start'===r&&g\|\|!y&&'end'===r&&u);(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49808	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:44 UTC	543	OUT	GET /assets/script/globals/bootstrap.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42139 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "e2de-5c1ab1e459bc0+gzip+ident" Last-Modified: Thu, 06 May 2021 15:39:35 GMT Server: ECAcc (chd/0718) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 58078 Connection: close
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 76 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 70 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6d 74 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 69 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 5b 6f 5d 2c 73 3d 5f 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 72 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 73 29 67 28 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 29 2e 68 Data Ascii: this._element),g(this._element).addClass(vt).removeClass(pt).removeClass(mt);var i=this._triggerArray.length;if(0<i)for(var o=0;o<i;o++){var r=this._triggerArray[o],s=_.getSelectorFromElement(r);if(null!==s)g([].slice.call(document.querySelectorAll(s))).h
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 2e 64 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 67 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 6e 7c 7c 22 22 7d 2c 74 2e 5f 67 65 74 53 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 65 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 Data Ascii: .data("padding-right");g(document.body).removeData("padding-right"),document.body.style.paddingRight=n\|\|""},t._getScrollbarWidth=function(){var t=document.createElement("div");t.className=ae,document.body.appendChild(t);var e=t.getBoundingClientRect().wid
2024-04-29 20:13:45 UTC	8929	IN	Data Raw: 74 28 29 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5f 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 69 66 28 6e 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 29 2c 65 29 7b 76 61 72 20 69 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 69 66 28 69 2e 77 69 64 74 68 7c 7c 69 2e 68 65 69 67 68 74 29 72 65 74 75 72 6e 5b 67 28 65 29 5b 6f 5d 28 29 2e 74 6f 70 2b 72 2c 6e 5d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e Data Ascii: t(),[].slice.call(document.querySelectorAll(this._selector)).map(function(t){var e,n=_.getSelectorFromElement(t);if(n&&(e=document.querySelector(n)),e){var i=e.getBoundingClientRect();if(i.width\|\|i.height)return[g(e)[o]().top+r,n]}return null}).filter(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49809	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:45 UTC	541	OUT	GET /assets/script/welcome/welcome.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42706 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "46d-592e871363840+gzip+ident" Last-Modified: Thu, 19 Sep 2019 14:05:13 GMT Server: ECAcc (chd/078A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1133 Connection: close
2024-04-29 20:13:45 UTC	1133	IN	Data Raw: 09 2f 2a 20 77 68 65 6e 20 75 73 65 72 20 67 6f 65 73 20 74 6f 20 61 20 6e 65 77 20 73 6c 69 64 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 61 74 20 73 6c 69 64 65 20 2a 2f 09 0d 0a 20 20 20 20 20 0d 0a 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 73 6c 69 64 65 27 29 2e 6f 6e 28 27 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 29 3b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2e 61 63 74 69 76 65 Data Ascii: /* when user goes to a new slide focus on that slide */ $('.carouselslide').on('slid.bs.carousel', function (e) {$('.carousel-item').removeAttr('tabindex');$('.carousel-item').attr('aria-hidden', 'true');$('.carousel-item.active

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49810	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:45 UTC	544	OUT	GET /assets/script/welcome/jq.roughly.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 36086 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "acc-60a35a5c59dc0+gzip+ident" Last-Modified: Wed, 15 Nov 2023 19:09:51 GMT Server: ECAcc (chd/0725) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2764 Connection: close
2024-04-29 20:13:45 UTC	2764	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 76 61 72 20 63 6f 75 6e 74 65 72 44 61 74 61 2c 20 69 6e 64 65 78 3b 0d 0a 20 20 09 63 6f 75 6e 74 65 72 44 61 74 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 6f 75 67 68 6c 79 22 29 3b 0d 0a 09 66 6f 72 20 28 69 6e 64 65 78 20 3d 20 30 3b 20 69 6e 64 65 78 20 3c 20 63 6f 75 6e 74 65 72 44 61 74 61 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 6e 64 65 78 29 20 7b 0d 0a 0d 0a 09 09 76 61 72 20 73 74 61 72 74 44 61 74 65 20 09 3d 20 22 4e 6f 76 65 6d 62 65 72 20 32 30 2c 20 32 30 32 33 20 30 30 3a 30 30 3a 30 30 20 55 54 43 22 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: window.addEventListener('load', function () {var counterData, index; counterData = document.getElementsByClassName("roughly");for (index = 0; index < counterData.length; ++index) {var startDate = "November 20, 2023 00:00:00 UTC",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49811	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:45 UTC	636	OUT	GET /assets/images/welcome/premium/id-hero-22-woodflooryellowsweater.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:45 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 15360 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:45 GMT Etag: "253af-5da6b621d5a80" Last-Modified: Thu, 17 Mar 2022 15:07:06 GMT Server: ECAcc (chd/07A6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 152495 Connection: close
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 08 a0 03 00 04 00 00 00 01 00 00 01 90 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 90 07 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 64 e2 d1 aa 77 0d 84 37 24 f1 55 e4 b7 04 6d 38 22 b4 d1 77 73 fe 34 34 40 82 14 71 d4 53 84 ec 44 e3 74 71 f7 b6 81 86 ec 0c 0a e7 25 b4 6d ac 57 8e ff 00 8d 7a 34 b0 67 24 0e bd 78 e2 b0 6f 6d 00 ce 3f 01 5e 8d 1a 89 ee 78 f5 a0 e2 f4 38 92 5e 11 b7 19 ab 31 5c a7 f1 91 d4 62 a5 ba 80 02 78 3c 74 ff 00 0a cb 72 a8 c4 28 ae 8e 54 65 ed 1a 37 96 5d d9 5f d6 9a d3 46 a3 6e 70 7d 6b 0c 5c f1 ce 69 7e d4 c8 b8 c7 1d b9 ac a7 48 da 35 8e 8a 39 b8 f3 14 f3 ed db fc 6a f4 13 f0 19 86 3b e0 57 2b 0d d2 b1 da 31 cf ad 69 07 50 dc f0 3a 62 b9 e7 03 7f 68 8e ee ca 63 bb 71 f6 af 4a d1 2e dd 4a 95 35 e3 1a 7d d9 0c 30 7a 9a f4 3d 26 fb 69 04 9c 60 73 44 56 86 13 3d f3 4b ba 59 14 12 72 0d 74 26 15 93 8f 5a f3 ff 00 0f 4e 1c f0 71 5e 95 68 85 d4 64 1a e6 9c ad a1 30 Data Ascii: dw7$Um8"ws44@qSDtq%mWz4g$xom?^x8^1\bx<tr(Te7]_Fnp}k\i~H59j;W+1iP:bhcqJ.J5}0z=&i`sDV=KYrt&ZNq^hd0
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: b6 79 e8 7a d6 7b cc cc d8 27 20 f1 d7 35 5c 64 8f 7a 3e 55 e7 03 35 b3 68 e4 b1 2b 17 cf 23 af f3 a5 53 b7 ee f1 8e d4 cd c4 60 ff 00 2a 0e 43 66 a9 c9 31 f2 db 51 c0 92 43 67 1c e7 a7 ad 49 e6 07 61 91 9f 5a 84 9c 9c e7 da 80 aa 4e e0 71 c5 43 b1 4a 44 a3 24 e0 ff 00 93 52 17 f9 b7 1e 47 bd 57 0c 0f 4a 76 e1 c2 b8 c9 a8 71 b9 ac 24 59 79 00 5e 47 1d b3 4d 2c a7 86 39 ff 00 3d aa b6 0b 9d a0 7e 23 9a 70 93 b7 72 2b 19 c0 d5 4c 6b fc fc 74 c7 73 54 25 8d 48 da 7a 1a d4 62 c4 61 8f a5 42 c0 ba e1 3b f3 8c 56 17 b1 a6 e6 0c 90 9c f2 30 6b 3a 58 06 70 78 ae a5 e2 38 c6 2a a4 96 e0 e5 88 cd 6b 1a a6 33 a1 73 94 96 07 5c 67 a7 a9 e6 aa 94 c7 41 5d 4c d6 d9 ed 9a a0 d6 c4 9e 9c e3 3f 8f 4a e8 8d 53 8e a5 06 63 a2 e3 e5 03 ad 58 40 30 01 3c ff 00 3a d0 16 b8 e1 Data Ascii: yz{' 5\dz>U5h+#S`Cf1QCgIaZNqCJD$RGWJvq$Yy^GM,9=~#pr+LktsT%HzbaB;V0k:Xpx8k3s\gA]L?JScX@0<:
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: da 46 48 69 19 9d d5 1a 4f 2c 1d fe 4c 25 d4 cf 28 05 61 42 1e 42 17 9a e4 7e 36 fe d3 1e 01 f8 33 6d 75 a5 4d 2a ea 7e 25 5b 09 2f 6c f4 78 e4 58 e4 ba db 21 89 23 59 5b e4 57 92 40 c9 1a 73 2c 8c ac b1 a3 b0 db 5f 88 de 11 b4 8f 58 f8 c1 a2 78 ff 00 c3 ba 1e a5 f1 0b e2 4a eb 32 c0 62 f1 41 b8 fb 36 a1 6b 10 b8 81 ae ed 04 c5 5a c0 47 22 41 0c b3 38 64 8e 10 85 ad fc c4 91 07 ea b7 c3 8f d8 9b c2 7a 1c f2 ff 00 c2 5f 75 77 a8 68 cd 0a 25 96 93 71 70 f3 1b 64 92 57 b9 b9 86 59 c9 c3 24 ae c9 14 a9 02 c4 93 ac 08 f3 f9 ae ce ec 01 e2 17 69 f1 ef f6 b5 f1 6b ac 12 1b 4f 0c e9 ba da 5c 5a 96 49 6c db 4d b8 b1 b3 04 c7 25 c5 bc aa d3 ef 9e 65 fb 8d e7 00 c1 d1 ad 27 83 07 f4 cf c0 9a 0e ab e1 7f 05 69 1e 18 d7 75 39 f5 9b dd 3a d2 1b 69 f5 0b 9f f5 d7 52 44 Data Ascii: FHiO,L%(aBB~63muM*~%[/lxX!#Y[W@s,_XxJ2bA6kZG"A8dz_uwh%qpdWY$ikO\ZIlM%e'iu9:iRD
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 53 c0 99 06 33 ff 00 3d 14 6d 3c 85 23 f3 c2 6d 46 2c 90 1b e5 c7 4e 9c d5 13 75 b1 15 d4 0c 93 c0 15 d1 83 c5 ce 85 45 52 1b a3 9f 32 cb 28 e3 28 4a 85 65 74 cf f4 30 b0 d6 7c 37 e3 9f 0c 58 fc 43 f0 3d dc 77 fa 56 ab 0a 5c 43 3c 27 72 3a 38 ca b0 fe 47 b8 3c 70 6a 1c f1 c7 3c f7 af e5 cb fe 09 47 ff 00 05 0b 8b e0 1f 8b 07 c1 7f 8b 77 e7 fe 10 9d 72 4c 45 34 9f 32 e9 d7 6f 80 1f b9 10 cb d1 c0 e1 4e 1f 1f 7a bf aa 1d 4a c1 2d 18 4f 6e 44 90 4c 37 46 c3 91 83 c8 c1 1f a7 5e 2b f5 fc b7 30 86 26 92 a9 1f 99 fc a5 c4 bc 3d 57 2d c4 ba 33 d5 74 7d d7 f9 f7 32 d7 70 3b 48 3f e3 e9 48 ca 36 81 d8 77 cd 3c 9c f4 18 3f a7 4e b4 d2 30 06 2b d0 3e 78 02 77 e8 69 40 00 f1 f9 9f f3 da 9f 1c 4f 3b f9 31 29 76 6e c2 ba fd 3b c3 6a 84 4d 7e 43 1e a1 07 41 f5 f5 a0 0e Data Ascii: S3=m<#mF,NuER2((Jet0\|7XC=wV\C<'r:8G<pj<GwrLE42oNzJ-OnDL7F^+0&=W-3t}2p;H?H6w<?N0+>xwi@O;1)vn;jM~CA
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: a7 f2 ac 29 ac fe 71 c1 f6 ff 00 eb 57 b2 df 69 63 21 71 c3 7e 1d ff 00 1a e4 6e f4 b6 0e 1c 8c 76 1c f5 ff 00 39 af 5f 0f 89 be e7 8b 8a c2 75 47 0a d0 a8 e5 d7 3e bb 7f 5a 91 62 f2 c0 29 9c 81 9c 2f ad 6d c9 65 33 38 e3 03 8c f1 57 ad f4 b7 20 06 19 3c ee c1 e3 f2 af 52 8a e6 67 87 5f dd d4 cc b3 b2 91 be 62 a7 39 1c 74 e2 bb ab 0b 30 36 af 53 ea 3a f5 f6 a8 ac b4 e5 58 c3 a8 20 0e 3d 6b a7 b5 b7 1b 30 83 6a fa f5 1c 7e 15 f4 98 2c b9 b7 73 e7 31 d9 8a 8a b1 62 de d3 73 6d 2b 9f cb bd 6e da 69 c7 70 91 f9 3d bd 85 3e ca d5 4e 37 80 40 1f cf d0 d7 4d 69 6d 1f 95 d0 71 c7 18 cf 35 f5 d8 3c ba c7 c7 63 33 17 2d 88 ed ac 16 38 d6 43 f3 2f 50 7a 75 ad 10 90 c7 99 01 04 ff 00 8f a1 a8 4d c2 45 c0 c7 e7 f8 56 6c f7 64 a1 6e bd 3d 80 ef f9 d7 d4 e1 b0 76 dc f9 Data Ascii: )qWic!q~nv9_uG>Zb)/me38W <Rg_b9t06S:X =k0j~,s1bsm+nip=>N7@Mimq5<c3-8C/PzuMEVldn=v
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: f4 9f 19 4a f6 f2 b0 92 35 dc 73 cd 78 26 a5 74 e2 56 f9 08 c7 ad 45 08 26 8f 33 30 ac e2 f5 67 4b 6d ab c2 0e 5c fe 3f e4 57 4b 67 ad c6 cc 3e 60 00 af 22 82 6c b6 58 63 3c 9e 6b 5e 02 41 1b 5b 04 fb d5 55 c3 a7 b9 cb 86 cc 24 b6 3d d3 4e d6 d5 d9 51 4e d5 1c 71 81 f5 e6 bd 97 c3 fa 84 20 2a c4 d9 62 00 cf f4 af 93 74 fb 99 c3 2a a9 fc 6b d9 7c 37 a9 5c 22 2e 41 07 d4 7b 7b 57 cf e6 38 5b 2d 0f b8 c9 33 06 de a7 d7 ba 45 d4 4b 80 a7 e7 03 af 61 5f 48 fc 3b f1 04 11 4c 88 18 f9 83 b8 eb 9a f8 83 41 d4 dc c4 23 8c fc c4 72 47 4f c2 bd ff 00 c0 57 9e 5c 8a 64 62 5b 3c 30 ed 5f 1f 88 83 5a 9f a0 d2 9a a9 1b 1e 01 ff 00 05 08 d0 e7 f0 2f c4 5d 1b e3 86 91 1b 49 67 a9 c4 b6 9a 88 5e ec 9f 75 bf de 0b f9 d7 f4 8f ff 00 06 ec ff 00 c1 54 34 cf 06 df 58 fe c3 ff Data Ascii: J5sx&tVE&30gKm\?WKg>`"lXc<k^A[U$=NQNq btk\|7\".A{{W8[-3EKa_H;LA#rGOW\db[<0_Z/]Ig^uT4X
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: 76 3d b0 3f fd 55 b3 6b a8 cf 19 3b 5b 83 82 c0 f4 e7 d3 8c d7 33 a2 77 d3 c6 dd 9f 41 68 3e 21 2e 56 de 4e 04 78 55 c7 51 ee 3e 95 b3 f6 9b 3d 46 11 6d 32 02 50 65 88 ea 49 3f 2f 3c f3 8e f5 e0 d6 77 d0 ff 00 cb 3c 80 4f cd d8 1c 71 fc bd 2b b1 b2 d5 25 90 79 76 84 6d fe 36 e7 27 3f d3 9f ca b0 94 1a 77 47 a7 4a ba 9a b3 3b e9 fc 3e 5a 36 b8 b6 22 29 01 e4 76 18 f4 c7 eb 55 7f b4 2e 20 8f 63 2e e3 8e d9 ff 00 3e f5 16 83 a9 f9 39 8e 50 4e ef bb 9f 4f f2 38 ef 5b 51 5d da dd 6d 7b 82 4a 6d da 07 00 64 9e e7 d7 9c 57 b3 97 71 06 23 0e ed 17 a7 63 c3 cd 78 5f 0b 8a 57 92 b3 ee 73 b2 6a 11 32 07 63 8c 9c 11 eb e9 9e 3f c2 b2 e7 95 1b e4 7e 3a 74 3d 8d 75 32 f8 76 0b b9 a5 fb 28 21 c7 2b c8 c1 c7 4f c7 da b8 6d 4f 47 d6 ac a4 de e7 72 b7 18 1c 9c fd 3d 2b ef Data Ascii: v=?Uk;[3wAh>!.VNxUQ>=Fm2PeI?/<w<Oq+%yvm6'?wGJ;>Z6")vU. c.>9PNO8[Q]m{JmdWq#cx_Wsj2c?~:t=u2v(!+OmOGr=+
2024-04-29 20:13:45 UTC	16383	IN	Data Raw: ff 00 63 6b 26 fe c7 f1 03 f3 e5 8b 98 40 f4 fb ad 9f e7 5f 54 ea 56 ae 24 24 72 0f d6 be 6a fd 8c a4 0f 07 89 2c 63 3f f2 d2 09 31 e9 90 ea 4d 7d 79 a8 da 0e 5f d7 3e df fd 7a fd 16 85 5d 11 f9 25 4a 2a c7 c2 bf 1f fe 14 cd ad 21 f1 cf 85 d3 66 a9 68 37 ca ab f7 a5 55 e7 23 1c ee 15 f5 7f ec ef f1 47 c2 7f b6 7f c1 b7 fd 9a be 2d ca 89 e2 6d 3a 3c e8 f7 b2 e0 3e e5 18 54 dc 71 cf 6f 7f c6 a2 d4 6d b0 4e 06 00 e6 be 0e f8 b3 e0 fd 6b e1 57 8b a0 f8 b7 f0 f9 9e d8 47 30 92 5f 2f 8f 2a 4c e7 77 1f c2 d5 ef 65 b9 83 a3 3b ee 9e 8d 77 47 85 98 60 f9 e3 6d 9a d5 3e cf bf a7 46 ba ad 0f 60 fd 9b bf 68 6f da 33 fe 09 2f fb 6a 69 5f 1c 7c 06 ad 6f ac 78 66 e8 c5 a8 d8 39 22 df 52 b0 90 e2 7b 79 07 43 1c c9 f7 4f 54 7d ac 30 ca 2b fd 6c ff 00 64 2f da c7 e0 c7 ed Data Ascii: ck&@_TV$$rj,c?1M}y_>z]%J!fh7U#G-m:<>TqomNkWG0_/Lwe;wG`m>F`ho3/ji_\|oxf9"R{yCOT}0+ld/
2024-04-29 20:13:45 UTC	5048	IN	Data Raw: 92 a4 05 18 c7 eb 5c c4 73 2a 00 ce 73 de ad 2d d2 a6 70 46 ec 71 ff 00 ea a0 c4 ed ad e6 5e 43 1e 7d bb e4 7e 55 6c 38 63 c8 f4 c0 cd 71 96 d7 ab 26 36 9c 70 33 5b ab 78 a3 05 98 7a e3 d6 82 64 8b d2 c4 5c 64 7e 20 8e 6a a4 b0 f5 e8 6a c8 b9 c1 20 f4 3d 41 35 03 3f 07 77 3f 5e d8 a7 ca c9 52 b1 42 4d ca a5 71 83 ce 08 15 4f cf 11 b7 a9 ce 3d 6a f4 d2 86 e1 4f d0 8a c9 98 82 df 2e 72 7f ad 27 03 48 cc b2 d2 86 5d ca 79 cf 6e d5 95 34 87 96 63 8f 4c d5 69 6e 76 fd e1 e9 c7 35 9f 73 70 64 23 9c 63 fa d4 46 36 66 aa 77 27 95 88 ce 7a 56 05 c4 9c 1e 38 03 1d ea 67 be 74 c8 3f 4f ad 64 49 39 91 9d 13 92 a3 3d 6b da c3 c9 35 63 cc aa 9a 66 5d c1 69 0e 07 04 76 f4 fa 53 62 e3 68 5e 3e 9f 5a bc d6 99 61 80 78 e0 50 6d 0a af ca 79 eb 8f f0 ae 86 c9 45 27 b9 c0 29 Data Ascii: \s*s-pFq^C}~Ul8cq&6p3[xzd\d~ jj =A5?w?^RBMqO=jO.r'H]yn4cLinv5spd#cF6fw'zV8gt?OdI9=k5cf]ivSbh^>ZaxPmyE')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49812	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:47 UTC	527	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	853	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:48 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 650 Connection: close x-amz-id-2: CVIWUzhXbL8kEPsw9eqLi+vo2RVFsLwccZkbXFgU2I6jYf49hb0B/QkA3Oyo8mledU+V1Uj27s8= x-amz-request-id: 2D295QHHB4YS63NJ Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 921 Expires: Mon, 29 Apr 2024 20:18:48 GMT Accept-Ranges: bytes Set-Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw; path=/; expires=Mon, 29-Apr-24 20:43:48 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87c1f46739d56160-ORD
2024-04-29 20:13:48 UTC	516	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 72 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 74 6f 53 74 72 69 6e 67 28 61 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 72 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 3b 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d 2d 29 69 66 28 6b 5b 63 5d 29 70 3d 70 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 27 5c 5c 62 27 2b 65 28 63 29 2b 27 5c 5c 62 27 2c 27 67 27 29 2c 6b 5b 63 5d 29 3b 72 65 74 75 72 Data Ascii: eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]\|\|e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);retur
2024-04-29 20:13:48 UTC	134	IN	Data Raw: 74 7c 68 72 65 66 7c 61 70 70 65 6e 64 43 68 69 6c 64 7c 77 69 6e 64 6f 77 7c 70 72 6f 74 6f 63 6f 6c 7c 68 74 74 70 7c 66 61 73 74 7c 66 6f 6e 74 73 7c 6e 65 74 7c 61 70 69 54 79 70 65 7c 63 73 73 7c 70 72 6f 6a 65 63 74 69 64 7c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 7c 68 65 61 64 7c 6c 69 6e 6b 7c 62 6f 64 79 7c 7c 6c 6f 63 61 74 69 6f 6e 27 2e 73 70 6c 69 74 28 27 7c 27 29 2c 30 2c 7b 7d 29 29 Data Ascii: t\|href\|appendChild\|window\|protocol\|http\|fast\|fonts\|net\|apiType\|css\|projectid\|createElement\|head\|link\|body\|\|location'.split('\|'),0,{}))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49814	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:47 UTC	626	OUT	GET /assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1267	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 42128 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "b641-504fd43115680" Last-Modified: Thu, 09 Oct 2014 13:18:02 GMT Server: ECAcc (chd/0784) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 46657 Connection: close
2024-04-29 20:13:48 UTC	15135	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 b6 41 00 0f 00 00 00 01 95 e0 00 01 00 00 00 00 b2 40 00 00 04 01 00 00 09 2a 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 18 2d d5 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 40 00 00 00 40 03 0f 0e ae 66 70 67 6d 00 00 02 f8 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 30 00 00 00 10 00 00 00 10 00 12 00 09 67 6c 79 66 00 00 04 40 00 00 91 8c 00 01 49 68 12 7b 34 d4 68 65 61 64 00 00 95 cc 00 00 00 36 00 00 00 36 e9 5c 32 97 68 68 65 61 00 00 96 04 00 00 00 21 00 00 00 24 07 6f 04 83 68 6d 74 78 00 00 96 28 00 00 02 e2 00 00 06 18 49 94 2d db 6b 65 72 6e 00 00 99 0c 00 00 0b 1e 00 00 1d 4c 1c cf 17 ab 6c 6f 63 61 00 00 a4 2c 00 00 04 Data Ascii: wOFFA@*OS/2XV`-cmapt8cvt @@fpgm8gasp0glyf@Ih{4head66\2hhea!$ohmtx(I-kernLloca,
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: f5 3d b8 16 59 14 8b da 77 51 64 7a 7d ca 4c 3b b5 a8 1d 5a d4 ae a4 16 e9 c7 b1 da a8 85 6e 11 e9 1f 51 03 4d 0a b2 54 8f d9 44 f5 0c aa c7 cc 2a e4 af 01 a4 89 06 ed 63 52 9e 5c 14 7f 44 eb 3e c4 fe 5b d3 26 1e 7d b1 0a 8e ed b4 64 b8 4c 96 f5 b0 b0 88 4d ca 08 5c bd 16 8e 8b 79 cf 37 c5 10 bd 81 9d d0 b0 a2 23 5a 5b 4d 60 90 1c 6c 50 30 ef d0 07 c9 15 83 0b 18 1e e1 ae 18 7d 69 c4 d6 47 3f ff a1 b7 a8 6f 79 9f 6a a8 1e 67 97 73 5e 02 2d 27 0d df 66 55 53 8b e6 75 6b 3b 8a c9 b5 11 97 90 85 bc 95 42 d2 86 c9 a6 df 49 8b 16 b6 d2 12 85 0a f5 f2 d2 1f b3 68 b4 95 91 1a 6f d0 e5 75 8b 11 34 be f8 40 8a 32 09 2a e4 3a b0 11 78 99 40 85 e2 c2 5f ae 4b 84 a0 47 41 e6 28 7e e7 2d 00 de 41 ce ab 7f a2 d3 c7 08 e8 31 7a b1 5a 5e 54 09 fe 5e 00 93 72 25 80 b7 c2 Data Ascii: =YwQdz}L;ZnQMTDcR\D>[&}dLM\y7#Z[M`lP0}iG?oyjgs^-'fUSuk;BIhou4@2:x@_KGA(~-A1zZ^T^r%
2024-04-29 20:13:48 UTC	15139	IN	Data Raw: 77 ee d8 bb 6f 3c 77 bd 7e 01 8d 01 33 ee e2 9d ab c6 5d 2c 0e b4 6c c4 5d 34 22 31 1a b1 19 8d b8 8b 46 28 45 23 b8 a2 b1 9a 18 01 18 8d 90 8c e7 56 8a b2 08 eb d6 7f d1 37 8a a4 fe 92 e6 14 ff b1 28 8a 3c d9 3c 95 9b dc db 3c 37 f5 b3 bc 56 a4 79 31 30 02 b7 df ce c4 66 ce 93 61 b3 bd bd 0c af fd 6d 4e 01 5b 29 15 50 ba 8c 45 5f ea 56 86 d9 87 7d 88 53 ca 04 0d 87 72 1e 74 e5 fc 54 39 2d 9f 00 6a 7a 8f bc 4e 52 98 1d 07 7a ee 9c 92 d7 b7 39 f6 e1 29 86 cf 7e 95 89 34 10 fb f1 ab 9c 34 cc f6 4a e2 20 28 57 c9 a6 4f 01 6f cf 23 a1 81 0d a4 8d 4d 12 4f f2 10 7d d5 84 6e b4 73 e5 ec 3c 23 ec b2 82 6a 23 c7 e0 8c ea 64 ad 81 6b db a2 4c 3a 2b af 73 9a 8a 5c 43 0b 2d d8 55 e6 14 c3 41 b5 ad 62 7e a3 8a cb 57 b6 8f cd 36 8b d6 ad d1 e6 09 86 9d 9d 83 e5 63 15 Data Ascii: wo<w~3],l]4"1F(E#V7(<<<7Vy10famN[)PE_V}SrtT9-jzNRz9)~44J (WOo#MO}ns<#j#dkL:+s\C-UAb~W6c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49815	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:47 UTC	626	OUT	GET /assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1305	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 42735 Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "e542-504fd434e5f80" Last-Modified: Thu, 09 Oct 2014 13:18:06 GMT nnCoection: close Server: ECAcc (chd/07A9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 58690 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 e5 42 00 0f 00 00 00 02 04 0c 00 01 00 00 00 00 e1 40 00 00 04 02 00 00 09 2b 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 12 2b a8 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 03 43 0e fb 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 19 00 09 67 6c 79 66 00 00 04 48 00 00 c0 b0 00 01 b7 c8 7d 95 00 6e 68 65 61 64 00 00 c4 f8 00 00 00 36 00 00 00 36 e9 5a 31 79 68 68 65 61 00 00 c5 30 00 00 00 21 00 00 00 24 07 5e 04 87 68 6d 74 78 00 00 c5 54 00 00 02 d6 00 00 06 18 20 00 38 11 6b 65 72 6e 00 00 c8 2c 00 00 0a fe 00 00 1c c2 08 f7 06 d0 6c 6f 63 61 00 00 d3 2c 00 00 03 Data Ascii: wOFFB@+OS/2XV`+cmapt8cvt HHCfpgm8gasp8glyfH}nhead66Z1yhhea0!$^hmtxT 8kern,loca,
2024-04-29 20:13:48 UTC	1	IN	Data Raw: 43 Data Ascii: C
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 21 5d b3 22 c3 f5 23 45 c3 a9 b6 81 06 87 33 dc d3 34 b0 b0 60 6d d9 c5 e7 f7 6d 9c e3 af 9b b3 71 a0 65 69 7f 83 55 9f 68 ef aa ef 1e 8d 86 47 52 81 79 7d 13 bb a3 0b ce eb ed dd be b8 d9 dd 32 af 4d c8 2e 1e ab cb 84 3f 40 8b be 6b 96 4f 19 a2 6e a5 27 99 72 3e 2c 36 9d 0f e3 94 d8 f7 70 39 2b 8b f0 06 ce 71 f4 65 32 d0 c4 5a a9 20 83 77 04 6f 4a 3f 50 15 8c cb 3c a8 7a f7 1d 9c 42 93 3d 4c d7 60 73 aa 1a 25 3c f9 6a d3 a4 f4 4f 66 dc 6c ea ca b3 b6 7c 57 7e 89 67 ee da 19 8e 8a d2 6f 57 ba 2b da a5 24 78 44 12 19 47 7c 54 69 57 53 32 a4 e8 69 32 55 28 b3 ea 33 6a c9 cb b3 cb e8 86 cd b8 69 08 23 e6 90 b8 3b 3d c3 5d 57 0f a5 42 33 ba 96 24 c6 35 d9 9c df d2 17 76 e8 87 cf 24 21 a6 66 f0 fe d4 c9 05 4a 3c 9c b7 48 88 07 bd 48 33 fb da 42 f2 a0 48 8b 18 Data Ascii: !]"#E34`mmqeiUhGRy}2M.?@kOn'r>,6p9+qe2Z woJ?P<zB=L`s%<jOfl\|W~goW+$xDG\|TiWS2i2U(3ji#;=]WB3$5v$!fJ<HH3BH
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ae 3d a4 17 84 da f7 f1 e7 b0 73 1c 14 4c 5c 60 27 49 2d fd 08 60 32 0a fe 51 03 3f a4 f2 58 15 12 52 0b a5 94 6d 86 d2 8b a1 1b e8 0c db c8 eb 41 74 ae e6 86 f4 f8 af c9 4e d5 e3 25 99 54 db 40 d4 66 af eb 69 1c 18 2f da 50 fe ee 2d e1 bf 26 37 4d a5 d6 74 55 d7 f4 6f 19 68 59 d9 17 35 ab 33 ed 5d b5 dd 13 b1 ba 91 54 68 b8 77 cb ae 82 a6 0b c9 4c 47 0a 9a 46 b7 76 2d d9 3e d9 ec 6e 19 6e 33 ce 58 13 d1 20 e3 92 fe f9 22 5c f0 08 42 c3 f0 21 99 21 ba 77 91 f6 07 81 a3 52 84 4e b8 82 da 08 1d 6f 7e 3b a0 6d 4e 1a ed 1a f2 db 3d a5 f7 b7 9b bc 37 ae 25 5a 22 26 66 3f 37 3c 03 71 5a 32 fa ca 19 06 b6 71 ec ad 33 0c 3c c9 f1 69 66 08 10 74 47 03 53 19 8d 4c 77 34 73 4d 9b 41 77 cc bf 08 7f 3e 49 63 ff 7f 88 0a 1a 86 3f f5 19 21 a9 3d 2a 34 13 66 20 80 90 ff Data Ascii: =sL\`'I-`2Q?XRmAtN%T@fi/P-&7MtUohY53]ThwLGFv->nn3X "\B!!wRNo~;mN=7%Z"&f?7<qZ2q3<iftGSLw4sMAw>Ic?!=*4f
2024-04-29 20:13:48 UTC	9540	IN	Data Raw: 9c 06 5c 04 38 90 b4 2a 15 ac e8 46 5d bc 07 be a4 87 75 f1 1e 58 24 1e 20 67 3c 70 8e 78 94 71 28 1b a1 ec 84 72 1d 69 bd 85 99 21 9b 05 87 ed ff 6f 67 57 17 1a c5 15 85 ef dc bb 93 ed 66 76 b3 c9 d4 cd 76 d3 c4 a0 81 1a ad ba da 4d 22 da 82 d1 90 a0 06 ad 79 58 a5 01 5f 8a c2 2a 84 68 9e f4 2d 56 28 15 1f 2c 94 56 1a 5a 44 28 fd a1 85 be f5 61 5b 4a 09 56 e8 82 ad 58 a8 58 f6 21 0f 52 f0 41 22 82 82 25 66 3d 3f f7 ec ce ec 6e 0c f8 70 98 93 21 7b 67 ee 77 67 ce 3d f7 cc 39 df cd 75 18 18 45 17 13 25 69 f1 95 4e 61 fc a8 a5 c7 a1 14 50 67 2a 9f cf 2f 5f 3b 7a 74 ff 58 bc 37 ee 75 79 bd eb 8f 1f a7 9d 26 f5 fb 85 c2 b7 e3 07 77 ef 89 44 0e 44 cc 6b eb f7 8d 2f 8f c1 e3 5c 1b a3 d7 9d 4c 68 84 32 0d 75 a3 cc 69 83 39 a2 78 4c 96 39 ed 2a 65 b9 80 7b ca 2b Data Ascii: \8F]uX$ g<pxq(ri!ogWfvvM"yX_h-V(,VZD(a[JVXX!RA"%f=?np!{gwg=9uE%iNaPg/_;ztX7uy&wDDk/\Lh2ui9xL9e{+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49816	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	626	OUT	GET /assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1267	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 42151 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "c9e5-504fd432098c0" Last-Modified: Thu, 09 Oct 2014 13:18:03 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 51685 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 c9 e5 00 0f 00 00 00 01 c5 18 00 01 00 00 00 00 c5 e0 00 00 04 05 00 00 09 2c 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 1a 2b a3 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 04 6b 0d 63 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 16 00 09 67 6c 79 66 00 00 04 48 00 00 a4 e1 00 01 77 f4 d2 5a ae 68 68 65 61 64 00 00 a9 2c 00 00 00 36 00 00 00 36 e9 23 09 93 68 68 65 61 00 00 a9 64 00 00 00 21 00 00 00 24 07 45 04 7f 68 6d 74 78 00 00 a9 88 00 00 02 ea 00 00 06 18 32 dd 34 05 6b 65 72 6e 00 00 ac 74 00 00 0b 3e 00 00 1d 58 16 44 17 a8 6c 6f 63 61 00 00 b7 b4 00 00 03 Data Ascii: wOFF,OS/2XV`+cmapt8cvt HHkcfpgm8gasp8glyfHwZhhead,66#hhead!$Ehmtx24kernt>XDloca
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 1e 8e 31 36 6c ab 2c ab bc 12 8c 68 b4 c4 e9 82 24 16 09 a9 45 03 d6 bd 50 d0 71 a2 e1 1e 70 82 60 70 28 07 e0 69 01 e8 d7 00 f4 6b 00 fa 35 40 43 39 00 fd 1a 60 7d 8a eb 22 01 5a 92 16 3d 3a 49 ba c0 7e b2 f2 6f a3 0f 5d c6 0d 83 0b c2 76 37 0a a2 6a 7a 5f 31 ad 48 50 4d 94 95 ed 3a 0a b6 db cf 42 e1 80 67 00 d5 54 5a cd d8 fc 9a 5b 68 f3 9a 81 76 56 69 8c 75 75 7b fb 36 17 fc 81 c1 ed 43 dd 5b 3d ca c1 d2 ac 45 cd c7 27 56 8d af 56 f3 91 a6 c7 65 c5 19 74 d4 75 ae d9 db d3 b7 6f 4d 32 de 39 56 ba d0 5a cc 86 f6 6f d8 b2 37 98 5d a6 c9 48 f9 5a 26 23 ff fe a2 32 72 49 a9 57 43 c2 ee af c8 de fe 0b 06 de bb 62 22 82 04 2e 66 41 c3 37 39 d9 c6 5a 5c 8f 78 9f d2 4e e8 18 4e 2e eb 5a 64 75 f0 5a 45 df d2 d6 ed 73 58 6a cd 5e 73 4b 36 e6 02 69 b7 cf 99 08 3b Data Ascii: 16l,h$EPqp`p(ik5@C9`}"Z=:I~o]v7jz_1HPM:BgTZ[hvViuu{6C[=E'VVetuoM29VZo7]HZ&#2rIWCb".fA79Z\xNN.ZduZEsXj^sK6i;
2024-04-29 20:13:48 UTC	2	IN	Data Raw: 45 7f Data Ascii: E
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 48 f9 ac 8f 92 bc 5f f0 9d 19 85 76 3a 15 7f 28 fa bc ae ec ef 46 c9 be 4f ce 4b a7 39 7f f9 3e f5 53 ba 93 69 c8 21 53 b3 92 c8 69 77 93 c5 6e 70 0a b7 2b 7d cb 2c db eb cd 2a 86 75 3b 7f 95 69 f2 87 f4 54 cb ca ab 05 75 c6 75 a0 f7 3a f4 6f e7 59 b1 09 b9 77 40 c5 06 b6 2d 09 ba dd 81 51 f7 93 57 c8 93 44 c4 63 ec a4 ac 86 78 cd 90 c3 b1 8b 6e ce 24 fc f0 4e 2d 40 22 f4 02 00 97 e0 77 0d 1d da f1 b2 ba 9d af 8f 0c 2d b9 68 59 f8 18 09 e1 73 8c ad df 62 14 5d 10 95 20 dd 14 98 24 c6 d6 6f 31 a0 3c ad e2 c9 55 5a 07 c9 94 ac ca aa b8 b6 70 dc d4 4b 70 14 50 91 77 fd ad a7 d4 bd 42 c1 a3 da d8 b5 58 4a a7 0e b1 cd d0 00 00 5b a5 bd 1e 2a 3c 1a d8 82 a7 41 3b 0a 3f 69 c1 d3 00 47 a5 01 f6 73 83 d6 0b bf 49 f8 a1 dd 5b 35 7c 58 83 68 38 c3 d1 72 46 01 d8 25 Data Ascii: H_v:(FOK9>Si!Siwnp+},u;iTuu:oYw@-QWDcxn$N-@"w-hYsb] $o1<UZpKpPwBXJ[<A;?iGsI[5\|Xh8rF%
2024-04-29 20:13:48 UTC	2534	IN	Data Raw: 74 de 53 69 04 33 e7 4a c2 ac 41 9a 2d 53 7e 8a 60 e4 71 a9 79 f4 48 a5 90 83 44 58 bc c2 2c 85 3e 91 42 c6 39 58 86 37 e8 8a 06 16 95 46 c5 4a db 94 45 25 8f b3 be 0a 95 8c a1 df f0 3c 43 cd 80 e6 50 96 0a fc bd c0 6d ba 8c d1 09 30 0f 14 d0 90 7d 3e 92 dd e5 3e 4d 57 8c 03 0b 3d 10 d4 c1 84 d9 a3 02 90 71 b0 c7 3f da de 7d dc 7c b2 d3 fa 64 8b 6f b7 b7 37 b6 5b ed 4b ab de 99 60 ec 94 09 56 30 c3 38 cb 58 0f 9e 86 0d 98 84 ef 88 29 d6 87 8f 81 f9 18 fe c7 30 26 59 ca 42 58 17 81 14 c1 7b 02 73 21 ac 57 30 8e 7b 0a 78 0a 98 11 ac 0b 3b 24 e9 2c 41 43 5c ad c0 39 d4 c8 c1 56 06 eb 39 cb e1 89 1a 4b d0 84 ab fa 35 1f 3a 60 35 07 a9 47 76 24 d3 d5 fa 21 ac f5 5e 28 1a 47 bf 72 58 5f 90 df 03 d0 61 67 bf 83 4f 8b ed b2 36 3c 39 db 80 cf 16 6b c2 7f 1b a4 97 Data Ascii: tSi3JA-S~`qyHDX,>B9X7FJE%<CPm0}>>MW=q?}\|do7[K`V08X)0&YBX{s!W0{x;$,AC\9V9K5:`5Gv$!^(GrX_agO6<9k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49817	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	642	OUT	GET /assets/images/welcome/scroll-red.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/assets/css/welcome/welcome-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42554 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "604-591bbfef60080" Last-Modified: Wed, 04 Sep 2019 15:38:26 GMT Server: ECAcc (chd/0733) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1540 Connection: close
2024-04-29 20:13:48 UTC	1540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 be 49 44 41 54 68 05 e5 9b 5b 68 1c 55 18 c7 bf 73 ce 6e 0a 6b 42 1a 34 97 4d 22 b2 66 a5 14 b4 11 fa a0 42 6d 8d 08 2a 08 82 82 18 11 d2 2a 4d 15 f1 41 7a 41 41 0b de 40 aa 7d f0 c9 cb 83 a6 0f a6 6f 82 20 e8 5b 7a 83 a6 42 9f 4b 71 d3 34 cd 26 7b 89 a1 94 d4 a4 6d 32 73 fc be b3 3b eb ee ec cc ec ce ec 4e 76 67 73 20 99 99 73 f9 be ef 37 67 e6 cc cc 39 ff 65 e0 53 92 fd bb 23 59 b8 b5 47 4a 7d b7 64 72 07 03 d8 01 12 fa 24 83 0e 00 86 7f 94 e4 0a 93 b0 02 0c d2 12 e0 2a 93 ec 2a 63 fc 72 0f 74 5e 60 8b 97 57 73 75 ea fb 1f e3 a8 5f 4a 0f 0d f5 c0 aa 7c 03 a1 5e 41 ab 4f 80 94 6d 9e ac 33 76 0f db 5d c2 93 f1 Data Ascii: PNGIHDR<<:rsRGBIDATh[hUsnkB4M"fBmMAzAA@}o [zBKq4&{m2s;Nvgs s7g9eS#YGJ}dr$crt^`Wsu_J\|^AOm3v]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49819	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	616	OUT	GET /assets/images/welcome/featured/pp-greendoor.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 7895 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "127ba-5d8c4c3c1c940" Last-Modified: Thu, 24 Feb 2022 14:54:53 GMT Server: ECAcc (chd/073A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 75706 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9f a0 03 00 04 00 00 00 01 00 00 01 c3 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c3 02 9f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:48 UTC	1	IN	Data Raw: 68 Data Ascii: h
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 46 ea 56 fd d9 8f 09 cf 4e 2b cf a3 94 c7 a5 5c a1 ea 54 73 e9 cd 7b b1 8b 97 53 fb 0e fe f2 4c e2 2e 63 5f 22 55 07 18 35 ce a1 c3 f9 6a 39 26 b7 2f 66 06 da 42 a7 39 3d 6b 02 2d c9 20 c1 18 ce 6b 49 a6 b5 3a 8e 92 d9 71 00 56 3d 4d 7e f3 7f c1 07 2f 5b 4e fd b7 fc 38 c8 32 66 82 e2 26 6f 40 c8 6b f0 6b 4e 61 1a 1d ca 1c 60 8f 9b a8 27 bf e1 5f bb 9f f0 42 b8 1e f3 f6 d5 f0 e3 5b 9e 20 b7 9d 9b 1c 8f b8 71 45 46 9d 26 1d 4f ee ee 43 1b c9 21 1c 7c d5 19 c2 e1 97 b9 fc 2a bc 2d be 41 bf ab 54 a1 8f cb 9e 39 ae 68 ea 85 72 c2 02 ab cf 1c d4 81 d4 46 01 f5 aa e8 f9 2e a9 ce 0d 0b 1b c7 cb 90 73 d0 8a 62 d4 d0 2e 76 8f 4a 70 c3 28 5e c7 9e 69 91 47 ce 3a d4 65 c2 03 b7 a8 cf 34 14 59 69 51 10 aa f3 f4 aa 39 6d ca a9 c0 6a 23 75 2c 37 67 03 b5 59 1b 97 3b 97 Data Ascii: FVN+\Ts{SL.c_"U5j9&/fB9=k- kI:qV=M~/[N82f&o@kkNa`'_B[ qEF&OC!\|*-AT9hrF.sb.vJp(^iG:e4YiQ9mj#u,7gY;
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 15 bb 81 c6 4e 4d 2b 08 cf 24 e2 a7 46 69 19 ca 0e f1 39 e5 d0 63 19 02 ea e7 9e 06 64 1f e1 4d 3a 1b a1 da b7 97 3c f7 dc bf fc 4d 74 20 07 5d a3 81 41 1b 13 0b d6 b2 b2 35 f6 d5 3b 99 16 7a 74 96 8e db ae 25 9b 3d a4 2a 71 f4 c0 15 e0 3f b4 e2 13 f0 dd 41 3d 2f 6d b3 ff 00 7f 05 7d 1e 37 1f 6a f9 d7 f6 a1 2c bf 0d 15 bd 2f 6d ff 00 f4 31 55 d2 e6 4e 4e 52 bb 3f 9d 8f 8b d2 7f c5 13 a8 15 62 9d 3e 61 d4 73 ed 8a cc f8 1f 76 df f0 8a 43 ba 43 20 11 c6 03 31 24 e3 93 dc 93 fa d2 fc 60 d4 ac ec 7c 0d 7f 79 7f 8f 22 3f 99 f2 48 e0 1e 79 18 c5 73 9f 07 f5 9d 3e f3 c2 71 6a 1a 77 10 49 1c 65 7e 62 c3 18 3d ce 49 af 22 6f fd 9d fa 9e a4 57 fb 42 5d 6c 7e 18 fe d1 5f 3f c6 ff 00 15 49 eb a8 4d fc eb c3 c8 1b 7e 6e d5 ed ff 00 1b 07 db fe 35 78 84 31 c0 97 52 90 Data Ascii: NM+$Fi9cdM:<Mt ]A5;zt%=*q?A=/m}7j,/m1UNNR?b>asvCC 1$`\|y"?Hys>qjwIe~b=I"oWB]l~_?IM~n5x1R
2024-04-29 20:13:48 UTC	2	IN	Data Raw: ab a5 Data Ascii:
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 68 88 1a 54 2b 06 9f 6c c6 46 84 65 c6 5a 23 8d a0 f3 81 5c f6 b3 e2 1f d9 df c3 b1 dc ea 57 be 2b 82 de 08 04 22 40 34 eb 62 15 a4 3b 14 8c 43 9f 99 87 4a fc dc f8 96 cf f6 fb 61 d7 6d ce ac 7f f2 18 a7 7c 65 8f 67 85 f5 f8 f1 9d cf a6 ff 00 e8 f6 ff 00 0a fa 45 13 c3 b9 fa 95 e1 af 8a 5f b3 8f 85 1a 69 35 2d 76 1d 4f 6a 81 89 6c 63 01 77 e1 81 f9 22 19 38 06 bd 0f c1 1f 1e 3f 67 8f 1f f8 ac 78 2b c2 2f 6d 71 a8 12 a0 46 2d 36 8f 99 0b 8e 4a 01 f7 46 6b f1 ca fa 16 94 ea 3b 55 be 51 18 e0 7a 42 c6 bd 23 f6 2e 8a 7f f8 69 e8 59 91 80 fd d1 c9 1c 71 6a 7b d0 e2 b7 29 3e 87 75 fb 63 c9 05 ae bf a2 db 44 aa 83 65 e0 55 1c 0e 6e 9b 80 07 03 a5 7c 88 ac fb c0 e9 bb d7 d6 be b8 fd b1 5d 5b c6 1a 52 ae 49 10 5d 1c 0f 7b b9 2b e4 ac 20 50 ec db 40 e7 26 bf 00 cd Data Ascii: hT+lFeZ#\W+"@4b;CJam\|egE_i5-vOjlcw"8?gx+/mqF-6JFk;UQzB#.iYqj{)>ucDeUn\|][RI]{+ P@&
2024-04-29 20:13:48 UTC	10171	IN	Data Raw: c7 19 00 56 ac fa 6e 9e 06 c0 ab b7 d0 54 aa b5 af ae c0 a3 1e 87 c5 d6 77 9a cb b1 83 57 b7 07 07 ae 3d 2b 3b 41 d3 26 ff 00 84 aa fe f6 d2 6f 96 45 8f e4 00 fc a7 07 8a fa e7 55 d2 74 28 a0 6b a9 a3 55 8d 06 e2 48 ec 3a d7 ca be 04 f8 89 e1 3f 1e 7c 44 d5 b4 9f 0b 8c 25 a1 45 27 fb c4 13 92 3d b3 55 29 ce 49 d8 d9 2d 2e 8f 58 b0 d1 f5 a7 5d d1 1c 83 de 99 73 a3 6a 8d 3a 24 89 80 bd 48 3d 6b d7 b4 8d 26 48 24 cb 92 57 d2 b4 75 2d 19 08 f3 13 20 fb 54 2e 6b 09 79 9e 20 d6 93 b6 a4 10 02 38 1f a5 74 e3 44 79 2c d8 ce 0e 7b 63 a8 ad b1 a1 a2 6a 06 e1 98 9e 31 5d 54 36 68 b1 30 7f 4c 54 36 ef 61 9e 25 fd 8b 72 97 18 0e 4c 7d 39 f4 ab 36 9a 32 c6 24 f2 81 24 9c e4 9a f4 d9 74 d8 99 98 62 b0 ee ec e3 81 97 cb c8 20 74 ab bc 92 dc 2c 8e 32 5d 3e 43 1e d6 ce 3b Data Ascii: VnTwW=+;A&oEUt(kUH:?\|D%E'=U)I-.X]sj:$H=k&H$Wu- T.ky 8tDy,{cj1]T6h0LT6a%rL}962$$tb t,2]>C;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49820	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	616	OUT	GET /assets/images/welcome/featured/pfs-roadtrip.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 28425 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "1fbae-616d78cc89800" Last-Modified: Wed, 24 Apr 2024 13:21:36 GMT Server: ECAcc (chd/0769) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 129966 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:48 UTC	1	IN	Data Raw: c4 Data Ascii:
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 00 47 29 ce 04 42 c2 0c b2 06 36 39 03 86 46 e7 c4 64 9c bd 77 2a bd af 8d d0 4c 24 6f 5f 66 3d 3a 3e 7f 53 e3 24 b6 32 d4 5a be 88 1f 4e 11 2a 37 f6 4f e4 a7 76 5d 97 c7 23 97 da c8 50 a8 d0 be 08 42 6b 58 17 67 05 d8 a2 57 76 04 67 60 46 c8 46 c9 5f 3b 8a 32 b9 77 71 5e eb 85 c9 0a 22 4b 41 44 07 81 ec b9 3f 21 fa 7a 05 c2 e3 f5 71 fc 4e 7f 80 48 05 c4 94 de 10 1c 2b cd 7b 85 99 0d 68 25 95 c5 d1 08 e5 52 35 d1 bb dd 61 dc 7b 1e 48 4c 7f 09 cd 0e f5 03 95 db 85 ca e5 76 4f 1c ae c4 88 8f 50 57 c2 f2 9b 58 85 c3 10 21 77 70 45 c8 bd 81 1b 0c 08 db 28 d9 71 46 57 14 5e 4a e1 01 ca 10 b9 36 07 15 f6 eb ed d7 db af 80 2f 84 04 22 6a e8 d4 02 11 02 0b 4b 4c 83 91 ff 00 cf fc 88 fd 44 2e 3f 5f 2b 9f d1 ca e5 1f e0 13 c2 e8 79 73 1f c0 68 2b e6 6f 36 6d 9f 86 Data Ascii: G)B69FdwL$o_f=:>S$2ZN7Ov]#PBkXgWvg`FF_;2wq^"KAD?!zqNH+{h%R5a{HLvOPWX!wpE(qFW^J6/"jKLD.?_+ysh+o6m
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: d3 4a 18 5c 3e bf a9 d1 74 cf 71 fd e5 73 03 51 2f 72 ea e2 8f c0 d2 d7 bc 8f 2c e3 2e 64 fc 7d 06 46 96 5e 98 74 2b e5 70 45 d2 29 bb cc 4c 50 26 32 a8 43 d9 0f 94 81 14 c4 8a f3 38 45 52 42 59 55 41 59 a8 d7 88 18 e9 d1 74 be 56 d7 0e a5 b4 f8 f6 c3 a3 b3 8a 23 15 e6 7d 85 9d 36 3d 32 fb ad ff 00 d7 c8 e7 96 72 98 42 6b 93 5c 54 6f f6 12 26 b8 a6 bb d8 3c 84 1c 50 77 0b ba ee 83 d0 72 ec 83 93 5d ef ca 07 95 ca 07 84 de cf 77 e5 af e6 54 f9 19 f5 2b b9 bc 35 0c 0e 35 96 29 e1 30 d5 b1 cd d7 70 2e 96 6a 94 22 a5 16 cb e6 dd 0f 4a 76 63 f2 4f c8 99 67 5d 97 27 9f b7 15 26 81 93 da b1 18 66 65 f7 6c b6 49 ce 2f 91 cd 8f 94 c6 47 12 2f 73 d3 7b 00 c8 64 99 d2 56 8e 16 f0 d4 5e 4a e4 94 e9 9b c3 a4 71 40 ad 77 59 d8 b6 ec af 8d 7f eb 9f cc fb 61 f1 af e0 77 Data Ascii: J\>tqsQ/r,.d}F^t+pE)LP&2C8ERBYUAYtV#}6=2rBk\To&<Pwr]wT+55)0p.j"JvcOg]'&felI/G/s{dV^Jq@wYaw
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: c7 d7 c9 61 75 d0 75 dc 4e 6b 1d 87 c4 bf 52 c9 ec 35 8e 9d 9f ca 6f 19 b1 0e f9 41 95 f3 fa e5 6c 3e 4b 31 f7 30 c5 72 f5 49 45 ef ed ef 97 f1 9f 57 75 4c 54 6c 8e b4 7b 16 51 cc 66 47 32 c6 1c cd 8b 73 32 f4 d7 18 ed 87 3f 88 d7 69 5c cb 4f 96 bd 63 63 8e 28 f2 39 a9 ae 1b 95 6f 5d c8 61 9b 8c 64 5f 8b 59 49 a9 67 f5 67 cd 15 49 27 ae e6 c3 fd 5c bd 76 74 cc b7 e0 7e ce d7 58 93 7d bb 1e 23 10 cc 64 39 6b 4d d1 71 b6 e2 87 c6 4d ed 1e 89 b5 53 74 55 bc a7 8f 50 ed 7e 48 a6 9b e5 6c 8c 40 f9 2f c7 f6 d5 7c cf 89 af 9a 75 30 61 db 6d 68 a7 d4 db a8 d8 c4 d6 f8 2e 41 24 31 66 1c a2 39 96 16 de c8 44 6f 3a cd b7 55 af b1 0c 95 6d 86 9c 01 bb 5e 2d cd ff 00 90 62 24 6b f2 78 79 84 87 0d 22 a4 dc 2f c9 63 3d 4e 01 f7 f7 65 b6 fb ae b5 66 ce 63 e0 ab f6 39 2b Data Ascii: auuNkR5oAl>K10rIEWuLTl{QfG2s2?i\Occ(9o]ad_YIggI'\vt~X}#d9kMqMStUP~Hl@/\|u0amh.A$1f9Do:Um^-b$kxy"/c=Nefc9+
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ba f5 6f 5a 6f 73 f5 6f 5a 6e 8c 3f 8c 6f 17 bc 22 5e 29 6d 14 49 e0 8a 34 af 82 08 e8 aa 3d ec 79 92 b3 39 19 a8 63 5a 1e f2 38 9e ce 43 96 12 f3 74 56 86 d9 88 30 da 70 92 5f 4f 60 c5 bc 86 11 04 10 b2 f9 56 ea 28 00 18 b7 98 c4 00 00 67 4e d1 81 44 04 01 cf 2a f7 60 e9 a8 f2 ce 92 a0 50 0c be 9c 54 e5 a7 3d 64 d0 0f 49 c4 8b b9 ef b1 4f 7a a3 c1 b7 59 fd f4 a4 f6 51 78 62 4b 2e 8e 8a 3e 9a da 08 d0 b7 73 9d 53 10 78 b6 81 90 38 6d c3 a9 f7 6b be a3 bd 73 a8 b5 d4 84 c6 a7 f6 63 f7 46 07 99 24 56 e9 18 a0 8d 68 3e 81 87 8b 6f 53 2b 72 7e cf 5e 1b cc 9c c4 8d f5 41 a6 2a ca d7 0f c4 b7 d5 f6 e1 56 58 42 85 14 48 2d f2 a9 ed 66 38 22 de 25 84 1e 60 6a 3e d3 8d 4c 49 3f 69 b0 3b 4f 11 8a d3 c4 78 53 b3 d1 83 aa b9 0c e9 c4 f7 62 aa 4d 0f a2 b8 04 f1 a7 02 Data Ascii: oZosoZn?o"^)mI4=y9cZ8CtV0p_O`V(gND`PT=dIOzYQxbK.>sSx8mkscF$Vh>oS+r~^AVXBH-f8"%`j>LI?i;OxSbM
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: cb c3 1c 31 5d 38 06 99 e3 20 06 29 4c 54 f0 c6 5f 93 3c 50 7e 4c b1 b8 75 87 5d 6f f6 bd 37 d3 bb 68 1f 13 b8 dd 37 bc ed 5d 11 44 8b 57 92 47 e0 a8 80 b1 e4 31 bb f4 af c9 4e 9c dc 6c f6 99 e5 30 dd f5 1c ef 2c fb a4 aa 09 a0 54 84 f9 36 0a e3 f6 f5 d3 9a 9c 0b 7e a1 e9 15 b4 b5 90 80 fe 7d ac b6 ca 73 af e2 1f 0e 75 35 35 cf 08 b6 a4 ed db 8c 43 55 bd bb b0 12 44 4e 7a a1 93 9a f6 83 8e 99 db 37 fd b6 d2 0d d1 b7 35 b8 87 72 79 1e 33 76 b6 d0 bb 0d b8 91 54 d3 21 a4 b1 12 00 d6 a5 58 d0 e3 ac fa 73 a3 af 76 bd dd ee 3a cf 64 b5 de ec 6d 16 48 88 b3 91 61 8a 48 e3 78 11 50 95 93 32 15 aa 73 35 3c 71 b7 cb 6d 3d f6 e7 bf 59 c0 fb 42 ee db 9d e4 97 92 da 59 6b 0c f6 96 c1 8e 88 90 80 14 d0 56 82 95 38 bd df ef ee 5a 1d 8f a6 a1 48 6d 60 50 0f 9d 3a ad 58 Data Ascii: 1]8 )LT_<P~Lu]o7h7]DWG1Nl0,T6~}su55CUDNz75ry3vT!Xsv:dmHaHxP2s5<qm=YBYkV8ZHm`P:X
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 35 81 64 56 98 57 ea 46 35 b7 b6 98 bc dd ae 50 a6 e1 bc 31 5b 58 4f bd 15 a0 6c 8d 38 8d 67 3f 40 18 86 c5 66 2d 0e a5 32 45 5a 82 57 30 69 eb c7 cd 8d fe c4 bc 7d 5f f3 df 7c 87 a5 76 62 0d 24 6d ba 0a c3 28 8f fa 40 4a 7d 78 f9 69 f2 5b 74 bc 76 e9 9f 95 dd 29 63 ba dc ec ca c4 41 36 f3 ba c6 f7 53 cd 32 70 66 5d 5a 07 75 71 14 a1 bc a5 f2 d7 52 26 42 31 4e 00 0a 05 a9 e1 84 8a 48 56 d3 76 9a 82 df 74 00 16 f0 f0 12 81 ef 83 c2 bc 70 25 78 23 bc 8a 3c e4 6b 67 d6 40 1c 5b 46 4d 4f 46 3a ea e2 47 f2 cc 3b 8e dc d1 54 53 4c b0 23 32 d7 b3 8e 3a 83 a5 6d 14 b5 d7 58 ef b6 db 48 5a d0 68 bb b9 8d a7 66 3c 94 42 ae 4f 66 3a 3a ff 00 a3 6e db a9 7a 9a 4b 27 da fa a6 63 1f 91 6f 61 67 64 da 2c 5a e2 4e 03 ca 8f ee cf 36 f0 85 18 7b a5 b8 5b ce ad 51 4b 9e ad Data Ascii: 5dVWF5P1[XOl8g?@f-2EZW0i}_\|vb$m(@J}xi[tv)cA6S2pf]ZuqR&B1NHVvtp%x#<kg@[FMOF:G;TSL#2:mXHZhf<BOf::nzK'coagd,ZN6{[QK
2024-04-29 20:13:48 UTC	15284	IN	Data Raw: 04 01 85 77 8c 02 d4 a2 16 24 d7 d5 41 81 23 85 15 23 45 46 91 4e d6 2c 38 60 c5 13 46 ae 0d 14 bd 35 00 4f ba aa 05 4f ab 05 88 2a 17 24 76 14 d4 c3 31 a8 1f 13 53 13 6d 1b 8d c4 91 6d bd 47 12 d9 de 92 41 30 c8 4d 60 98 85 ca a8 f9 fa 2b 89 ad 8c 70 3f 98 ab 06 e1 72 63 d3 11 92 35 a1 7a f2 61 f4 e2 7b 3b bb 87 96 e2 39 51 ee 5c 03 a2 4b 60 4f 85 5a 94 04 0c 6e 17 fe 7c d1 16 96 21 65 75 13 0f 29 55 4e 9d 33 a8 ed 18 b9 8b 6e b6 16 96 d7 97 02 45 50 c1 c3 12 a0 6b 14 ed ec c6 e0 6f a4 2f 61 b5 5c 4b 1e cb b1 46 df 72 91 46 e5 04 8f c9 a5 90 8a b1 3c b2 18 92 65 b1 85 4a e4 d0 67 45 26 87 9d 2b c7 0f 71 7e 0c 8c fa 7c c0 28 8a 09 39 69 51 cb 0e a9 1a 92 87 45 bf 80 16 af 1c 87 3e dc f1 21 b5 86 2b d5 11 ac 93 5b 2b e8 93 45 6b a4 1c d4 e7 9d 0e 07 c5 8b Data Ascii: w$A##EFN,8`F5OO*$v1SmmGA0M`+p?rc5za{;9Q\K`OZn\|!eu)UN3nEPko/a\KFrF<eJgE&+q~\|(9iQE>!+[+Ek

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49821	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	614	OUT	GET /assets/images/welcome/featured/passport-g.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 15254 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "e79e-5d0754d964cc0" Last-Modified: Wed, 10 Nov 2021 20:45:15 GMT Server: ECAcc (chd/076A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 59294 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9f a0 03 00 04 00 00 00 01 00 00 01 c2 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c2 02 9f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 54 82 10 3a 55 af 97 d6 93 28 3b d2 bb 2b 91 22 21 10 ed 52 04 fc 69 44 89 eb 47 9f 18 ef 48 bb 22 40 b5 20 5f ce ab fd a5 01 a6 fd ad 47 34 b9 5b 17 32 2e e3 f2 a7 ed ac ff 00 b6 7a 53 be d9 c7 5a 39 18 5d 17 f6 d3 c0 15 94 6e c9 ef 4d fb 51 f5 a3 d9 b0 72 46 d0 03 8a 5f 96 b1 85 d1 eb 9a 5f b4 7b d2 74 c3 99 1b 3f 2e 3a d3 83 27 ad 63 89 cf ad 2f 9c 7b 52 e4 1f 39 b3 bd 3a d3 c3 af 6a c7 12 13 56 11 cf 4a 97 12 94 8d 65 90 76 1d 2a c2 49 ed 59 a8 49 ab 91 8a 86 8b 4c ba ae 4d 59 42 7a d5 44 53 c7 7c d7 93 fc 5f f8 dd e1 5f 83 76 cf a7 5c 2a 6a de 2b 96 36 f2 34 95 39 8e d4 91 f2 c9 7c c0 fc be a2 11 f3 9f e2 da 3a ed 84 c1 54 c4 cf d9 d1 57 66 58 9c 54 30 f0 f6 b5 9d 91 e8 de 31 f1 b7 85 be 1c e8 6b e2 3f 1a 5d 9b 6b 49 58 ad ad bc 58 37 57 6e 3a a5 bc Data Ascii: T:U(;+"!RiDGH"@ _G4[2.zSZ9]nMQrF__{t?.:'c/{R9:jVJevIYILMYBzDS\|__v\j+649\|:TWfXT01k?]kIXX7Wn:
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ca 51 ea 7d aa fe 2e b7 43 fe b0 57 21 ae 7f 61 f8 92 65 92 29 16 d7 52 4f f5 33 02 06 4f a7 e3 e8 7a d7 c5 77 7f 16 64 39 d9 21 ae 66 ef e2 96 a0 f9 f2 d9 f3 d8 d7 a5 84 c9 ab 52 97 3c 1d 99 e6 62 f3 da 15 63 c9 51 5d 1d 07 c7 8f d9 f1 7c 58 6e fc 45 e1 9b 54 b2 f1 35 b8 2f 75 62 a3 6c 77 8a 3f 8e 31 fd ff 00 5f 5a fc e7 b9 b6 b9 b2 b8 92 d6 ea 37 86 68 58 a4 91 b8 21 94 8e a0 83 c8 22 bf 52 3c 0d f1 ba db 5e 92 0f 0e 78 dc f9 2e 18 0b 1d 57 38 68 df b2 ca 7b af bf e7 59 7f 1d be 01 db 78 fd 26 d7 34 18 e3 b6 f1 3c 11 87 6d 80 08 6f 93 1c 10 47 1b f1 d0 d7 d3 e1 71 72 a7 fb aa fa 7f 5f 97 e5 e8 7c a6 2f 09 1a ab da d0 77 fe bf 3f cc fc c4 c8 eb 4d 07 8c e6 ad ea 5a 75 f6 93 7b 3e 9d a9 40 f6 f7 36 ce 63 96 29 01 0c ac 3a 82 0d 53 cf 1d 2b d6 f4 3c 5d c9 Data Ascii: Q}.CW!ae)RO3Ozwd9!fR<bcQ]\|XnET5/ublw?1_Z7hX!"R<^x.W8h{Yx&4<moGqr_\|/w?MZu{>@6c):S+<]
2024-04-29 20:13:48 UTC	10145	IN	Data Raw: 63 da be 3a 78 0d 4f d0 e9 66 0e da 1f 77 e9 df 10 95 36 fe fb e8 41 af 46 d1 fe 22 c3 21 11 cd 22 b0 f7 af cd 55 f1 85 d4 13 2e c9 0e 33 cd 76 da 77 8f bc b5 0c d2 e1 85 67 3c ba 49 68 74 c3 39 d6 d2 3f 4b 05 d6 8b ae c5 b4 ec 2c 7b 1c 57 11 ac f8 41 a2 dd 25 9f 2b fd df f0 af 94 bc 3b f1 68 c7 30 56 9b 81 d0 9f f1 af 7d f0 df c6 0b 19 b1 0d db 86 43 c7 5c d7 3c a8 4e 9e e8 f4 68 e6 14 aa 69 72 a4 b6 93 c4 e5 1d 4a e3 b1 af 41 f8 4f 1e df 1e e9 64 f5 fd ff 00 fe 88 92 af 48 9a 37 88 2d fe d3 66 eb b8 8e 31 56 3e 1c 58 4d 65 f1 07 4c 49 07 07 cf c1 ec 7f 71 25 44 e7 78 b3 af 95 6e 8f ff d0 f3 4d 6f e3 13 45 a8 dc a7 9b f7 66 71 d7 fd a3 58 0f f1 96 65 39 13 9c 1f 7a f8 ab 5d f1 05 f1 d5 ef 46 e2 7f d2 64 1c ff 00 be 6b 24 6b 57 58 c3 67 35 fa 07 d5 e8 ae Data Ascii: c:xOfw6AF"!"U.3vwg<Iht9?K,{WA%+;h0V}C\<NhirJAOdH7-f1V>XMeLIq%DxnMoEfqXe9z]Fdk$kWXg5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49822	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	617	OUT	GET /assets/images/welcome/featured/sb-shipshirts.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 33276 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "10c84-5c79454a8f740" Last-Modified: Tue, 20 Jul 2021 20:59:33 GMT Server: ECAcc (chd/0733) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 68740 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 9a a0 03 00 04 00 00 00 01 00 00 01 bf 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 bf 02 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 7f aa 68 f6 d0 aa f9 32 c1 28 9a 59 3b 28 4c 9c 83 5f 9a 5f 18 3e 27 eb 9e 3d f1 4c d2 5d 4a d2 43 0b 18 ad e3 1d 02 83 8e 07 a9 ef 5a 25 75 76 cc 24 df 33 8c 7f e1 8f 48 b5 f1 9f c1 f6 6d 4e 43 a1 da c0 d1 28 6b 14 61 23 17 39 c1 0c 77 e3 38 e7 9a a1 67 f1 bb c2 b6 56 3f 67 5f 0d 69 eb 2a 30 21 d5 01 04 0e a0 87 dd 5e 73 e1 bf 82 3f 12 3c 57 3c 29 65 68 22 f3 fe e9 9d b6 0f c7 83 8a ed 75 ef d9 53 e2 9e 87 24 10 08 e0 bb 92 73 8c 5b 39 7d 9e ed 95 18 1e f5 57 1f 2c 52 d5 9f 44 58 fe d1 df 0e ad 7c 37 0e b2 7c 33 6c 03 1f 2a 41 14 71 0d b2 0e c4 6d e8 7a 8a b1 a1 7e d3 9a 0f 89 a2 9e d2 d3 46 11 4b 6e a5 d1 15 91 73 18 ee 0e 00 e3 b8 af 24 b7 fd 93 fe 29 af 82 de c2 33 65 e6 cb 30 94 83 2b 64 05 e3 03 e4 af 30 f1 3f ec cf f1 6b c1 72 db 4c a6 09 25 b9 62 Data Ascii: h2(Y;(L__>'=L]JCZ%uv$3HmNC(ka#9w8gV?g_i0!^s?<W<)eh"uS$s[9}W,RDX\|7\|3lAqmz~FKns$)3e0+d0?krL%b
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: fb 57 05 75 a9 ea e1 9f bb 63 cd fe 20 e9 92 6a de 0a bc 8e dc 03 34 0a 65 8f 8c f2 b5 f9 a1 63 70 25 f1 1c 93 5c 38 b7 8a 5c ab 01 c7 51 e9 5f ac 38 46 2f 6e ff 00 75 c1 5f ce bf 29 be 28 69 ad a0 f8 f2 f6 cb 6e d1 1c c4 80 3d 33 91 58 46 c9 f3 9d 52 a8 dc 7d 9f 4d ce 33 58 8a de 19 36 5a b1 65 56 20 e7 eb 54 24 0c 1c 06 e3 80 6b 5b 53 8c 66 47 1e ce 3f 1a a3 70 37 cb 13 76 28 2b 17 f1 59 1a da f0 6f b1 a7 64 7f 74 ca 7d 33 5f 79 7e c9 5e 1a 6b 7f 0c eb 3e 33 9d 09 17 12 47 6d 19 f5 11 fc cd ff 00 8f 10 3f 0a f8 36 d3 01 f0 7d 2b f5 9f f6 7d d2 13 4a f8 17 a5 46 38 96 e4 4b 38 cf 19 69 1d b1 9f 6e 2b b2 96 f7 3c aa bd 8f a0 12 61 71 64 14 e7 69 8f 69 c7 ad 7c 91 e2 fd 1e fa d7 c4 eb a9 e9 6f b1 58 31 24 76 c6 47 20 ff 00 9c d7 d2 f6 37 73 45 6d f6 39 8f Data Ascii: Wuc j4ecp%\8\Q_8F/nu_)(in=3XFR}M3X6ZeV T$k[SfG?p7v(+Yodt}3_y~^k>3Gm?6}+}JF8K8in+<aqdii\|oX1$vG 7sEm9
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: 41 f3 18 74 af 3e f1 84 b7 30 3c 37 e0 92 8a e1 5c 7b 37 19 fc 0d 77 e1 b1 cf 9a d3 ea 79 b8 bc 02 71 e6 a7 ba 29 d8 5c 79 1a 99 3e b5 ed ba 45 c7 99 6e 0d 7c f5 71 28 8e ea 39 87 72 2b d8 fc 39 7a 25 84 0f 41 5e 8e 2a 1d 4f 33 07 3d 6c 76 a6 4c 49 b4 d6 a5 cc bb 34 59 5f d2 b9 e9 dc 89 d7 15 b9 37 cf a2 49 ee 6b cf 6b 63 d2 4f 73 c9 25 cb 09 09 ee 0d 66 fc 22 38 d1 65 87 d2 f2 6f fd 0c d6 94 a7 2d 20 f4 06 b0 be 0f cb ba da e2 3f 4b a9 7f f4 2a f4 ea 7f 06 5f 2f d4 f2 29 bf f6 88 fa 3f d0 fa 4b 51 1b b4 49 47 fd 33 3f ca be 2e f8 88 30 90 4b fd d9 08 af b5 6f 32 da 3c a0 7f cf 33 fc ab e3 5f 88 51 86 d3 77 77 59 01 ae 5c bd ea ce cc c9 5d 23 84 d3 e4 cd 63 a3 7d 9b c7 31 30 e3 24 54 f6 13 10 7f 1a a7 a9 37 97 e2 db 69 7d 76 d1 59 7b cd 1a 50 7e ea 67 b5 Data Ascii: At>0<7\{7wyq)\y>En\|q(9r+9z%A^O3=lvLI4Y_7IkkcOs%f"8eo- ?K_/)?KQIG3?.0Ko2<3_QwwY\]#c}10$T7i}vY{P~g
2024-04-29 20:13:49 UTC	3208	IN	Data Raw: 18 0e 0e 3e b5 c2 6b 7e 35 bf f0 bd d8 b5 d4 6f 60 93 33 3c 0a 1e 07 52 59 02 93 96 52 dd 98 76 ab 54 79 fa 0a 38 99 d2 7e e4 9a f4 76 1f a8 7c 0f f8 67 a8 e4 b6 9c 22 3f f4 c5 d9 31 f8 03 8a e2 35 0f d9 93 c1 57 04 b5 95 d5 dc 07 d3 2a cb fa ae 7f 5a f4 28 fe 21 3a 5e 36 9f 71 15 b4 93 a9 60 63 82 e1 77 7c a7 07 89 44 7d 2b 76 3f 19 5b 8e 2e 6c ee a3 3d f6 c6 65 03 ea d1 ee 1f ad 61 3c be 9b de 08 f5 28 71 2e 3a 97 c1 5e 5f 37 7f ce e7 ce b3 7e cc 9a 8d 91 2d a0 eb 4d 19 ec 0a b4 7f aa 13 54 1f e1 4f c7 4d 17 fe 41 1a bb cd 8e 9b 2e 58 7f e8 cc 57 d4 70 f8 cb c3 53 3f 95 f6 a4 57 fe eb fc a4 7d 41 ae 8e 19 e1 b9 88 4f 6e e1 d1 ba 32 9c 83 f8 d7 3c b2 da 6b 64 d7 cc f4 a1 c6 58 e7 a5 57 19 fa c5 3f f2 3e 21 f1 13 7c 41 b7 f0 4f 88 6c be 20 b3 b4 eb 6b 17 Data Ascii: >k~5o`3<RYRvTy8~v\|g"?15W*Z(!:^6q`cw\|D}+v?[.l=ea<(q.:^_7~-MTOMA.XWpS?W}AOn2<kdXW?>!\|AOl k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49823	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	616	OUT	GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29028 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "1e451-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/0743) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 123985 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 99 eb 17 11 33 d6 2e 22 67 ac 3c 44 ce e4 36 9d 65 69 d8 1f 80 ff 00 6d bf b8 97 d9 8b 7e 79 4c 81 24 f4 cc 20 a2 e8 01 81 90 14 1e 95 45 47 ae 26 a9 54 33 85 4c 41 45 e2 2b ac 26 f0 89 cd e2 15 14 22 25 f3 0a 0a 65 f2 05 a5 8e be bb 77 0c 9c 46 b1 5a 56 4b 5e 6b 28 dd 59 5e 4c c0 08 f8 8c 26 10 12 e0 78 00 4c 20 05 50 00 c0 00 26 c3 9b c4 3a e4 5a a3 6a 91 de 75 8a c8 34 e4 b2 09 a9 1b c9 64 81 5a 7b 9a 2e ca 8c b2 d7 64 6b 07 53 cc 72 49 ea 7a 25 1b 56 b0 f8 8c 64 84 65 da b6 bd 3a 89 67 9a 5e 0a a8 9b 44 fd d5 b4 43 47 0b 9d ca fe 32 10 8d d5 05 4a b2 44 57 04 ea a2 43 cc 2a 43 1a 51 73 2a 91 85 42 00 08 e7 e7 80 3d 30 04 00 3f 3c e9 d0 0d f9 ed 76 ee 1d 44 b2 29 a9 32 c4 8d 96 45 b3 e4 15 b8 48 9a 46 3d f4 0b 15 53 a6 c8 23 13 2d 12 83 d8 d5 ae 52 3c Data Ascii: 3."g<D6eim~yL$ EG&T3LAE+&"%ewFZVK^k(Y^L&xL P&:Zju4dZ{.dkSrIz%Vde:g^DCG2JDWCCQsB=0?<vD)2EHF=S#-R<
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: 58 09 ad d7 75 da e1 b3 93 c7 7e c6 a4 92 4b de 0b 40 63 1e c0 75 88 9c e6 86 34 7a cd 40 b5 b4 ff 00 fb 6a c2 c5 bb db 6e c8 8e 32 5a d6 f7 84 a4 6e 69 d6 5a e9 5c 30 69 61 2d 19 7a cb 5e 22 b0 f1 05 9d a0 f0 0b ad dc d8 a4 c9 f2 60 03 da f3 ab b2 1e 09 0f 2e 01 84 37 e4 ca 93 5e 1b 87 ec a6 ce c1 db 09 9c be 60 11 cc 10 39 c3 57 75 da 0a 1e 4b 9c e6 b5 64 d4 dc 30 5a dc fc 3f b6 ed 76 d3 5b 45 b4 59 4b ae 47 b9 ae 26 56 b9 42 02 88 13 0c 32 e3 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5b b4 97 d6 91 43 35 b5 c7 74 8c 25 c0 a3 41 25 4a f3 fe 8f bc a7 b7 ba 05 ec 89 a1 24 e3 cb 4b 8f 12 98 ae 69 9d 07 30 cc 1d ab fd 50 0e 77 94 1c 0b 79 d6 99 19 72 e5 e7 6e cf 7e 9c df 66 ba 7c 98 aa a3 06 19 a7 05 Data Ascii: Xu~K@cu4z@jn2ZniZ\0ia-z^"`.7^`9WuKd0Z?v[EYKG&VB2_l~u__l~u__l~u_[C5t%A%J$Ki0Pwyrn~f\|
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: ec 92 40 3d dc b9 8c c7 a9 c3 8d 1d 3b 92 a0 24 fc 9c b8 01 99 3d 8c 87 3a b7 fb 42 fb 30 fb 3e bc dd fc 1b 2d d4 d6 cc ba 8d d0 b1 8e 9e 0d 3d ec 7a 66 96 39 15 9a 9a a4 b0 02 a1 09 af e4 d6 e5 f3 96 9f b4 57 f2 6b 72 f9 cb 4f da 2b f9 35 b9 7c e5 a7 ed 15 fc 9a dc be 72 d3 f6 8a fe 4d 6e 5f 39 69 fb 45 7f 26 b7 2f 9c b4 fd a2 b6 8d 83 ed 2f c3 13 ed 3b c5 fd bc 93 db c5 2b a3 71 96 28 9c 19 23 da 62 7c 8d 46 3c 86 b8 12 08 27 2f bc 4e 4a 85 17 25 4c 17 a1 51 7a 2a e6 3f b4 86 cd 16 e7 11 77 75 12 25 bb 22 27 03 6c 07 65 cc 38 2b c1 2e 27 d6 2b 85 47 73 b0 ed ae bb 94 c6 5b 34 6d 68 71 36 e4 8e f1 c1 48 42 d2 84 15 cf 0e 34 e6 6e 6c 71 64 bf ab 28 d0 18 8a ac 71 07 83 53 03 c7 00 6a 38 b7 cd 8d b7 11 96 8e ed e1 cd 12 b0 12 5a 00 95 a7 54 64 10 ba 1f 80 Data Ascii: @=;$=:B0>-=zf9WkrO+5\|rMn_9iE&//;+q(#b\|F<'/NJ%LQz*?wu%"'le8+.'+Gs[4mhq6HB4nlqd(qSj8ZTd
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: e2 77 04 4f 79 3d 35 6c c3 0b b5 b5 a4 26 18 e1 fd 14 45 c5 bb c4 7a 94 1c 3a c2 d4 af f6 72 62 2d 19 22 a6 3e fe 35 03 c4 2e ee 10 81 92 9f c0 56 99 a1 21 ab 9e 07 05 50 bc a9 d7 02 dd d8 84 52 70 4e 1f e4 3d 9f 65 f0 f3 5b 75 b9 6d f3 49 df 5e b4 00 d2 d2 34 fb 34 6f ce 56 b5 dd a2 ef 54 10 8d 5c 6b c2 d2 dc 4a c8 e1 17 28 5c e2 1a d0 4b 5c 02 b8 e0 01 24 05 38 63 9d 7d a5 6c d3 5f 5b 3b 6f bb 30 48 d7 3e 46 88 8c 90 30 32 40 d7 13 a4 91 89 72 1c db 85 7d b3 ee 52 ee 50 32 29 20 70 8b 5b c3 75 46 c8 9d 13 7b b5 3d a6 ea c1 a1 aa 71 5c 8d 5e f8 9e 29 2d ae 3c 45 7b 70 d8 db 6e e7 76 bb 1d 96 c5 23 01 d4 18 d6 ea 95 ce 40 0a e9 5a da ac f7 4f 0e ed 16 3b 6c f2 77 4f 9a de 3e ed cc d5 ea 17 9c 8c 3a fd 70 79 ad 6f 16 36 fb 8d b0 db 4c 17 06 37 77 8d ee 9a Data Ascii: wOy=5l&Ez:rb-">5.V!PRpN=e[umI^44oVT\kJ(\K\$8c}l_[;o0H>F02@r}RP2) p[uF{=q\^)-<E{pnv#@ZO;lwO>:pyo6L7w
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: 48 06 2b a1 03 70 36 d9 63 a8 27 54 fb 75 da ba 1a 80 27 ae de 42 07 8f 81 dc 69 23 62 83 b7 77 42 4e db fc bf 29 24 6b 63 b7 87 b4 f5 04 78 81 d3 c3 6f 66 82 76 db b4 0d 93 ed 50 ff 00 94 7e 5f a3 41 3b 10 01 07 61 d4 77 6f b1 23 a6 fb 7d 3d 34 de c7 b4 6f ef 1d c0 db 7e 9b fb 7c 75 f3 0d f6 f9 4f 76 c7 a1 1e 1b e8 01 d5 25 3b 9e 9b 6d d7 ae db f5 df 7d 61 f3 f2 c4 f9 b8 ce 25 5f 96 f2 15 ac 74 f6 93 24 60 f8 f4 cb b8 4c ab bc 16 bc af 8d 6d 0b 5f 7f ba 42 06 e4 78 eb 06 e4 7f 4f 34 92 18 ca 33 a2 ac 6f 16 c9 26 f7 c8 b6 c9 2b a9 6d 5f ac c7 30 89 7c 79 21 f9 c8 2e a2 d1 e9 0e d8 33 13 b2 37 9b 39 0b 53 89 ee 56 b3 8e 61 f5 0f cc dc 83 c2 93 f2 27 66 65 11 30 7c 2f 2f 56 35 94 61 99 f5 9d d3 36 b2 b0 ec 53 06 ac f8 ec 52 bf 02 b9 08 f2 52 5e 8e 1b ac 8e Data Ascii: H+p6c'Tu'Bi#bwBN)$kcxofvP~_A;awo#}=4o~\|uOv%;m}a%_t$`Lm_BxO43o&+m_0\|y!.379SVa'fe0\|//V5a6SRR^
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: bc 01 49 1b 02 92 0f 4d bc 46 91 f4 7e d1 fe ea 7e e7 e1 1a 7f c3 bb ca 74 b7 dd bf 67 9a 1b 57 94 1c 23 a8 6c bb b7 76 df b9 df 56 3f ef 71 32 d1 7e 97 5f 10 9b e8 28 91 5b e7 2b c9 18 df 95 fe 6c 6b 8a 76 ea 9f ca 6f f5 fa f4 d0 f6 fc bd 4f b3 db f3 6a 3c 28 51 9e 9b 36 63 ed c6 87 12 32 3c c9 12 a4 bc a0 86 98 65 be 81 4b 5a 8e df 47 5f 0d 45 87 95 d4 7d 94 ec e6 94 f4 35 b7 2e 3c e8 b2 12 da bb 5d 6d 32 a2 ad 6d a6 5c 65 1d 9d 68 ec a4 1f 66 da db ee fc 83 c7 c3 ee 6a ba db b7 b8 62 f9 b5 64 be ed ba 34 6d d8 72 a9 4a 24 7d 52 b4 9e d1 f2 e9 68 56 e5 2b 4a 90 ad ba 1e d5 82 93 b1 f6 28 03 d0 fb 0e aa a0 ca 7d b7 72 5e 37 2c 61 b9 0a 01 01 e7 20 21 0a 73 17 b6 5b 47 af 97 32 b8 79 45 ce a1 c7 9a 51 3b 1d 39 82 72 a6 30 ce 4f 8f 87 55 26 aa 43 6e 9a fc Data Ascii: IMF~~tgW#lvV?q2~_([+lkvoOj<(Q6c2<eKZG_E}5.<]m2m\ehfjbd4mrJ$}RhV+J(}r^7,a !s[G2yEQ;9r0OU&Cn
2024-04-29 20:13:49 UTC	9304	IN	Data Raw: 24 ce 0e ba 60 25 2d ac a8 f7 13 fa e4 6a e6 73 77 3b 0a fa df 58 dc 5d 06 8d 94 73 26 78 cb 78 ac 17 fd 42 67 f1 dd 83 8a 04 5c 24 63 95 eb 8e 12 d2 a3 c5 f2 da 5b 28 4b 64 76 80 35 e8 f5 cc ab 3a e5 7a bc b7 84 7f 57 c7 aa 0e 03 e4 ca cf d3 9c aa be 93 2d ca 30 7e 36 e4 7b 2c 43 91 ec 2a 93 31 98 f6 99 95 c6 25 3a 2b f3 a7 bc 83 29 b9 ed 20 f7 a9 48 4a 87 a4 6f 5c dc 5b ea eb d4 bc 3e 42 cb bd 5e e5 5e 9f ec 70 2c 9f 95 72 6c cb 8b a4 e2 3c 6f 33 0d 9c e1 b5 c5 b2 19 d3 a1 5e 23 32 81 7a f4 4b 16 25 25 c6 d2 0a 1d 67 b1 6d ee 5c b3 bc 11 23 55 3d 52 26 5a 22 72 9b 76 13 30 de 8a 1d 92 dc 85 38 84 b6 f3 29 6d 65 27 74 fb c3 d9 d7 6d 71 ec 6e 3e a9 82 fe 30 d5 f5 f4 e8 9f a4 75 f6 92 f1 78 2d 22 85 28 53 d3 e2 45 93 1e 53 4a 91 28 ac 42 f3 55 b2 77 1d 37 Data Ascii: $`%-jsw;X]s&xxBg\$c[(Kdv5:zW-0~6{,C*1%:+) HJo\[>B^^p,rl<o3^#2zK%%gm\#U=R&Z"rv08)me'tmqn>0ux-"(SESJ(BUw7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49825	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	620	OUT	GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1161	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 50197 Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "9e3b-5b8a5e31d0dc0" Last-Modified: Mon, 11 Jan 2021 20:38:23 GMT nnCoection: close Server: ECAcc (chd/0776) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 40507 Connection: close
2024-04-29 20:13:48 UTC	15241	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPuhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: 12 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 d6 66 93 af 0f 95 48 e6 a8 8f 01 fc c3 46 4a cd 1e 0c ca 0a 72 4b 52 94 9f b4 c7 46 2d b4 14 a2 42 50 a2 95 12 93 c0 5d 47 81 1c fb 6a ab 3e a3 69 bf f2 d7 fd 4c c8 c9 9f 7d af 66 bf cd 56 30 38 5c 9e f6 da d8 57 e5 c5 c8 e7 1a 8d 2e 0b cd 47 97 10 05 a9 c4 3d 22 32 e5 b4 8d 29 49 be b6 1b 52 ee 38 70 b1 37 e1 59 ca f4 20 e8 df 95 2b e6 3b 6c 70 cd 4d f4 a5 08 36 9a 6d 3c 29 45 25 06 fa a4 d2 f6 18 8f f5 03 6b c6 b2 a5 4b 95 1d 04 00 97 9c 8a ef 86 a7 3c 30 f1 65 2b 00 a4 b8 96 94 16 a4 df 82 78 d5 5e a2 0b 33 58 f0 8d 4c fe 14 9f 5a ad 2b 4a d3 92 b8 27 ca 46 5f 50 76 b4 1c 83 d8 c9 32 a4 a6 73 2f 45 8e a6 84 65 90 a7 26 3e 88 cd 04 ab 80 36 Data Ascii: P@(P@(P@(fHFJrKRF-BP]Gj>iL}fV08\W.G="2)IR8p7Y +;lpM6m<)E%kK<0e+x^3XLZ+J'F_Pv2s/Ee&>6
2024-04-29 20:13:49 UTC	8883	IN	Data Raw: df 4b b9 e4 a5 13 77 64 ed be 97 0d d4 8c d6 1a 5b 48 04 f1 ba 96 d3 4f 23 9f 6d eb 92 7c 0f 57 0c a3 5e 86 8e a8 71 bd 24 be 6a 74 a6 7b 06 17 af de 9b 37 a2 92 71 7d 51 d9 79 07 9c 57 88 12 f4 f8 d1 de 2b 09 d3 7d 2f a9 b5 dc 27 87 2b d7 2c f4 1a 9b 79 c2 4b a9 9d 50 d7 69 ee 65 38 be b4 7a be 19 3b 56 6a d9 9d b7 e7 44 9c 96 82 cb 6b 83 2c 3e d1 0e 73 24 21 6a 49 e7 5c b2 52 58 48 e9 8e eb c5 1d 45 50 b8 a0 39 ed d3 f7 d7 dc b2 7e e0 5a db 9e 16 d1 52 d9 4b 6a 7c 31 e2 27 c7 f0 12 f7 d9 97 7c 3d 5a 35 f0 bf 3a bd ba 57 12 b3 ad 30 3c b5 bd e5 d4 d8 4c 47 6e 56 c9 99 3a 73 6e 21 dc 92 43 2d 96 d1 11 52 1a 2a 28 79 a7 42 5c 78 46 4b a7 42 47 f6 85 22 dd 87 7f 0a db f9 bc bf c4 c7 c4 b8 b6 18 4d f5 87 71 e3 a3 16 f3 bb 12 63 99 3f 0d d7 9a 66 22 1d 65 a7 Data Ascii: Kwd[HO#m\|W^q$jt{7q}QyW+}/'+,yKPie8z;VjDk,>s$!jI\RXHEP9~ZRKj\|1'\|=Z5:W0<LGnV:sn!C-R*(yB\xFKBG"Mqc?f"e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49824	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:48 UTC	615	OUT	GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:48 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29028 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:48 GMT Etag: "1806c-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/0771) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 98412 Connection: close
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:48 UTC	16383	IN	Data Raw: d7 c5 9c 75 e4 85 0a 95 85 36 b5 ab 2b 25 e4 af 6b 8b 70 16 67 11 8c fb bf 8b 10 2c 17 15 6a 2f 19 8c b2 8b 89 da 1a d2 92 7c e2 60 ab 03 50 79 85 fe a7 4c 78 bd d9 e6 07 9e 60 78 e6 3a 67 39 f4 07 ff 00 16 eb 9f fa 89 ff da 00 08 01 01 00 01 05 00 ff 00 5d 33 19 cc 5a 04 d4 c9 25 64 90 b1 46 e6 91 69 78 bc c7 22 0e 39 93 8a c7 32 a9 3e 39 95 c8 f1 c1 39 a0 0f 04 f4 d8 1e 0a 44 d0 1e 0a 56 c8 1e 66 62 c9 8e 66 68 d3 8c 20 7d 48 bf 3f d2 0c d2 8b c6 57 13 c1 ab 16 02 bd d9 0b 5f 36 df 5f dd 6f c4 96 54 1e 01 50 50 1a 33 16 de fa ea f3 d9 cb b8 ca 26 bf d1 2d c7 6a d9 e4 de 5c 78 b2 02 5c a6 87 8e 6e 38 c2 40 72 d2 b6 69 0a 4d dd 4d e1 ad a8 89 60 b9 75 a6 52 43 7b b5 70 e7 82 48 65 34 cc 37 7d 3e 16 41 81 e1 45 0b 18 70 71 21 17 03 fe df d7 31 52 62 b8 37 Data Ascii: u6+%kpg,j/\|`PyLx`x:g9]3Z%dFix"92>99DVfbfh }H?W_6_oTPP3&-j\x\n8@riMM`uRC{pHe47}>AEpq!1Rb7
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: a8 48 5f 71 a0 f1 3e 43 f3 e8 59 b4 fd 5b c6 1e 21 19 11 7d fc db 66 a7 f1 71 a8 1f 6e da c8 4b 22 09 cc 29 1a b3 46 8c 55 4b 2f 32 3c e9 e2 2b a8 c4 57 0f 11 03 c5 49 04 0f cc 47 9f 97 db a7 c4 5e 64 a5 93 15 20 a1 46 3c d6 a0 fc 40 10 77 07 7f 49 52 7d f5 d2 5e c0 e3 af 19 d8 f8 82 a4 10 47 fb 2c a4 82 0f b7 57 3c ec a4 5b 48 6e de 34 b8 72 02 4b 29 f5 2a 46 05 6a c1 3e 21 41 c4 53 7a 90 0d 58 00 51 40 7a 79 b0 24 57 dc 69 b1 1e 54 d1 01 f7 d0 08 6b a6 ff 00 ef 3f fe 1f c4 f0 fe 86 5b ab 96 61 6d 1a 96 72 aa 58 85 1b b1 0a bb 9a 0a 9a 0d f6 d5 96 1f ba af 67 c6 cd 73 1a 4f 6e b2 c5 c2 4b c8 04 7d 69 7e 48 3b 74 e6 6e 97 a8 0e 61 d5 59 49 4e 5e 91 82 be ec 5c f9 cc 60 72 70 ce ac d2 cb 2c 5f 2e 6d 10 f5 23 b5 b6 29 c6 ea 66 99 c1 79 56 82 28 e3 75 62 c5 Data Ascii: H_q>CY[!}fqnK")FUK/2<+WIG^d F<@wIR}^G,W<[Hn4rK)*Fj>!ASzXQ@zy$WiTk?[amrXgsOnK}i~H;tnaYIN^\`rp,_.m#)fyV(ub
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: 68 7d a0 79 1a 1d 44 65 9d 62 73 e3 42 3f 61 f6 ea 6b ce b8 b8 15 1b 1a 29 a0 f8 54 52 b4 55 1e 03 cc 92 c7 7d 3c 77 38 c9 d5 81 a1 a3 29 fd 15 03 56 d7 71 0b 98 ee 63 27 76 8c 3a 90 45 0a b7 16 15 56 06 8c 35 86 86 e3 3b 25 cf 6e 63 cb c3 04 3c 7a 48 84 30 66 e7 1d 7e f1 92 a1 63 77 a9 44 01 16 80 1d 0e 4d af 88 57 ed d2 d0 8a 6b fc 3a 1e dd 5c b7 b5 cf f6 7e 28 3a f7 7e 0e 55 f7 68 9a 6f ed d6 fa b9 cd e1 c5 b5 8e 46 6a b5 cd c1 80 49 33 05 8d 51 78 13 b0 aa af 19 57 d2 a4 05 6a 33 ea 19 e6 c9 e6 a4 70 8c 52 6f 58 0b 52 0c 8f 10 29 c0 b4 e5 f8 06 21 96 35 f8 0a 7c 4d 2c 9f cd 32 30 62 e2 67 44 53 3c d3 3b f1 26 af 21 04 96 66 20 d1 14 84 45 14 15 26 ba e8 76 37 64 c4 b0 c9 48 cd cd f4 d3 7c bc ae 4d 00 87 16 9d 49 e5 e4 aa d5 76 78 51 1c 02 c5 ab 51 35 Data Ascii: h}yDebsB?ak)TRU}<w8)Vqc'v:EV5;%nc<zH0f~cwDMWk:\~(:~UhoFjI3QxWj3pRoXR)!5\|M,20bgDS<;&!f E&v7dH\|MIvxQQ5
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: ae d0 99 b3 c5 5b 65 9b ae 5c 94 b6 4a 38 fa d3 bd 33 d4 35 d5 af ea ec ee a9 e3 34 77 42 ed ea 98 b1 4f 1a a9 10 df b4 68 23 cb f3 44 9f ec 47 77 63 f7 86 4b 2b 63 6d 73 61 55 43 73 0e 82 65 27 5f 5b 44 c8 66 ee ff 00 c4 14 74 59 bd da c6 b1 24 7d 4d 0c 90 bc 71 ec e4 b6 7c f8 bf a0 cd 4f 6d 5a 06 76 86 87 63 59 a2 bc dc 4e b4 92 fb 20 58 19 d6 ba 0d 14 eb b1 b1 d5 62 d0 59 30 75 30 0e c2 d2 bc 20 61 60 45 17 aa 3c 16 3d 18 3f 4a 0d 32 d1 e9 76 76 33 33 35 b5 32 25 54 75 4d 97 61 d8 e9 e2 60 ec a4 18 47 98 7c fd 44 d9 85 83 42 39 51 01 fd f3 e2 c7 13 05 ee 7b 6a ae 55 5f 13 33 35 98 0e d9 fd b2 a4 37 1d 96 6b bc 7f 5e 4f bb 7e a7 af 33 b6 49 2a 66 e7 3d 67 0a 11 d4 f9 7a d8 d6 21 74 d9 ee 31 42 e9 2d 60 4c d6 ab d1 8b a1 db f5 6e a5 b2 e4 ac 9a 98 5a 76 Data Ascii: [e\J8354wBOh#DGwcK+cmsaUCse'_[DftY$}Mq\|OmZvcYN XbY0u0 a`E<=?J2vv3352%TuMa`G\|DB9Q{jU_357k^O~3I*f=gz!t1B-`LnZv
2024-04-29 20:13:49 UTC	16383	IN	Data Raw: a0 92 17 36 74 b6 09 79 30 e1 c5 72 8c a7 77 08 a8 8a d5 e1 57 e8 be 29 05 12 39 aa 96 c0 96 93 85 02 7c b0 1e 6b 83 1a 6b ab 9a 74 78 91 88 e0 91 e0 72 37 84 f2 e3 85 e5 53 9f 08 58 f2 99 00 a3 e5 4b 68 f0 98 ef 00 8e e1 8a 57 a9 91 5c 39 c7 69 40 cf 36 09 e8 47 2b 5b c7 3c 70 a1 b3 a6 c2 66 45 b0 aa 8a 47 d6 5a d3 05 d9 69 b6 52 65 2f dc 31 f7 47 88 d1 a5 c0 6e 21 22 8c 5f 7e 17 3c 2f 5e 1c a9 e8 5e 33 7d a3 9a 3d 85 55 f5 6c a8 b7 15 e8 56 16 1c d8 13 22 b9 52 44 29 d1 97 87 70 8e 6b c2 71 f9 b0 a3 57 27 9b 5c 8a ba be f6 b6 28 2f fa ff 00 77 a6 a8 84 58 91 a0 c0 97 63 4f 20 b4 e5 99 3a 3e a8 0b 30 4b 12 04 59 6a 57 56 15 23 91 a5 62 2a ab f9 7a a3 44 38 82 e4 84 96 62 c4 e5 1a 8b ec 58 08 73 59 ea 46 35 88 ad 56 39 1c d7 f1 fa f9 e7 95 e7 c7 be b1 9d Data Ascii: 6ty0rwW)9\|kktxr7SXKhW\9i@6G+[<pfEGZiRe/1Gn!"_~</^^3}=UlV"RD)pkqW'\(/wXcO :>0KYjWV#b*zD8bXsYF5V9
2024-04-29 20:13:49 UTC	114	IN	Data Raw: 58 ad 12 ab 5b c2 2f 1e 23 e8 50 63 5a c6 ca bd de 46 68 90 2a 48 55 b5 d5 55 98 3c 5c 0b 46 01 cf 6c 59 ff 00 67 0a 54 9f 60 8b ee 09 0d f9 2f f4 b7 a0 8c 61 1b ca 2f a5 ed 47 b7 94 f3 45 e1 c8 a9 ca 2f 8e 18 c6 b1 3f 26 b5 1a 9f e6 44 4f e8 03 cb 8b 5f 0a 34 a9 3c 7d cc 98 f1 40 13 c8 e3 8e 3d f2 8c 6d 21 78 e3 fd 65 5f ff 00 68 9f ff d9 Data Ascii: X[/#PcZFh*HUU<\FlYgT`/a/GE/?&DO_4<}@=m!xe_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49813	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:49 UTC	757	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw
2024-04-29 20:13:49 UTC	557	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:49 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: close x-amz-id-2: b20cEZl8BZBZCcu3jpxwMvR7o9Oa4SyfHTAy2SNhjvKDg2oL2lmiqyUxcUIuZFYoQU3seIhAHEw= x-amz-request-id: NBW2CKFJND9K6HR6 Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 5927 Accept-Ranges: bytes Server: cloudflare CF-RAY: 87c1f46f08506181-ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49826	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:50 UTC	614	OUT	GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29031 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "d78b-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/07A5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 55179 Connection: close
2024-04-29 20:13:51 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:51 UTC	16383	IN	Data Raw: 95 62 01 a9 0a a0 f7 50 9c ba 32 ac 05 62 2b 33 4a 1b 15 ed ce b5 21 91 eb 20 0c 68 29 52 13 af 81 a8 d3 23 81 ac b8 d1 19 d0 93 ff 00 3a d1 72 d3 4a 8f 8a 30 23 f8 fd 40 19 bc 2b f7 d4 81 27 b7 a2 78 d6 a3 e1 ba 3f 10 e3 df d7 fb 68 85 74 2b d7 31 40 df ba a0 7f 77 13 ef 3f b2 85 bb 0b 0b f6 c6 78 d0 6e 35 e2 18 51 2a 48 3f 75 65 23 b3 d5 10 0e 46 b1 6c 4e 34 48 e9 6b b7 1d 52 ca e6 cc 42 aa f6 b3 34 00 3b 49 14 d6 76 3b e7 df 5e 53 05 76 76 6f 6e 4c f5 6a b6 a6 dc ff 00 d6 68 8b 3f 26 f3 c6 00 e6 76 e8 9f f9 ef 83 5a b7 9f 2c 73 bb 0b 13 2d b3 2e 07 ff 00 aa e3 9f b8 d0 db 6d f9 dd 95 de 1c ad dd d5 62 e1 9f ee 5e 16 c9 f6 4d 43 21 0d 1f 77 5f 54 76 f1 f4 04 0e 3d 04 13 e0 63 40 83 87 a9 f0 ac d4 b9 f7 54 2a 8a 38 51 d5 65 7d 98 7e ca f1 59 3f fe 46 a7 Data Ascii: bP2b+3J! h)R#:rJ0#@+'x?ht+1@w?xn5QH?ue#FlN4HkRB4;Iv;^SvvonLjh?&vZ,s-.mb^MC!w_Tv=c@T8Qe}~Y?F
2024-04-29 20:13:51 UTC	2	IN	Data Raw: 1e d3 Data Ascii:
2024-04-29 20:13:51 UTC	16383	IN	Data Raw: cc 25 52 13 15 82 ea 4a 3c 9b 03 39 1e bd b3 75 c0 54 d4 9b d4 1d da 82 d3 95 aa 2e de b7 d7 5f 81 a5 b8 f7 12 ca a8 8b 61 26 bb 6a 90 fa ab ed 21 ed 0d dc fb b5 51 e1 fb f3 10 cc 19 26 6a 21 94 b6 87 38 eb 83 af 2d 4d 7f 24 72 5d 06 d7 b4 ea b0 d8 62 1a e1 3b 59 aa 3a a4 32 cc e7 64 4b 44 a8 d3 f6 d9 10 e5 c7 aa 65 2c 3e ab 05 d7 48 29 4b 69 40 5a a9 b5 19 a1 4d df ec 7a de c5 b2 55 b4 98 cf fd 0c 5a ad 3a 45 2b 1b 0a a7 4e f3 71 a8 ae b6 e6 c9 19 2d 46 f6 cf d4 17 16 49 48 47 5b 4e ad 55 64 f3 37 7a 33 ba c2 76 f6 96 cc b8 cf 57 3b b9 52 bf b1 eb ae 89 12 1b fa 49 11 ec 6a 18 f7 d0 1a 70 a9 ac 14 3a 47 ca 3a 9d 0e 64 99 46 75 73 cd a2 7a d8 50 96 84 4c b0 5b 45 0f 03 ee 95 36 99 0d 2c 12 a1 e6 8f 22 46 40 07 a4 49 af 43 95 b3 6d 2c 05 2b 51 d3 09 91 08 Data Ascii: %RJ<9uT._a&j!Q&j!8-M$r]b;Y:2dKDe,>H)Ki@ZMzUZ:E+Nq-FIHG[NUd7z3vW;RIjp:G:dFuszPL[E6,"F@ICm,+Q
2024-04-29 20:13:51 UTC	6028	IN	Data Raw: 20 15 7e 60 82 32 47 a1 c8 1f f2 75 e4 4e 3c 48 39 ef df 20 03 e9 df 3d 39 8e e7 c8 a8 0c e4 1c 77 09 cf c0 76 f4 ea f6 5a db 28 62 6e f5 74 a8 ca f8 38 98 ec 42 61 c2 9f c9 2e a4 8c fe 23 f6 b5 bf 05 aa 54 9f 15 01 dc 7f d9 54 85 7a 02 70 7c c7 45 c5 61 29 62 12 13 f1 fd 45 19 20 13 df d5 5e bd ba 8c 8c 61 72 dd 5b aa 1e 84 87 5d 3f e3 e2 94 f4 84 fa fc a9 ee 72 47 96 0e 31 db 23 03 1d 36 91 8c f8 60 fa fa 03 9e e4 77 3d fa 7c 8c 60 ba e6 7d 7e 2b 50 38 f8 fc 3a 75 af 2c 07 10 52 a1 83 dc 1e d8 1d 25 a5 8f 20 db ee c4 5f 90 f5 8d 24 10 41 3e a3 c5 58 c7 e5 d2 99 56 49 61 f2 9e e0 fa 05 1f 1f f5 75 66 f3 63 2e 06 1c 7d af 81 f7 42 07 b4 12 3e 05 4e 90 3a d5 68 90 3c 7f 97 51 57 32 ee 7d 4c 93 1d 0e cb 51 fc d7 25 c5 9f ef fe dd c2 6a 29 4a 1f 57 2a 4b 43 Data Ascii: ~`2GuN<H9 =9wvZ(bnt8Ba.#TTzp\|Ea)bE ^ar[]?rG1#6`w=\|`}~+P8:u,R% _$A>XVIaufc.}B>N:h<QW2}LQ%j)JW*KC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49831	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:50 UTC	616	OUT	GET /global-elements/footer/images/facebook_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42144 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "74c-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/078D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1868 Connection: close
2024-04-29 20:13:51 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49828	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:51 UTC	617	OUT	GET /global-elements/footer/images/instagram_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42111 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "b12-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0785) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2834 Connection: close
2024-04-29 20:13:51 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49827	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:51 UTC	617	OUT	GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 41929 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "a65-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0784) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2661 Connection: close
2024-04-29 20:13:51 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49829	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:51 UTC	615	OUT	GET /global-elements/footer/images/threads_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42740 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "745-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0794) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1861 Connection: close
2024-04-29 20:13:51 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49830	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:51 UTC	609	OUT	GET /global-elements/footer/images/x_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:51 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42728 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:51 GMT Etag: "54d-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (chd/072C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1357 Connection: close
2024-04-29 20:13:51 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49834	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	684	OUT	GET /global-elements/footer/images/youtube_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42772 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "371-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (chd/076A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 881 Connection: close
2024-04-29 20:13:52 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49835	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	705	OUT	GET /component-guide/blue-caret.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/assets/css/welcome/welcome-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42252 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "250-56c54c4b80440+gzip+ident" Last-Modified: Wed, 16 May 2018 15:56:57 GMT Server: ECAcc (chd/077F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 592 Connection: close
2024-04-29 20:13:52 UTC	592	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49836	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	723	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/footer/css/footer-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 41921 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT Server: ECAcc (chd/07A2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5390 Connection: close
2024-04-29 20:13:52 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49837	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	622	OUT	GET /global-elements/lib/script/require-jquery.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42729 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "4a-5057c23aa4c00" Last-Modified: Wed, 15 Oct 2014 20:40:16 GMT Server: ECAcc (chd/0759) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 74 Connection: close
2024-04-29 20:13:52 UTC	74	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 7d 29 3b Data Ascii: USPSRequireNS.define(["jquery"],function(){return jQuery.noConflict(!0)});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49839	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	615	OUT	GET /global-elements/lib/script/helpers.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1155	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42736 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "2b7-505dad4fe5380" Last-Modified: Mon, 20 Oct 2014 13:38:38 GMT Server: ECAcc (chd/076A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 695 Connection: close
2024-04-29 20:13:52 UTC	695	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 72 65 71 75 69 72 65 2d 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 6e 3d 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 7d 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 6f 28 29 7d 2c 73 3d 66 75 6e 63 74 69 Data Ascii: USPSRequireNS.define(["require-jquery"],function(e){var t=function(){var t="placeholder"in document.createElement("input"),n="placeholder"in document.createElement("textarea"),r=function(){e(document).ready(function(){i()})},i=function(){s(),o()},s=functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49838	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	620	OUT	GET /global-elements/header/script/search-fe.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:52 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42745 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:52 GMT Etag: "8d8-5d77081c47c40+gzip+ident" Last-Modified: Mon, 07 Feb 2022 16:58:17 GMT Server: ECAcc (chd/0773) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2264 Connection: close
2024-04-29 20:13:52 UTC	2264	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 72 65 71 75 69 72 65 2d 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 3d 7b 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 2c 72 28 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 62 6f 64 79 3d 65 28 22 62 6f 64 79 22 29 2c 74 2e 73 65 61 72 63 68 3d 65 28 22 2e 73 65 61 72 63 68 22 29 2c 74 2e 73 65 61 72 63 68 54 6f 67 67 6c 65 3d 65 28 22 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 22 29 2c 74 2e 73 65 Data Ascii: USPSRequireNS.define(["require-jquery"],function(e){USPSGlobals.Require.requireGlobals(["resize-manager"],function(a){var t={},o=function(){n(),r()},n=function(){t.body=e("body"),t.search=e(".search"),t.searchToggle=e(".global-header--search-button"),t.se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49841	65.8.49.32	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	562	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:52 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28851 Connection: close Date: Mon, 29 Apr 2024 10:21:58 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c5cbfe878d2e8e4fbd5ec9537ae71488.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD52-C3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: iVqqF8GrE6VtZnlXU-ksReWlYskL_15SiIv8C21BsXj0PFQSA24O2Q== Age: 35515
2024-04-29 20:13:52 UTC	15732	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 34 31 36 20 76 37 2e 30 31 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-04-29 20:13:52 UTC	13119	IN	Data Raw: 2f 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f Data Ascii: /ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49842	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:52 UTC	472	OUT	GET /assets/images/welcome/premium/id-hero-22-woodflooryellowsweater.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 15368 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "253af-5da6b621d5a80" Last-Modified: Thu, 17 Mar 2022 15:07:06 GMT Server: ECAcc (chd/07A6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 152495 Connection: close
2024-04-29 20:13:53 UTC	15277	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 07 08 a0 03 00 04 00 00 00 01 00 00 01 90 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 90 07 08 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: f2 af 9e be 24 ea 4b 6f 67 26 0e 38 39 e7 fc 7f ad 7b 9e b3 72 91 43 b3 76 0f 7c 57 c6 5f 18 7c 44 52 27 85 9f 3c 13 f4 ac b3 4a dc 90 63 c9 68 39 d5 47 c0 bf 19 f5 63 2c ae 99 0d 9c 8e 09 cf 5e e2 be 36 d4 ac 5e f2 47 6e 46 d3 91 8c e0 fe 35 ef df 10 f5 46 be be 60 a7 24 13 c7 1c 73 5e 45 24 51 be 30 70 4f 7f eb da bf 25 c6 d6 6e 6d 9f b8 60 30 e9 53 51 67 18 74 a2 f2 90 08 e0 e3 3c f4 a9 bf b1 0f f7 c7 f9 fc 6b b8 fb 04 4e 03 ae 5b 70 ea 78 ce 7b 75 a6 ff 00 63 af fc f2 4f fb e8 7f f1 55 c3 ed 6e 7a b1 c3 23 ff d2 fd 10 b4 95 1d 03 f1 ea 3b fe b5 b3 19 2c a0 2e 3f fd 75 c6 69 93 07 00 37 d0 f3 5d 65 bc 80 e0 f7 3e dd 0d 7c cb 8d 8f bf 9b b1 aa b1 ed 0a 0d 58 09 b9 77 67 26 ab 40 e1 c8 46 1f 89 ad b1 12 bf dc e8 3f c6 b3 94 ac 5c 23 73 0a 6b 60 cb b8 70 Data Ascii: $Kog&89{rCv\|W_\|DR'<Jch9Gc,^6^GnF5F`$s^E$Q0pO%nm`0SQgt<kN[px{ucOUnz#;,.?ui7]e>\|Xwg&@F?\#sk`p
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 19 a1 6d ac 3d c6 46 41 1c 10 41 1c 1a ff 00 60 7f 87 be 36 b1 d7 fc 3d a7 78 a3 4e 4b 88 ac 35 6b 58 6e e1 8e ea 09 2d a7 44 9d 04 8b e6 c1 28 59 22 90 06 c3 c6 ea 19 5b 2a 46 45 7e 0e 7f c1 77 7f e0 8e 5a 6f ed b1 e0 1b 9f da 37 e0 1d 84 51 fc 4a d1 6d 49 bb b7 40 47 f6 dd a4 6b c4 58 1c 1b 98 c0 fd d3 11 f3 0f 90 9e 98 ec c2 62 12 7c b2 d8 25 1e 65 63 f9 2e ff 00 82 7c fe d8 51 f8 eb 44 8b c0 7e 2f b8 0b a8 5a 01 1a 96 20 17 50 3f 5a fd 56 f1 1e bb a7 c5 66 25 47 df 91 9e 08 35 fc 6b 19 fc 5d f0 47 e2 13 5d d8 99 2d 2e ec 67 65 74 60 55 95 91 b0 c8 c3 82 08 20 82 3b 57 ef 5f ec e3 fb 55 e9 1f 19 3c 1e 89 a8 ca 16 fa 15 db 34 45 b9 c8 1d 40 af 96 e2 9c a1 d2 4e b5 35 a3 df c8 fd 7f c3 de 2a 58 a6 b0 98 a9 7b f1 db fb cb fc d1 ef 7f 11 fc 41 11 32 5c 48 Data Ascii: m=FAA`6=xNK5kXn-D(Y"[FE~wZo7QJmI@GkXb\|%ec.\|QD~/Z P?ZVf%G5k]G]-.get`U ;W_U<4E@N5X{A2\H
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: d7 a1 f4 3e c6 bf a4 2b 88 1e 78 02 24 87 0b c6 3b 66 be 66 f8 f9 fb 2f f8 37 e3 1e 98 2e 80 fb 16 ad 10 2d 0d d2 0e 8d dc 38 fe 25 3d eb ef b8 7f 8d 2a 53 97 26 29 dd 77 eb ff 00 04 fc 87 8d bc 31 a3 89 87 b6 c0 2e 59 ae 9d 1f f9 7e 5e 87 87 7f c1 38 ff 00 e0 a0 bf 15 7f e0 9f 9f b4 4e 99 f1 d3 e1 cc ad 71 64 4a 5a 6b fa 39 62 b1 6a 5a 7b 30 32 44 dd 84 83 ef c2 e4 7c 92 00 79 04 83 fd 65 ff 00 c1 5c 3f 62 8f 84 df f0 55 2f d9 5f 47 ff 00 82 9d 7e c2 5b 35 9f 11 da e9 c2 5b fb 6b 55 02 7d 4f 4f 84 13 2c 32 c4 bc 8d 42 c4 e4 6c 3f 33 20 64 e7 11 d7 f0 6d e2 ef 05 78 c3 e1 57 89 9f c3 5e 2c 84 c7 73 0f 29 26 0e c9 a3 f5 52 7a 9c 57 ee bf fc 10 d7 fe 0a e3 7f ff 00 04 f4 f8 d0 7c 0f f1 36 ea 6b 8f 84 be 33 9e 35 d5 61 19 7f ec cb a3 f2 26 a3 0a 76 da 30 b7 Data Ascii: >+x$;ff/7.-8%=*S&)w1.Y~^8NqdJZk9bjZ{02D\|ye\?bU/_G~[5[kU}OO,2Bl?3 dmxW^,s)&RzW\|6k35a&v0
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: d6 e5 be 65 e2 b9 ec 6d 19 1e 7b a8 58 06 05 48 c8 20 e7 f0 af 34 d5 74 a4 98 90 c3 a9 ef 5e dd 75 6c 48 2a c0 e3 9e b5 c8 ea 1a 78 28 c5 c0 19 fe b5 51 76 d8 a9 1f 32 eb 5a 18 00 8d bd 8f 5f 4a f2 2d 5f 4c c3 e0 0c f7 15 f5 86 b5 a5 86 4c 9e 46 3a e3 8f f3 f9 57 91 eb 3a 34 45 cf cb d7 ae 2b d3 a1 57 4b 33 96 71 be a7 88 42 e6 dd 96 42 70 07 18 ae c2 c2 f3 0c 07 5c 56 76 a9 a6 34 05 94 0c 73 f4 c7 ad 64 5b ce f0 9d 8f c0 07 df d6 ba 27 0b 90 a5 6d 0f 5f d3 6f b7 a8 5e 99 eb 8e b5 d3 47 3a ed e1 ba 0c d7 94 d8 ea 00 2e 49 ff 00 3d ab ae b6 bd dc bf 37 71 c6 6b 9a 54 da 34 ba 67 4a d2 2e 73 f9 75 eb f9 55 29 d0 cc c4 b1 18 cf f9 e9 4c 49 95 87 5e e3 e9 4e 69 38 ca fb d6 a8 96 ae 60 5c 21 8c 92 79 e3 20 d6 1d c5 9a b8 2f d7 b6 2b b0 75 2e 00 3d c7 5f 5a c7 Data Ascii: em{XH 4t^ulH*x(Qv2Z_J-_LLF:W:4E+WK3qBBp\Vv4sd['m_o^G:.I=7qkT4gJ.suU)LI^Ni8`\!y /+u.=_Z
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 5a d9 c9 1c 52 2c 0b b9 8a ee 24 9f 99 8b 9c 00 07 53 df 81 5c 32 72 5b 9e f4 23 19 23 9e 82 dd 61 88 44 81 b6 bf 0c fd 0b 60 e3 bf 00 7b 0a 7c 3a a5 b4 2f e5 a2 89 4b 90 88 aa 3f 1c 1c f6 f5 c6 07 15 d6 35 84 7a 6f 9f 6f 70 06 23 3b 23 c7 51 df 81 d0 65 8f e9 5c 7d e6 8f 26 9f 75 72 b0 60 ca 88 88 88 b9 dc 5d cf ae 38 18 07 38 a5 4d ea 6b 52 9e 9a 17 23 d4 cb 5d 08 a0 63 18 47 dd 23 70 15 40 39 03 03 a9 ce 70 b9 fa d7 4b 67 7b 1b 28 9c 29 da 5c 88 f8 f9 e5 6e e4 9e bf d2 b8 49 6c 46 8e d1 69 4f 96 90 73 23 a7 24 b9 f4 1f d4 d4 ff 00 6b 75 81 a5 c9 b7 0c 4a 47 8e 64 21 47 24 b1 3f 2f 3c 71 5b 37 73 9d 26 b7 3d 62 d6 3d 2e 2d 46 31 7b 89 a5 03 ee a1 2e e1 bb 8c 73 80 3f 0a db d4 3c 4d a6 69 90 b4 ae c2 11 70 76 24 31 61 dd b1 d3 a0 3c 9e b5 f3 f5 8f 89 ad Data Ascii: ZR,$S\2r[##aD`{\|:/K?5zoop#;#Qe\}&ur`]88MkR#]cG#p@9pKg{()\nIlFiOs#$kuJGd!G$?/<q[7s&=b=.-F1{.s?<Mipv$1a<
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: e0 56 d5 a4 ac f8 5c e7 3c d7 41 c6 ce a9 64 c1 f9 07 e3 57 20 bd 74 39 3d 86 39 ac 58 9e 40 81 0f 35 20 df 92 c9 9e 7a 56 73 7a 0e 2b 53 b5 82 f9 9d 41 53 f5 ab df 6c 07 e6 7f 5e 4d 72 76 66 42 9d f8 f4 ab 12 5d 10 36 b7 06 b8 2a 55 3a a3 4d b3 ac fb 78 1f 5f 43 fe 79 a1 b5 12 06 47 4f c2 b8 66 bf 55 6c 9e 87 a7 f5 a8 9f 50 c8 c2 9e 7b 9a e3 72 3b e1 4a c8 ec 64 d4 94 31 3e bc 66 b2 ee f5 25 2b 9e 3d 3f 5a e6 a7 bc 2c bc 9f 94 7a 56 2d cd c9 c7 cc 79 f4 35 8c d1 bc 22 5b d4 6f 4b 0d dd 47 5e b5 e5 5e 20 98 17 20 75 1e 9d ab b4 96 56 73 b0 1d df e7 ad 73 b7 da 71 b8 c0 23 d8 9f f2 69 45 d8 e8 8a d4 f1 2d 58 79 a8 c0 73 93 de bc d7 50 b3 7d e5 70 46 79 24 7a 57 bf 6a 1a 30 39 18 cb 73 8f a7 e9 5c 26 a3 a4 3a 02 71 c7 4f 43 5d 94 ab 59 8a 74 d3 3c 5e 6b 27 Data Ascii: V\<AdW t9=9X@5 zVsz+SASl^MrvfB]6*U:Mx_CyGOfUlP{r;Jd1>f%+=?Z,zV-y5"[oKG^^ uVssq#iE-XysP}pFy$zWj09s\&:qOC]Yt<^k'
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 38 f0 78 a9 c4 49 1e 49 3d 6a c5 8d 80 d4 f5 28 ad 25 25 56 42 79 02 94 a5 65 76 5c 20 e5 25 14 49 e1 eb 1b 89 04 97 b1 a9 c2 f7 fa d7 b5 78 76 f5 6f 60 11 bf 2c 30 2a de 9b a0 da d9 69 5f 66 85 71 c7 39 ae 4a cd ce 8b ab 84 7e 11 8f d2 bc 1a f5 95 66 ed d0 fb dc 16 12 58 4e 57 2e bb 9d bd e5 a7 97 85 c7 35 cc 80 2d 6e fa 70 6b d4 65 8a 3b bb 65 95 0e 7b f4 ae 07 56 b1 91 72 c0 72 2b 8a 8d 4b e8 cf 67 19 87 e5 5c d1 35 22 85 65 8f 31 f0 7b d5 79 ac 8f 20 70 df ce 9f a2 4c b2 85 57 ea 4d 74 73 da 89 fa 8e 9d e8 72 69 84 20 a7 1b a4 79 cd c5 b3 c3 2e e5 ca 9f 5a f5 4f 07 78 f3 51 b3 8c 69 b3 ca 43 74 5d df c4 3d 33 d8 d7 35 3d b8 62 23 90 75 e8 7d 6b 0e f3 4f 74 39 c1 e3 a6 2a da 8c d7 2c 8c 29 fb 4a 12 e7 a6 cf a9 34 cf 1d 5c 5b cb bc 92 ac 7d 4d 76 0d e3 Data Ascii: 8xII=j(%%VByev\ %Ixvo`,0i_fq9J~fXNW.5-npke;e{Vrr+Kg\5"e1{y pLWMtsri y.ZOxQiCt]=35=b#u}kOt9,)J4\[}Mv
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 35 c4 e5 63 b6 31 ec 79 6e a9 a7 9e 58 8f a0 3f 4a f3 6d 5b 4c 3b 4b 91 c0 e8 7d 2b de 2f 6d 15 81 1c e3 d0 57 05 aa 5a 2b 64 11 90 7b d6 94 ea 6b a0 e7 4f 43 c4 a6 b7 29 cb 1c 83 f8 56 71 89 54 94 ef db e8 6b b6 d4 ad 76 12 fd 33 9c 63 ae 2b 94 94 e0 ec e3 d2 bd 28 4e e7 2b 82 31 26 b4 18 0a bd 7a 62 b3 1e df 07 19 eb fe 3d 2b a1 7c 64 ae dc 8e b9 eb 54 e5 b6 49 07 3f 37 1c 7a e6 b7 53 ee 64 e2 72 77 10 fc c4 60 67 9f a7 3d 79 ac 99 a2 65 50 17 b7 eb 5d 7c b0 ab 65 70 41 35 8f 71 6e 51 b1 8c 9f 6e 9f ad 5a 95 c4 e0 73 17 28 19 77 11 c0 ed f5 ae 46 f2 09 01 2e a3 23 3d 3f a6 2b bb 9e 02 84 b1 19 e9 f8 fb 57 39 a8 5b 0e a0 fe 5f d6 b7 8c cc a5 4d 9e 7f 76 03 26 0f 1f 8d 73 57 40 a9 e0 73 df fc f3 fa 57 63 75 07 97 23 11 dc 9c 7b 7f 9c d7 1f 7b 1b e7 86 c8 Data Ascii: 5c1ynX?Jm[L;K}+/mWZ+d{kOC)VqTkv3c+(N+1&zb=+\|dTI?7zSdrw`g=yeP]\|epA5qnQnZs(wF.#=?+W9[_Mv&sW@sWcu#{{
2024-04-29 20:13:53 UTC	6154	IN	Data Raw: e7 eb 50 f9 d6 5f e4 7f f6 34 f9 fc 51 67 e2 39 0d b5 d1 02 30 7b 11 c3 0c f7 15 0f f6 7e 87 ff 00 3d 8f fd f5 ff 00 d7 af 4d 73 a4 95 4d ce 07 18 b7 7a 76 b1 ff d7 fa 56 55 11 b7 18 c0 fe a2 b2 6e e4 75 52 c4 e0 0c fd 6b a9 78 3c e5 e3 b0 e7 35 89 77 6e 17 0c e7 18 f5 ed e9 5f 33 0a 87 e8 75 21 a1 c5 ea 17 01 18 1c 1e b8 c9 cd 72 d7 37 6a 4e d6 ee 4f 3f fd 6a e8 b5 34 31 ef 62 db 46 72 31 d2 bc eb 51 97 19 0b f7 bb 13 f5 af 42 9d 99 cb 52 f1 d8 b5 75 72 ac 01 ed d8 ff 00 f5 ab 22 69 58 64 92 31 9f 4f e9 59 2d 7e c3 83 ef c7 41 cd 23 ca 24 62 cb b9 7f fa f5 a3 82 08 d4 2d 97 40 0e 7a af e9 ff 00 ea aa ad 31 6c c5 20 f9 4f 40 7f 4a af d5 76 a9 04 8e 45 57 97 e5 6c b3 7b fe 34 d2 b1 5c d7 2d c9 24 60 96 1d 7d 2a 8b b1 72 57 b2 9e be d5 11 67 f2 82 4a 47 cd Data Ascii: P_4Qg90{~=MsMzvVUnuRkx<5wn_3u!r7jNO?j41bFr1QBRur"iXd1OY-~A#$b-@z1l O@JvEWl{4\-$`}*rWgJG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49844	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	441	OUT	GET /assets/images/welcome/scroll-red.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42559 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "604-591bbfef60080" Last-Modified: Wed, 04 Sep 2019 15:38:26 GMT Server: ECAcc (chd/0733) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1540 Connection: close
2024-04-29 20:13:53 UTC	1540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 be 49 44 41 54 68 05 e5 9b 5b 68 1c 55 18 c7 bf 73 ce 6e 0a 6b 42 1a 34 97 4d 22 b2 66 a5 14 b4 11 fa a0 42 6d 8d 08 2a 08 82 82 18 11 d2 2a 4d 15 f1 41 7a 41 41 0b de 40 aa 7d f0 c9 cb 83 a6 0f a6 6f 82 20 e8 5b 7a 83 a6 42 9f 4b 71 d3 34 cd 26 7b 89 a1 94 d4 a4 6d 32 73 fc be b3 3b eb ee ec cc ec ce ec 4e 76 67 73 20 99 99 73 f9 be ef 37 67 e6 cc cc 39 ff 65 e0 53 92 fd bb 23 59 b8 b5 47 4a 7d b7 64 72 07 03 d8 01 12 fa 24 83 0e 00 86 7f 94 e4 0a 93 b0 02 0c d2 12 e0 2a 93 ec 2a 63 fc 72 0f 74 5e 60 8b 97 57 73 75 ea fb 1f e3 a8 5f 4a 0f 0d f5 c0 aa 7c 03 a1 5e 41 ab 4f 80 94 6d 9e ac 33 76 0f db 5d c2 93 f1 Data Ascii: PNGIHDR<<:rsRGBIDATh[hUsnkB4M"fBmMAzAA@}o [zBKq4&{m2s;Nvgs s7g9eS#YGJ}dr$crt^`Wsu_J\|^AOm3v]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49846	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	452	OUT	GET /assets/images/welcome/featured/pp-greendoor.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 7900 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "127ba-5d8c4c3c1c940" Last-Modified: Thu, 24 Feb 2022 14:54:53 GMT Server: ECAcc (chd/073A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 75706 Connection: close
2024-04-29 20:13:53 UTC	15279	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9f a0 03 00 04 00 00 00 01 00 00 01 c3 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c3 02 9f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: aa 83 f3 01 91 f5 e2 b6 74 2f 1f eb 1a 2b 0f b2 cc dc f5 53 c8 af aa 52 c6 19 ad 8d b5 d0 12 64 32 90 47 18 35 e7 7a f7 c1 fd 17 51 71 35 89 36 b2 73 c0 e5 49 1e d5 e3 47 17 09 7b b5 51 e8 ba 4e 3a c4 e9 74 3f 8d 1a 75 dc 70 5b eb c9 e5 14 07 e6 5e 47 e2 2b da ad 35 dd 3b 53 f0 f5 cc fa 5c 8b 2e f4 e3 9f e9 5f 0b 78 83 c0 fe 24 f0 e6 d6 9a 23 34 67 38 74 e7 a1 ef 59 36 3e 25 d4 34 b8 d9 ec a5 78 d8 0e 40 38 fd 2a 27 86 a5 52 3c d4 46 aa 49 69 34 7f 13 5f f0 71 65 eb 5d 7e d5 36 16 f3 63 74 56 12 1c 0f 79 6b f9 c2 b6 68 84 ae 8d ce e3 9a fe 82 3f e0 e0 8d 45 b5 1f da a7 4e f3 86 24 1a 5e e6 3e a4 c8 79 35 fc f9 44 57 7b 85 c9 24 e4 1e d5 f5 12 8e 91 5e 4b f2 3c d8 3d 1b f5 34 a2 ca ce 82 3c 16 dd c0 c5 7d 29 e0 e6 49 35 46 47 8c 64 98 b0 d9 e1 7d 78 af 99 Data Ascii: t/+SRd2G5zQq56sIG{QN:t?up[^G+5;S\._x$#4g8tY6>%4x@8*'R<FIi4_qe]~6ctVykh?EN$^>y5DW{$^K<=4<})I5FGd}x
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 62 3b 2f 83 7e 1c c6 bd 17 44 8f 81 db 93 9a f5 cf d8 7b 9f 89 5f 0a 66 6f 9d 45 ce b4 bb 73 d3 fd 02 6a e7 5a c2 1f 33 cf 8b 57 6c ff d4 fd 89 f8 81 21 6f 88 5a f0 2a 38 d4 2e bf 1f de b5 73 f1 c8 a3 ef 28 c5 45 f1 07 5b f2 7e 23 6b f1 9e 42 ea 37 7f fa 39 ab 98 5f 12 33 00 b1 ae 7a f5 af 45 4f b9 91 dc 47 32 47 9c 28 e4 d5 91 2e 09 60 a0 62 b8 eb 7d 58 94 0f 70 ca 87 de ae c5 a9 2b 72 92 03 9a 6e 51 dd 12 d6 b7 37 de e9 00 ca a1 a6 c4 fb 93 74 80 e3 d0 55 78 6e 62 db 99 1f 93 ed 56 86 a1 64 8b f3 b8 5f af 15 17 d2 c9 8b 52 dc 11 07 00 93 b4 0e 7e 95 3a c3 b1 4b 03 93 ef 59 87 5a b1 1f 24 47 77 b0 a6 ae a9 68 f3 05 47 0a 7d 2b 31 8f ba 8e 58 87 98 c7 1e f8 a6 dc 49 6f 77 a7 ca b2 48 c3 e5 23 1d 33 fd 6a ca fd 9a ee 4f de 37 ca 3a 92 6a 0d 5a 2d 0e de 07 Data Ascii: b;/~D{_foEsjZ3Wl!oZ*8.s(E[~#kB79_3zEOG2G(.`b}Xp+rnQ7tUxnbVd_R~:KYZ$GwhG}+1XIowH#3jO7:jZ-
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 6b f8 77 c7 2c 41 92 6c b4 62 6c ef 2b 9c ae 4e 49 c9 07 07 9e b8 af 43 05 89 a5 86 bf b5 47 1e 2b 07 5b 12 93 a4 ff 00 13 13 f6 33 d6 ae 75 ad 17 57 bc b9 23 ad be 14 6c 04 12 1f 39 0a aa 47 b6 47 23 06 be d8 12 1f ba df 9d 78 ef c3 4f 05 78 77 e1 dc 32 e9 1e 19 b3 b8 b6 86 7d a5 84 b8 20 15 18 ce ee bc f7 cf e1 5e b5 bf 62 ed eb 5e 66 22 70 ad 5a 55 21 b1 db 4a 94 e8 d3 54 ea 6e 5b df c6 49 a4 3b 57 e6 07 e6 a8 04 9b 86 31 8a 6a b0 e9 dc 57 05 8d cb 6b 81 c0 3c d2 97 65 e0 11 9f 7a ae 1f 79 c0 38 c1 a7 10 0f df 39 a6 c0 b0 00 23 2c dc d2 86 27 82 2a b6 f1 8a 78 72 3a 55 01 38 27 6f 5c 1a 99 4b 6d f9 ba 0a a4 ac c5 f2 dd 29 0f 3c e7 22 aa fd 00 f3 ce 5f e2 bc e8 07 1f d9 24 1f a1 99 6b e2 ab ef f8 27 57 c3 d3 f1 16 7f 8a 51 eb f7 c9 70 f2 09 da 1f 29 19 Data Ascii: kw,Albl+NICG+[3uW#l9GG#xOxw2} ^b^f"pZU!JTn[I;W1jWk<ezy89#,'*xr:U8'o\Km)<"_$k'WQp)
2024-04-29 20:13:53 UTC	11278	IN	Data Raw: 1f 15 5c 88 d6 e6 ee 56 da 4f 42 6a c8 b8 f1 0c 79 77 b9 95 87 60 49 ab da 6d f5 f8 c9 78 d4 1f e9 4e be 9f 50 28 39 45 2c 78 15 37 b6 b6 1a b9 c9 dc 6b 5e 2c 78 95 45 cc bc 36 07 26 a6 79 fc 47 23 7d 9a 59 64 63 8c fd f3 fc ab 42 ef 4f d5 ef 06 d3 32 c2 a0 75 51 fe 34 90 78 4b cd b8 5b 87 bd 90 ca 38 0d 9c 71 f4 a3 9d 5b a0 ad 73 29 2c b5 c8 89 77 79 48 3d 72 c7 81 56 da cf 57 9a d1 65 57 91 59 1b 0b f3 75 ae ce 5b 0d 8a 21 9a 46 6c 90 32 47 a5 49 3f 87 10 40 42 4a de bc 1a 39 db 1d 92 38 e9 21 d7 6d 71 f3 be 07 7d c6 b9 5f 10 df 6a 10 59 01 75 23 21 73 f2 92 c4 d7 ab 7f 62 6e 80 c7 2b 39 56 1c 1f f1 ac e9 3c 15 6b 7b 66 12 f2 52 fb 49 c1 c5 2b d8 7a 9c 47 85 34 6d 46 68 49 fb 49 7c 8c e4 b1 e0 54 f7 d6 fa cd 8d d9 48 26 38 27 6e d5 27 9a d1 b5 f0 dc f6 Data Ascii: \VOBjyw`ImxNP(9E,x7k^,xE6&yG#}YdcBO2uQ4xK[8q[s),wyH=rVWeWYu[!Fl2GI?@BJ98!mq}_jYu#!sbn+9V<k{fRI+zG4mFhII\|TH&8'n'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49845	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	452	OUT	GET /assets/images/welcome/featured/pfs-roadtrip.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 28430 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "1fbae-616d78cc89800" Last-Modified: Wed, 24 Apr 2024 13:21:36 GMT Server: ECAcc (chd/0769) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 129966 Connection: close
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:53 UTC	1	IN	Data Raw: c4 Data Ascii:
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 00 47 29 ce 04 42 c2 0c b2 06 36 39 03 86 46 e7 c4 64 9c bd 77 2a bd af 8d d0 4c 24 6f 5f 66 3d 3a 3e 7f 53 e3 24 b6 32 d4 5a be 88 1f 4e 11 2a 37 f6 4f e4 a7 76 5d 97 c7 23 97 da c8 50 a8 d0 be 08 42 6b 58 17 67 05 d8 a2 57 76 04 67 60 46 c8 46 c9 5f 3b 8a 32 b9 77 71 5e eb 85 c9 0a 22 4b 41 44 07 81 ec b9 3f 21 fa 7a 05 c2 e3 f5 71 fc 4e 7f 80 48 05 c4 94 de 10 1c 2b cd 7b 85 99 0d 68 25 95 c5 d1 08 e5 52 35 d1 bb dd 61 dc 7b 1e 48 4c 7f 09 cd 0e f5 03 95 db 85 ca e5 76 4f 1c ae c4 88 8f 50 57 c2 f2 9b 58 85 c3 10 21 77 70 45 c8 bd 81 1b 0c 08 db 28 d9 71 46 57 14 5e 4a e1 01 ca 10 b9 36 07 15 f6 eb ed d7 db af 80 2f 84 04 22 6a e8 d4 02 11 02 0b 4b 4c 83 91 ff 00 cf fc 88 fd 44 2e 3f 5f 2b 9f d1 ca e5 1f e0 13 c2 e8 79 73 1f c0 68 2b e6 6f 36 6d 9f 86 Data Ascii: G)B69FdwL$o_f=:>S$2ZN7Ov]#PBkXgWvg`FF_;2wq^"KAD?!zqNH+{h%R5a{HLvOPWX!wpE(qFW^J6/"jKLD.?_+ysh+o6m
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: d3 4a 18 5c 3e bf a9 d1 74 cf 71 fd e5 73 03 51 2f 72 ea e2 8f c0 d2 d7 bc 8f 2c e3 2e 64 fc 7d 06 46 96 5e 98 74 2b e5 70 45 d2 29 bb cc 4c 50 26 32 a8 43 d9 0f 94 81 14 c4 8a f3 38 45 52 42 59 55 41 59 a8 d7 88 18 e9 d1 74 be 56 d7 0e a5 b4 f8 f6 c3 a3 b3 8a 23 15 e6 7d 85 9d 36 3d 32 fb ad ff 00 d7 c8 e7 96 72 98 42 6b 93 5c 54 6f f6 12 26 b8 a6 bb d8 3c 84 1c 50 77 0b ba ee 83 d0 72 ec 83 93 5d ef ca 07 95 ca 07 84 de cf 77 e5 af e6 54 f9 19 f5 2b b9 bc 35 0c 0e 35 96 29 e1 30 d5 b1 cd d7 70 2e 96 6a 94 22 a5 16 cb e6 dd 0f 4a 76 63 f2 4f c8 99 67 5d 97 27 9f b7 15 26 81 93 da b1 18 66 65 f7 6c b6 49 ce 2f 91 cd 8f 94 c6 47 12 2f 73 d3 7b 00 c8 64 99 d2 56 8e 16 f0 d4 5e 4a e4 94 e9 9b c3 a4 71 40 ad 77 59 d8 b6 ec af 8d 7f eb 9f cc fb 61 f1 af e0 77 Data Ascii: J\>tqsQ/r,.d}F^t+pE)LP&2C8ERBYUAYtV#}6=2rBk\To&<Pwr]wT+55)0p.j"JvcOg]'&felI/G/s{dV^Jq@wYaw
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: c7 d7 c9 61 75 d0 75 dc 4e 6b 1d 87 c4 bf 52 c9 ec 35 8e 9d 9f ca 6f 19 b1 0e f9 41 95 f3 fa e5 6c 3e 4b 31 f7 30 c5 72 f5 49 45 ef ed ef 97 f1 9f 57 75 4c 54 6c 8e b4 7b 16 51 cc 66 47 32 c6 1c cd 8b 73 32 f4 d7 18 ed 87 3f 88 d7 69 5c cb 4f 96 bd 63 63 8e 28 f2 39 a9 ae 1b 95 6f 5d c8 61 9b 8c 64 5f 8b 59 49 a9 67 f5 67 cd 15 49 27 ae e6 c3 fd 5c bd 76 74 cc b7 e0 7e ce d7 58 93 7d bb 1e 23 10 cc 64 39 6b 4d d1 71 b6 e2 87 c6 4d ed 1e 89 b5 53 74 55 bc a7 8f 50 ed 7e 48 a6 9b e5 6c 8c 40 f9 2f c7 f6 d5 7c cf 89 af 9a 75 30 61 db 6d 68 a7 d4 db a8 d8 c4 d6 f8 2e 41 24 31 66 1c a2 39 96 16 de c8 44 6f 3a cd b7 55 af b1 0c 95 6d 86 9c 01 bb 5e 2d cd ff 00 90 62 24 6b f2 78 79 84 87 0d 22 a4 dc 2f c9 63 3d 4e 01 f7 f7 65 b6 fb ae b5 66 ce 63 e0 ab f6 39 2b Data Ascii: auuNkR5oAl>K10rIEWuLTl{QfG2s2?i\Occ(9o]ad_YIggI'\vt~X}#d9kMqMStUP~Hl@/\|u0amh.A$1f9Do:Um^-b$kxy"/c=Nefc9+
2024-04-29 20:13:53 UTC	3	IN	Data Raw: ba f5 6f Data Ascii: o
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 5a 6f 73 f5 6f 5a 6e 8c 3f 8c 6f 17 bc 22 5e 29 6d 14 49 e0 8a 34 af 82 08 e8 aa 3d ec 79 92 b3 39 19 a8 63 5a 1e f2 38 9e ce 43 96 12 f3 74 56 86 d9 88 30 da 70 92 5f 4f 60 c5 bc 86 11 04 10 b2 f9 56 ea 28 00 18 b7 98 c4 00 00 67 4e d1 81 44 04 01 cf 2a f7 60 e9 a8 f2 ce 92 a0 50 0c be 9c 54 e5 a7 3d 64 d0 0f 49 c4 8b b9 ef b1 4f 7a a3 c1 b7 59 fd f4 a4 f6 51 78 62 4b 2e 8e 8a 3e 9a da 08 d0 b7 73 9d 53 10 78 b6 81 90 38 6d c3 a9 f7 6b be a3 bd 73 a8 b5 d4 84 c6 a7 f6 63 f7 46 07 99 24 56 e9 18 a0 8d 68 3e 81 87 8b 6f 53 2b 72 7e cf 5e 1b cc 9c c4 8d f5 41 a6 2a ca d7 0f c4 b7 d5 f6 e1 56 58 42 85 14 48 2d f2 a9 ed 66 38 22 de 25 84 1e 60 6a 3e d3 8d 4c 49 3f 69 b0 3b 4f 11 8a d3 c4 78 53 b3 d1 83 aa b9 0c e9 c4 f7 62 aa 4d 0f a2 b8 04 f1 a7 02 78 e3 b4 Data Ascii: ZosoZn?o"^)mI4=y9cZ8CtV0p_O`V(gND`PT=dIOzYQxbK.>sSx8mkscF$Vh>oS+r~^AVXBH-f8"%`j>LI?i;OxSbMx
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 31 5d 38 06 99 e3 20 06 29 4c 54 f0 c6 5f 93 3c 50 7e 4c b1 b8 75 87 5d 6f f6 bd 37 d3 bb 68 1f 13 b8 dd 37 bc ed 5d 11 44 8b 57 92 47 e0 a8 80 b1 e4 31 bb f4 af c9 4e 9c dc 6c f6 99 e5 30 dd f5 1c ef 2c fb a4 aa 09 a0 54 84 f9 36 0a e3 f6 f5 d3 9a 9c 0b 7e a1 e9 15 b4 b5 90 80 fe 7d ac b6 ca 73 af e2 1f 0e 75 35 35 cf 08 b6 a4 ed db 8c 43 55 bd bb b0 12 44 4e 7a a1 93 9a f6 83 8e 99 db 37 fd b6 d2 0d d1 b7 35 b8 87 72 79 1e 33 76 b6 d0 bb 0d b8 91 54 d3 21 a4 b1 12 00 d6 a5 58 d0 e3 ac fa 73 a3 af 76 bd dd ee 3a cf 64 b5 de ec 6d 16 48 88 b3 91 61 8a 48 e3 78 11 50 95 93 32 15 aa 73 35 3c 71 b7 cb 6d 3d f6 e7 bf 59 c0 fb 42 ee db 9d e4 97 92 da 59 6b 0c f6 96 c1 8e 88 90 80 14 d0 56 82 95 38 bd df ef ee 5a 1d 8f a6 a1 48 6d 60 50 0f 9d 3a ad 58 9e e4 fc Data Ascii: 1]8 )LT_<P~Lu]o7h7]DWG1Nl0,T6~}su55CUDNz75ry3vT!Xsv:dmHaHxP2s5<qm=YBYkV8ZHm`P:X
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 56 98 57 ea 46 35 b7 b6 98 bc dd ae 50 a6 e1 bc 31 5b 58 4f bd 15 a0 6c 8d 38 8d 67 3f 40 18 86 c5 66 2d 0e a5 32 45 5a 82 57 30 69 eb c7 cd 8d fe c4 bc 7d 5f f3 df 7c 87 a5 76 62 0d 24 6d ba 0a c3 28 8f fa 40 4a 7d 78 f9 69 f2 5b 74 bc 76 e9 9f 95 dd 29 63 ba dc ec ca c4 41 36 f3 ba c6 f7 53 cd 32 70 66 5d 5a 07 75 71 14 a1 bc a5 f2 d7 52 26 42 31 4e 00 0a 05 a9 e1 84 8a 48 56 d3 76 9a 82 df 74 00 16 f0 f0 12 81 ef 83 c2 bc 70 25 78 23 bc 8a 3c e4 6b 67 d6 40 1c 5b 46 4d 4f 46 3a ea e2 47 f2 cc 3b 8e dc d1 54 53 4c b0 23 32 d7 b3 8e 3a 83 a5 6d 14 b5 d7 58 ef b6 db 48 5a d0 68 bb b9 8d a7 66 3c 94 42 ae 4f 66 3a 3a ff 00 a3 6e db a9 7a 9a 4b 27 da fa a6 63 1f 91 6f 61 67 64 da 2c 5a e2 4e 03 ca 8f ee cf 36 f0 85 18 7b a5 b8 5b ce ad 51 4b 9e ad ba 45 96 Data Ascii: VWF5P1[XOl8g?@f-2EZW0i}_\|vb$m(@J}xi[tv)cA6S2pf]ZuqR&B1NHVvtp%x#<kg@[FMOF:G;TSL#2:mXHZhf<BOf::nzK'coagd,ZN6{[QKE
2024-04-29 20:13:53 UTC	15281	IN	Data Raw: 77 8c 02 d4 a2 16 24 d7 d5 41 81 23 85 15 23 45 46 91 4e d6 2c 38 60 c5 13 46 ae 0d 14 bd 35 00 4f ba aa 05 4f ab 05 88 2a 17 24 76 14 d4 c3 31 a8 1f 13 53 13 6d 1b 8d c4 91 6d bd 47 12 d9 de 92 41 30 c8 4d 60 98 85 ca a8 f9 fa 2b 89 ad 8c 70 3f 98 ab 06 e1 72 63 d3 11 92 35 a1 7a f2 61 f4 e2 7b 3b bb 87 96 e2 39 51 ee 5c 03 a2 4b 60 4f 85 5a 94 04 0c 6e 17 fe 7c d1 16 96 21 65 75 13 0f 29 55 4e 9d 33 a8 ed 18 b9 8b 6e b6 16 96 d7 97 02 45 50 c1 c3 12 a0 6b 14 ed ec c6 e0 6f a4 2f 61 b5 5c 4b 1e cb b1 46 df 72 91 46 e5 04 8f c9 a5 90 8a b1 3c b2 18 92 65 b1 85 4a e4 d0 67 45 26 87 9d 2b c7 0f 71 7e 0c 8c fa 7c c0 28 8a 09 39 69 51 cb 0e a9 1a 92 87 45 bf 80 16 af 1c 87 3e dc f1 21 b5 86 2b d5 11 ac 93 5b 2b e8 93 45 6b a4 1c d4 e7 9d 0e 07 c5 8b 8b 19 83 Data Ascii: w$A##EFN,8`F5OO*$v1SmmGA0M`+p?rc5za{;9Q\K`OZn\|!eu)UN3nEPko/a\KFrF<eJgE&+q~\|(9iQE>!+[+Ek

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49847	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	450	OUT	GET /assets/images/welcome/featured/passport-g.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 15259 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "e79e-5d0754d964cc0" Last-Modified: Wed, 10 Nov 2021 20:45:15 GMT Server: ECAcc (chd/076A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 59294 Connection: close
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9f a0 03 00 04 00 00 00 01 00 00 01 c2 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c2 02 9f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-29 20:13:53 UTC	1	IN	Data Raw: 54 Data Ascii: T
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 82 10 3a 55 af 97 d6 93 28 3b d2 bb 2b 91 22 21 10 ed 52 04 fc 69 44 89 eb 47 9f 18 ef 48 bb 22 40 b5 20 5f ce ab fd a5 01 a6 fd ad 47 34 b9 5b 17 32 2e e3 f2 a7 ed ac ff 00 b6 7a 53 be d9 c7 5a 39 18 5d 17 f6 d3 c0 15 94 6e c9 ef 4d fb 51 f5 a3 d9 b0 72 46 d0 03 8a 5f 96 b1 85 d1 eb 9a 5f b4 7b d2 74 c3 99 1b 3f 2e 3a d3 83 27 ad 63 89 cf ad 2f 9c 7b 52 e4 1f 39 b3 bd 3a d3 c3 af 6a c7 12 13 56 11 cf 4a 97 12 94 8d 65 90 76 1d 2a c2 49 ed 59 a8 49 ab 91 8a 86 8b 4c ba ae 4d 59 42 7a d5 44 53 c7 7c d7 93 fc 5f f8 dd e1 5f 83 76 cf a7 5c 2a 6a de 2b 96 36 f2 34 95 39 8e d4 91 f2 c9 7c c0 fc be a2 11 f3 9f e2 da 3a ed 84 c1 54 c4 cf d9 d1 57 66 58 9c 54 30 f0 f6 b5 9d 91 e8 de 31 f1 b7 85 be 1c e8 6b e2 3f 1a 5d 9b 6b 49 58 ad ad bc 58 37 57 6e 3a a5 bc 67 Data Ascii: :U(;+"!RiDGH"@ _G4[2.zSZ9]nMQrF__{t?.:'c/{R9:jVJevIYILMYBzDS\|__v\j+649\|:TWfXT01k?]kIXX7Wn:g
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 51 ea 7d aa fe 2e b7 43 fe b0 57 21 ae 7f 61 f8 92 65 92 29 16 d7 52 4f f5 33 02 06 4f a7 e3 e8 7a d7 c5 77 7f 16 64 39 d9 21 ae 66 ef e2 96 a0 f9 f2 d9 f3 d8 d7 a5 84 c9 ab 52 97 3c 1d 99 e6 62 f3 da 15 63 c9 51 5d 1d 07 c7 8f d9 f1 7c 58 6e fc 45 e1 9b 54 b2 f1 35 b8 2f 75 62 a3 6c 77 8a 3f 8e 31 fd ff 00 5f 5a fc e7 b9 b6 b9 b2 b8 92 d6 ea 37 86 68 58 a4 91 b8 21 94 8e a0 83 c8 22 bf 52 3c 0d f1 ba db 5e 92 0f 0e 78 dc f9 2e 18 0b 1d 57 38 68 df b2 ca 7b af bf e7 59 7f 1d be 01 db 78 fd 26 d7 34 18 e3 b6 f1 3c 11 87 6d 80 08 6f 93 1c 10 47 1b f1 d0 d7 d3 e1 71 72 a7 fb aa fa 7f 5f 97 e5 e8 7c a6 2f 09 1a ab da d0 77 fe bf 3f cc fc c4 c8 eb 4d 07 8c e6 ad ea 5a 75 f6 93 7b 3e 9d a9 40 f6 f7 36 ce 63 96 29 01 0c ac 3a 82 0d 53 cf 1d 2b d6 f4 3c 5d c9 81 Data Ascii: Q}.CW!ae)RO3Ozwd9!fR<bcQ]\|XnET5/ublw?1_Z7hX!"R<^x.W8h{Yx&4<moGqr_\|/w?MZu{>@6c):S+<]
2024-04-29 20:13:53 UTC	10144	IN	Data Raw: da be 3a 78 0d 4f d0 e9 66 0e da 1f 77 e9 df 10 95 36 fe fb e8 41 af 46 d1 fe 22 c3 21 11 cd 22 b0 f7 af cd 55 f1 85 d4 13 2e c9 0e 33 cd 76 da 77 8f bc b5 0c d2 e1 85 67 3c ba 49 68 74 c3 39 d6 d2 3f 4b 05 d6 8b ae c5 b4 ec 2c 7b 1c 57 11 ac f8 41 a2 dd 25 9f 2b fd df f0 af 94 bc 3b f1 68 c7 30 56 9b 81 d0 9f f1 af 7d f0 df c6 0b 19 b1 0d db 86 43 c7 5c d7 3c a8 4e 9e e8 f4 68 e6 14 aa 69 72 a4 b6 93 c4 e5 1d 4a e3 b1 af 41 f8 4f 1e df 1e e9 64 f5 fd ff 00 fe 88 92 af 48 9a 37 88 2d fe d3 66 eb b8 8e 31 56 3e 1c 58 4d 65 f1 07 4c 49 07 07 cf c1 ec 7f 71 25 44 e7 78 b3 af 95 6e 8f ff d0 f3 4d 6f e3 13 45 a8 dc a7 9b f7 66 71 d7 fd a3 58 0f f1 96 65 39 13 9c 1f 7a f8 ab 5d f1 05 f1 d5 ef 46 e2 7f d2 64 1c ff 00 be 6b 24 6b 57 58 c3 67 35 fa 07 d5 e8 ae 87 Data Ascii: :xOfw6AF"!"U.3vwg<Iht9?K,{WA%+;h0V}C\<NhirJAOdH7-f1V>XMeLIq%DxnMoEfqXe9z]Fdk$kWXg5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49843	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	456	OUT	GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1161	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 50202 Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "9e3b-5b8a5e31d0dc0" Last-Modified: Mon, 11 Jan 2021 20:38:23 GMT nnCoection: close Server: ECAcc (chd/0776) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 40507 Connection: close
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPuhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 28 d1 2a 60 b1 39 1c 67 46 b6 86 0b 29 8b c9 6d e9 b9 fd be ce 37 1e ce 2d dc 34 0c ab c8 85 32 24 75 49 53 2d c9 69 41 45 45 b5 4b 74 a5 49 52 54 2e 3d ee 02 b5 96 aa 72 4d 4a 8e ae b8 ac 76 7a 8c e3 a6 8c 5a 6a ab 0a 67 e5 ca 71 73 7d 37 6d c7 b6 f6 e3 c2 c4 dd 99 81 37 75 cd 8b 2f 3f 98 c9 46 c6 64 7c e2 62 47 54 56 5b 95 11 d8 89 8e f2 d2 da b5 f9 85 27 cc 17 42 5d 53 8a 29 ad 56 be 5b c9 b4 b0 c9 2a af 4f 76 54 c2 86 4f 45 1d d6 93 78 e7 93 f4 77 e7 5c 6a 7b b6 17 12 ce 0b 0b 86 c1 46 91 2a 5c 5c 14 08 d8 e8 b2 e7 3c a9 12 9d 6e 2b 49 69 0b 7d e5 71 71 c5 04 dd 4a 3c cd cd 71 ce 5b d2 6d ed 75 3a e3 1d d4 97 21 b2 b5 54 b1 4b 50 14 b5 01 4d 34 05 2d 40 50 8a 02 96 a0 2c e1 cf f8 e6 e0 f6 47 c7 a7 fa 2e 9f cf 40 75 23 b6 80 ad c5 01 5a 02 63 b2 80 ad Data Ascii: (`9gF)m7-42$uIS-iAEEKtIRT.=rMJvzZjgqs}7m7u/?Fd\|bGTV['B]S)V[OvTOExw\j{F*\\<n+Ii}qqJ<q[mu:!TKPM4-@P,G.@u#Zc
2024-04-29 20:13:53 UTC	7741	IN	Data Raw: 53 b6 eb 71 96 10 98 53 32 f9 68 04 a9 40 28 0d 13 53 31 a3 70 6a df a9 e8 ae 7c 76 3b 12 7e 6a 15 fd 37 5b 6f e0 bf da df a6 a6 c1 87 7f 13 8d a1 1d 4e c6 97 8e df b0 99 57 15 36 bc 1e 4d 6a fa 3c 93 dc b8 d5 5a e1 37 1e d8 bf de 5e b2 57 ea b6 f9 24 ba 9f a8 ba af 57 3e b5 f6 5b 25 5b e7 d3 71 9f 1d af ed 67 23 0f 95 8c 0d b9 9f 12 22 e6 b5 f5 53 f4 ad 05 cf 82 f7 7a f4 d0 9f d5 35 f6 fe 3b 3d cf d1 53 3e 07 e2 7f 0f 1e a4 47 de fd 12 cb 61 64 26 c1 f5 c6 c8 b6 9b 1e db 35 39 88 8a 1f 4d 56 5f 8d 37 f0 5c 4f ab d5 52 57 e4 69 7c 76 da eb f5 d0 f5 cc 17 e2 49 e9 e7 2c 96 c6 42 3e e9 c0 b8 ab 78 85 fc 60 94 d2 4f f1 e1 3a fd ed f2 57 2d cf c7 75 51 cb 75 f5 fa e8 75 5b fc 83 4b 2c ea ba bd 55 3d 46 17 ab 3f 49 db b8 31 1d ce a7 6d e6 dc f1 10 f3 4c 65 9a Data Ascii: SqS2h@(S1pj\|v;~j7[oNW6Mj<Z7^W$W>[%[qg#"Sz5;=S>Gad&59MV_7\ORWi\|vI,B>x`O:W-uQuu[K,U=F?I1mLe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49848	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	622	OUT	GET /global-elements/lib/script/resize-manager.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42762 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "410-5057c23b98e40+gzip+ident" Last-Modified: Wed, 15 Oct 2014 20:40:17 GMT Server: ECAcc (chd/070D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1040 Connection: close
2024-04-29 20:13:53 UTC	1040	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 72 65 73 69 7a 65 54 68 72 6f 74 74 6c 65 3a 35 30 2c 63 61 6c 6c 62 61 63 6b 54 68 72 6f 74 74 6c 65 3a 31 30 30 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 5b 7b 6e 61 6d 65 3a 22 74 61 62 6c 65 74 22 2c 22 6d 69 6e 2d 77 69 64 74 68 22 3a 35 30 30 7d 2c 7b 6e 61 6d 65 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6d 69 6e 2d 77 69 64 74 68 22 3a 39 35 39 7d 5d 7d 2c 74 3d 5b 5d 2c 6e 3d 6e 75 6c 6c 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 2c 75 28 29 2c 73 28 75 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 2c 69 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 Data Ascii: USPSRequireNS.define([],function(){var e=function(){var e={resizeThrottle:50,callbackThrottle:100,breakpoints:[{name:"tablet","min-width":500},{name:"desktop","min-width":959}]},t=[],n=null,r=function(){i(),u(),s(u)},i=function(){var r=null,i=window.inner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49852	23.205.89.137	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	619	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421630640 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:53 UTC	532	IN	HTTP/1.1 302 Moved Temporarily Location: /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421630640&ip=81.181.62.90&cuidchk=1 Date: Mon, 29 Apr 2024 20:13:53 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5; expires=Tue, 29-Apr-2025 20:13:53 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49858	142.251.4.157	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	840	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&gjid=355082263&_gid=1339673146.1714421633&_u=YGBAiEABBAAAAGAEq~&z=909245502 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usps.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:53 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 29 Apr 2024 20:13:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:53 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49859	142.251.4.157	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	843	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=2047863913.1714421633&jid=2107282122&gjid=888467663&_gid=1339673146.1714421633&_u=YGDACUABBAAAAGAGqCC~&z=1481307962 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usps.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:53 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 29 Apr 2024 20:13:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:53 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49860	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	453	OUT	GET /assets/images/welcome/featured/sb-shipshirts.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 33281 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "10c84-5c79454a8f740" Last-Modified: Tue, 20 Jul 2021 20:59:33 GMT Server: ECAcc (chd/0733) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 68740 Connection: close
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 9a a0 03 00 04 00 00 00 01 00 00 01 bf 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 bf 02 9a 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 7f aa 68 f6 d0 aa f9 32 c1 28 9a 59 3b 28 4c 9c 83 5f 9a 5f 18 3e 27 eb 9e 3d f1 4c d2 5d 4a d2 43 0b 18 ad e3 1d 02 83 8e 07 a9 ef 5a 25 75 76 cc 24 df 33 8c 7f e1 8f 48 b5 f1 9f c1 f6 6d 4e 43 a1 da c0 d1 28 6b 14 61 23 17 39 c1 0c 77 e3 38 e7 9a a1 67 f1 bb c2 b6 56 3f 67 5f 0d 69 eb 2a 30 21 d5 01 04 0e a0 87 dd 5e 73 e1 bf 82 3f 12 3c 57 3c 29 65 68 22 f3 fe e9 9d b6 0f c7 83 8a ed 75 ef d9 53 e2 9e 87 24 10 08 e0 bb 92 73 8c 5b 39 7d 9e ed 95 18 1e f5 57 1f 2c 52 d5 9f 44 58 fe d1 df 0e ad 7c 37 0e b2 7c 33 6c 03 1f 2a 41 14 71 0d b2 0e c4 6d e8 7a 8a b1 a1 7e d3 9a 0f 89 a2 9e d2 d3 46 11 4b 6e a5 d1 15 91 73 18 ee 0e 00 e3 b8 af 24 b7 fd 93 fe 29 af 82 de c2 33 65 e6 cb 30 94 83 2b 64 05 e3 03 e4 af 30 f1 3f ec cf f1 6b c1 72 db 4c a6 09 25 b9 62 Data Ascii: h2(Y;(L__>'=L]JCZ%uv$3HmNC(ka#9w8gV?g_i0!^s?<W<)eh"uS$s[9}W,RDX\|7\|3lAqmz~FKns$)3e0+d0?krL%b
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: fb 57 05 75 a9 ea e1 9f bb 63 cd fe 20 e9 92 6a de 0a bc 8e dc 03 34 0a 65 8f 8c f2 b5 f9 a1 63 70 25 f1 1c 93 5c 38 b7 8a 5c ab 01 c7 51 e9 5f ac 38 46 2f 6e ff 00 75 c1 5f ce bf 29 be 28 69 ad a0 f8 f2 f6 cb 6e d1 1c c4 80 3d 33 91 58 46 c9 f3 9d 52 a8 dc 7d 9f 4d ce 33 58 8a de 19 36 5a b1 65 56 20 e7 eb 54 24 0c 1c 06 e3 80 6b 5b 53 8c 66 47 1e ce 3f 1a a3 70 37 cb 13 76 28 2b 17 f1 59 1a da f0 6f b1 a7 64 7f 74 ca 7d 33 5f 79 7e c9 5e 1a 6b 7f 0c eb 3e 33 9d 09 17 12 47 6d 19 f5 11 fc cd ff 00 8f 10 3f 0a f8 36 d3 01 f0 7d 2b f5 9f f6 7d d2 13 4a f8 17 a5 46 38 96 e4 4b 38 cf 19 69 1d b1 9f 6e 2b b2 96 f7 3c aa bd 8f a0 12 61 71 64 14 e7 69 8f 69 c7 ad 7c 91 e2 fd 1e fa d7 c4 eb a9 e9 6f b1 58 31 24 76 c6 47 20 ff 00 9c d7 d2 f6 37 73 45 6d f6 39 8f Data Ascii: Wuc j4ecp%\8\Q_8F/nu_)(in=3XFR}M3X6ZeV T$k[SfG?p7v(+Yodt}3_y~^k>3Gm?6}+}JF8K8in+<aqdii\|oX1$vG 7sEm9
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 41 f3 18 74 af 3e f1 84 b7 30 3c 37 e0 92 8a e1 5c 7b 37 19 fc 0d 77 e1 b1 cf 9a d3 ea 79 b8 bc 02 71 e6 a7 ba 29 d8 5c 79 1a 99 3e b5 ed ba 45 c7 99 6e 0d 7c f5 71 28 8e ea 39 87 72 2b d8 fc 39 7a 25 84 0f 41 5e 8e 2a 1d 4f 33 07 3d 6c 76 a6 4c 49 b4 d6 a5 cc bb 34 59 5f d2 b9 e9 dc 89 d7 15 b9 37 cf a2 49 ee 6b cf 6b 63 d2 4f 73 c9 25 cb 09 09 ee 0d 66 fc 22 38 d1 65 87 d2 f2 6f fd 0c d6 94 a7 2d 20 f4 06 b0 be 0f cb ba da e2 3f 4b a9 7f f4 2a f4 ea 7f 06 5f 2f d4 f2 29 bf f6 88 fa 3f d0 fa 4b 51 1b b4 49 47 fd 33 3f ca be 2e f8 88 30 90 4b fd d9 08 af b5 6f 32 da 3c a0 7f cf 33 fc ab e3 5f 88 51 86 d3 77 77 59 01 ae 5c bd ea ce cc c9 5d 23 84 d3 e4 cd 63 a3 7d 9b c7 31 30 e3 24 54 f6 13 10 7f 1a a7 a9 37 97 e2 db 69 7d 76 d1 59 7b cd 1a 50 7e ea 67 b5 Data Ascii: At>0<7\{7wyq)\y>En\|q(9r+9z%A^O3=lvLI4Y_7IkkcOs%f"8eo- ?K_/)?KQIG3?.0Ko2<3_QwwY\]#c}10$T7i}vY{P~g
2024-04-29 20:13:53 UTC	3208	IN	Data Raw: 18 0e 0e 3e b5 c2 6b 7e 35 bf f0 bd d8 b5 d4 6f 60 93 33 3c 0a 1e 07 52 59 02 93 96 52 dd 98 76 ab 54 79 fa 0a 38 99 d2 7e e4 9a f4 76 1f a8 7c 0f f8 67 a8 e4 b6 9c 22 3f f4 c5 d9 31 f8 03 8a e2 35 0f d9 93 c1 57 04 b5 95 d5 dc 07 d3 2a cb fa ae 7f 5a f4 28 fe 21 3a 5e 36 9f 71 15 b4 93 a9 60 63 82 e1 77 7c a7 07 89 44 7d 2b 76 3f 19 5b 8e 2e 6c ee a3 3d f6 c6 65 03 ea d1 ee 1f ad 61 3c be 9b de 08 f5 28 71 2e 3a 97 c1 5e 5f 37 7f ce e7 ce b3 7e cc 9a 8d 91 2d a0 eb 4d 19 ec 0a b4 7f aa 13 54 1f e1 4f c7 4d 17 fe 41 1a bb cd 8e 9b 2e 58 7f e8 cc 57 d4 70 f8 cb c3 53 3f 95 f6 a4 57 fe eb fc a4 7d 41 ae 8e 19 e1 b9 88 4f 6e e1 d1 ba 32 9c 83 f8 d7 3c b2 da 6b 64 d7 cc f4 a1 c6 58 e7 a5 57 19 fa c5 3f f2 3e 21 f1 13 7c 41 b7 f0 4f 88 6c be 20 b3 b4 eb 6b 17 Data Ascii: >k~5o`3<RYRvTy8~v\|g"?15W*Z(!:^6q`cw\|D}+v?[.l=ea<(q.:^_7~-MTOMA.XWpS?W}AOn2<kdXW?>!\|AOl k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49861	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	452	OUT	GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29033 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "1e451-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/0743) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 123985 Connection: close
2024-04-29 20:13:53 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: 48 3f 9b e9 16 51 a9 1e e5 5a 4c df 3a 56 7a 05 d2 b4 61 f9 da b1 d0 6e 75 a2 9b e7 4a cf 84 b7 3a d1 b3 57 f1 db 75 6e 8a 67 f6 49 ca 8c fe c9 39 51 9f d9 27 2a 33 fb 25 e5 46 7f 64 bc a8 cf ec 93 95 19 b2 f5 56 c2 d3 b3 1f 80 0c da 52 5b 11 f5 a6 8e fa 76 3a c1 16 ea 60 cb 4c 40 c6 d8 9a 49 e9 b1 0c 42 1f 6c d4 41 9e cd bc 91 58 eb 5d ad f6 24 6b 3a c4 77 3d 60 64 99 f6 c5 51 92 aa ec a8 39 10 6e 17 39 84 92 a1 cf f8 60 a2 b5 ad 42 46 e1 71 97 7d 5a 6b ad a6 52 85 8c 06 0a c8 57 63 ea 71 d5 a2 a2 1d 05 20 03 10 40 30 c5 28 94 49 e0 c5 04 a6 c1 f6 1c 44 b9 fd 05 c3 9c be 22 90 a5 2a 07 03 63 33 0f 56 c6 c6 e6 11 c6 e6 11 14 95 30 0a 2a 74 cf 10 f5 21 8f d5 fa 02 f5 a3 a6 e6 68 e4 bf a4 e6 10 4d a1 7a a6 bf 80 05 b7 97 e3 49 d9 14 39 3a f8 7f db da 03 f9 Data Ascii: H?QZL:VzanuJ:WungI9Q'3%FdVR[v:`L@IBlAX]$k:w=`dQ9n9`BFq}ZkRWcq @0(ID"c3V0*t!hMzI9:
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: bc 34 a6 15 b2 f8 9a ce de 58 6d af 6d db 2b 59 20 d2 f6 87 70 70 e8 2a 84 60 e0 8e 18 11 52 94 04 07 bb cc a7 3a 6f 7e f0 c8 43 31 71 f5 42 9c 32 e9 e5 5d cc 3a 8c 0d 6a 9e 6e 03 90 e0 d2 72 19 d1 16 d0 03 2a e1 a8 94 3f 93 87 20 b9 e1 51 3a 56 86 9c 49 8f 41 05 07 c2 53 9b 7a 46 14 26 b8 b8 b7 6c 85 81 c1 81 c7 5a 1c 94 00 81 7a 4d 02 d5 d0 50 f9 c2 e5 d0 7c f4 14 70 a2 5c 4e 1f 82 51 2a 8b e6 a4 d2 30 c3 f0 fc 75 2b 45 c3 1c 40 6b 43 46 94 08 06 45 b8 9e 39 e5 4c 46 e1 a8 67 d6 29 bd 55 e2 a1 03 cb 66 3b 67 65 c1 30 77 78 10 e3 86 05 33 c3 9d 36 5f b4 bf 16 36 e2 e6 5b b2 d8 e5 00 96 a3 c8 3a 06 96 83 d9 25 c5 fa b0 6b 02 30 e9 6d 5c ef f7 1e 21 8c 7d 9f 8b 2e cc 24 00 e0 80 3f bd 27 4a f7 6b ab b7 ab 59 6a 34 8d 21 6b 6e be fb 31 f1 4c 51 69 bb 1d f3 Data Ascii: 4Xmm+Y pp`R:o~C1qB2]:jnr? Q:VIASzF&lZzMP\|p\NQ*0u+E@kCFE9LFg)Uf;ge0wx36_6[:%k0m\!}.$?'JkYj4!kn1LQi
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 80 46 c8 1a ec 1b 23 46 01 dc b0 35 66 77 fb f2 59 7d 7c cf 69 99 e7 12 24 90 77 8f 79 e9 04 82 78 03 d1 56 b6 1b 7c 0c 8b 6e 86 26 b2 26 b1 34 08 da 00 66 94 c0 b5 11 08 cf 3f bd da 4c f2 29 00 e4 38 8a c6 e2 44 ea 14 52 79 3c c1 2b 1b a7 f9 85 63 74 f0 3a 40 1e ed 63 3c 9e 61 5f e2 24 f3 0a c2 e2 4f 30 af f1 12 79 85 7e be 4f 30 af f1 12 65 c8 50 6b 2f 5c 5f cb 05 5e 55 de 4c 65 63 78 2e 95 c9 7c dd 34 7f c8 28 06 35 b4 ed db 0b a2 b9 f1 45 9c af 17 37 51 01 a0 47 a5 05 bb a4 18 4a f6 bf b4 a1 74 21 0b c2 ae 36 dd d1 d3 36 d9 96 af 90 77 4e 0d 76 a6 90 02 92 0e 18 95 15 60 7c 3d 1d ec f7 72 cc 58 e0 4f 7b 80 6a 94 6b 42 b4 8f 8c 70 39 55 96 d3 70 65 65 9b 8b bb d7 34 23 9a 18 15 cc 04 84 6b f2 f5 b2 0a 52 8b a3 ba be 2d 54 c2 66 9c 79 65 9d 00 fb ab e6 Data Ascii: F#F5fwY}\|i$wyxV\|n&&4f?L)8DRy<+ct:@c<a_$O0y~O0ePk/\_^ULecx.\|4(5E7QGJt!66wNv`\|=rXO{jkBp9Upee4#kR-Tfye
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 49 73 ca 32 38 d8 15 f2 3c f2 68 e1 c4 90 2a 38 64 dc d9 73 6e e2 f6 97 06 18 de c7 c4 9a d8 f6 1e 08 43 98 f0 ad 73 4d 6d 73 6f 36 1d c4 57 b0 f7 b0 9d 41 da e3 39 12 9e a9 c4 1d 27 14 22 a6 b1 f0 f6 df df dc 44 cd 6f 25 c1 8c 60 c8 2b 9d 86 a7 9c 18 de 26 99 b0 58 6d 92 49 be ba 47 46 20 c0 3f 5b 17 53 4a e0 34 a1 53 92 53 5a ef 07 4c 1c 72 06 48 b1 ea c7 1a b6 b9 f1 0f 87 66 b5 b7 9e 4e ee 37 12 d7 6b 90 e4 c0 1a 49 d4 78 50 73 3c 19 3a 7f bc 8b 0e be d6 07 a3 85 5a 4b e2 4d 82 6b 48 ee 1c 5b 11 25 af d6 e6 e2 5a 03 09 2a 05 32 7b 7f 07 4e e8 9e d0 e0 af 8c 14 21 5b a9 a4 ab 49 18 a1 c6 99 b9 f8 8b c3 b2 da 6d ae 95 b1 89 1c e6 39 bd e3 97 4b 11 a5 55 c8 53 86 15 b6 ee 90 44 c7 cd 6b 3b 25 6b 5e 15 8e 2c 70 70 6b 87 10 51 0f 9e af f7 7d be d2 5b 7b db Data Ascii: Is28<h8dsnCsMmso6WA9'"Do%`+&XmIGF ?[SJ4SSZLrHfN7kIxPs<:ZKMkH[%Z2{N![Im9KUSDk;%k^,ppkQ}[{
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 70 ab 73 09 d8 7c 6c 7f 0f ca ad e0 4a 9c be 3c e3 8a da 1b 4b 5a b8 78 e5 fd a5 95 92 9e 99 08 2d c9 f9 0d 6a 50 62 82 e1 48 3c 23 fa b7 f2 6e 41 a8 c7 fd 2f d3 73 1d 0c 1c 56 c2 7e 1d 3e 5e 41 8f 65 31 f2 eb 67 25 e4 b9 74 80 fa 27 5f e2 d8 db b9 34 89 96 18 d2 1d 49 aa af 0d 2d 4a 57 94 9d 73 cf 1e fa 10 f5 3d 85 73 f6 13 ca 5c 51 89 c4 be e6 69 18 f5 75 d6 39 90 e0 52 e1 bd 26 e2 2d 5b f4 96 97 18 f0 ba a3 b7 75 f6 26 64 b1 de 5b 15 6d f6 32 47 98 95 eb d2 4f af ae 2c f5 53 45 95 7a 84 6b 9a 61 64 72 7d 3a 48 ae 4b 19 4f 11 a2 34 eb 2b 0e 3e c8 b9 06 73 56 af 5e 33 0e ca ca a5 c5 d9 4c 95 19 10 f2 36 a5 c7 6a 29 04 bb b7 aa 4f 50 7e bc fd 5f 57 f0 3f 33 62 9c 43 52 8c 41 35 d8 2d 3c 0a 4e 5b ce f1 7a 59 6c 61 d8 06 31 8f db dc 55 fd 99 75 0a 15 4a da Data Ascii: ps\|lJ<KZx-jPbH<#nA/sV~>^Ae1g%t'_4I-JWs=s\Qiu9R&-[u&d[m2GO,SEzkadr}:HKO4+>sV^3L6j)OP~_W?3bCRA5-<N[zYla1UuJ
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: bb da 3a 0f 0f 0f 0d fa e8 77 6c 00 dc 6c 3a 7c fd 3c 3c 74 ae c1 b0 50 e8 0f 8f d2 09 f6 7c c3 47 71 de 7a 82 07 8e fd 76 dc 9d 2b b5 3d 88 f0 21 44 1d fc 3c 3e ee a8 b3 ea f8 70 6c e6 62 f3 5d 9e d4 0b 20 b4 c1 94 97 22 bf 11 d6 de 75 b1 e6 30 bf 22 4a 8b 4e 27 72 db a1 2a d8 ed b6 a1 e4 f4 71 67 e1 57 39 86 25 2a 4d 43 37 4c 6f 33 1f b4 9d 0e 43 10 25 49 67 b0 79 ec c5 97 d8 f2 0f 68 f3 59 ed 57 68 ee db 48 f4 73 23 d6 86 3d 2f 92 f1 8a e9 57 4a e4 cb 1e 29 c3 a6 d2 2a b2 2d 6c 5c 86 c2 04 16 1f c7 15 90 35 32 4d 6c af 21 25 4e ec 87 01 3d c0 75 d7 a9 f6 58 f5 61 02 04 2e 20 cd 5c 81 8d f1 a6 65 81 60 19 3a 39 05 d8 f6 ed 52 39 5b 8a c2 b7 a1 76 43 ec 52 3a 85 cc 92 df 7f 7a e2 a8 a7 70 ad b5 c5 98 65 8e 6f 3b 0e c3 32 3f 46 9f a7 d9 07 0f 31 8c d0 b3 Data Ascii: :wll:\|<<tP\|Gqzv+=!D<>plb] "u0"JN'rqgW9%MC7Lo3C%IgyhYWhHs#=/WJ)*-l\52Ml!%N=uXa. \e`:9R9[vCR:zpeo;2?F1
2024-04-29 20:13:54 UTC	10410	IN	Data Raw: d8 4c 4c ed c2 5a f0 3d c4 24 f5 d5 7b 6b e0 2e 59 05 10 d8 4e ca c6 56 7b 14 1b 4a 54 14 3c ff 00 ad bf 8e 86 fc 0f ca a0 ec 90 12 31 a5 f8 00 37 3b f9 fe dd 58 e5 90 b8 0b 94 e7 e5 ae 79 f4 58 5d 7b 58 e2 9c 76 a2 5c d6 56 8b 3c c6 73 09 7f dd 4d 6c 55 96 a1 a5 47 de 79 65 5f b9 07 48 8e be 0a e5 59 16 76 5d b3 6f 25 0c 79 c7 0a c9 51 7a 34 0e f3 20 f7 96 d4 a2 eb aa f1 53 8a d8 f5 1a 05 3c 0b ca dd 7a 93 fa 36 be 9b fb 40 2f fb 34 4a b8 17 95 bb b6 d8 0f d1 b5 6c 3e 73 f9 7e aa 3a 4a 55 c0 dc ac 9d ba 7f b3 4a 20 80 3a 1f cf f4 eb a3 df c1 5c a7 ef 75 3f fb b8 bd c7 8f 8f e5 fc 7a eb b8 70 6f 28 f8 00 13 fa 38 ad fc 37 3b fe 5f 4a 29 e0 5e 56 50 56 fb 7f ee d2 8f 69 f6 6e 7c fd fc 74 52 ef 03 72 91 42 d3 b3 88 73 1b ee 0a 49 1b 6c 52 a7 b6 20 f8 6c 74 Data Ascii: LLZ=${k.YNV{JT<17;XyX]{Xv\V<sMlUGye_HYv]o%yQz4 S<z6@/4Jl>s~:JUJ :\u?zpo(87;_J)^VPVin\|tRrBsIlR lt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49862	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	451	OUT	GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:53 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29033 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:53 GMT Etag: "1806c-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/0771) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 98412 Connection: close
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:53 UTC	1	IN	Data Raw: d7 Data Ascii:
2024-04-29 20:13:53 UTC	16383	IN	Data Raw: c5 9c 75 e4 85 0a 95 85 36 b5 ab 2b 25 e4 af 6b 8b 70 16 67 11 8c fb bf 8b 10 2c 17 15 6a 2f 19 8c b2 8b 89 da 1a d2 92 7c e2 60 ab 03 50 79 85 fe a7 4c 78 bd d9 e6 07 9e 60 78 e6 3a 67 39 f4 07 ff 00 16 eb 9f fa 89 ff da 00 08 01 01 00 01 05 00 ff 00 5d 33 19 cc 5a 04 d4 c9 25 64 90 b1 46 e6 91 69 78 bc c7 22 0e 39 93 8a c7 32 a9 3e 39 95 c8 f1 c1 39 a0 0f 04 f4 d8 1e 0a 44 d0 1e 0a 56 c8 1e 66 62 c9 8e 66 68 d3 8c 20 7d 48 bf 3f d2 0c d2 8b c6 57 13 c1 ab 16 02 bd d9 0b 5f 36 df 5f dd 6f c4 96 54 1e 01 50 50 1a 33 16 de fa ea f3 d9 cb b8 ca 26 bf d1 2d c7 6a d9 e4 de 5c 78 b2 02 5c a6 87 8e 6e 38 c2 40 72 d2 b6 69 0a 4d dd 4d e1 ad a8 89 60 b9 75 a6 52 43 7b b5 70 e7 82 48 65 34 cc 37 7d 3e 16 41 81 e1 45 0b 18 70 71 21 17 03 fe df d7 31 52 62 b8 37 64 Data Ascii: u6+%kpg,j/\|`PyLx`x:g9]3Z%dFix"92>99DVfbfh }H?W_6_oTPP3&-j\x\n8@riMM`uRC{pHe47}>AEpq!1Rb7d
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 48 5f 71 a0 f1 3e 43 f3 e8 59 b4 fd 5b c6 1e 21 19 11 7d fc db 66 a7 f1 71 a8 1f 6e da c8 4b 22 09 cc 29 1a b3 46 8c 55 4b 2f 32 3c e9 e2 2b a8 c4 57 0f 11 03 c5 49 04 0f cc 47 9f 97 db a7 c4 5e 64 a5 93 15 20 a1 46 3c d6 a0 fc 40 10 77 07 7f 49 52 7d f5 d2 5e c0 e3 af 19 d8 f8 82 a4 10 47 fb 2c a4 82 0f b7 57 3c ec a4 5b 48 6e de 34 b8 72 02 4b 29 f5 2a 46 05 6a c1 3e 21 41 c4 53 7a 90 0d 58 00 51 40 7a 79 b0 24 57 dc 69 b1 1e 54 d1 01 f7 d0 08 6b a6 ff 00 ef 3f fe 1f c4 f0 fe 86 5b ab 96 61 6d 1a 96 72 aa 58 85 1b b1 0a bb 9a 0a 9a 0d f6 d5 96 1f ba af 67 c6 cd 73 1a 4f 6e b2 c5 c2 4b c8 04 7d 69 7e 48 3b 74 e6 6e 97 a8 0e 61 d5 59 49 4e 5e 91 82 be ec 5c f9 cc 60 72 70 ce ac d2 cb 2c 5f 2e 6d 10 f5 23 b5 b6 29 c6 ea 66 99 c1 79 56 82 28 e3 75 62 c5 56 Data Ascii: H_q>CY[!}fqnK")FUK/2<+WIG^d F<@wIR}^G,W<[Hn4rK)*Fj>!ASzXQ@zy$WiTk?[amrXgsOnK}i~H;tnaYIN^\`rp,_.m#)fyV(ubV
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 7d a0 79 1a 1d 44 65 9d 62 73 e3 42 3f 61 f6 ea 6b ce b8 b8 15 1b 1a 29 a0 f8 54 52 b4 55 1e 03 cc 92 c7 7d 3c 77 38 c9 d5 81 a1 a3 29 fd 15 03 56 d7 71 0b 98 ee 63 27 76 8c 3a 90 45 0a b7 16 15 56 06 8c 35 86 86 e3 3b 25 cf 6e 63 cb c3 04 3c 7a 48 84 30 66 e7 1d 7e f1 92 a1 63 77 a9 44 01 16 80 1d 0e 4d af 88 57 ed d2 d0 8a 6b fc 3a 1e dd 5c b7 b5 cf f6 7e 28 3a f7 7e 0e 55 f7 68 9a 6f ed d6 fa b9 cd e1 c5 b5 8e 46 6a b5 cd c1 80 49 33 05 8d 51 78 13 b0 aa af 19 57 d2 a4 05 6a 33 ea 19 e6 c9 e6 a4 70 8c 52 6f 58 0b 52 0c 8f 10 29 c0 b4 e5 f8 06 21 96 35 f8 0a 7c 4d 2c 9f cd 32 30 62 e2 67 44 53 3c d3 3b f1 26 af 21 04 96 66 20 d1 14 84 45 14 15 26 ba e8 76 37 64 c4 b0 c9 48 cd cd f4 d3 7c bc ae 4d 00 87 16 9d 49 e5 e4 aa d5 76 78 51 1c 02 c5 ab 51 35 af Data Ascii: }yDebsB?ak)TRU}<w8)Vqc'v:EV5;%nc<zH0f~cwDMWk:\~(:~UhoFjI3QxWj3pRoXR)!5\|M,20bgDS<;&!f E&v7dH\|MIvxQQ5
2024-04-29 20:13:54 UTC	3	IN	Data Raw: d0 99 b3 Data Ascii:
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: c5 5b 65 9b ae 5c 94 b6 4a 38 fa d3 bd 33 d4 35 d5 af ea ec ee a9 e3 34 77 42 ed ea 98 b1 4f 1a a9 10 df b4 68 23 cb f3 44 9f ec 47 77 63 f7 86 4b 2b 63 6d 73 61 55 43 73 0e 82 65 27 5f 5b 44 c8 66 ee ff 00 c4 14 74 59 bd da c6 b1 24 7d 4d 0c 90 bc 71 ec e4 b6 7c f8 bf a0 cd 4f 6d 5a 06 76 86 87 63 59 a2 bc dc 4e b4 92 fb 20 58 19 d6 ba 0d 14 eb b1 b1 d5 62 d0 59 30 75 30 0e c2 d2 bc 20 61 60 45 17 aa 3c 16 3d 18 3f 4a 0d 32 d1 e9 76 76 33 33 35 b5 32 25 54 75 4d 97 61 d8 e9 e2 60 ec a4 18 47 98 7c fd 44 d9 85 83 42 39 51 01 fd f3 e2 c7 13 05 ee 7b 6a ae 55 5f 13 33 35 98 0e d9 fd b2 a4 37 1d 96 6b bc 7f 5e 4f bb 7e a7 af 33 b6 49 2a 66 e7 3d 67 0a 11 d4 f9 7a d8 d6 21 74 d9 ee 31 42 e9 2d 60 4c d6 ab d1 8b a1 db f5 6e a5 b2 e4 ac 9a 98 5a 76 58 81 81 97 Data Ascii: [e\J8354wBOh#DGwcK+cmsaUCse'_[DftY$}Mq\|OmZvcYN XbY0u0 a`E<=?J2vv3352%TuMa`G\|DB9Q{jU_357k^O~3I*f=gz!t1B-`LnZvX
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 74 b6 09 79 30 e1 c5 72 8c a7 77 08 a8 8a d5 e1 57 e8 be 29 05 12 39 aa 96 c0 96 93 85 02 7c b0 1e 6b 83 1a 6b ab 9a 74 78 91 88 e0 91 e0 72 37 84 f2 e3 85 e5 53 9f 08 58 f2 99 00 a3 e5 4b 68 f0 98 ef 00 8e e1 8a 57 a9 91 5c 39 c7 69 40 cf 36 09 e8 47 2b 5b c7 3c 70 a1 b3 a6 c2 66 45 b0 aa 8a 47 d6 5a d3 05 d9 69 b6 52 65 2f dc 31 f7 47 88 d1 a5 c0 6e 21 22 8c 5f 7e 17 3c 2f 5e 1c a9 e8 5e 33 7d a3 9a 3d 85 55 f5 6c a8 b7 15 e8 56 16 1c d8 13 22 b9 52 44 29 d1 97 87 70 8e 6b c2 71 f9 b0 a3 57 27 9b 5c 8a ba be f6 b6 28 2f fa ff 00 77 a6 a8 84 58 91 a0 c0 97 63 4f 20 b4 e5 99 3a 3e a8 0b 30 4b 12 04 59 6a 57 56 15 23 91 a5 62 2a ab f9 7a a3 44 38 82 e4 84 96 62 c4 e5 1a 8b ec 58 08 73 59 ea 46 35 88 ad 56 39 1c d7 f1 fa f9 e7 95 e7 c7 be b1 9d e9 5e 15 51 Data Ascii: ty0rwW)9\|kktxr7SXKhW\9i@6G+[<pfEGZiRe/1Gn!"_~</^^3}=UlV"RD)pkqW'\(/wXcO :>0KYjWV#b*zD8bXsYF5V9^Q
2024-04-29 20:13:54 UTC	110	IN	Data Raw: 5b c2 2f 1e 23 e8 50 63 5a c6 ca bd de 46 68 90 2a 48 55 b5 d5 55 98 3c 5c 0b 46 01 cf 6c 59 ff 00 67 0a 54 9f 60 8b ee 09 0d f9 2f f4 b7 a0 8c 61 1b ca 2f a5 ed 47 b7 94 f3 45 e1 c8 a9 ca 2f 8e 18 c6 b1 3f 26 b5 1a 9f e6 44 4f e8 03 cb 8b 5f 0a 34 a9 3c 7d cc 98 f1 40 13 c8 e3 8e 3d f2 8c 6d 21 78 e3 fd 65 5f ff 00 68 9f ff d9 Data Ascii: [/#PcZFh*HUU<\FlYgT`/a/GE/?&DO_4<}@=m!xe_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49865	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	452	OUT	GET /global-elements/footer/images/facebook_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42147 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "74c-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/078D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1868 Connection: close
2024-04-29 20:13:54 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49867	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	451	OUT	GET /global-elements/footer/images/threads_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42743 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "745-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0794) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1861 Connection: close
2024-04-29 20:13:54 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49864	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	450	OUT	GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29034 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "d78b-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (chd/07A5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 55179 Connection: close
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 95 62 01 a9 0a a0 f7 50 9c ba 32 ac 05 62 2b 33 4a 1b 15 ed ce b5 21 91 eb 20 0c 68 29 52 13 af 81 a8 d3 23 81 ac b8 d1 19 d0 93 ff 00 3a d1 72 d3 4a 8f 8a 30 23 f8 fd 40 19 bc 2b f7 d4 81 27 b7 a2 78 d6 a3 e1 ba 3f 10 e3 df d7 fb 68 85 74 2b d7 31 40 df ba a0 7f 77 13 ef 3f b2 85 bb 0b 0b f6 c6 78 d0 6e 35 e2 18 51 2a 48 3f 75 65 23 b3 d5 10 0e 46 b1 6c 4e 34 48 e9 6b b7 1d 52 ca e6 cc 42 aa f6 b3 34 00 3b 49 14 d6 76 3b e7 df 5e 53 05 76 76 6f 6e 4c f5 6a b6 a6 dc ff 00 d6 68 8b 3f 26 f3 c6 00 e6 76 e8 9f f9 ef 83 5a b7 9f 2c 73 bb 0b 13 2d b3 2e 07 ff 00 aa e3 9f b8 d0 db 6d f9 dd 95 de 1c ad dd d5 62 e1 9f ee 5e 16 c9 f6 4d 43 21 0d 1f 77 5f 54 76 f1 f4 04 0e 3d 04 13 e0 63 40 83 87 a9 f0 ac d4 b9 f7 54 2a 8a 38 51 d5 65 7d 98 7e ca f1 59 3f fe 46 a7 Data Ascii: bP2b+3J! h)R#:rJ0#@+'x?ht+1@w?xn5QH?ue#FlN4HkRB4;Iv;^SvvonLjh?&vZ,s-.mb^MC!w_Tv=c@T8Qe}~Y?F
2024-04-29 20:13:54 UTC	16383	IN	Data Raw: 1e d3 cc 25 52 13 15 82 ea 4a 3c 9b 03 39 1e bd b3 75 c0 54 d4 9b d4 1d da 82 d3 95 aa 2e de b7 d7 5f 81 a5 b8 f7 12 ca a8 8b 61 26 bb 6a 90 fa ab ed 21 ed 0d dc fb b5 51 e1 fb f3 10 cc 19 26 6a 21 94 b6 87 38 eb 83 af 2d 4d 7f 24 72 5d 06 d7 b4 ea b0 d8 62 1a e1 3b 59 aa 3a a4 32 cc e7 64 4b 44 a8 d3 f6 d9 10 e5 c7 aa 65 2c 3e ab 05 d7 48 29 4b 69 40 5a a9 b5 19 a1 4d df ec 7a de c5 b2 55 b4 98 cf fd 0c 5a ad 3a 45 2b 1b 0a a7 4e f3 71 a8 ae b6 e6 c9 19 2d 46 f6 cf d4 17 16 49 48 47 5b 4e ad 55 64 f3 37 7a 33 ba c2 76 f6 96 cc b8 cf 57 3b b9 52 bf b1 eb ae 89 12 1b fa 49 11 ec 6a 18 f7 d0 1a 70 a9 ac 14 3a 47 ca 3a 9d 0e 64 99 46 75 73 cd a2 7a d8 50 96 84 4c b0 5b 45 0f 03 ee 95 36 99 0d 2c 12 a1 e6 8f 22 46 40 07 a4 49 af 43 95 b3 6d 2c 05 2b 51 d3 09 Data Ascii: %RJ<9uT._a&j!Q&j!8-M$r]b;Y:2dKDe,>H)Ki@ZMzUZ:E+Nq-FIHG[NUd7z3vW;RIjp:G:dFuszPL[E6,"F@ICm,+Q
2024-04-29 20:13:54 UTC	3	IN	Data Raw: 48 c9 20 Data Ascii: H
2024-04-29 20:13:54 UTC	6027	IN	Data Raw: 15 7e 60 82 32 47 a1 c8 1f f2 75 e4 4e 3c 48 39 ef df 20 03 e9 df 3d 39 8e e7 c8 a8 0c e4 1c 77 09 cf c0 76 f4 ea f6 5a db 28 62 6e f5 74 a8 ca f8 38 98 ec 42 61 c2 9f c9 2e a4 8c fe 23 f6 b5 bf 05 aa 54 9f 15 01 dc 7f d9 54 85 7a 02 70 7c c7 45 c5 61 29 62 12 13 f1 fd 45 19 20 13 df d5 5e bd ba 8c 8c 61 72 dd 5b aa 1e 84 87 5d 3f e3 e2 94 f4 84 fa fc a9 ee 72 47 96 0e 31 db 23 03 1d 36 91 8c f8 60 fa fa 03 9e e4 77 3d fa 7c 8c 60 ba e6 7d 7e 2b 50 38 f8 fc 3a 75 af 2c 07 10 52 a1 83 dc 1e d8 1d 25 a5 8f 20 db ee c4 5f 90 f5 8d 24 10 41 3e a3 c5 58 c7 e5 d2 99 56 49 61 f2 9e e0 fa 05 1f 1f f5 75 66 f3 63 2e 06 1c 7d af 81 f7 42 07 b4 12 3e 05 4e 90 3a d5 68 90 3c 7f 97 51 57 32 ee 7d 4c 93 1d 0e cb 51 fc d7 25 c5 9f ef fe dd c2 6a 29 4a 1f 57 2a 4b 43 72 Data Ascii: ~`2GuN<H9 =9wvZ(bnt8Ba.#TTzp\|Ea)bE ^ar[]?rG1#6`w=\|`}~+P8:u,R% _$A>XVIaufc.}B>N:h<QW2}LQ%j)JW*KCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49869	157.240.249.8	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-29 20:13:54 UTC	1522	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-29 20:13:54 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-29 20:13:54 UTC	14806	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d Data Ascii: ndefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a=
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: PixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsMod
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 Data Ascii: j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for
2024-04-29 20:13:54 UTC	1577	IN	Data Raw: 64 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 76 65 6e 74 4e 61 6d 65 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 Data Ascii: de:b.allowNull(b.string()),eventNames:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBE
2024-04-29 20:13:54 UTC	14807	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 7d 29 29 72 65 74 75 72 6e 3b 66 3d 68 2e 74 72 69 67 67 65 72 28 62 29 3b 69 66 28 6c 28 66 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 Data Ascii: }))return;f=h.trigger(b);if(l(f,function(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureMod
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 69 66 28 72 29 66 6f 72 28 63 3d 30 3b 63 3c 74 3b 63 2b 2b 29 71 2e 63 61 6c 6c 28 61 2c 73 5b 63 5d 29 26 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 Data Ascii: if(r)for(c=0;c<t;c++)q.call(a,s[c])&&b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49868	23.205.89.137	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	713	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421630640&ip=81.181.62.90&cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5
2024-04-29 20:13:54 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Mon, 29 Apr 2024 20:13:54 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5; expires=Tue, 29-Apr-2025 20:13:54 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-29 20:13:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49871	146.75.80.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:53 UTC	518	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4778 ETag: "a2a93a7555e1e5d3d59e9ac8d0f42647" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Mon, 29 Apr 2024 20:13:54 GMT
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 6d 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 Data Ascii: m()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.oner
2024-04-29 20:13:54 UTC	644	IN	Data Raw: 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e Data Ascii: n(n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.1b7f3d0e.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49870	146.75.80.157	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	524	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:54 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-chi-klot8100102-CHI X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-29 20:13:54 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49878	151.101.65.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	528	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	1015	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11214 Last-Modified: Wed, 24 Apr 2024 17:35:49 GMT ETag: "c4d61fbb6e730a840c7f140cbb9bcd06" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:54 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 19 cb 80 b1 93 08 6b 5d 04 e4 98 8d 0d be 3c 9c 6c b9 58 4a 96 06 50 02 12 2b 89 38 be c0 fd ed b7 e7 25 8d 04 b6 93 b3 77 3f dc 54 0a cd 74 f7 f4 f4 6b 7a 7a 46 f2 c1 64 e5 3b b1 17 f8 85 50 c5 c8 47 b1 b6 4e 20 81 ea a1 89 b6 f6 26 ea 81 7f ef 8d 58 0b d3 d6 77 3b 2c 38 a6 22 48 15 d3 8c 9f 96 38 98 14 42 fc d7 ca 0b 71 b1 c8 1b 75 32 66 52 2c 3a 5a 88 e3 55 e8 17 1c 60 7a 50 d6 08 7c 25 60 2b 0e 23 5c 6d d3 c7 8f 05 2b 0c 83 50 55 9a b6 ef 07 71 61 e2 f9 6e 61 11 b8 ab 39 2e fc 5b 29 79 25 e5 df 8a 56 8f 67 61 f0 58 b0 75 27 70 b1 a9 dc 74 5b c3 6b 6b dc e9 0e c6 97 dd 61 a7 a5 20 7b 4b f8 2d 4d 22 bb b9 c6 3f 96 41 18 47 c6 7a bb ad 13 1d ee cb 23 dd b1 e7 73 75 a9 73 14 12 da a8 a1 Data Ascii: ;ksN8k]<lXJP+8%w?TtkzzFd;PGN &Xw;,8"H8Bqu2fR,:ZU`zP\|%`+#\m+PUqana9.[)y%VgaXu'pt[kka {K-M"?AGz#sus
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 0d 3c 5f 55 48 15 b2 84 ae 14 0a 40 01 e3 52 e5 59 ff 9a 45 13 eb f0 d8 42 39 2f ca 94 c4 97 55 2d d5 ee 04 16 29 9d 88 78 90 73 81 cd 13 ec 0f 67 c1 aa 86 40 46 ba 76 bd 37 ef 0e 6b af fa 57 9e e9 b8 4a 72 fd 35 54 64 7e 85 bb 96 77 fe 31 ef ce 29 ff bf ef 60 89 0f 73 1e 73 98 3e 09 83 05 81 36 61 1b a0 6e 4f fd 27 0f 79 d6 85 8c 28 e3 c5 04 c4 1d 99 f4 9f f1 65 8e 9e 2a 25 ab b2 31 55 d0 a0 98 b2 71 b8 bc 8d 58 f5 34 e1 4b 50 f4 55 5f e6 66 22 ce 1c c6 93 77 dc 95 b4 f9 8a 23 a5 d2 de c5 64 eb 1c f6 da cd 60 b1 84 4c 04 c1 86 23 c7 5e 62 95 c5 84 b4 9b a6 0c b4 a4 dc 07 5e f9 52 ff c6 9e 83 0d 17 50 cd 0f 07 97 47 ef 0a ae 1d db 0a 11 32 67 f3 15 08 4a 2d ce 25 e1 f3 51 2a 75 e5 73 29 d8 d6 9e 91 4f 0c d4 08 d3 0f ab c9 04 87 d8 fd 30 0f 9c 6f 8d f9 34 Data Ascii: <_UH@RYEB9/U-)xsg@Fv7kWJr5Td~w1)`ss>6anO'y(e%1UqX4KPU_f"w#d`L#^b^RPG2gJ-%Qus)O0o4
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 40 7b d5 11 0d 88 92 43 7b 27 23 1a 17 25 97 f6 6a 23 1a 1e 25 4c 7b a7 23 1a 25 a5 09 ed 9d 8d 68 b0 94 a6 b4 f7 76 44 63 a6 34 db 94 69 b8 5e ee d4 43 2c db fd d4 a9 c6 27 4b 70 10 c4 f6 dc 7c 77 98 3f 56 31 ec 35 9e c4 80 cc 14 d8 a2 16 48 78 de 27 a4 60 d4 53 38 d9 57 aa ef e8 f9 3d 81 bf 39 a9 a6 22 dc 57 6a 25 35 41 95 ce 6a 30 ea fd f9 79 4d 1b b1 cc 38 99 07 b0 c8 52 e1 8e d3 e4 a5 c9 5c 4e 9f e3 92 0e cd 9e 0c cc da 61 7a 92 e0 b7 16 fb ca 4c b6 aa 5f 3c 04 f0 bc f3 ca 31 80 26 1d 29 4f 64 8f 01 50 65 35 73 79 2c 53 6a aa 0c 47 ca 32 52 0f ee a7 4c 0a 45 41 cd 0b 36 94 d4 09 0c fe ff b1 4c 38 fd 89 32 41 59 45 b8 40 2e 16 40 33 ba 57 78 2e 6a 76 3b fd 41 a3 33 e8 9b 19 d9 e9 4b b0 38 52 c8 85 27 b1 98 8c 65 10 40 91 37 c8 00 c6 51 4c 77 8b 2f 37 Data Ascii: @{C{'#%j#%L{#%hvDc4i^C,'Kp\|w?V15Hx'`S8W=9"Wj%5Aj0yM8R\NazL_<1&)OdPe5sy,SjG2RLEA6L82AYE@.@3Wx.jv;A3K8R'e@7QLw/7
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 8f f1 a0 3b 4e 21 2c c9 8f f7 67 f9 f1 4f a7 79 c2 74 5f a2 27 f0 bf 95 ea c7 2f e6 fa 41 af fd f1 a3 d5 e3 9a d0 ed 14 b0 e4 a1 20 6a 79 f8 01 b2 be 75 6d 35 07 dd 0c dd b8 d9 ef 73 5a d2 54 f8 66 3c b0 be 0c 04 98 b4 29 1f 6a 87 46 bb d3 a7 0c 93 1e c3 59 5f 20 5d 31 04 6d 2a 5b f2 8f 7e 11 fd f6 3f 39 7e bc 7a f6 80 b2 ee bf 56 38 7c 82 fc 0c 89 25 ce 1e 43 fe 22 18 f1 7d 9b be 43 8a 58 d1 1d c9 43 38 08 38 93 ca e1 7b 4d c6 d1 5a 42 43 36 38 ce 5b 40 a9 09 b5 10 78 97 ee 09 69 2d 4a 88 92 2f c7 c8 99 a7 45 5e 8b 90 c9 c9 20 55 2b 29 ba 52 22 44 db 3a 57 5b df cb 70 1f 50 18 8a 5c d0 91 8b bf 21 b0 b9 24 df 26 50 ec 5d 35 95 c2 61 10 92 1e f9 47 a0 cb b9 17 9b 12 98 be fb 83 ba 5c 57 92 63 36 85 f0 93 fc 79 f5 42 22 36 28 ea be 32 da 26 22 b0 f2 7e 77 Data Ascii: ;N!,gOyt_'/A jyum5sZTf<)jFY_ ]1m*[~?9~zV8\|%C"}CXC88{MZBC68[@xi-J/E^ U+)R"D:W[pP\!$&P]5aG\Wc6yB"6(2&"~w
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 3c 07 c3 0a 58 61 e4 35 7a 76 39 18 a7 6c 3e c9 fe 64 ae 7d ba 00 c1 d1 9b cc 6d 70 a5 d0 d1 b2 ec 56 72 1f 57 a5 2e cc e9 b7 e8 55 d5 db d9 ed c8 b9 24 b8 e6 a4 d1 70 fc 49 2e 02 03 98 5f 4e 07 e7 e1 ac f2 97 21 dc a7 f0 4e aa 8d 6c 9d 74 6c 67 f9 74 30 2a 93 0a 9f 2f 07 83 59 c2 aa 30 e4 30 99 c9 8b f7 0e b4 22 d9 55 d6 e2 60 ae 37 7a 19 50 b4 78 3d 90 cc 8f 92 ca 16 79 74 0c c7 f7 ed d1 c2 3e a0 4b 67 1d 61 bf 56 5e b9 1c 74 fb b9 f2 f9 34 e3 c2 e4 99 0f 93 fe 2d af c7 be 85 25 43 2e 05 b6 14 ab 63 d8 35 fd 5f 87 dd fd 7e f5 cb 91 51 1b 6c 37 9f c5 2f 31 46 1c 52 86 83 33 d8 76 67 60 58 9e 4d e7 52 b0 5a 6a 1e e8 a3 2e fd 02 73 1f 00 2b c2 81 79 65 bd 63 9c eb 57 40 66 a3 b1 e9 6c 7b c9 2e e8 9d 41 86 76 c6 a2 ed 6e b7 82 e2 11 4b af b5 89 2a f7 b1 5e Data Ascii: <Xa5zv9l>d}mpVrW.U$pI._N!Nltlgt0/Y00"U`7zPx=yt>KgaV^t4-%C.c5_~Ql7/1FR3vg`XMRZj.s+yecW@fl{.AvnK^
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: b6 9e 50 09 9d 68 11 54 7b 69 d4 48 a8 4b a6 23 57 14 28 7b b5 92 4f 55 7b fc d5 68 04 89 37 b0 bc 8d 7f e5 d5 f8 7a d4 ed 0d d2 9d d3 df 77 b7 7f 7c 9f 77 76 2e 86 22 49 b2 02 ab 9d b1 f6 68 31 dd 0c ab a3 b1 bc 7f 41 51 7b 30 ca b1 21 1a ef e1 fd 74 e9 e4 1a d0 54 a7 f2 91 5e 7c 20 79 6c 7f 70 23 67 5d a2 2b 64 31 fc ab bc 14 17 8b 24 e1 ba 57 83 5f 1b e8 8f 5e c3 b5 11 ac 1d b2 1d c5 46 70 78 db b5 6e 40 b3 e7 b5 f0 19 a3 cf 9d 59 86 35 ab 1f d0 b6 7a 29 52 e8 c5 57 46 f6 07 6b 61 b8 b4 48 ac db b5 dc 8e 38 50 0f c7 81 5e d9 b2 b9 76 1e 7e 38 06 ed 53 6c 3c e9 ee f8 39 c2 f2 32 42 7e 48 9e 05 10 b2 ff 41 a1 fc 3f 96 ef 2f d3 ea 61 39 cc 12 04 b3 fa 75 20 26 0c 8c 8d 1b a6 c4 e4 72 fc f0 71 99 de 19 37 e9 c2 5d ca c1 e6 76 86 3c 53 c3 b7 ae 91 33 c6 99 Data Ascii: PhT{iHK#W({OU{h7zw\|wv."Ih1AQ{0!tT^\| ylp#g]+d1$W_^Fpxn@Y5z)RWFkaH8P^v~8Sl<92B~HA?/a9u &rq7]v<S3
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 56 c2 62 e8 8a 48 f0 1f 80 be 91 e7 c5 b8 3b 3a 5b d3 85 86 03 ff 27 fb 0c bc ab 7f de 5d d9 12 00 44 02 7f 5d 4e 57 70 96 06 ab fe c8 fe 7e 33 9d 7c 96 ac 7b ea e0 b1 d5 99 98 5c cf ce 26 f2 22 ce ea 65 d1 f1 7c d6 6e 16 bb a2 ba 2c ec 60 e6 d5 25 38 67 f3 82 2f e2 33 a5 15 79 fc a1 db ec f5 fb e7 f2 2e e8 49 43 68 fb 30 59 af 54 02 37 c9 b1 8e 49 e3 a8 14 0f e3 c9 f4 0a b9 cf 8b 18 10 a7 be 7f 7d 25 9c 9f bd 9e fb 7b da e3 93 0e f0 65 b4 67 c4 e4 00 f6 7a b5 90 b2 13 07 74 5a 0f 3a ed 2d f9 ab d3 ee af 74 5a 81 e7 4a 8f 45 9f c0 29 37 d3 a4 ae 2e 19 8e d9 7e 90 0c 6c 73 93 bd 67 5d 2b 51 c3 08 d2 5a 56 0c 8c 97 05 69 91 b0 17 1e bd 35 ee ad 72 87 81 a3 3a 6e 5e 24 04 ae 18 e8 59 24 ff 0d 02 08 c1 e4 94 c9 55 05 9f d2 81 e3 d0 5c af 4c 53 e5 9e 8b 31 88 Data Ascii: VbH;:[']D]NWp~3\|{\&"e\|n,`%8g/3y.ICh0YT7I}%{egztZ:-tZJE)7.~lsg]+QZVi5r:n^$Y$U\LS1
2024-04-29 20:13:54 UTC	1378	IN	Data Raw: 74 ac c6 d7 21 af 3d 1c 54 d4 de ac d2 5d 06 5e 73 f1 9d 58 ac 06 6b ad ea c2 38 27 3e fc 2d 38 b8 fb 52 9d d2 0e cf b2 16 93 9b 2b 37 1c e8 70 ea ef 89 aa 13 aa 3e be 12 51 90 84 bd 06 30 cb ea 21 1d ce f2 4d 6f e9 60 fa 86 97 74 f1 dc 93 72 65 30 64 79 81 0f bd 73 65 1d c3 6e 79 f4 f9 a8 3a a5 d9 b8 cf dd ec c3 fe 9b 05 2d 33 15 26 44 19 8a d7 10 a6 f9 b1 4f 8f d3 9c 11 f3 46 95 fb 54 b8 f0 36 20 6c 50 77 5c af b9 dc 45 0f eb f8 e5 ae 35 e0 ac d0 f0 5a 97 c0 76 94 41 16 52 72 57 c7 2f 22 61 ec 52 bf 28 bb ad aa 12 ba a0 98 5f e6 8a 02 df ea a9 94 b0 69 6a 33 b8 d7 e9 5f 3c 1c de 40 d8 db 9c b9 4c 0c 2b f4 b3 b0 30 8b 85 79 2e cd 50 b3 51 36 54 f7 0d d9 26 98 51 83 07 a3 ab 2a 4a 0d 00 a1 77 01 22 39 75 a6 97 33 33 b6 aa 49 8e fa d0 61 a5 dc ad 6d 69 d6 Data Ascii: t!=T]^sXk8'>-8R+7p>Q0!Mo`tre0dyseny:-3&DOFT6 lPw\E5ZvARrW/"aR(_ij3_<@L+0y.PQ6T&Q*Jw"9u33Iami
2024-04-29 20:13:54 UTC	190	IN	Data Raw: 73 b1 d0 72 e8 a6 23 da 2e 16 9b 6e 6b 6a e7 da f4 ed 82 f6 0c f8 a6 a2 54 52 20 02 c5 2d f6 0c bd a7 74 31 1b 5f 8b e1 3c e3 81 17 59 8b 5f d0 de 65 f3 71 6a d0 76 32 b7 bd da 73 9c b4 f6 b7 ca 56 bb 49 a1 0e 45 7b 39 27 cd b9 24 8a 6d d4 08 55 fa 98 f4 1b 3a 6b 19 57 6e db 03 29 a4 a0 c8 d4 02 24 5a a6 1e 90 4a 78 1a 4a 98 c5 63 11 ca a5 05 f8 da ec fd 6d 32 93 f0 4f 8f 44 7c cb 19 5f 66 9e e5 77 2a 14 c0 29 43 a7 51 ab 47 88 7e d2 2f 87 2f f8 a9 a1 bd 07 68 ab 3f 38 ef ce 47 b3 fb 36 a1 ef 05 d6 84 5f 83 35 5a 9c 36 7f e8 64 ad 7f f8 1f 4f 0d f9 40 4b 99 00 00 Data Ascii: sr#.nkjTR -t1_<Y_eqjv2sVIE{9'$mU:kWn)$ZJxJcm2OD\|_fw*)CQG~//h?8G6_5Z6dO@K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49873	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	445	OUT	GET /global-elements/footer/images/x_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42731 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "54d-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (chd/072C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1357 Connection: close
2024-04-29 20:13:54 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49877	18.160.218.246	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	523	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45911 Connection: close Server: CloudFront Date: Mon, 29 Apr 2024 20:13:54 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=24b5be485c2747719f2dadcc8288a94b;max-age=86400;expires=Tue, 30 Apr 2024 20:13:54 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 aa91c3e03d4b599af742a7344b9684e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD58-P3 X-Amz-Cf-Id: ry4wCnJDYsOxs83zioKjEyIbNUEBmBgTEozOwiADIVOGBx9t1rBDxg==
2024-04-29 20:13:54 UTC	15722	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-29 20:13:54 UTC	16384	IN	Data Raw: 74 29 7d 63 61 74 63 68 28 74 29 7b 44 74 28 22 52 44 4f 22 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 72 28 29 7b 76 61 72 20 74 3b 64 6f 7b 74 3d 22 73 6e 61 70 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 37 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 73 74 26 26 73 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 44 72 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 78 72 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 28 74 29 7c 7c 61 28 74 29 7c Data Ascii: t)}catch(t){Dt("RDO",t)}}function wr(){var t;do{t="snap"+Math.floor(1e7*Math.random())}while(st&&st.getElementById(t));return t}var Dr=m((function(){return JSON}));function xr(t){return void 0===t\|\|null==t\|\|function(t){return"boolean"==typeof t}(t)\|\|a(t)\|
2024-04-29 20:13:54 UTC	12666	IN	Data Raw: 20 6e 3d 74 5b 30 5d 2c 72 3d 22 22 2c 65 3d 31 3b 65 3c 44 28 74 29 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 6f 3d 6e 75 6c 6c 21 3d 41 69 5b 69 5d 3f 41 69 5b 69 5d 3a 22 22 3b 69 66 28 6f 3d 3d 3d 72 3f 6f 3d 22 22 3a 72 3d 6f 2c 22 37 22 21 3d 3d 6f 26 26 22 38 22 21 3d 3d 6f 7c 7c 28 6f 3d 22 22 29 2c 34 3d 3d 3d 44 28 6e 2b 3d 6f 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 5b 30 5d 2b 28 6e 75 6c 6c 21 3d 6e 5b 31 5d 3f 6e 5b 31 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 32 5d 3f 6e 5b 32 5d 3a 22 30 22 29 2b 28 6e 75 6c 6c 21 3d 6e 5b 33 5d 3f 6e 5b 33 5d 3a 22 30 22 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 44 74 28 22 53 58 22 2c 74 29 2c 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 69 28 74 2c 6e 29 7b 66 6f 72 28 76 Data Ascii: n=t[0],r="",e=1;e<D(t);e++){var i=t[e],o=null!=Ai[i]?Ai[i]:"";if(o===r?o="":r=o,"7"!==o&&"8"!==o\|\|(o=""),4===D(n+=o))break}return n[0]+(null!=n[1]?n[1]:"0")+(null!=n[2]?n[2]:"0")+(null!=n[3]?n[3]:"0")}catch(t){return Dt("SX",t),""}}function Pi(t,n){for(v
2024-04-29 20:13:54 UTC	1139	IN	Data Raw: 2d 33 36 65 35 26 26 50 74 28 72 29 7d 29 29 3b 76 61 72 20 74 3d 54 6f 28 50 3f 50 2e 68 72 65 66 3a 22 22 29 7c 7c 54 6f 28 76 74 28 29 29 3b 74 26 26 45 6f 28 74 29 7d 28 29 3b 76 61 72 20 62 6f 3d 70 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 43 6f 28 29 7b 76 61 72 20 74 3d 70 74 28 29 3b 74 21 3d 3d 62 6f 26 26 74 26 26 28 62 6f 3d 74 2c 5f 65 2e 73 65 6e 64 28 74 29 29 7d 45 26 26 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 4f 74 28 54 2c 22 68 61 73 68 63 68 61 6e 67 65 22 2c 43 6f 29 2c 4f 74 28 54 2c 22 6c 6f 63 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 43 6f 29 2c 4f 74 28 54 2c 22 70 6f 70 73 74 61 74 65 22 2c 43 6f 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 43 6f 2c 32 35 30 29 3b 76 61 72 20 41 6f 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: -36e5&&Pt(r)}));var t=To(P?P.href:"")\|\|To(vt());t&&Eo(t)}();var bo=pt();function Co(){var t=pt();t!==bo&&t&&(bo=t,_e.send(t))}E&&location.href,Ot(T,"hashchange",Co),Ot(T,"locationchange",Co),Ot(T,"popstate",Co),setInterval(Co,250);var Ao=m((function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49874	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	453	OUT	GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 41932 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "a65-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0784) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2661 Connection: close
2024-04-29 20:13:54 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49875	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	453	OUT	GET /global-elements/footer/images/instagram_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42114 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "b12-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (chd/0785) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2834 Connection: close
2024-04-29 20:13:54 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49879	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	435	OUT	GET /component-guide/blue-caret.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42254 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "250-56c54c4b80440+gzip+ident" Last-Modified: Wed, 16 May 2018 15:56:57 GMT Server: ECAcc (chd/077F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 592 Connection: close
2024-04-29 20:13:54 UTC	592	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49881	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	451	OUT	GET /global-elements/footer/images/youtube_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42774 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "371-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (chd/076A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 881 Connection: close
2024-04-29 20:13:54 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49882	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	450	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26
2024-04-29 20:13:54 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 41923 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:13:54 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT Server: ECAcc (chd/07A2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5390 Connection: close
2024-04-29 20:13:54 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49883	18.160.235.239	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	528	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Mon, 15 Apr 2024 15:10:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: CqtBPlHFRJ4DVXdFOl0Nv05VUvH3bTHU Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 1a713b47fe9d05824094426fde008b1e.cloudfront.net (CloudFront), 1.1 42f98272c822a4187f8e3b6b175a300a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P3 Date: Mon, 29 Apr 2024 10:09:41 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: ORD58-P4 X-Amz-Cf-Id: iZQMI-bopLaYUBzgR4gjR2LZ0BpHAv4jgvJKO1f-mBzT3cjBNkVhvg==
2024-04-29 20:13:54 UTC	13289	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49884	18.172.135.121	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	527	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10159 Connection: close Last-Modified: Thu, 25 Apr 2024 19:49:47 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Mon, 29 Apr 2024 19:55:22 GMT ETag: "d6f0435164aefe6cf324147b77c7b6bb" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 340078104d92413cbcc6faa6fa593aa4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD56-P7 X-Amz-Cf-Id: zquSESCGk0Zihow2bjbCi45BjS-VElPF6UHVPe8GDpgdF8Rp8HU_pw== Age: 1171
2024-04-29 20:13:54 UTC	10159	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let a=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49890	142.250.112.154	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	599	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=2047863913.1714421633&jid=2107282122&gjid=888467663&_gid=1339673146.1714421633&_u=YGDACUABBAAAAGAGqCC~&z=1481307962 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 29 Apr 2024 20:13:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:54 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49892	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421633091 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:54 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:13:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	49891	142.250.112.154	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	596	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&gjid=355082263&_gid=1339673146.1714421633&_u=YGBAiEABBAAAAGAEq~&z=909245502 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:54 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Mon, 29 Apr 2024 20:13:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:54 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	49893	23.205.89.137	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	481	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421630640&ip=81.181.62.90&cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5
2024-04-29 20:13:55 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Mon, 29 Apr 2024 20:13:55 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5; expires=Tue, 29-Apr-2025 20:13:55 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	49894	146.75.80.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	531	OUT	GET /ct/lib/main.1b7f3d0e.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23080 ETag: "51780471bd680082c3977720b56df64f" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Mon, 29 Apr 2024 20:13:55 GMT
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 1f 8b 08 08 ed 27 28 66 00 03 6d 61 69 6e 2e 31 62 37 66 33 64 30 65 2e 6a 73 00 c4 5c 0f 6f db b6 b6 ff 2a 8e 80 b9 62 25 bb 92 ec 38 a9 2c d6 48 77 33 a0 0f 5b 5b ac dd c3 1b 82 20 50 6c 3a d6 ea 50 79 12 95 2c 37 f6 3e fb 3b 87 14 25 ca 96 92 34 db c3 c5 d6 44 a2 a8 c3 1f 0f cf 3f 9e 43 e5 60 59 f0 b9 48 52 6e 33 f2 70 1b 67 bd 84 3e 6c a7 ba b1 97 d9 42 35 f3 69 c6 44 91 71 3b 39 13 e7 9b 8d cd 29 5e d0 87 24 14 ee 3a 3c f0 5d f6 e7 4d 9a 89 3c 7c d8 6e 5d 06 8f 86 f3 78 bd b6 f9 b0 6c 77 b9 5b 5f 67 04 6e d6 f4 c0 73 39 21 ba 75 9b 0d af 29 73 b3 e1 9c 26 f0 73 41 2b 64 02 5e 06 74 d9 30 c5 4b b2 d9 7c ba fc 83 cd c5 70 c1 96 09 67 9f b3 f4 86 65 e2 5e 76 7b 60 bc b8 66 59 7c b9 66 21 90 bf 62 22 64 5b b2 05 7a 99 41 8f 3c 58 05 57 6f 2f ac 03 2a ee Data Ascii: '(fmain.1b7f3d0e.js\ob%8,Hw3[[ Pl:Py,7>;%4D?C`YHRn3pg>lB5iDq;9)^$:<]M<\|n]xlw[_gns9!u)s&sA+d^t0K\|pge^v{`fY\|f!b"d[zA<XWo/
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: d2 54 6b c1 37 9e 03 f9 ff 4e d8 1d 04 b9 fb 8d 30 22 b8 f4 2e cf 53 83 a9 fd 42 19 e8 1a ca 56 cb ec cc b2 1c 51 47 17 88 1d 6d 3a d3 74 3c 63 dd 0e fc e9 94 e4 77 89 98 63 48 f2 30 8f 73 66 c5 f9 3c 49 ac 50 5e af 41 16 b9 5f de 40 d4 1a 67 f7 56 a8 e3 d5 a9 6c 95 fa 1c ea cb 41 79 dd 53 be 44 f7 fd 6a d7 78 54 d7 79 1e e8 b7 e6 f9 20 a8 29 f8 13 d8 4f d4 f4 d4 6d 49 26 78 5d 0e ba 62 7f d6 38 de bd 7b e7 ab e6 4b f8 31 19 57 4f fe 30 46 2d 23 e5 50 7a 80 16 54 9c da c0 37 8e d2 f3 73 7a c7 b2 1f 81 94 4d c0 ca c1 a6 a5 96 97 6a 9b 26 d9 07 26 0b 18 08 14 61 e3 52 f9 4e be d9 28 d5 e4 e4 1d 06 38 5a 6d 4a 17 61 c9 fe ac ee cf 36 1b 66 76 9c 19 d7 21 23 11 f5 76 5e 85 e9 42 5b 44 6d ae ae ea c7 b8 ae 82 0a f0 4d 72 51 ea a5 15 e5 d2 4a b6 21 f4 94 ca d8 Data Ascii: Tk7N0".SBVQGm:t<cwcH0sf<IP^A_@gVlAySDjxTy )OmI&x]b8{K1WO0F-#PzT7szMj&&aRN(8ZmJa6fv!#v^B[DmMrQJ!
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: d8 d6 9f 83 f4 a9 57 e0 2a 73 e8 6a 8b e2 b0 a6 09 84 8d 6b c3 86 2e 22 7a ad 15 b4 25 32 19 c6 37 37 eb 7b 5b 3d 69 06 96 10 e1 dc 83 46 dc 47 8b 29 b9 6d 0d 6b 76 5e 2e 03 a4 7b f7 de 81 31 2b f1 bf dd 7e 1b 2a 4f 40 57 ee b7 e1 97 75 7a 57 de 9a 86 c0 c1 a4 12 f0 41 40 04 51 a7 af e5 16 da 86 70 67 0b 6f 7e f8 f8 e5 f3 e9 8f 5f 2f 7e 39 f9 9f 8b f7 bf 7f 3d fd 42 0f bd 76 d7 49 2b cf 21 5a 73 7c ad ad 66 25 42 64 f7 52 bd f6 32 e5 7e 05 4e 18 39 c2 87 ea b2 d5 c7 ba cb 34 6d a9 73 8c 83 ed d6 1d 07 32 c6 82 1e 36 69 f5 f8 62 98 17 97 32 97 d5 ef ab 78 4c df db be eb 13 63 6b bd 9d c7 e5 96 49 0d 70 e0 6f b7 10 11 7e 1b 7e fb 25 fe 53 75 c1 c4 05 b0 ec 26 4d d7 5f 92 7f 33 7a 0c 02 0e f7 ab d6 ed 4f 7b 12 d4 15 5b 57 85 44 fb 15 40 9d 9e 97 46 48 35 6e Data Ascii: Wsjk."z%277{[=iFG)mkv^.{1+~O@WuzWA@Qpgo~_/~9=BvI+!Zs\|f%BdR2~N94ms26ib2xLckIpo~~%Su&M_3zO{[WD@FH5n
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 39 b7 e7 f4 7e 5b b5 3c 5e 3b 5c 94 45 cf 8f f6 57 d0 07 bb 90 7c d2 75 e0 01 4c b4 70 17 6e dc ac 2b 96 af de 35 8e cc 3d 59 21 6f e9 be 53 ab 53 83 63 c2 1e 76 52 08 09 4b d6 72 75 d3 97 15 dd 74 65 b0 31 b2 51 1d cb 9f 5f 1d c3 43 48 b2 28 be 5b 20 40 c9 f3 b6 bb 71 cf 7f 7d f9 f4 91 ee a5 67 1e e4 89 2f 7d 92 c9 c5 83 4a e1 6e ed 44 1a f1 b2 68 82 8a 73 11 67 99 3a e2 e8 82 56 6e a7 aa 34 3a f6 de 4e ea d3 a1 97 c6 29 49 f1 03 18 62 d0 be ce 03 37 96 32 21 ca 6e 88 5e 91 70 a1 fc 1b 8b 84 d3 75 32 f4 6b 76 8f e7 85 f0 04 ca 7c ce f2 1c 7c f9 7d ca 17 5a 41 f5 21 d1 3a ff 7c 55 47 0b b0 7a cf 8c 17 5e 59 8a 5e eb 69 a2 f7 cd 13 68 af 4a 9f 2c 4f 18 a4 5d 67 8b 76 0f 43 ee 9e 0c 54 54 98 93 54 81 42 e7 d1 58 f0 3b 3d 33 34 30 67 7b 51 fb 12 b0 7a b2 c4 Data Ascii: 9~[<^;\EW\|uLpn+5=Y!oSScvRKrute1Q_CH([ @q}g/}JnDhsg:Vn4:N)Ib72!n^pu2kv\|\|}ZA!:\|UGz^Y^ihJ,O]gvCTTTBX;=340g{Qz
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 61 7b 55 de 8c 92 01 9b d5 b7 0e f2 6f c0 cc 02 3e 56 ff f1 8f ac 44 49 79 4e 2c 1d 60 de 8f 66 53 70 67 04 4f 80 f3 32 0f 9a 39 ec bc aa 16 a7 91 cf 46 f2 44 62 d7 57 c9 ea b8 98 ce be b7 91 69 fd ce 26 67 42 7f 5e 23 a7 57 65 77 99 cb 9c 14 e4 a4 fe bb 07 4d d9 c3 83 9e ed b2 b7 ff b9 7a f9 c7 1e da ff 26 06 7e a2 c5 b1 ba dd ac 77 93 f0 ff d8 bb d6 ae b6 91 26 fd 57 12 9f 84 57 1a c9 46 ad bb 00 0d 2f 01 42 48 b8 ad 81 64 26 84 70 14 23 40 09 48 8e 2d 93 30 d8 ff 7d 9f ea 6e 49 ed 0b 73 f9 b0 7b ce be 67 3f 24 48 7d ad ae ae ae 7a 5a dd 55 9e bf 75 ca 67 21 9d 29 67 32 45 1e c5 ad 0e d5 1f c2 d2 f5 35 00 04 ae c1 06 d5 05 10 e1 bc 33 e7 ea 9b 2d 3e cc ab 03 74 2c 88 bd b1 68 48 68 fa f9 94 0b 7f f6 c4 dd 96 c5 a7 84 dc 69 66 ce 39 8b 7f da e7 7e 59 bc Data Ascii: a{Uo>VDIyN,`fSpgO29FDbWi&gB^#WewMz&~w&WWF/BHd&p#@H-0}nIs{g?$H}zZUug!)g2E53->t,hHhif9~Y
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: c6 bb 7a 5e e2 29 1c 33 7f ec d8 3a 1e 37 6f 93 bb 7e 7a a9 8b 16 5e 2c 77 4a 2c 76 ba 47 2b 07 24 10 f6 1c 5f d4 35 b1 e0 26 68 d2 dc 75 bd 4c 05 dd a3 41 fa 2c 2f f2 36 97 20 18 98 fa 8e 5b e7 53 be 0b de 0f 2e 29 c4 53 c1 57 93 2c 62 f2 0a 22 42 a3 88 44 26 7d d8 6e 92 7b da e2 cc 09 a9 a6 3f bb 4b cb 9b e2 92 22 96 69 b3 51 06 f5 47 e9 6a 97 f3 0b bb 95 3d 9f fe b8 a0 68 6f 8b 7c d7 30 be 2a d4 23 0f a7 95 92 73 ff 59 2a e2 80 34 d7 5d 04 7c 78 9c ac 0e 3a 7b bb c7 27 f1 e3 eb a3 8b bd c3 cd 8d bd 8b e3 93 c3 ee c6 ce f6 ca 23 c0 37 46 bb c2 2c cb 1c 0d b2 95 d6 55 ff 82 c2 5c dd 1e 83 f2 e4 3a 6d 4d cc ad ed ee ee 7b 6c 9d b7 8f 76 df cd 97 ef 67 79 1b 3c ca ee d3 cb 76 da cf be a1 c2 f1 66 77 e3 68 fb 82 7a dc 3e d8 ee 1e 2f ae 34 ec 0d 92 7e da 26 Data Ascii: z^)3:7o~z^,wJ,vG+$_5&huLA,/6 [S.)SW,b"BD&}n{?K"iQGj=ho\|0#sY4]\|x:{'#7F,U\:mM{lvgy<vfwhz>/4~&
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 70 1c 87 46 1a 07 3e 17 47 dd ed d7 bb bf 19 ad ed 9f e4 8e 0f 24 f7 af 97 c3 7f c9 95 9b 3c 7b 39 34 9f 7d 19 95 cf ae e8 08 99 67 b5 78 50 b5 9c f7 0d 4c 23 c4 6b 36 9e c0 7c a0 e2 3f 0f 40 97 56 c2 90 c5 45 e7 44 a3 c5 a8 af e6 55 78 b7 6a 46 f3 5a b3 53 19 4e c1 c9 42 f1 af e2 e3 b4 b8 b6 2e 63 25 8e ac be 98 93 e3 f1 48 a8 4a b2 b5 c3 e6 f1 aa 7a 5c 2f 57 28 c0 ab 8e 79 ba 49 6c cf 87 18 8a 4f 7a a4 eb c5 17 4f 11 79 80 93 85 45 f5 06 bc f9 93 25 5a d2 8f 43 14 1d ee cb 59 74 0e c8 e0 f3 98 47 54 fb eb e2 0a a5 f4 76 e5 df 1f 55 b7 6f ad b5 dc d2 e9 46 7e d5 c0 c1 82 06 88 0d 64 87 44 4c 84 1e 0f 2a 57 4f c0 7a 89 f5 56 57 ff b6 a8 ff 9b 8a 13 2a a4 2b 14 48 57 40 30 46 ea b7 f6 bc 8a e8 30 d2 18 e9 85 91 86 15 fe 10 9f 31 c6 7c c7 b3 5d 2b a4 23 b5 Data Ascii: pF>G$<{94}gxPL#k6\|?@VEDUxjFZSNB.c%HJz\/W(yIlOzOyE%ZCYtGTvUoF~dDLWOzVW+HW@0F01\|]+#
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: a6 95 46 ad c0 8e d0 43 5b cc 86 42 57 10 08 88 f4 60 3e c1 88 29 30 02 3e 44 28 42 b6 be c1 25 98 d3 08 36 db 21 b2 1a 88 12 f8 7e 40 1c f6 55 b0 02 34 0c cb ed 86 64 35 15 dc 02 ac 00 eb 85 f9 52 21 0c b2 5d 80 01 c0 0c 15 cd d8 ae 4f 18 80 0f a2 01 36 81 17 3a 80 23 a1 8a 71 98 8f 0a 41 e4 f8 0a da 61 0c 33 11 80 18 57 05 3e 1e 84 c5 a5 db 6a 53 18 c8 03 86 b0 20 99 9e 0a 87 88 ef 21 f5 e1 a8 c8 08 73 80 c6 02 cc 9d 0a 92 60 71 5d 9a 36 12 bd 06 2f 31 88 47 e0 45 90 2b 15 3a 61 a8 56 80 a9 9b 02 51 a0 c6 0a 7d 18 5b 6b 0a 4f 31 e2 06 4c bb 33 05 ad 3c 48 b4 87 d5 11 a8 28 8b 59 3e ba b6 68 a9 4e e1 2d b2 ea 04 ad 14 e8 c5 5c c7 c6 9a 05 11 2a 0a 63 ae 0f 54 c1 30 67 0a 20 0b 3d ac 9a 08 0c 55 a0 19 56 14 80 02 26 c2 56 50 1a a6 17 24 62 f5 78 0a 60 43 Data Ascii: FC[BW`>)0>D(B%6!~@U4d5R!]O6:#qAa3W>jS !s`q]6/1GE+:aVQ}[kO1L3<H(Y>hN-\*cT0g =UV&VP$bx`C
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 65 71 59 67 ff 2e b2 7f 37 46 55 36 f4 c7 7d 9d fd 5d 64 7f 37 92 2a 1b 2a e5 a1 ce fe 28 b2 3f 1a c3 2a 1b 5a e6 47 9d fd 41 64 7f 30 ae aa 6c 28 1e 92 9e bf d8 ff 67 72 ff 3f f5 91 ae ac c3 00 ce ec ab 49 b6 b3 d9 0b c1 29 34 54 7d 82 a4 49 fd 2c 59 4b bb 76 4d ea e9 8a 9f 61 9d f6 be 92 05 b1 f1 d7 a4 ea ae 58 c7 77 f6 9a 54 e2 15 c3 1c bb 4e fc 5e 89 03 a0 5d 9d f8 b1 92 07 d3 6d 3a fa 50 09 04 7d 57 a4 b0 44 ff ec 9b 40 73 06 ce 7f 8e 67 d1 bd 81 de e0 a1 5f 16 4b 4b e2 2f 9d 66 74 f9 3d a5 f7 74 94 3f 7c 2a 5d fc 64 b9 c8 e3 3f 10 35 df f0 dd 70 53 36 bd e0 ce 85 3c a1 ac ca cc 77 fb 54 8e e8 b8 ca d5 57 07 eb 5a 3a f7 73 22 fc 63 cc 9c 67 42 13 df 8e 7e f6 3d 9d f0 80 af 2a 9e 7c a2 56 7d 00 6a 8a 88 e1 cc 5f cd 0d 43 b7 e2 58 73 96 44 44 e9 c6 b9 Data Ascii: eqYg.7FU6}]d7*(?ZGAd0l(gr?I)4T}I,YKvMaXwTN^]m:P}WD@sg_KK/ft=t?\|]d?5pS6<wTWZ:s"cgB~=\|V}j_CXsDD
2024-04-29 20:13:55 UTC	1378	IN	Data Raw: 3d a6 73 b9 aa 0b 09 aa 68 47 60 9b 88 25 1c 78 e4 1b 95 4d d5 c2 12 08 74 e2 64 91 89 be 8c 55 c0 67 61 3c 1d 30 23 05 e7 10 c8 ac 96 18 47 79 12 3e d7 f2 15 89 65 3e f8 24 e2 36 aa 29 17 f5 fc b5 8f 1b ca a9 1e 12 06 11 c1 a3 bf 49 c8 a2 8c d1 fd 87 e7 be 5b c0 94 95 7a 8a f8 95 77 0e f8 02 f3 f6 2b 94 80 c5 fa d6 7f 3c f8 d3 f6 57 0f 77 ce 77 cf 1f 05 dd f3 bf fd d7 cd 6a fd df 83 9d ff ec 87 bb 5f ce a3 73 18 b4 9f fb e5 8b b7 83 d2 d7 54 da f5 77 bc 47 ec b3 ac 67 6f f7 bb d6 f9 ee ce b9 7b ee 9d 3f 1a 3c 7c f0 88 2d f2 f4 f3 dd 96 4c 18 e6 25 66 f4 25 3f bf e9 b9 4c a4 5f 41 f0 f1 e3 f0 7a 9e ad 16 f3 54 0c 17 19 9d da 30 e5 94 7f 84 b6 d2 c5 64 17 88 7e 17 8b e8 ad 5c 3c 9f 13 0c c5 50 e5 37 ca d8 03 f2 a1 71 c1 a1 6c 7b db 76 2b 23 fc 46 7d 26 b2 Data Ascii: =shG`%xMtdUga<0#Gy>e>$6)I[zw+<Wwwj_sTwGgo{?<\|-L%f%?L_AzT0d~\<P7ql{v+#F}&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	49895	151.101.65.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	601	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:55 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-29 20:13:55 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	49898	142.250.190.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	1154	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 29-Apr-2024 20:28:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:13:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-29 20:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	49897	142.250.191.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	1143	OUT	GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	1137	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	49899	142.250.190.4	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:54 UTC	793	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&_u=YGBAiEABBAAAAGAEq~&z=786459164 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	49902	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	885	OUT	GET /rp.gif?ts=1714421634124&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:55 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	49900	104.244.42.5	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	906	OUT	GET /i/adsct?bci=3&eci=2&event_id=35b4fbbe-2ee5-4f14-b05d-44b789b7dbb6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9b410764-39f9-4da6-9812-68efc208dc7f&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	551	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:54 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91; Max-Age=63072000; Expires=Wed, 29 Apr 2026 20:13:55 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4908726f56237739 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 85d01f7945df70dc8018ce6972036233ce16852513956db6489c437be31e49db connection: close
2024-04-29 20:13:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	49903	157.240.249.8	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1303	OUT	GET /signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-29 20:13:55 UTC	1524	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-29 20:13:55 UTC	11	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 Data Ascii: /*** Copyr
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 Data Ascii: ight (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f Data Ascii: turn;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbo
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: rototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a)
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d Data Ascii: .shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e}
2024-04-29 20:13:55 UTC	733	IN	Data Raw: 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 Data Ascii: {};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o="
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 28 29 7b 76 61 72 20 61 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 74 69 74 6c 65 22 29 3b 61 3d 62 28 61 26 26 61 2e 74 65 78 74 2c 63 29 3b 72 65 74 75 72 6e 7b 74 69 74 6c 65 3a 61 7d 7d 6b 2e 65 78 70 6f 72 74 73 3d 64 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 65 61 74 75 72 65 43 6f 75 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: nction d(){var a=h.querySelector("title");a=b(a&&a.text,c);return{title:a}}k.exports=d})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsFeatureCounter",function(){return function(f,g,i,j){var k={exports:{}};k.exports;(function()
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 6c 2c 64 3d 61 3b 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 62 3d 67 28 65 2c 64 5b 65 5d 2c 62 29 2c 62 21 3d 6e 75 6c 6c 26 26 28 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 3f 61 2e 70 75 73 68 28 62 29 3a 65 3d 3d 3d 64 2e 6c 65 6e 67 74 68 2d 31 26 26 28 62 2e 65 6e 64 3d 65 2c 68 28 62 2c 64 2e 6c 65 6e 67 74 68 29 26 26 61 2e 70 75 73 68 28 62 29 29 2c 62 2e 65 6e 64 21 3d 6e 75 6c 6c 26 26 28 62 3d 6e 75 6c 6c 29 29 3b 63 28 61 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 73 74 61 72 74 3b 61 3d 61 2e 65 6e 64 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 64 3d 64 2e 73 6c 69 63 65 28 30 2c 62 29 2b 22 40 22 2b 64 2e 73 6c 69 63 65 28 61 2b Data Ascii: l,d=a;a=[];for(var e=0;e<d.length;e++)b=g(e,d[e],b),b!=null&&(h(b,d.length)?a.push(b):e===d.length-1&&(b.end=e,h(b,d.length)&&a.push(b)),b.end!=null&&(b=null));c(a.reverse(),function(a){var b=a.start;a=a.end;if(a==null)return;d=d.slice(0,b)+"@"+d.slice(a+
2024-04-29 20:13:55 UTC	1500	IN	Data Raw: 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 6f 6e 66 69 67 53 74 6f 72 65 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 2c 63 3d 62 2e 66 69 72 65 64 3b 62 2e 70 69 69 41 75 74 6f 6d 61 74 63 68 65 64 3b 76 61 72 20 64 3d 62 2e 70 69 69 43 6f 6e 66 6c 69 63 74 69 6e 67 2c 6d 3d 62 2e 65 78 74 72 61 63 74 50 69 69 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 61 72 65 64 22 29 3b 76 61 72 20 6e 3d 62 2e 73 69 67 6e 61 6c 73 43 6f 6e 76 65 72 74 4e 6f 64 65 54 6f 48 54 4d Data Ascii: rict";var a=f.getFbeventsModules("SignalsFBEventsConfigStore"),b=f.getFbeventsModules("SignalsFBEventsEvents"),c=b.fired;b.piiAutomatched;var d=b.piiConflicting,m=b.extractPii;b=f.getFbeventsModules("SignalsFBEventsShared");var n=b.signalsConvertNodeToHTM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	49905	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce&u_sclid=fb8dd112-c192-4ccc-bb60-2cd0a4a651fa HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	386	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 22 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	49904	104.244.42.67	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	923	OUT	GET /i/adsct?bci=3&eci=2&event_id=35b4fbbe-2ee5-4f14-b05d-44b789b7dbb6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9b410764-39f9-4da6-9812-68efc208dc7f&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	572	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="; Max-Age=63072000; Expires=Wed, 29 Apr 2026 20:13:55 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d9845c88495cc419 strict-transport-security: max-age=631138519 x-response-time: 81 x-connection-hash: fae7a0eb9db39b17d28dfb4ee401193a5c6ea3c9ea2926feedcc88fd9d0a086b connection: close
2024-04-29 20:13:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	49907	142.250.190.38	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1107	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	2365	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17625061803280462627"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x6ae1ee7dd828cd9d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x8aecf35b1750b6cd","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0x97c508194177655b","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb54dbc62b892537c","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5137924592909724446","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"17625061803280462627","filters":[{"14":["8937389"],"source_t [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 29-May-2024 20:13:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 29-Apr-2024 20:28:55 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	49909	142.250.190.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1234	OUT	GET /td/rul/978081151?random=1714421634515&cv=11&fst=1714421634515&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 29-Apr-2024 20:28:55 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:13:55 UTC	470	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 37 39 32 37 31 33 31 39 32 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 Data Ascii: interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doublec
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 36 33 38 35 38 34 34 37 37 36 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 Data Ascii: etch/gda?adg_id=146009090156\u0026cr_id=663858447762\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j377238866","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 38 30 39 37 30 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 37 34 31 30 38 32 30 38 37 33 22 2c 22 36 36 33 39 35 35 37 38 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 Data Ascii: 80970\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j377238866","metadata":["147410820873","663955780970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adf
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 53 6c 6f 74 53 69 7a 65 4d 6f 64 65 22 3a 22 61 6c 6c 2d 73 6c 6f 74 73 2d 72 65 71 75 65 73 74 65 64 2d 73 69 7a 65 73 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 Data Ascii: "trustedBiddingSignalsSlotSizeMode":"all-slots-requested-sizes"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dai
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 36 33 38 35 38 34 34 37 37 36 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 9090156\u0026cr_id=663858447762\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://t
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 37 34 31 30 38 32 30 38 37 33 22 2c 22 36 36 33 39 35 35 37 38 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 Data Ascii: 026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metadata":["147410820873","663955780970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=14741
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 73 53 6c 6f 74 53 69 7a 65 4d 6f 64 65 22 3a 22 61 6c 6c 2d 73 6c 6f 74 73 2d 72 65 71 75 65 73 74 65 64 2d 73 69 7a 65 73 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: sSlotSizeMode":"all-slots-requested-sizes"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https:/
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 33 38 35 38 34 34 37 37 36 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 Data Ascii: 3858447762\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481529751","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/t
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 37 34 31 30 38 32 30 38 37 33 22 2c 22 36 36 33 39 35 35 37 38 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 Data Ascii: x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481529751","metadata":["147410820873","663955780970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=68

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	49910	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421633091 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:55 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	49912	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	492	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 175 x-envoy-upstream-service-time: 36 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:55 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	49908	52.46.155.104	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	592	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Mon, 29 Apr 2024 20:13:55 GMT Content-Length: 0 Connection: close x-amz-rid: 60726J7WJ9YA5J2AD111 Set-Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 20:13:55 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	49914	151.101.65.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	403	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:55 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-29 20:13:55 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	49915	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	687	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714421634605&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 8379732182409554 Date: Mon, 29 Apr 2024 20:13:55 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:13:55 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	49916	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1338	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421634607 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:13:55 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1385451097028094 Date: Mon, 29 Apr 2024 20:13:56 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:13:56 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	49919	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	653	OUT	GET /rp.gif?ts=1714421634124&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:55 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	49917	142.250.191.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1217	OUT	GET /activityi;dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-29 20:13:55 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Expires: Mon, 29 Apr 2024 20:13:55 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnQulCKhT5wIJrVgAFvVYa8K9yBU9JDpgTdODtmfzao-hKchCCVkgkkvqCdbOc; expires=Wed, 29-Apr-2026 20:13:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:13:55 UTC	271	IN	Data Raw: 63 30 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 70 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 70 2e 70 6c 3f 61 3d 31 30 30 30 30 26 2e 79 70 3d 31 30 30 34 39 30 38 37 26 65 Data Ascii: c07<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&e
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 6d 65 70 61 67 65 22 2f 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 70 78 6c 2f 3f 61 64 76 3d 72 39 36 33 63 6f 6c 26 63 74 3d 30 3a 6f 74 78 77 7a 70 61 26 66 6d 74 3d 33 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 64 65 66 65 6e 73 65 2e 63 6f 6d 2f 76 33 2f 5f 5f 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 70 5f 6c 6f 61 64 65 72 2e 31 2e 31 2e 30 2e 6a 73 5f 5f 3b 21 21 4e 39 36 4a 72 6e 49 71 38 49 66 4f 35 77 21 79 52 55 77 6c 44 42 4e 47 Data Ascii: mepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNG
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 66 29 3b 7d 20 7d 20 29 28 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2e 52 42 20 7c 7c 20 7b 7d 29 3b 0a 52 42 2e 64 69 73 61 62 6c 65 50 75 73 68 53 74 61 74 65 3d 74 72 75 65 3b 0a 52 42 2e 69 6e 69 74 69 61 6c 69 7a 65 28 22 64 58 4e 77 63 33 77 78 4f 44 55 32 4e 44 63 35 4e 48 77 78 4f 44 55 32 4e 44 63 34 4f 54 6f 78 4d 54 4d 31 4f 44 51 35 66 44 45 34 4e 54 59 30 4e 7a 6b 77 4f 6a 45 78 4d 7a 55 34 4e 44 68 38 4d 54 67 31 4e 6a 51 33 4f 54 55 3d 22 29 3b 0a 52 42 2e 74 72 61 63 6b 28 22 76 69 65 77 22 29 3b 0a 52 42 2e 74 72 61 63 6b 28 22 73 69 67 6e 75 70 22 2c 7b 22 61 6e 5f 73 65 67 22 3a 31 38 35 36 34 37 39 Data Ascii: me("script")[0]; f.parentNode.insertBefore(a,f);} } )(document,window.RB \|\| {});RB.disablePushState=true;RB.initialize("dXNwc3wxODU2NDc5NHwxODU2NDc4OToxMTM1ODQ5fDE4NTY0NzkwOjExMzU4NDh8MTg1NjQ3OTU=");RB.track("view");RB.track("signup",{"an_seg":1856479
2024-04-29 20:13:55 UTC	305	IN	Data Raw: 63 3d 2a 3b 70 73 3d 31 3b 70 63 6f 72 3d 32 39 37 33 35 31 36 33 33 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 6f 30 7a 38 37 38 37 33 33 33 33 33 7a 61 32 30 31 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 Data Ascii: c=*;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~ore
2024-04-29 20:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	49921	172.217.4.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	1150	OUT	GET /pagead/viewthroughconversion/978081151/?random=1714421634515&cv=11&fst=1714421634515&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-29 20:13:55 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmmIytO3kmvwVgd4AMHyVWGgkzjW1ZTgOVPogQdreLd0qmPVLXkWh_YOeVZ; expires=Wed, 29-Apr-2026 20:13:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:13:55 UTC	244	IN	Data Raw: 39 66 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: 9fc(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-29 20:13:55 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-29 20:13:55 UTC	1064	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 51 30 4d 6a 45 32 4d 7a 51 31 4d 54 55 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTQ0MjE2MzQ1MTU',['https://www.google.com/pagead/1p-user-lis
2024-04-29 20:13:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	49922	142.250.190.36	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	561	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=2047863913.1714421633&jid=1007737705&_u=YGBAiEABBAAAAGAEq~&z=786459164 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	49923	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	1166	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 63 66 39 39 32 62 61 32 2d 30 30 31 32 2d 34 64 38 36 2d 38 34 38 64 2d 36 62 61 64 35 66 37 31 65 64 32 65 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 65 39 37 66 64 65 64 63 2d 62 36 64 37 2d 34 35 61 34 2d 62 63 61 38 2d 66 32 37 36 33 39 37 63 33 35 61 63 22 2c 22 73 73 22 3a 22 63 61 63 62 37 32 66 61 2d 33 62 39 66 2d 34 39 62 38 2d 61 63 32 61 2d 35 36 66 66 61 62 66 63 64 36 63 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"cf992ba2-0012-4d86-848d-6bad5f71ed2e","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"e97fdedc-b6d7-45a4-bca8-f276397c35ac","ss":"cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce","df":true,"s
2024-04-29 20:13:55 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	49925	52.46.155.104	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	639	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0\|t
2024-04-29 20:13:56 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 29 Apr 2024 20:13:56 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: ZN0MXNNESCMRW38VE53H Set-Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 20:13:56 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 20:13:56 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-29 20:13:56 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	49924	104.244.42.133	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	728	OUT	GET /i/adsct?bci=3&eci=2&event_id=35b4fbbe-2ee5-4f14-b05d-44b789b7dbb6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9b410764-39f9-4da6-9812-68efc208dc7f&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91
2024-04-29 20:13:56 UTC	392	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: bc8786d0cc5c5989 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 277fa4bd47b247baa4a838481e0b65e5774392a9962abddd89ed1b3d485fc209 connection: close
2024-04-29 20:13:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	49928	142.250.190.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	872	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-04-29 20:13:56 UTC	2534	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"17625061803280462627"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x6ae1ee7dd828cd9d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x8aecf35b1750b6cd","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0x97c508194177655b","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb54dbc62b892537c","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"5137924592909724446","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"17625061803280462627","filters":[{"14":["8937389"],"source_t [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 29-May-2024 20:13:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv; expires=Wed, 29-Apr-2026 20:13:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	49929	142.250.190.38	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:55 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 35 31 33 37 39 32 34 35 39 32 39 30 39 37 32 34 34 34 36 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"5137924592909724446"},"type":"trigger-no-matching-source"}]
2024-04-29 20:13:56 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 29 Apr 2024 20:13:56 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	49930	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:56 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	49931	104.244.42.131	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:55 UTC	749	OUT	GET /i/adsct?bci=3&eci=2&event_id=35b4fbbe-2ee5-4f14-b05d-44b789b7dbb6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9b410764-39f9-4da6-9812-68efc208dc7f&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="
2024-04-29 20:13:56 UTC	401	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:55 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 07685d47947013d8 strict-transport-security: max-age=631138519 x-response-time: 79 x-connection-hash: 7480c67cfe51e086ceeb74ed31c2f34f5a47e2a6b638d59ad828fb9ca290c550 connection: close
2024-04-29 20:13:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	49932	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	839	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1714421635179&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421634139&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=2, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:13:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	49933	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	931	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1714421635179&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421634139&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:13:56 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:13:56 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-29 20:13:56 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	49934	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	489	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1714421634605&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5qQmxPVGhoTVRJdE1HSmtPUzAwTlRJeUxXSTRZbVF0TmpJek56RTFZMk15TnpWaw cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 3660164133291567 Date: Mon, 29 Apr 2024 20:13:56 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:13:56 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	49935	142.250.190.4	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	1256	OUT	GET /pagead/1p-user-list/978081151/?random=1714421634515&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZuotfHyaAPZXnx06comymmLS7BaKcfgmfxVJvtnDyyzF-I3s&random=2329548996&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	49936	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 883 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	883	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 63 66 39 39 32 62 61 32 2d 30 30 31 32 2d 34 64 38 36 2d 38 34 38 64 2d 36 62 61 64 35 66 37 31 65 64 32 65 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 38 31 39 64 37 37 63 36 2d 38 33 63 31 2d 34 31 34 37 2d 38 32 62 62 2d 38 30 66 34 63 62 31 38 33 33 62 32 22 2c 22 73 73 22 3a 22 63 61 63 62 37 32 66 61 2d 33 62 39 66 2d 34 39 62 38 2d 61 63 32 61 2d 35 36 66 66 61 62 66 63 64 36 63 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"cf992ba2-0012-4d86-848d-6bad5f71ed2e","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"819d77c6-83c1-4147-82bb-80f4cb1833b2","ss":"cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce","df":true,"s
2024-04-29 20:13:56 UTC	360	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:56 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	49937	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 5234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	5234	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 63 66 39 39 32 62 61 32 2d 30 30 31 32 2d 34 64 38 36 2d 38 34 38 64 2d 36 62 61 64 35 66 37 31 65 64 32 65 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 39 66 61 32 34 36 66 30 2d 36 36 33 34 2d 34 63 32 33 2d 62 61 37 32 2d 64 32 65 30 36 35 65 39 31 61 31 39 22 2c 22 73 73 22 3a 22 63 61 63 62 37 32 66 61 2d 33 62 39 66 2d 34 39 62 38 2d 61 63 32 61 2d 35 36 66 66 61 62 66 63 64 36 63 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"cf992ba2-0012-4d86-848d-6bad5f71ed2e","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"9fa246f0-6634-4c23-ba72-d2e065e91a19","ss":"cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce","df":true,"s
2024-04-29 20:13:56 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:13:56 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	49939	142.250.191.162	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	1062	OUT	GET /ddm/fls/z/dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	49938	50.17.194.92	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	644	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	710	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:56 GMT Expires: Mon, 29 Apr 2024 20:13:56 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-29 20:13:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	49944	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	340	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 479 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	479	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 39 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 73 6e 6f 6f 2e 67 69 66 3f Data Ascii: [{"age":0,"body":{"elapsed_time":596,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.1.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/snoo.gif?
2024-04-29 20:13:56 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:13:56 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	49945	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	1160	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421634607 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:13:57 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:13:56 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 4480024307385294 Date: Mon, 29 Apr 2024 20:13:56 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:13:57 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	49941	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	557	OUT	GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	1376	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:56 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fpx%3Fid%3D1391229%26seg%3D24232669%26t%3D1 AN-X-Request-Uuid: e2073bc4-efbc-4e63-bed0-9a9b5c993322 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:56 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:56 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:56 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	49943	15.197.193.217	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	137	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:56 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-29 20:13:56 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	49940	52.204.90.22	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	657	OUT	GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	174	IN	HTTP/1.1 404 Not Found Date: Mon, 29 Apr 2024 20:13:56 GMT Content-Type: text/html Content-Length: 1971 Connection: close Vary: Accept-Encoding ETag: "631f1a4d-7b3"
2024-04-29 20:13:56 UTC	1971	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 36 39 34 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6f 66 70 6f 69 6e 74 20 54 61 72 67 65 74 65 64 20 41 74 74 61 63 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=694, user-scalable=no"> <title>Proofpoint Targeted Attack Protection</title> <link href="/error/common.css" media="all" rel="styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	49947	52.84.18.31	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	711	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source, not-event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Mon, 29 Apr 2024 20:13:56 GMT x-amzn-RequestId: 1b2fb068-c562-4e08-95eb-3b88f07c2357 Access-Control-Allow-Origin: https://www.usps.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 f6f89853501e1cfbc4870a56ed142044.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C2 X-Amz-Cf-Id: KCLpycJaSY1MGRVQdjVPgW7xIOqoYo5nGfLOr9IofS_pyflyfVlvcg==
2024-04-29 20:13:56 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	49949	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	607	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1714421635179&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421634139&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:13:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	49950	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	644	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1714421635179&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421634139&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:13:56 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:13:56 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	49951	142.250.190.36	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	1024	OUT	GET /pagead/1p-user-list/978081151/?random=1714421634515&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZuotfHyaAPZXnx06comymmLS7BaKcfgmfxVJvtnDyyzF-I3s&random=2329548996&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	49948	52.46.151.131	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	480	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; ad-privacy=0
2024-04-29 20:13:56 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 29 Apr 2024 20:13:56 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: B1R3NGJYWDB1BK9M9V88 Set-Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 20:13:56 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 20:13:56 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-29 20:13:56 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	49953	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	766	OUT	GET /bounce?%2Fpx%3Fid%3D1391229%26seg%3D24232669%26t%3D1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676
2024-04-29 20:13:57 UTC	1552	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:57 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 12396198-018d-4fbe-abe8-db9aa4c945b7 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:57 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2Hc$s/JYV!@wnf-Te9(>wL5L!!'zi%*>mt; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:57 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:57 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:57 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	49954	172.217.4.194	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	815	OUT	GET /ddm/fls/z/dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:13:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:13:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	49957	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	540	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	552	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fE3cCBCU3lbZ8e%2BsQAuEBoRYS%2B93PP005%2BQPykQNNxsLdiL19nLeCcH3PZrXu383B660UT%2BUKRmIsOJ%2Fpl9uQnAf4wzPfmyb%2Fd5e8v%2FgBqMA7aAXBXLXksakP%2BEnr4LFMs4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f49feb5a2240-ORD
2024-04-29 20:13:57 UTC	817	IN	Data Raw: 37 64 37 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d77(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 61 72 20 77 72 61 70 45 72 72 6f 72 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b Data Ascii: ar wrapErrorObj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = [
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 65 72 20 77 61 79 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 Data Ascii: er way, we want to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 29 2e 6a 6f 69 6e 28 27 2e 27 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 Data Ascii: ).join('.')); } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domai
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 5d 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 Data Ascii: ] }) } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCop
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 20 5f 20 3d 20 22 76 69 65 77 7c 70 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 Data Ascii: _ = "view\|purchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , H
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 78 79 5d 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: xy]/g, function(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {};
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 Data Ascii: ring(); var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr;
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 70 6c 69 74 28 22 3b 22 29 5b 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: plit(";")[0] } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElem
2024-04-29 20:13:57 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 Data Ascii: } , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(ui

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	49955	54.88.71.74	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:56 UTC	397	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	710	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:57 GMT Expires: Mon, 29 Apr 2024 20:13:57 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-29 20:13:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	49960	52.84.18.96	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:57 UTC	436	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421633104 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Mon, 29 Apr 2024 20:13:57 GMT x-amzn-RequestId: 9cd7c91c-8672-4872-ae32-ed3377ce9047 X-Cache: Miss from cloudfront Via: 1.1 1b942778c388855baa510622b5f73aea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C2 X-Amz-Cf-Id: Lv4jMMO5D1dyO6SHMw4GKxoOJ4sqS1hOjfZqPHYuV-hj19h8e2wfOg==
2024-04-29 20:13:57 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	49956	52.223.40.198	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:57 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	137	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:57 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-29 20:13:57 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	49962	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:57 UTC	551	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	539	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:57 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffuSBGP9sLL1d%2BO6a6SXbelHkzQ%2FQOuvlregIRb3NCvWTABT0fDscwk%2BHlrIgdmShD6GWPhXJLoP7QjX9QtTS4oXG%2BPCiO4RsSYL46E8lf6ap7DeA4%2F2NtqB5NNoWao64N8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f4a3786802b4-ORD
2024-04-29 20:13:57 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-29 20:13:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	49963	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:57 UTC	550	OUT	GET /jpuid?jsonp=RB.jsonPUID HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:57 UTC	665	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:57 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Set-Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b; domain=getrockerbox.com; path=/;Max-Age=2592000; SameSite=None; Secure CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cu4LBB%2B1lJ1NyaR2WiqC92xYMuNzHlz6eXv30IBpF4fBElD6Mm7D8a03yJg1T7tgSR02RdvbnaHyQN%2FpRP2AsMziJohdI7CnhTDi0RkRTrCzgbTcbVleNZu6Y9kiMNc1VQk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f4a379c22d64-ORD
2024-04-29 20:13:57 UTC	73	IN	Data Raw: 34 33 0d 0a 52 42 2e 6a 73 6f 6e 50 55 49 44 28 7b 22 72 62 75 69 64 22 3a 22 72 62 6f 73 2d 34 61 62 62 63 35 30 39 2d 38 62 61 39 2d 34 35 30 37 2d 62 34 63 61 2d 62 31 66 37 33 37 63 66 66 34 39 62 22 7d 29 0a 0d 0a Data Ascii: 43RB.jsonPUID({"rbuid":"rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b"})
2024-04-29 20:13:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	49970	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	1448	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCMG1u6Se6IUDFUsS-QAdY20IaQ%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7964956718108%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D297351633%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=3432c1bc-8fc0-48ed-9c26-8cae2cb56578&an_seg=18564794&type=imp&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:13:58 UTC	585	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sed37KGc8MtrcS2%2Bbiq%2FmeChiGoAh5ShfKv8uiXquxRe1JFIvQpnrMjJkS1JexzTYbYRUrj9ye2uemQs1foEM4rZIfyGYjWTURFQGye0aQa3d2XYB4%2BEcsh7lc2L4Dkggh8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f4a64f262222-ORD
2024-04-29 20:13:58 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-29 20:13:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	49972	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	865	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8CxrEQF']wIg2Hc$s/JYV!@wnf-Te9(>wL5L!!'zi%>mt
2024-04-29 20:13:58 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a5d63876-a5c1-4d51-b7fe-d1057bffeda7 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:58 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYV!EKyQ#!Vlf.wL4W1Qw3CMPV#q; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:58 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:58 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:58 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:13:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	49971	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	1475	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCMG1u6Se6IUDFUsS-QAdY20IaQ%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7964956718108%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D297351633%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=3432c1bc-8fc0-48ed-9c26-8cae2cb56578&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:13:58 UTC	591	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564790 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqi%2BhPb4fOximgBPKK%2FljMxXkkkiW9Tq7RFlI915K6By%2BUNrcMsuWK4o9KJadh70V1jNzG3b5A1xcSVcrFY%2FjBoN%2Fec6J6HeC3saNXWCLBM97%2Fs5kPlqXgAhDJcU3CP9r2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f4a6f9992a8c-LAX
2024-04-29 20:13:58 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-29 20:13:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	49966	52.3.237.106	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	801	OUT	GET /api/v1/initsync/b7087e91-6d9b-423a-9667-d73063ccd8d4?partners=Tapad&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:58 UTC	486	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 436 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=f8b3682a-5889-04a4-5899-e9ea8ed6b62d; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:13:58 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-29 20:13:58 UTC	436	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 32 37 38 31 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 34 39 35 64 39 33 37 36 2d 38 38 64 63 2d 30 34 63 34 2d 38 32 63 32 2d 65 65 31 39 38 33 30 65 35 33 65 31 26 70 61 72 74 6e 65 72 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 72 62 2e 6b 61 72 67 6f 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 54 61 70 61 64 25 32 46 34 39 35 64 39 33 37 36 2d 38 38 64 63 2d 30 34 Data Ascii: <html><head></head><body><img style="display:none;" src="https://pixel.tapad.com/idsync/ex/receive?partner_id=2781&partner_device_id=495d9376-88dc-04c4-82c2-ee19830e53e1&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F495d9376-88dc-04

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	49968	3.225.229.68	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	689	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 679 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:58 UTC	679	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 37 30 38 37 65 39 31 2d 36 64 39 62 2d 34 32 33 61 2d 39 36 36 37 2d 64 37 33 30 36 33 63 63 64 38 64 34 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 63 65 63 35 65 33 61 62 2d 38 38 61 33 2d 34 33 32 33 2d 38 35 37 31 2d 36 31 63 64 33 66 30 36 66 64 37 39 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"b7087e91-6d9b-423a-9667-d73063ccd8d4","kimp":null,"event":"init","params":{"view_id":"cec5e3ab-88a3-4323-8571-61cd3f06fd79"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-29 20:13:58 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=4c01ca9a-3597-0dff-3077-799f9e98738b; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:13:58 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-29 20:13:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	49969	3.225.229.68	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	689	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:58 UTC	683	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 37 30 38 37 65 39 31 2d 36 64 39 62 2d 34 32 33 61 2d 39 36 36 37 2d 64 37 33 30 36 33 63 63 64 38 64 34 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 48 6f 6d 65 50 61 67 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 63 65 63 35 65 33 61 62 2d 38 38 61 33 2d 34 33 32 33 2d 38 35 37 31 2d 36 31 63 64 33 66 30 36 66 64 37 39 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 Data Ascii: {"partner_id":"8005988f","client_id":"b7087e91-6d9b-423a-9667-d73063ccd8d4","kimp":null,"event":"HomePage","params":{"view_id":"cec5e3ab-88a3-4323-8571-61cd3f06fd79"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doub
2024-04-29 20:13:58 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:13:58 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Mon, 29 Apr 2024 20:13:58 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-29 20:13:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	49973	34.111.113.62	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:58 UTC	908	OUT	GET /idsync/ex/receive?partner_id=2781&partner_device_id=495d9376-88dc-04c4-82c2-ee19830e53e1&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F495d9376-88dc-04c4-82c2-ee19830e53e1%3Frid%3D282e3bda-1ede-4ee1-8d3c-160ac8bc444c%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:13:58 UTC	1335	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:13:58 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714421638865;Expires=Fri, 28 Jun 2024 20:13:58 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=94c23be1-d8f1-4c94-9d12-dd33fe005ad9;Expires=Fri, 28 Jun 2024 20:13:58 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2781&partner_device_id=495d9376-88dc-04c4-82c2-ee19830e53e1&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F495d9376-88dc-04c4-82c2-ee19830e53e1%3Frid%3D282e3bda-1ede-4ee1-8d3c-160ac8bc444c%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	49975	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	851	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYV!EKyQ#!Vlf.wL4W1Qw3CMPV#q
2024-04-29 20:13:59 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c3e7a781-efd0-40b9-9eaf-e4a22fc49236 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNOBDSi3Gnyf=kWg0D(lZ..:; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:13:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	49976	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	851	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYV!EKyQ#!Vlf.wL4W1Qw3CMPV#q
2024-04-29 20:13:59 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 80bef8e0-6889-4a0c-8b10-dfbcfc614edb Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNOBDSi3Gnyf=kWg0D(lZ..:; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:13:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	49978	34.111.113.62	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	994	OUT	GET /idsync/ex/receive/check?partner_id=2781&partner_device_id=495d9376-88dc-04c4-82c2-ee19830e53e1&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F495d9376-88dc-04c4-82c2-ee19830e53e1%3Frid%3D282e3bda-1ede-4ee1-8d3c-160ac8bc444c%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1714421638865; TapAd_DID=94c23be1-d8f1-4c94-9d12-dd33fe005ad9
2024-04-29 20:13:59 UTC	1290	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:13:59 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1714421638865;Expires=Fri, 28 Jun 2024 20:13:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=94c23be1-d8f1-4c94-9d12-dd33fe005ad9;Expires=Fri, 28 Jun 2024 20:13:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Fri, 28 Jun 2024 20:13:59 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://crb.kargo.com/api/v1/sync/Tapad/495d9376-88dc-04c4-82c2-ee19830e53e1?rid=282e3bda-1ede-4ee1-8d3c-160ac8bc444c&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=94c23be1-d8f1-4c94-9d12-dd33fe005ad9 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	49977	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	466	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYV!EKyQ#!Vlf.wL4W1Qw3CMPV#q
2024-04-29 20:13:59 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: f66a1cc7-6634-4983-a22d-5198f877c39f Set-Cookie: XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNOBDSi3Gnyf=kWg0D(lZ..:; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:13:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	49979	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	452	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNOBDSi3Gnyf=kWg0D(lZ..:
2024-04-29 20:13:59 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0458c5ba-6d2a-4f4a-b881-700148e595c8 Set-Cookie: XANDR_PANID=d9dGuWNCxeT-YU2lfuiTL27gTuKay1kv_QN3ntfuRxVrFN_bjpWiQJ6IYUd91xtouIB9AdCuXKcZ1HiyS0BeItpeSC4x_TQbliAyLmLYPsU.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNRfZt!DDrh.wL4W1Qw3Co>-'1; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:13:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	49981	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	604	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNOBDSi3Gnyf=kWg0D(lZ..:; XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; receive-cookie-deprecation=1
2024-04-29 20:14:00 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 42fbb846-3c3f-4736-833b-3871caef01f4 Set-Cookie: XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNRfZt!DDrh.wL4W1Qw3Co>-'1; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:13:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	49980	52.3.237.106	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:13:59 UTC	806	OUT	GET /api/v1/sync/Tapad/495d9376-88dc-04c4-82c2-ee19830e53e1?rid=282e3bda-1ede-4ee1-8d3c-160ac8bc444c&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=94c23be1-d8f1-4c94-9d12-dd33fe005ad9 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538
2024-04-29 20:13:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:13:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:13:59 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-29 20:13:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	49983	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:00 UTC	557	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:00 UTC	367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4102 ETag: "1ca8eacc4de983d84e1ddd81fa5b6635" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:00 GMT Age: 2435 Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-29 20:14:00 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-29 20:14:00 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-29 20:14:00 UTC	1346	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	49985	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:00 UTC	702	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:00 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 9045932099572606 Date: Mon, 29 Apr 2024 20:14:00 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:00 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	49984	15.197.193.217	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:00 UTC	754	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=ftfeq77&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:00 UTC	136	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:00 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	49986	52.205.109.183	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:01 UTC	573	OUT	GET /api/v1/sync/Tapad/495d9376-88dc-04c4-82c2-ee19830e53e1?rid=282e3bda-1ede-4ee1-8d3c-160ac8bc444c&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=94c23be1-d8f1-4c94-9d12-dd33fe005ad9 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538
2024-04-29 20:14:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:01 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:14:01 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-29 20:14:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	49987	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:01 UTC	1378	OUT	GET /assets/images/home/favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:02 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42759 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Mon, 29 Apr 2024 20:14:02 GMT Etag: "7d26-547e0aa1fa400" Last-Modified: Mon, 06 Feb 2017 18:18:56 GMT Server: ECAcc (chd/0705) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 32038 Connection: close
2024-04-29 20:14:02 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-04-29 20:14:02 UTC	15655	IN	Data Raw: 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff Data Ascii: 32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	49988	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:03 UTC	1145	OUT	GET /assets/images/home/favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:03 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42760 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Mon, 29 Apr 2024 20:14:03 GMT Etag: "7d26-547e0aa1fa400" Last-Modified: Mon, 06 Feb 2017 18:18:56 GMT Server: ECAcc (chd/0705) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 32038 Connection: close
2024-04-29 20:14:03 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-04-29 20:14:03 UTC	15655	IN	Data Raw: 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff Data Ascii: 32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	49989	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:09 UTC	1436	OUT	GET /globals/site-index.htm HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:09 UTC	1094	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 2766 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Mon, 29 Apr 2024 20:14:09 GMT Last-Modified: Mon, 29 Apr 2024 19:28:03 GMT Server: ECAcc (chd/07AA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 68490 Connection: close
2024-04-29 20:14:09 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 3c 74 69 74 6c 65 3e 53 69 74 65 20 49 6e 64 65 78 20 7c 20 55 53 50 53 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 21 2d 2d 6c 73 3a 62 65 67 69 6e 5b 73 74 79 6c 65 73 68 65 65 74 5d 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 77 6f 76 2d 72 65 73 6f 75 72 63 65 73 2f 66 69 78 65 64 2d 6c 61 79 6f 75 74 2f 6f 6e 65 2d 63 6f 6c 75 6d 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e Data Ascii: <!DOCTYPE html><html><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Site Index \| USPS</title>...ls:begin[stylesheet]--><link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">
2024-04-29 20:14:09 UTC	16383	IN	Data Raw: 2d 6c 6f 63 61 74 69 6f 6e 2e 68 74 6d 22 3e 46 69 6e 64 20 55 53 50 53 20 4c 6f 63 61 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 2d 74 72 61 63 6b 22 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 67 6f 2f 54 72 61 63 6b 43 6f 6e 66 69 72 6d 41 63 74 69 6f 6e 5f 69 6e 70 75 74 22 3e 54 72 61 63 6b 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 72 6f 6c 65 3d 22 6d 65 6e 75 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e Data Ascii: -location.htm">Find USPS Locations</a></li> <li class="tool-track"><a role="menuitem" tabindex="-1" href="https://tools.usps.com/go/TrackConfirmAction_input">Tracking</a></li> </ul> <ul role="menu" aria-hidden="true">
2024-04-29 20:14:09 UTC	2	IN	Data Raw: 6f 70 Data Ascii: op
2024-04-29 20:14:09 UTC	16383	IN	Data Raw: 2d 6f 6e 6c 79 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2f 67 6f 2d 6e 6f 77 2e 68 74 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2f 67 6f 2d 6e 6f 77 2e 70 6e 67 22 20 61 6c 74 3d 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6d 61 67 65 20 77 69 74 68 20 63 61 6c 6c 20 74 6f 20 61 63 74 69 6f 6e 22 20 2f 3e 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 20 Data Ascii: -only international-addition"> <a role="menuitem" tabindex="-1" href="https://www.usps.com/international/go-now.htm"><img src="https://www.usps.com/international/go-now.png" alt="International image with call to action" /></a></div>
2024-04-29 20:14:09 UTC	16383	IN	Data Raw: 09 0a 09 09 09 3c 70 3e 26 6e 62 73 70 3b 3c 2f 70 3e 0a 09 09 09 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 22 3e 3c 61 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 38 65 6d 3b 22 20 68 72 65 66 3d 22 2f 6d 61 6e 61 67 65 2f 22 3e 52 65 63 65 69 76 65 20 4d 61 69 6c 20 26 61 6d 70 3b 20 50 61 63 6b 61 67 65 73 3c 2f 61 3e 3c 2f 68 32 3e 0a 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 77 72 61 70 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 2d 77 72 61 70 22 20 73 74 79 6c 65 3d Data Ascii: <p> </p><h2 style="margin-bottom: 0px;"><a class="button--secondary" style="font-size: .8em;" href="/manage/">Receive Mail & Packages</a></h2><section class="section-wrap" style="padding-top: 10px;"><div class="col--wrap" style=
2024-04-29 20:14:09 UTC	2956	IN	Data Raw: 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 75 73 70 73 22 3e 0d 0a 09 20 20 3c 69 6d 67 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 58 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 63 6f 6e 2e 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 69 6d 61 67 65 73 2f 78 5f 6c 6f 67 6f 2e 70 6e 67 22 3e 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 0d 0a 3c 6c 69 3e 0d 0a 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 Data Ascii: a target="_blank" target="_blank" style="text-decoration: none;" href="https://twitter.com/usps"> <img alt="Image of X social media icon." src="https://www.usps.com/global-elements/footer/images/x_logo.png"> </a></li><li> <a target="_b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	49991	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:09 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 958 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:09 UTC	958	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 63 66 39 39 32 62 61 32 2d 30 30 31 32 2d 34 64 38 36 2d 38 34 38 64 2d 36 62 61 64 35 66 37 31 65 64 32 65 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 33 38 35 32 63 37 35 39 2d 33 33 37 31 2d 34 63 34 38 2d 62 64 30 32 2d 61 34 64 36 63 62 64 35 33 39 38 37 22 2c 22 73 73 22 3a 22 63 61 63 62 37 32 66 61 2d 33 62 39 66 2d 34 39 62 38 2d 61 63 32 61 2d 35 36 66 66 61 62 66 63 64 36 63 65 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"cf992ba2-0012-4d86-848d-6bad5f71ed2e","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"3852c759-3371-4c48-bd02-a4d6cbd53987","ss":"cacb72fa-3b9f-49b8-ac2a-56ffabfcd6ce","bg":true,"s
2024-04-29 20:14:09 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:09 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	49990	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:09 UTC	1366	OUT	GET /iwov-resources/fixed-layout/one-column.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42774 Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:09 GMT Etag: "0-502a52586bd80" Last-Modified: Tue, 09 Sep 2014 17:20:06 GMT nnCoection: close Server: ECAcc (chd/0787) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	49996	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1364	OUT	GET /ContentTemplates/common/css/customer.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1192	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42709 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "181f-56864783f83c0+ident" Last-Modified: Tue, 27 Mar 2018 13:00:07 GMT ntCoent-Length: 6175 Server: ECAcc (chd/0778) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 6175 Connection: close
2024-04-29 20:14:10 UTC	6175	IN	Data Raw: 2f 2a 45 6e 74 65 72 20 55 73 65 72 20 44 65 66 69 6e 65 64 20 43 53 53 20 66 6f 72 20 54 69 6e 79 4d 43 45 20 53 74 79 6c 65 73 20 44 72 6f 70 20 44 6f 77 6e 20 2a 2f 0d 0a 0d 0a 2e 54 65 73 74 2d 42 6f 6c 64 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 0d 0a 2e 54 65 73 74 2d 49 74 61 6c 69 63 20 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 0d 0a 2e 54 65 73 74 2d 52 65 64 2d 54 65 78 74 20 7b 63 6f 6c 6f 72 3a 72 65 64 7d 0d 0a 2e 54 65 73 74 2d 4c 61 72 67 65 2d 54 65 78 74 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 30 25 7d 0d 0a 0d 0a 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 36 32 2e 35 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 6b 69 70 2d 6e 61 76 20 7b 0d 0a 20 20 62 61 63 6b 67 72 Data Ascii: /Enter User Defined CSS for TinyMCE Styles Drop Down /.Test-Bold {font-weight:bold}.Test-Italic {font-style:italic}.Test-Red-Text {color:red}.Test-Large-Text {font-size:200%}html {font-size:62.5% !important;}#skip-nav { backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	49992	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1360	OUT	GET /ContentTemplates/common/css/usps.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42701 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "c9c4-4f11b87d2e900+ident" Last-Modified: Wed, 29 Jan 2014 13:00:52 GMT ntCoent-Length: 51652 Server: ECAcc (chd/076F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 51652 Connection: close
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 09 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 75 73 70 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 50 61 67 65 20 6c 61 79 6f 75 74 20 2b 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 73 0d 0a 09 09 31 2e 20 50 61 67 65 20 4c 61 79 6f 75 74 0d 0a 09 09 32 2e 20 47 65 6e 65 72 69 63 20 53 74 79 6c 65 73 0d 0a 09 09 33 2e 20 48 65 61 64 65 72 0d 0a 09 09 34 2e 20 46 6f 6f Data Ascii: /*---------------------------------------------------------------@filenameusps.css@authoraziz.syed@akqa.com@descriptionPage layout + global style definitionsContents1. Page Layout2. Generic Styles3. Header4. Foo
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 09 09 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0d 0a 09 09 09 09 09 77 69 64 74 68 3a 36 37 70 78 3b 0d 0a 09 09 09 09 09 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 70 78 3b 0d 0a 09 09 09 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 0d 0a 09 09 09 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 33 70 78 3b 0d 0a 09 09 09 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 23 6e 61 76 2d 74 6f 6f 6c 2d 63 61 72 74 20 2e 63 74 61 7b 0d 0a 09 09 09 09 68 65 69 67 68 74 3a 34 35 70 78 3b 0d 0a 09 09 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 35 70 78 3b 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 37 65 37 65 37 3b 0d 0a 09 09 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 Data Ascii: font-weight:bold;width:67px;text-indent:0px;text-align:right;padding-right:13px;padding-left:0px;}#nav-tool-cart .cta{height:45px;line-height:45px;background:#e7e7e7;border-top:1px
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 2d 32 33 32 70 78 20 2d 31 34 39 70 78 3b 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 71 75 69 63 6b 2d 74 6f 6f 6c 73 20 68 33 7b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 36 44 36 44 36 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 44 36 44 36 44 36 3b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 65 6d 3b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 32 66 32 66 32 66 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2f 43 6f 6e 74 65 6e 74 54 65 6d 70 6c 61 74 65 73 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 67 6c 6f 62 61 6c 2f 71 75 69 63 6b 74 6f 6f 6c 73 2f 71 75 69 63 6b 5f 74 6f 6f 6c 5f 73 70 72 69 Data Ascii: position:-232px -149px;}#quick-tools h3{border-left: 1px solid #D6D6D6; border-right: 1px solid #D6D6D6;font-size:1.4em;color:#2f2f2f;background:transparent url(/ContentTemplates/common/images/global/quicktools/quick_tool_spri
2024-04-29 20:14:10 UTC	2503	IN	Data Raw: 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 39 39 39 65 6d 3b 20 77 69 64 74 68 3a 20 31 70 78 3b 20 7d 0d 0a 2e 71 75 69 63 6b 2d 7a 69 70 20 66 69 65 6c 64 73 65 74 20 6c 61 62 65 6c 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 32 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 7d 0d 0a 2e 71 75 69 63 6b 2d 7a 69 70 20 66 69 65 6c 64 73 65 74 20 2e 69 6e 70 75 74 2d 74 65 78 74 2d 77 72 61 70 70 65 72 20 7b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 7d 0d 0a 2e 71 75 69 63 6b 2d 7a 69 70 20 Data Ascii: ion: absolute; left: -999em; width: 1px; }.quick-zip fieldset label { font-size: 1.2em; line-height: 1.2em; padding-bottom: 7px; display: block; margin-bottom: 0; position: relative; }.quick-zip fieldset .input-text-wrapper { margin: 0; }.quick-zip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	49995	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1360	OUT	GET /assets/css/components/components.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1176	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 41672 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 86747 Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "152db-5321832985040+ident" Last-Modified: Thu, 05 May 2016 13:19:53 GMT Server: ECAcc (chd/0768) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 86747 Connection: close
2024-04-29 20:14:10 UTC	15226	IN	Data Raw: 2f 2a 0d 0a 53 43 53 53 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 63 6f 6e 27 73 20 63 6f 6d 70 69 6c 65 64 20 73 74 61 74 65 2c 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 69 74 73 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 20 6e 61 6d 65 0d 0a 0d 0a 2e 69 63 6f 6e 2d 68 6f 6d 65 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 24 69 63 6f 6e 2d 68 6f 6d 65 2d 77 69 64 74 68 3b 0d 0a 7d 0d 0a 0d 0a 54 68 65 20 6c 61 72 67 65 20 61 72 72 61 79 2d 6c 69 6b 65 20 76 61 72 69 61 62 6c 65 73 20 63 6f 6e 74 61 69 6e 20 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 20 73 69 6e 67 6c 65 20 69 63 6f 6e 0d 0a 24 69 63 6f 6e 2d 68 6f 6d 65 3a 20 78 20 79 20 6f 66 66 73 65 74 5f 78 20 6f 66 66 73 Data Ascii: /*SCSS variables are information about icon's compiled state, stored under its original file name.icon-home { width: $icon-home-width;}The large array-like variables contain all information about a single icon$icon-home: x y offset_x offs
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 32 35 30 6d 73 20 65 61 73 65 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 32 35 30 6d 73 20 65 61 73 65 3b 0d 0a 20 20 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 2f 2a 20 6c 69 6e 65 20 32 32 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 2f 5f 74 69 70 73 2d 74 61 62 6c 65 74 2e 73 63 73 73 20 2a 2f 0d 0a 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2e 6f 70 65 6e 20 7b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 Data Ascii: on: transform 250ms ease, background-color 250ms ease; top: 15px;}/* line 22, ../../../../workspace/assets/styles/components/tips/_tips-tablet.scss */.tips-component--toggle-button.open { -webkit-transform: rotate(180deg); -moz-transition:
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 20 23 66 34 66 34 66 34 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 20 23 65 63 65 63 65 63 29 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 34 66 34 66 34 2c 20 23 65 63 65 63 65 63 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 23 66 34 66 34 66 34 2c 20 23 65 63 65 63 65 63 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 66 34 66 34 66 34 2c 20 23 65 63 65 63 65 63 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 Data Ascii: #f4f4f4), color-stop(100%, #ececec)); background-image: -moz-linear-gradient(top, #f4f4f4, #ececec); background-image: -webkit-linear-gradient(top, #f4f4f4, #ececec); background-image: linear-gradient(to bottom, #f4f4f4, #ececec); border-bott
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2f 5f 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 74 61 62 6c 65 74 2e 73 63 73 73 20 2a 2f 0d 0a 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f 6e 65 6e 74 20 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 68 65 61 64 65 72 20 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 74 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 22 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 66 Data Ascii: es/components/landing-hero/_landing-hero-tablet.scss */.landing-hero-component .landing-hero-component--header .landing-hero-component--cta { color: #fff; font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif; f
2024-04-29 20:14:10 UTC	16383	IN	Data Raw: 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 62 65 6e 65 66 69 74 73 2f 5f 62 65 6e 65 66 69 74 73 2d 64 65 73 6b 74 6f 70 2e 73 63 73 73 20 2a 2f 0d 0a 20 20 2e 62 65 6e 65 66 69 74 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2e 62 65 6e 65 66 69 74 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 77 69 74 68 2d 62 75 74 74 6f 6e 20 2e 63 6f 6c 2d 66 69 72 73 74 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2f 2a 20 6c 69 6e 65 20 34 37 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 62 65 6e 65 66 69 74 73 2f 5f 62 65 6e 65 66 69 74 73 2d 64 65 73 6b 74 6f 70 2e 73 63 73 73 20 2a 2f 0d 0a 20 20 2e 62 65 6e 65 66 69 74 73 2d 63 Data Ascii: es/components/benefits/_benefits-desktop.scss / .benefits-component.benefits-component--with-button .col-first { padding-left: 0; } / line 47, ../../../../workspace/assets/styles/components/benefits/_benefits-desktop.scss */ .benefits-c
2024-04-29 20:14:10 UTC	5989	IN	Data Raw: 0d 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 6c 69 6e 65 20 35 31 32 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 67 68 74 62 6f 78 2f 5f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2e 73 63 73 73 20 2a 2f 0d 0a 2e 6d 66 70 2d 74 69 74 6c 65 20 7b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 33 46 33 46 33 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 6c 69 6e Data Ascii: cursor: auto;}/* line 512, ../../../../workspace/assets/styles/components/lightbox/_magnific-popup.scss /.mfp-title { text-align: left; line-height: 18px; color: #F3F3F3; word-wrap: break-word; padding-right: 36px;}/ lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	49993	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1347	OUT	GET /assets/css/elements.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 37528 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "1246-52212db8167c0+ident" Last-Modified: Wed, 14 Oct 2015 16:14:31 GMT ntCoent-Length: 4678 Server: ECAcc (chd/0750) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 4678 Connection: close
2024-04-29 20:14:10 UTC	4678	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 35 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 4c 69 62 72 61 72 79 2f 52 75 62 79 2f 47 65 6d 73 2f 32 2e 30 2e 30 2f 67 65 6d 73 2f 63 6f 6d 70 61 73 73 2d 63 6f 72 65 2d 31 2e 30 2e 31 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 63 6f 6d 70 61 73 73 2f 72 65 73 65 74 2f 5f 75 74 69 6c 69 74 69 65 73 2e 73 63 73 73 20 2a 2f 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 Data Ascii: /* line 5, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss */html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, address, big, cite, c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	49994	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1350	OUT	GET /ContentTemplates/common/scripts/login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 67853 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "317e-546c53fe49580+gzip+ident" Last-Modified: Mon, 23 Jan 2017 16:11:18 GMT Server: ECAcc (chd/071F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 12670 Connection: close
2024-04-29 20:14:10 UTC	12670	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 69 66 20 28 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var lowEnv = false;if ((document.location.hostna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	49997	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1343	OUT	GET /assets/script/utility-bar-init.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:10 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42057 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:10 GMT Etag: "198-50483742ebc00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:58:40 GMT Server: ECAcc (chd/0719) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 408 Connection: close
2024-04-29 20:14:10 UTC	408	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 55 53 50 53 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 55 74 69 6c 69 74 79 42 61 72 3d 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 62 61 73 65 55 72 6c 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 22 2c 63 6f 6e 74 65 78 74 3a 22 75 74 69 6c 69 74 79 2d 62 61 72 22 2c 70 61 74 68 73 3a 7b 6a 71 75 65 72 79 3a 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 22 7d 2c 73 68 69 6d 3a 7b 6a 71 75 65 72 79 3a 7b 65 78 70 6f 72 74 73 3a 22 24 22 7d 7d 2c 77 61 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.requireUtilityBar=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"utility-bar",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min"},shim:{jquery:{exports:"$"}},wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	49998	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1396	OUT	GET /ContentTemplates/common/css/globals/widgets/select-box.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42189 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "2211-4a0cf914909c0+ident" Last-Modified: Wed, 13 Apr 2011 16:47:43 GMT ntCoent-Length: 8721 Server: ECAcc (chd/0706) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8721 Connection: close
2024-04-29 20:14:11 UTC	8721	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 31 2e 20 44 72 6f 70 20 44 6f 77 6e 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 32 66 36 66 61 39 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 2e 64 6a 5f 73 61 66 61 72 69 20 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 32 39 70 78 3b 0d 0a 7d 0d 0a Data Ascii: /* =========== 11. Drop Downs ===========*/.select-wrapper{ font-size:12px; height: 28px; font-weight:normal; color:#2f6fa9; position:relative;font-weight: bolder;}.dj_safari .select-wrapper{ height:29px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	50003	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1395	OUT	GET /ContentTemplates/common/css/globals/widgets/modal-box.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42113 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "18e3-4aa3efbeab580+ident" Last-Modified: Thu, 11 Aug 2011 18:29:58 GMT ntCoent-Length: 6371 Server: ECAcc (chd/079D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 6371 Connection: close
2024-04-29 20:14:11 UTC	6371	IN	Data Raw: 0d 0a 23 6d 6f 64 61 6c 2d 62 6f 78 5f 6f 76 65 72 6c 61 79 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 3b 0d 0a 09 74 6f 70 3a 20 30 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 09 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 34 30 29 3b 0d 0a 09 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 20 30 2e 34 30 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 34 30 3b 20 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 7d 0d 0a 09 0d 0a 23 6d 6f 64 61 6c 2d 62 6f 78 5f 6f 76 65 72 6c 61 79 2d 70 Data Ascii: #modal-box_overlay {position: fixed;z-index: 10000;top: 0px;left: 0px;height: 100%;width: 100%;background-color: #000;filter: alpha(opacity=40);-moz-opacity: 0.40;opacity: 0.40; background:#000;}#modal-box_overlay-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	49999	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1389	OUT	GET /ContentTemplates/common/css/globals/text-fields.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42661 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 1818 Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "71a-494a1c8010c40+ident" Last-Modified: Tue, 09 Nov 2010 17:07:53 GMT Server: ECAcc (chd/0764) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1818 Connection: close
2024-04-29 20:14:11 UTC	1818	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 74 65 78 74 2d 66 69 65 6c 64 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 74 65 78 74 20 66 69 65 6c 64 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 54 65 78 74 20 66 69 65 6c 64 73 0d 0a 2f 2a 09 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 2e 20 54 65 78 74 20 66 69 65 6c 64 73 20 3d 3d 3d 3d 3d 3d Data Ascii: /---------------------------------------------------------------@filenametext-fields.css@authoraziz.syed@akqa.com@descriptiontext fields global style definitionsContent1. Text fields/=========== 1. Text fields ======

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	50000	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1383	OUT	GET /ContentTemplates/common/css/globals/links.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42188 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 1701 Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "6a5-494a1c7f1ca00+ident" Last-Modified: Tue, 09 Nov 2010 17:07:52 GMT Server: ECAcc (chd/0708) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1701 Connection: close
2024-04-29 20:14:11 UTC	1701	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 6c 69 6e 6b 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 6c 69 6e 6b 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 4c 69 6e 6b 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 20 4c 69 6e 6b 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 61 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 32 66 36 Data Ascii: /---------------------------------------------------------------@filenamelinks.css@authoraziz.syed@akqa.com@descriptionlinks global style definitionsContent1. Links/=========== 1 Links ===========*/a{color:#2f6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	50001	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1391	OUT	GET /ContentTemplates/common/css/globals/button-styles.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42923 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "2833-4a417cae43880+ident" Last-Modified: Wed, 25 May 2011 11:13:22 GMT ntCoent-Length: 10291 Server: ECAcc (chd/0728) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10291 Connection: close
2024-04-29 20:14:11 UTC	10291	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 62 75 74 74 6f 6e 2d 73 74 79 6c 65 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 62 75 74 74 6f 6e 73 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 42 75 74 74 6f 6e 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 20 42 75 74 74 6f 6e 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a Data Ascii: /---------------------------------------------------------------@filenamebutton-styles.css@authoraziz.syed@akqa.com@descriptionbuttonss global style definitionsContent1. Buttons/=========== 1 Buttons ===========*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	50002	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:10 UTC	1384	OUT	GET /ContentTemplates/common/css/globals/modals.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:11 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42695 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:11 GMT Etag: "14ce-494a1c7f1ca00+ident" Last-Modified: Tue, 09 Nov 2010 17:07:52 GMT ntCoent-Length: 5326 Server: ECAcc (chd/0711) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5326 Connection: close
2024-04-29 20:14:11 UTC	5326	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 6d 6f 64 61 6c 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 67 6c 6f 62 61 6c 20 6d 6f 64 61 6c 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 4d 6f 64 61 6c 73 0d 0a 09 09 32 2e 20 50 72 6f 64 75 63 74 20 41 64 64 65 64 20 4d 6f 64 61 6c 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 38 2e 20 4d 6f 64 61 6c 20 3d Data Ascii: /---------------------------------------------------------------@filenamemodals.css@authoraziz.syed@akqa.com@descriptionglobal modals style definitionsContent1. Modals2. Product Added Modals/=========== 8. Modal =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	50004	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:12 UTC	1387	OUT	GET /ContentTemplates/common/css/globals/qt-modals.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:12 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42114 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Mon, 29 Apr 2024 20:14:12 GMT Etag: "3edb-4ab2d1dff6f00+ident" Last-Modified: Tue, 23 Aug 2011 14:36:12 GMT ntCoent-Length: 16091 Server: ECAcc (chd/0774) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 16091 Connection: close
2024-04-29 20:14:12 UTC	16091	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 71 74 2d 6d 6f 64 61 6c 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 71 75 69 63 6b 20 74 6f 6f 6c 73 20 6d 6f 64 61 6c 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 51 75 69 63 6b 20 54 6f 6f 6c 73 20 4d 6f 64 61 6c 73 0d 0a 09 09 32 2e 20 50 4f 20 4c 6f 63 61 74 6f 72 20 4d 6f 64 61 6c 0d 0a 09 09 33 2e 20 43 61 63 6c 75 6c Data Ascii: /*---------------------------------------------------------------@filenameqt-modals.css@authoraziz.syed@akqa.com@descriptionquick tools modals style definitionsContent1. Quick Tools Modals2. PO Locator Modal3. Caclul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	50005	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:12 UTC	1386	OUT	GET /ContentTemplates/common/css/globals/tooltips.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:12 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42159 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 2097 Date: Mon, 29 Apr 2024 20:14:12 GMT Etag: "831-494a1c8010c40+ident" Last-Modified: Tue, 09 Nov 2010 17:07:53 GMT Server: ECAcc (chd/077F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2097 Connection: close
2024-04-29 20:14:12 UTC	2097	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 74 6f 6f 6c 74 69 70 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 67 6c 6f 62 61 6c 20 74 6f 6f 6c 74 69 70 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 54 6f 6f 6c 20 54 69 70 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 2e 20 54 6f 6f 6c 20 54 69 70 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a Data Ascii: /---------------------------------------------------------------@filenametooltips.css@authoraziz.syed@akqa.com@descriptionglobal tooltips style definitionsContent1. Tool Tips/=========== 1. Tool Tips ===========*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	50006	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:12 UTC	1347	OUT	GET /assets/script/component-guide-init.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:12 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42232 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:12 GMT Etag: "51d-50483742ebc00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:58:40 GMT Server: ECAcc (chd/076C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1309 Connection: close
2024-04-29 20:14:12 UTC	1309	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 55 53 50 53 2e 52 65 71 75 69 72 65 2e 63 6f 6d 70 6f 6e 65 6e 74 47 75 69 64 65 3d 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 62 61 73 65 55 72 6c 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 22 2c 63 6f 6e 74 65 78 74 3a 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 2c 70 61 74 68 73 3a 7b 6a 71 75 65 72 79 3a 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 22 2c 22 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 22 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 6c 69 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.componentGuide=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"components",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min","magnific-popup":"/assets/script/li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	50007	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1440	OUT	GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1118	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42060 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "af-49c550cd0b400" Last-Modified: Tue, 15 Feb 2011 16:56:48 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 175 Connection: close
2024-04-29 20:14:13 UTC	175	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 66 08 02 00 00 00 85 86 6c 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 51 49 44 41 54 78 da 62 7a fb f6 3d d3 ff ff ff 80 f8 3f 13 03 03 03 0a 0d 61 83 68 04 1f 97 18 3a c6 ae 8f 01 83 0d a2 19 18 18 19 be 7e fd 0a 65 0f 2c 06 b9 19 e6 76 54 37 fe 87 cb c1 d4 c1 fc 89 ae 0f d9 ff f8 68 54 73 10 62 c0 f0 00 08 30 00 69 29 7a ff ea 60 e1 07 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRfl<tEXtSoftwareAdobe ImageReadyqe<QIDATxbz=?ah:~e,vT7hTsb0i)z`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	50010	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1447	OUT	GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42750 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "2117-4a6caeb2c5b80" Last-Modified: Tue, 28 Jun 2011 19:46:06 GMT Server: ECAcc (chd/0710) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8471 Connection: close
2024-04-29 20:14:13 UTC	8471	IN	Data Raw: 47 49 46 38 39 61 20 03 10 01 f7 ff 00 a7 c4 da 70 70 70 4b 4a 4b d2 d2 d2 5a aa ea 8c c4 f4 c0 ce da 81 b0 d5 c5 dd f1 a5 a5 a5 b2 b2 b3 3e 8b c8 78 78 78 f6 f6 f7 c5 c5 c6 20 81 ce 75 b2 e2 e7 ed f3 85 c1 f1 6a 98 ba f0 f6 fb 3b 3b 3b c9 c9 cb 9b ca f2 6e ab db ba ba bb 91 91 91 1a 7b ca cc cc cd 5d 5d 5d d5 d5 d5 aa d2 f3 b6 b6 b6 59 59 59 3f 3f 3f be be be d4 e5 f3 ad ad ae 95 95 95 a9 a9 a9 53 53 53 9e 9e 9e a6 cb e9 7c 7c 7c 8d 8d 8d 31 31 31 8c c2 ee 73 73 73 77 77 77 eb f0 f5 53 a8 ee 44 91 d3 7b b6 e5 79 b9 eb 23 22 23 91 c3 ea 57 56 57 50 4f 50 39 84 bf a1 c7 e4 bd da f2 29 29 29 e8 ed f0 9d c1 dd 7d b8 e7 e6 e6 e7 e8 e8 e8 f2 f2 f3 f3 f3 f4 f1 f1 f1 ef ef ef e7 e7 e8 e5 e5 e6 f2 f2 f2 e6 e6 e6 e9 e9 e9 e5 e5 e5 e8 e8 e9 f1 f1 f2 f4 f4 f4 f4 f4 Data Ascii: GIF89a pppKJKZ>xxx uj;;;n{]]]YYY???SSS\|\|\|111ssswwwSD{y#"#WVWPOP9)))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	50012	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1444	OUT	GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1117	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42060 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "39-49c550d87cf00" Last-Modified: Tue, 15 Feb 2011 16:57:00 GMT Server: ECAcc (chd/077C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 57 Connection: close
2024-04-29 20:14:13 UTC	57	IN	Data Raw: 47 49 46 38 39 61 01 00 22 00 91 00 00 eb eb ec d8 d8 d9 d5 d5 d6 cb cb cd 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 22 00 00 02 0a 84 8f 30 cb cd 01 a1 98 b3 00 00 3b Data Ascii: GIF89a"!,"0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	50008	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1447	OUT	GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42679 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "295-49c806d93eac0" Last-Modified: Thu, 17 Feb 2011 20:41:55 GMT Server: ECAcc (chd/0785) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 661 Connection: close
2024-04-29 20:14:13 UTC	661	IN	Data Raw: 47 49 46 38 39 61 08 00 2c 01 e6 4d 00 7a c2 ea ff ff ff eb eb ec de de df d4 d4 d7 b8 de f4 42 40 41 35 89 cd ca e7 f7 4d 96 d1 83 c6 eb 9d d2 f0 cd cd d0 f5 f5 f5 57 55 56 df df e0 82 82 82 a1 a1 a1 95 ce ee e1 e1 e2 c7 c7 c9 b6 b6 b6 ec ec ec d6 d6 d7 8b 8a 8b e1 e6 ec a5 a5 a7 8a b7 db ed ed ee 97 be de d5 d5 d5 8b b8 dc bb d2 e4 a6 d6 f1 d5 d4 d5 6c 6b 6c 97 be df d4 d3 d4 c0 c0 c2 ac ab ac 84 84 85 dc ef f9 97 97 97 cb cb cb 8b 8b 8b ac ac ae f4 f4 f4 66 a4 d6 72 aa d8 77 77 77 af da f2 cb cb cc b0 cc e3 e4 f3 fb 8c 8b 8c d2 d2 d2 e0 e5 ea 8c ca ed a3 c4 e0 df e4 ea a1 a0 a1 bb bb bb 77 75 76 b9 b9 bc d3 eb f8 b5 b5 b6 78 78 78 b0 b0 b0 ed f7 fc 8d 8d 8d 97 96 97 91 91 92 b4 b4 b5 c1 c1 c1 ba d1 e4 96 95 96 d4 df e9 ff ff ff 00 00 00 00 00 00 00 00 Data Ascii: GIF89a,MzB@A5MWUVlklfrwwwwuvxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	50009	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1458	OUT	GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42749 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "644-49c550ca2ed40" Last-Modified: Tue, 15 Feb 2011 16:56:45 GMT Server: ECAcc (chd/0786) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1604 Connection: close
2024-04-29 20:14:13 UTC	1604	IN	Data Raw: 47 49 46 38 39 61 30 00 0d 02 c4 12 00 ff ff ff e1 e1 e1 fe fe fe fd fd fd fa fa fa fb fb fb f8 f8 f8 f6 f6 f6 fc fc fc f9 f9 f9 f7 f7 f7 e2 e2 e2 e8 e8 e8 f5 f5 f5 ed ed ed e5 e5 e5 e3 e3 e3 f4 f4 f4 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 12 00 2c 00 00 00 00 30 00 0d 02 00 05 ff a0 20 8e 64 69 9e 68 3a 0e 6c eb be 70 2c cf 6d 61 df 78 ae ef 7c 7f 13 c0 a0 70 48 2c 1a 8f 41 83 72 c9 6c 3a 9f d0 e8 f2 40 ad 5a af d8 ac 76 5b 0d 78 bf e0 b0 78 4c 2e 7f 01 e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 75 66 87 88 89 5e 12 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 96 6a 2a 26 6a 90 01 70 01 90 69 24 Data Ascii: GIF89a0!,0 dih:lp,max\|pH,Arl:@Zv[xxL.zn\|N~uf^j*&jpi$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	50011	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	1451	OUT	GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:13 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42613 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:13 GMT Etag: "87d-4a6caeb0dd700" Last-Modified: Tue, 28 Jun 2011 19:46:04 GMT nnCoection: close Server: ECAcc (chd/0731) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-29 20:14:13 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	50013	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:13 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-29 20:14:14 UTC	511	IN	HTTP/1.1 304 Not Modified Date: Mon, 29 Apr 2024 20:14:14 GMT Connection: close x-amz-id-2: CVIWUzhXbL8kEPsw9eqLi+vo2RVFsLwccZkbXFgU2I6jYf49hb0B/QkA3Oyo8mledU+V1Uj27s8= x-amz-request-id: 2D295QHHB4YS63NJ Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 947 Expires: Mon, 29 Apr 2024 20:19:14 GMT Server: cloudflare CF-RAY: 87c1f50a9e1a617b-ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	50015	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1405	OUT	GET /assets/fonts/9a2e4855-380f-477f-950e-d98e8db54eac.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1268	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 66885 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "113bc-504fd432fdb00" Last-Modified: Thu, 09 Oct 2014 13:18:04 GMT Server: ECAcc (chd/071F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 70588 Connection: close
2024-04-29 20:14:14 UTC	15134	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 13 bc 00 0f 00 00 00 02 7b 54 00 01 00 00 00 01 0f bc 00 00 04 00 00 00 09 2b 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 10 29 8b 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 44 00 00 00 44 03 4f 0b e3 66 70 67 6d 00 00 02 fc 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 34 00 00 00 10 00 00 00 10 00 21 00 09 67 6c 79 66 00 00 04 44 00 00 ee 60 00 02 2d c0 2f 5e 9f 49 68 65 61 64 00 00 f2 a4 00 00 00 36 00 00 00 36 e9 40 30 e7 68 68 65 61 00 00 f2 dc 00 00 00 21 00 00 00 24 07 3e 04 61 68 6d 74 78 00 00 f3 00 00 00 02 ea 00 00 06 18 03 0c 33 17 6b 65 72 6e 00 00 f5 ec 00 00 0b 98 00 00 1e 18 3d 17 36 96 6c 6f 63 61 00 01 01 84 00 00 04 Data Ascii: wOFF{T+OS/2XV`)cmapt8cvt DDOfpgm8gasp4!glyfD`-/^Ihead66@0hhea!$>ahmtx3kern=6loca
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 92 ba d3 ec 96 f1 a3 7b eb 17 cc 8b d5 75 f4 d5 5c df 34 d4 59 17 1c 58 7f 48 7a fd d2 c4 84 d3 d4 3f 19 8b 66 7a c3 65 e1 78 e5 77 63 0b 53 0d de 8a e8 e8 31 e3 e3 67 2e 6f f7 bc 3a b0 ac b3 22 10 1d 88 87 3b c3 15 f9 f1 39 d5 6d 43 89 da 45 63 1d f5 83 47 0e b4 8f b6 87 fc 91 fe b6 9a d6 9a 32 6f 47 61 43 c7 58 67 71 5b 57 77 ac aa 61 f4 84 8c 5a 67 dc ff 3e 46 7f 2f f4 9a cf 5a 3e 4d 86 c0 2e 97 ed 93 07 5f 2b ce 5a 40 d3 82 77 76 c9 02 78 b2 d7 13 09 45 c5 bf e5 75 fa f7 4c ec 71 76 0e ed db ec 5c 25 32 2b 63 ce b2 a9 b1 f6 1f 64 dd df 6f 56 94 33 39 27 c3 ea c1 a3 94 92 1e 3c b3 d3 fd b8 79 b9 b6 2a 70 d0 7a 1b ff f4 ac a0 4a 35 2d f5 69 be ca 07 a8 d4 1e a9 02 b0 b7 0f ec ed 03 7b fb 54 fa 99 3c 6d 44 f9 c0 db 3e f0 b6 0f bc ed 83 11 e5 13 23 aa 40 Data Ascii: {u\4YXHz?fzexwcS1g.o:";9mCEcG2oGaCXgq[WwaZg>F/Z>M._+Z@wvxEuLqv\%2+cdoV39'<y*pzJ5-i{T<mD>#@
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 15 91 ff 25 89 16 13 ad 25 3a 95 e8 5c a2 cb 89 ae 23 ba 95 e8 fb 44 8f 12 fd 86 e8 25 a2 f7 b8 4c 8b 92 7a 22 f4 33 22 7a e5 61 cd a0 46 72 22 59 db 4d bd bf 15 35 6b cd 70 19 ab bf b2 69 1c 8e 84 3d 7f 2b df e5 25 c4 60 7c 65 b5 4d 9e 4f 27 6e 99 18 2b ab 8b f8 2e 1e 3e 7f fd b1 99 e2 0e 8b 3f 99 d2 0e fd 35 2f 70 94 04 6b 7c b5 65 b9 d7 bc 66 7e 77 68 a0 b6 b5 b6 2c e7 c1 07 cd b5 99 52 0e ff 4d 64 88 39 f2 97 3e e2 cc 7d d6 45 a6 69 f1 ee d0 f2 4c 3f d5 d9 59 ac 33 8a db 67 2a 9f 19 ea 68 96 f2 19 ef 74 24 ea bd 4b cc 09 eb a2 98 aa cb d4 67 7e d3 5c 47 32 95 c7 88 98 27 65 ad 31 bc b8 56 c8 08 ab 93 7c 5e f2 84 a0 32 f5 e7 db af c0 61 2a 1c a6 24 63 e9 20 1e fb 02 80 bd 66 bf 08 57 b6 83 00 67 02 dc ac 40 be ed 75 ca 9b ad ec 74 9a a3 96 90 0a c8 5b Data Ascii: %%:\#D%Lz"3"zaFr"YM5kpi=+%`\|eMO'n+.>?5/pk\|ef~wh,RMd9>}EiL?Y3ght$Kg~\G2'e1V\|^2a$c fWg@ut[
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 31 ea d5 17 7d 59 b6 4b f8 23 db 4d 7f 05 03 7a 4b be 2d fd 6c cc f5 da ff c7 73 bd 84 ef f7 9e 2a 9f 94 39 d9 53 ec ff ab 8b 2a 85 74 11 65 4e fc 95 38 20 47 34 d3 7f 59 e7 ca e8 a4 23 23 07 e4 87 a4 f0 8b 16 a0 37 17 db 2c ff 20 98 98 5d 19 cb de 6a 7a 1a 22 db d3 d8 62 b4 cb df ac c2 a4 79 16 60 0b b4 d3 2d d8 1e df 92 f6 18 d7 e2 db 3c 38 77 1d 34 74 8a ed 2d c4 ac ce 51 29 d7 58 e7 68 c7 1b cc 53 87 bf 45 80 27 8d a5 2e ea c0 eb 74 03 f4 e0 09 49 ac 07 49 b4 0c a9 5b ec a7 5f 7f 88 c8 52 6f ab 7b 60 bf 5a 10 f8 f0 62 3a bc 18 69 0c b9 5f ec d0 13 27 9b 59 38 1c 45 fd b5 33 06 b0 cb a2 cf 5b af d7 54 73 56 ea 00 47 c8 db 32 3f d2 32 bf b5 c2 dc e9 dd b1 3e 34 d8 d9 98 67 79 4e 1a 1b 5a 93 ac 0a f4 af 19 5c 70 62 85 e5 dd b2 f0 ec ad d3 17 7b 22 43 6d Data Ascii: 1}YK#MzK-ls9SteN8 G4Y##7, ]jz"by`-<8w4t-Q)XhSE'.tII[_Ro{`Zb:i_'Y8E3[TsVG2?2>4gyNZ\pb{"Cm
2024-04-29 20:14:14 UTC	6305	IN	Data Raw: 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 72 cb 94 d8 32 25 b6 d5 db ea 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 f1 c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee 50 ff 43 fd 0f f5 3f d4 ff 50 ff 43 Data Ascii: s6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ksr2%r} r} r} r} r}HqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDPC?PC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	50014	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1441	OUT	GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42174 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "11c-49c550d788cc0" Last-Modified: Tue, 15 Feb 2011 16:56:59 GMT Server: ECAcc (chd/077B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 284 Connection: close
2024-04-29 20:14:14 UTC	284	IN	Data Raw: 47 49 46 38 39 61 02 00 22 00 d5 00 00 d0 d0 d1 ce ce cf c3 c3 c4 ee ee ee cf cf cf cc cc cd c7 c7 c8 f4 f4 f5 d4 d4 d5 eb eb eb e7 e7 e8 f4 f4 f4 c5 c5 c6 c4 c4 c5 ea ea ea c8 c8 c9 c9 c9 ca ef ef f0 f0 f0 f1 c1 c1 c2 ea ea eb ed ed ee ec ec ed ee ee ef cd cd cd e9 e9 ea e9 e9 e9 d1 d1 d2 ca ca cb f2 f2 f2 bf bf c1 cd cd ce cf cf d0 ec ec ec d5 d5 d7 eb eb ec c6 c6 c7 d0 d0 d0 cb cb cc f1 f1 f2 e8 e8 e9 f1 f1 f1 d2 d2 d3 c2 c2 c3 bf bf c0 e8 e8 e8 f3 f3 f4 d3 d3 d4 ef ef ef c0 c0 c1 e6 e6 e6 c6 c6 c6 f2 f2 f3 e6 e6 e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 22 00 00 06 39 40 d1 01 b1 78 b9 8c 2a 5a 72 d3 01 9c 4a 29 50 8a 20 09 44 3e 30 0c ac 70 31 0d 38 15 88 Data Ascii: GIF89a"!,"9@x*ZrJ)P D>0p18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50016	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1349	OUT	GET /assets/script/components/utility-bar.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1156	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42783 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "708-50483708bf2c0" Last-Modified: Fri, 03 Oct 2014 11:57:39 GMT Server: ECAcc (chd/0769) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1800 Connection: close
2024-04-29 20:14:14 UTC	1800	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 2c 69 28 29 2c 66 28 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 75 74 69 6c 69 74 79 42 61 72 3d 65 28 22 23 75 74 69 6c 69 74 79 2d 62 61 72 22 29 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 3d 65 28 22 23 6e 61 76 2d 74 6f 6f 6c 2d 6d 75 6c 74 69 6c 69 6e 67 75 61 6c 22 2c 74 2e 75 74 69 6c 69 74 79 42 61 72 29 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 4c 69 6e 6b 3d 65 28 22 2e 61 6e 63 68 6f 72 2c 20 2e 6d 75 6c 74 69 2d 6c 69 6e 6b 22 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 29 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(){var t={},n=function(){r(),i(),f()},r=function(){t.utilityBar=e("#utility-bar"),t.languageTool=e("#nav-tool-multilingual",t.utilityBar),t.languageToolLink=e(".anchor, .multi-link",t.languageTool)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	50017	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1362	OUT	GET /global-elements/lib/script/jquery/dist/jquery.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 67914 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "176b1-504838ea5a300+gzip+ident" Last-Modified: Fri, 03 Oct 2014 12:06:04 GMT Server: ECAcc (chd/0736) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 95921 Connection: close
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-04-29 20:14:14 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 72 6e 20 57 2e 74 65 73 74 28 61 7c 7c 22 22 29 7c 7c 66 62 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 63 62 2c 64 62 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 70 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f Data Ascii: rn W.test(a\|\|"")\|\|fb.error("unsupported lang: "+a),a=a.replace(cb,db).toLowerCase(),function(b){var c;do if(c=p?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c===a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.no
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 6e 20 64 3f 5b 62 5d 3a 62 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 65 6c 65 74 65 20 64 5b 62 5b 65 5d 5d 3b 69 66 28 63 3f 21 50 28 64 29 3a 21 6d 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 72 65 74 75 72 6e 7d 28 63 7c 7c 28 64 65 6c 65 74 65 20 67 5b 68 5d 2e 64 61 74 61 2c 50 28 67 5b 68 5d 29 29 29 26 26 28 66 3f 6d 2e 63 6c 65 61 6e 44 61 74 61 28 5b 61 5d 2c 21 30 29 3a 6b 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 7c 7c 67 21 3d 67 2e 77 69 6e 64 6f 77 3f 64 65 6c 65 74 65 20 67 5b 68 5d 3a 67 5b 68 5d 3d 6e 75 6c 6c 29 7d 7d 7d 6d 2e 65 78 74 65 6e 64 28 7b 63 61 63 68 65 3a 7b 7d 2c 6e 6f 44 61 74 61 3a 7b 22 61 70 70 6c 65 74 20 22 3a 21 30 2c 22 65 6d 62 65 64 20 22 3a Data Ascii: n d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!P(d):!m.isEmptyObject(d))return}(c\|\|(delete g[h].data,P(g[h])))&&(f?m.cleanData([a],!0):k.deleteExpando\|\|g!=g.window?delete g[h]:g[h]=null)}}}m.extend({cache:{},noData:{"applet ":!0,"embed ":
2024-04-29 20:14:14 UTC	2	IN	Data Raw: 76 6f Data Ascii: vo
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 69 64 20 30 3d 3d 3d 62 7c 7c 62 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 62 29 3f 6d 2e 6d 65 72 67 65 28 5b 61 5d 2c 66 29 3a 66 7d 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 29 7b 57 2e 74 65 73 74 28 61 2e 74 79 70 65 29 26 26 28 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 22 74 61 62 6c 65 22 29 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 31 31 21 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 3f 62 3a 62 2e 66 69 72 73 74 43 68 69 6c 64 2c 22 74 72 22 29 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 62 6f 64 79 22 29 5b 30 5d 7c 7c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 2e 6f 77 Data Ascii: id 0===b\|\|b&&m.nodeName(a,b)?m.merge([a],f):f}function vb(a){W.test(a.type)&&(a.defaultChecked=a.checked)}function wb(a,b){return m.nodeName(a,"table")&&m.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]\|\|a.appendChild(a.ow
2024-04-29 20:14:14 UTC	16383	IN	Data Raw: 5b 33 5d 7c 7c 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 3f 22 22 3a 22 70 78 22 29 2c 67 3d 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 22 70 78 22 21 3d 3d 66 26 26 2b 64 29 26 26 62 63 2e 65 78 65 63 28 6d 2e 63 73 73 28 63 2e 65 6c 65 6d 2c 61 29 29 2c 68 3d 31 2c 69 3d 32 30 3b 69 66 28 67 26 26 67 5b 33 5d 21 3d 3d 66 29 7b 66 3d 66 7c 7c 67 5b 33 5d 2c 65 3d 65 7c 7c 5b 5d 2c 67 3d 2b 64 7c 7c 31 3b 64 6f 20 68 3d 68 7c 7c 22 2e 35 22 2c 67 2f 3d 68 2c 6d 2e 73 74 79 6c 65 28 63 2e 65 6c 65 6d 2c 61 2c 67 2b 66 29 3b 77 68 69 6c 65 28 68 21 3d 3d 28 68 3d 63 2e 63 75 72 28 29 2f 64 29 26 26 31 21 3d 3d 68 26 26 2d 2d 69 29 7d 72 65 74 75 72 6e 20 65 26 26 28 67 3d 63 2e 73 74 61 72 74 3d 2b 67 7c 7c 2b 64 7c 7c 30 2c 63 2e 75 6e 69 74 3d Data Ascii: [3]\|\|(m.cssNumber[a]?"":"px"),g=(m.cssNumber[a]\|\|"px"!==f&&+d)&&bc.exec(m.css(c.elem,a)),h=1,i=20;if(g&&g[3]!==f){f=f\|\|g[3],e=e\|\|[],g=+d\|\|1;do h=h\|\|".5",g/=h,m.style(c.elem,a,g+f);while(h!==(h=c.cur()/d)&&1!==h&&--i)}return e&&(g=c.start=+g\|\|+d\|\|0,c.unit=
2024-04-29 20:14:14 UTC	2	IN	Data Raw: 72 28 Data Ascii: r(
2024-04-29 20:14:14 UTC	14001	IN	Data Raw: 67 20 69 6e 20 61 2e 63 6f 6e 76 65 72 74 65 72 73 29 6a 5b 67 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 5d 3b 66 3d 6b 2e 73 68 69 66 74 28 29 3b 77 68 69 6c 65 28 66 29 69 66 28 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 5b 66 5d 26 26 28 63 5b 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 5b 66 5d 5d 3d 62 29 2c 21 69 26 26 64 26 26 61 2e 64 61 74 61 46 69 6c 74 65 72 26 26 28 62 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 62 2c 61 2e 64 61 74 61 54 79 70 65 29 29 2c 69 3d 66 2c 66 3d 6b 2e 73 68 69 66 74 28 29 29 69 66 28 22 2a 22 3d 3d 3d 66 29 66 3d 69 3b 65 6c 73 65 20 69 66 28 22 2a 22 21 3d 3d 69 26 26 69 21 3d 3d 66 29 7b 69 66 28 67 3d 6a 5b 69 2b 22 20 22 2b 66 5d 7c 7c 6a 5b 22 2a 20 22 2b Data Ascii: g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c[a.responseFields[f]]=b),!i&&d&&a.dataFilter&&(b=a.dataFilter(b,a.dataType)),i=f,f=k.shift())if(""===f)f=i;else if(""!==i&&i!==f){if(g=j[i+" "+f]\|\|j["* "+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50019	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1341	OUT	GET /assets/script/components/faq.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42165 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "9ac-50483705e2c00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:36 GMT Server: ECAcc (chd/0725) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2476 Connection: close
2024-04-29 20:14:14 UTC	2476	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 2c 73 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 29 2c 61 28 29 2c 69 3d 72 2e 61 6c 6c 42 6c 6f 63 6b 73 2e 6c 65 6e 67 74 68 2c 73 3d 31 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 73 65 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 66 61 71 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 22 2c 69 29 2c 72 2e 63 6f 6c 6c 61 70 73 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 66 61 71 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 6f 6c 6c 61 70 73 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".faq-component--see-all-link",i),r.collapseAllLink=e(".faq-component--collaps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	50018	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	1342	OUT	GET /assets/script/components/tips.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:14 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 41667 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:14 GMT Etag: "991-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (chd/073C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2449 Connection: close
2024-04-29 20:14:14 UTC	2449	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 2c 73 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 29 2c 61 28 29 2c 69 3d 72 2e 61 6c 6c 42 6c 6f 63 6b 73 2e 6c 65 6e 67 74 68 2c 73 3d 31 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 73 65 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 22 2c 69 29 2c 72 2e 63 6f 6c 6c 61 70 73 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 6f 6c 6c 61 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".tips-component--see-all-link",i),r.collapseAllLink=e(".tips-component--colla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	50023	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:14 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-29 20:14:14 UTC	487	IN	HTTP/1.1 304 Not Modified Date: Mon, 29 Apr 2024 20:14:14 GMT Connection: close x-amz-id-2: b20cEZl8BZBZCcu3jpxwMvR7o9Oa4SyfHTAy2SNhjvKDg2oL2lmiqyUxcUIuZFYoQU3seIhAHEw= x-amz-request-id: NBW2CKFJND9K6HR6 Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 5952 Server: cloudflare CF-RAY: 87c1f50f389c620f-ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50020	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	1342	OUT	GET /assets/script/components/tabs.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:17 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 41670 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:17 GMT Etag: "9a7-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (chd/0782) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2471 Connection: close
2024-04-29 20:14:17 UTC	2471	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 7b 7d 2c 73 3d 7b 74 79 70 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 78 74 65 6e 64 28 73 2c 6e 29 2c 75 28 29 2c 61 28 29 2c 63 28 29 2c 73 2e 74 79 70 65 3d 3d 3d 22 76 65 72 74 69 63 61 6c 22 26 26 72 2e 69 73 44 65 73 6b 74 6f 70 28 29 26 26 28 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 69 73 28 22 3a 76 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s={type:"horizontal"},o=function(){e.extend(s,n),u(),a(),c(),s.type==="vertical"&&r.isDesktop()&&(i.container.is(":v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	50021	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	1348	OUT	GET /assets/script/components/learn-more.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:17 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 41777 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:17 GMT Etag: "388-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (chd/0784) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-04-29 20:14:17 UTC	904	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 3d 21 31 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 29 2c 75 28 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6f 6e 74 61 69 6e 65 72 3d 65 28 74 29 2c 72 2e 74 72 69 67 67 65 72 3d 65 28 22 5b 68 72 65 66 3d 23 22 2b 74 2e 69 64 2b 22 5d 22 29 2c 72 2e 6c 65 61 72 6e 4d 6f 72 65 53 65 63 74 69 6f 6e 3d 65 28 22 2e 6c 65 61 72 6e 2d 6d 6f 72 65 2d 2d 63 6f 6e 74 65 6e 74 22 2c 72 2e 63 6f 6e 74 61 69 6e 65 72 29 2c 72 2e 61 6c 6c 4c 65 61 72 6e 4d 6f 72 65 3d 65 28 22 2e 6c 65 61 72 6e 2d 6d 6f 72 65 2d 2d 63 6f 6e 74 65 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=!1,s=function(){o(),u()},o=function(){r.container=e(t),r.trigger=e("[href=#"+t.id+"]"),r.learnMoreSection=e(".learn-more--content",r.container),r.allLearnMore=e(".learn-more--conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50024	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	1352	OUT	GET /assets/script/components/scalable-table.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_3NXP3C8S9V=GS1.1.1714421632.1.0.1714421633.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-29 20:14:17 UTC	1156	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 41841 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:17 GMT Etag: "838-50483707cb080" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (chd/0771) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2104 Connection: close
2024-04-29 20:14:17 UTC	2104	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 7b 7d 2c 73 2c 6f 2c 75 2c 61 2c 66 2c 6c 2c 63 3d 7b 6f 66 66 73 65 74 3a 31 35 2c 63 6f 6c 75 6d 6e 4d 69 6e 57 69 64 74 68 3a 37 35 2c 63 6f 6c 75 6d 6e 4d 61 78 57 69 64 74 68 3a 31 35 30 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 78 74 65 6e 64 28 63 2c 6e 29 2c 70 28 29 2c 76 28 29 2c 62 28 29 2c 64 28 29 7d 2c 70 3d 66 75 6e 63 74 69 6f Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s,o,u,a,f,l,c={offset:15,columnMinWidth:75,columnMaxWidth:150},h=function(){e.extend(c,n),p(),v(),b(),d()},p=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50027	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	1350	OUT	GET /assets/script/components/video-player.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0
2024-04-29 20:14:17 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 42168 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:17 GMT Etag: "196-50483708bf2c0+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:39 GMT Server: ECAcc (chd/075A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 406 Connection: close
2024-04-29 20:14:17 UTC	406	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 6f 28 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 76 69 64 65 6f 50 6f 73 74 65 72 3d 65 28 22 2e 76 69 64 65 6f 2d 2d 70 6f 73 74 65 72 22 2c 69 29 2c 72 2e 70 6c 61 79 42 75 74 74 6f 6e 3d 65 28 22 2e 76 69 64 65 6f 2d 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 22 2c 69 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 69 64 65 6f 50 6f 73 74 65 72 2e 6f 6e 65 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=function(){s(),o()},s=function(){var i=e(t);r.component=i,r.videoPoster=e(".video--poster",i),r.playButton=e(".video--play-button",i)},o=function(){r.videoPoster.one("click",functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50028	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	1352	OUT	GET /assets/script/lib/jquery.magnific-popup.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.2047863913.1714421633; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.0.1714421633.0.0.0; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0
2024-04-29 20:14:17 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 41557 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Mon, 29 Apr 2024 20:14:17 GMT Etag: "5235-50483781dd080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:59:46 GMT Server: ECAcc (chd/074B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 21045 Connection: close
2024-04-29 20:14:17 UTC	16383	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 39 20 2d 20 32 30 31 33 2d 31 32 2d 32 37 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 0a 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 22 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 22 2c 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 43 6c 6f 73 65 22 2c 6e 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 72 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 69 3d 22 42 65 66 6f Data Ascii: /! Magnific Popup - v0.9.9 - 2013-12-27 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */USPSRequireNS.define("magnific-popup",["jquery"],function(e){(function(){var t="Close",n="BeforeClose",r="AfterClose",i="Befo
2024-04-29 20:14:17 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-04-29 20:14:17 UTC	4661	IN	Data Raw: 6d 66 70 2d 63 6c 6f 73 65 22 3e 3c 2f 64 69 76 3e 3c 69 66 72 61 6d 65 20 63 6c 61 73 73 3d 22 6d 66 70 2d 69 66 72 61 6d 65 22 20 73 72 63 3d 22 2f 2f 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 27 2c 73 72 63 41 63 74 69 6f 6e 3a 22 69 66 72 61 6d 65 5f 73 72 63 22 2c 70 61 74 74 65 72 6e 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 69 6e 64 65 78 3a 22 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 69 64 3a 22 76 3d 22 2c 73 72 63 3a 22 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 25 69 64 25 3f 61 75 74 6f 70 6c 61 79 3d 31 22 7d 2c 76 69 6d 65 6f 3a 7b 69 6e 64 65 78 3a 22 76 69 6d 65 6f 2e 63 6f 6d 2f 22 Data Ascii: mfp-close"></div><iframe class="mfp-iframe" src="//about:blank" frameborder="0" allowfullscreen></iframe></div>',srcAction:"iframe_src",patterns:{youtube:{index:"youtube.com",id:"v=",src:"//www.youtube.com/embed/%id%?autoplay=1"},vimeo:{index:"vimeo.com/"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50029	146.75.80.157	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-29 20:14:17 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Mon, 29 Apr 2024 20:14:17 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-chi-klot8100114-CHI X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50030	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:17 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421656765 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:17 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50031	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	885	OUT	GET /rp.gif?ts=1714421657310&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:18 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50035	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=4a57a8db-a16e-41d9-8f28-ee0f2edb47aa&u_sclid=fb8dd112-c192-4ccc-bb60-2cd0a4a651fa HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	385	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:18 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50036	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	492	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:18 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 175 x-envoy-upstream-service-time: 42 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:18 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	50042	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&cb=1714421657519&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:18 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1843310404873360 Date: Mon, 29 Apr 2024 20:14:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:18 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50041	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1480	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421657522 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:18 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:14:18 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5181854145321979 Date: Mon, 29 Apr 2024 20:14:18 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	50038	142.250.190.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1353	OUT	GET /td/rul/978081151?random=1714421657406&cv=11&fst=1714421657406&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:18 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:18 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUr
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b Data Ascii: u0026rp_id=1j806463764","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 37 33 22 2c 22 36 36 33 39 35 35 37 38 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c Data Ascii: 73","663955780970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 Data Ascii: "owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doub
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 Data Ascii: 28228","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026r
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a Data Ascii: 0970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 35 32 39 37 35 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: ttps://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 Data Ascii: ta":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 Data Ascii: 42544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481529751","metada

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	50037	172.217.4.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1229	OUT	GET /pagead/viewthroughconversion/978081151/?random=1714421657406&cv=11&fst=1714421657406&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:18 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:18 UTC	552	IN	Data Raw: 61 31 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a18(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-29 20:14:18 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-29 20:14:18 UTC	784	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 34 32 30 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 67 6c 6f 62 61 6c 73 25 32 46 73 69 74 65 2d 69 6e 64 65 78 2e 68 74 6d 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d Data Ascii: st\x3d1714420800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm\x26hn\x3dwww.googleadservices.com\x26frm
2024-04-29 20:14:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	50053	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421656765 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:18 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	50047	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1171	OUT	GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1118	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42065 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "af-49c550cd0b400" Last-Modified: Tue, 15 Feb 2011 16:56:48 GMT Server: ECAcc (chd/0716) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 175 Connection: close
2024-04-29 20:14:18 UTC	175	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 66 08 02 00 00 00 85 86 6c 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 51 49 44 41 54 78 da 62 7a fb f6 3d d3 ff ff ff 80 f8 3f 13 03 03 03 0a 0d 61 83 68 04 1f 97 18 3a c6 ae 8f 01 83 0d a2 19 18 18 19 be 7e fd 0a 65 0f 2c 06 b9 19 e6 76 54 37 fe 87 cb c1 d4 c1 fc 89 ae 0f d9 ff f8 68 54 73 10 62 c0 f0 00 08 30 00 69 29 7a ff ea 60 e1 07 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRfl<tEXtSoftwareAdobe ImageReadyqe<QIDATxbz=?ah:~e,vT7hTsb0i)z`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	50046	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1178	OUT	GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42684 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "295-49c806d93eac0" Last-Modified: Thu, 17 Feb 2011 20:41:55 GMT Server: ECAcc (chd/0785) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 661 Connection: close
2024-04-29 20:14:18 UTC	661	IN	Data Raw: 47 49 46 38 39 61 08 00 2c 01 e6 4d 00 7a c2 ea ff ff ff eb eb ec de de df d4 d4 d7 b8 de f4 42 40 41 35 89 cd ca e7 f7 4d 96 d1 83 c6 eb 9d d2 f0 cd cd d0 f5 f5 f5 57 55 56 df df e0 82 82 82 a1 a1 a1 95 ce ee e1 e1 e2 c7 c7 c9 b6 b6 b6 ec ec ec d6 d6 d7 8b 8a 8b e1 e6 ec a5 a5 a7 8a b7 db ed ed ee 97 be de d5 d5 d5 8b b8 dc bb d2 e4 a6 d6 f1 d5 d4 d5 6c 6b 6c 97 be df d4 d3 d4 c0 c0 c2 ac ab ac 84 84 85 dc ef f9 97 97 97 cb cb cb 8b 8b 8b ac ac ae f4 f4 f4 66 a4 d6 72 aa d8 77 77 77 af da f2 cb cb cc b0 cc e3 e4 f3 fb 8c 8b 8c d2 d2 d2 e0 e5 ea 8c ca ed a3 c4 e0 df e4 ea a1 a0 a1 bb bb bb 77 75 76 b9 b9 bc d3 eb f8 b5 b5 b6 78 78 78 b0 b0 b0 ed f7 fc 8d 8d 8d 97 96 97 91 91 92 b4 b4 b5 c1 c1 c1 ba d1 e4 96 95 96 d4 df e9 ff ff ff 00 00 00 00 00 00 00 00 Data Ascii: GIF89a,MzB@A5MWUVlklfrwwwwuvxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	50048	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1189	OUT	GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42754 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "644-49c550ca2ed40" Last-Modified: Tue, 15 Feb 2011 16:56:45 GMT Server: ECAcc (chd/0786) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1604 Connection: close
2024-04-29 20:14:18 UTC	1604	IN	Data Raw: 47 49 46 38 39 61 30 00 0d 02 c4 12 00 ff ff ff e1 e1 e1 fe fe fe fd fd fd fa fa fa fb fb fb f8 f8 f8 f6 f6 f6 fc fc fc f9 f9 f9 f7 f7 f7 e2 e2 e2 e8 e8 e8 f5 f5 f5 ed ed ed e5 e5 e5 e3 e3 e3 f4 f4 f4 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 12 00 2c 00 00 00 00 30 00 0d 02 00 05 ff a0 20 8e 64 69 9e 68 3a 0e 6c eb be 70 2c cf 6d 61 df 78 ae ef 7c 7f 13 c0 a0 70 48 2c 1a 8f 41 83 72 c9 6c 3a 9f d0 e8 f2 40 ad 5a af d8 ac 76 5b 0d 78 bf e0 b0 78 4c 2e 7f 01 e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 75 66 87 88 89 5e 12 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 96 6a 2a 26 6a 90 01 70 01 90 69 24 Data Ascii: GIF89a0!,0 dih:lp,max\|pH,Arl:@Zv[xxL.zn\|N~uf^j*&jpi$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	50050	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1178	OUT	GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42755 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "2117-4a6caeb2c5b80" Last-Modified: Tue, 28 Jun 2011 19:46:06 GMT Server: ECAcc (chd/0710) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8471 Connection: close
2024-04-29 20:14:18 UTC	8471	IN	Data Raw: 47 49 46 38 39 61 20 03 10 01 f7 ff 00 a7 c4 da 70 70 70 4b 4a 4b d2 d2 d2 5a aa ea 8c c4 f4 c0 ce da 81 b0 d5 c5 dd f1 a5 a5 a5 b2 b2 b3 3e 8b c8 78 78 78 f6 f6 f7 c5 c5 c6 20 81 ce 75 b2 e2 e7 ed f3 85 c1 f1 6a 98 ba f0 f6 fb 3b 3b 3b c9 c9 cb 9b ca f2 6e ab db ba ba bb 91 91 91 1a 7b ca cc cc cd 5d 5d 5d d5 d5 d5 aa d2 f3 b6 b6 b6 59 59 59 3f 3f 3f be be be d4 e5 f3 ad ad ae 95 95 95 a9 a9 a9 53 53 53 9e 9e 9e a6 cb e9 7c 7c 7c 8d 8d 8d 31 31 31 8c c2 ee 73 73 73 77 77 77 eb f0 f5 53 a8 ee 44 91 d3 7b b6 e5 79 b9 eb 23 22 23 91 c3 ea 57 56 57 50 4f 50 39 84 bf a1 c7 e4 bd da f2 29 29 29 e8 ed f0 9d c1 dd 7d b8 e7 e6 e6 e7 e8 e8 e8 f2 f2 f3 f3 f3 f4 f1 f1 f1 ef ef ef e7 e7 e8 e5 e5 e6 f2 f2 f2 e6 e6 e6 e9 e9 e9 e5 e5 e5 e8 e8 e9 f1 f1 f2 f4 f4 f4 f4 f4 Data Ascii: GIF89a pppKJKZ>xxx uj;;;n{]]]YYY???SSS\|\|\|111ssswwwSD{y#"#WVWPOP9)))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	50051	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1182	OUT	GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42618 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "87d-4a6caeb0dd700" Last-Modified: Tue, 28 Jun 2011 19:46:04 GMT nnCoection: close Server: ECAcc (chd/0731) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-29 20:14:18 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	50049	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1175	OUT	GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:18 UTC	1117	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42065 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:18 GMT Etag: "39-49c550d87cf00" Last-Modified: Tue, 15 Feb 2011 16:57:00 GMT Server: ECAcc (chd/077C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 57 Connection: close
2024-04-29 20:14:18 UTC	57	IN	Data Raw: 47 49 46 38 39 61 01 00 22 00 91 00 00 eb eb ec d8 d8 d9 d5 d5 d6 cb cb cd 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 22 00 00 02 0a 84 8f 30 cb cd 01 a1 98 b3 00 00 3b Data Ascii: GIF89a"!,"0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	50060	104.244.42.5	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	984	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b176e0d-6c26-40a4-a8c6-2567e44b57a6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=182d92b9-1dc2-43be-ad26-39910f60fc47&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91
2024-04-29 20:14:19 UTC	392	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:18 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 276662c5e07325e1 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 9f40da252b73d79a062fd9c2dba9dfc765c3b976dcb872fa7fba3e03a4260a5c connection: close
2024-04-29 20:14:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	50062	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1182 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	1182	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 30 61 39 31 61 65 39 33 2d 32 36 33 37 2d 34 34 36 39 2d 62 61 38 32 2d 30 38 33 62 33 66 34 38 38 65 33 33 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 33 63 61 35 38 30 34 38 2d 66 38 36 63 2d 34 65 65 33 2d 38 36 30 66 2d 36 39 39 38 30 36 30 33 66 66 36 30 22 2c 22 73 73 22 3a 22 34 61 35 37 61 38 64 62 2d 61 31 36 65 2d 34 31 64 39 2d 38 66 32 38 2d 65 65 30 66 32 65 64 62 34 37 61 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"0a91ae93-2637-4469-ba82-083b3f488e33","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"3ca58048-f86c-4ee3-860f-69980603ff60","ss":"4a57a8db-a16e-41d9-8f28-ee0f2edb47aa","df":true,"s
2024-04-29 20:14:19 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:19 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	50057	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	863	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1714421657506&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421657279&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=115, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:14:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	50055	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	978	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1714421657506&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421657279&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:14:19 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:14:19 UTC	1579	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-29 20:14:19 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	50064	142.250.190.4	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1284	OUT	GET /pagead/1p-user-list/978081151/?random=1714421657406&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZhjeo9P96pwvyTTkEXURw3BrxCq7bRP--YAvTGMqjcedJ-WX&random=445740669&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	50056	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	653	OUT	GET /rp.gif?ts=1714421657310&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:18 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	50061	104.244.42.67	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	1005	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b176e0d-6c26-40a4-a8c6-2567e44b57a6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=182d92b9-1dc2-43be-ad26-39910f60fc47&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="
2024-04-29 20:14:19 UTC	400	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:18 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 787e5c550c646235 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: d74dec7a9474f24e853548e78a7ff97af732198262b49c3a3d3d9a1ea0dee24b connection: close
2024-04-29 20:14:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	50063	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:18 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:18 UTC	898	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 30 61 39 31 61 65 39 33 2d 32 36 33 37 2d 34 34 36 39 2d 62 61 38 32 2d 30 38 33 62 33 66 34 38 38 65 33 33 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 32 32 33 35 34 38 63 65 2d 30 39 36 39 2d 34 32 64 38 2d 38 38 65 62 2d 38 65 64 37 33 61 37 34 61 30 64 37 22 2c 22 73 73 22 3a 22 34 61 35 37 61 38 64 62 2d 61 31 36 65 2d 34 31 64 39 2d 38 66 32 38 2d 65 65 30 66 32 65 64 62 34 37 61 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"0a91ae93-2637-4469-ba82-083b3f488e33","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"223548ce-0969-42d8-88eb-8ed73a74a0d7","ss":"4a57a8db-a16e-41d9-8f28-ee0f2edb47aa","df":true,"s
2024-04-29 20:14:19 UTC	360	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:19 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	50070	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1384 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	1384	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 30 61 39 31 61 65 39 33 2d 32 36 33 37 2d 34 34 36 39 2d 62 61 38 32 2d 30 38 33 62 33 66 34 38 38 65 33 33 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 61 37 61 34 62 33 63 32 2d 38 32 36 65 2d 34 33 65 38 2d 62 30 32 64 2d 34 30 39 31 66 33 30 35 61 36 37 65 22 2c 22 73 73 22 3a 22 34 61 35 37 61 38 64 62 2d 61 31 36 65 2d 34 31 64 39 2d 38 66 32 38 2d 65 65 30 66 32 65 64 62 34 37 61 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"0a91ae93-2637-4469-ba82-083b3f488e33","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"a7a4b3c2-826e-43e8-b02d-4091f305a67e","ss":"4a57a8db-a16e-41d9-8f28-ee0f2edb47aa","df":true,"s
2024-04-29 20:14:19 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:19 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	50071	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&cb=1714421657519&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:19 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 8614281025385474 Date: Mon, 29 Apr 2024 20:14:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:19 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	50073	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	1282	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421657522 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:19 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:14:19 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 8381581168957293 Date: Mon, 29 Apr 2024 20:14:19 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	50072	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	1172	OUT	GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; kampyleUserSession=1714421641022; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d
2024-04-29 20:14:19 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42179 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Mon, 29 Apr 2024 20:14:19 GMT Etag: "11c-49c550d788cc0" Last-Modified: Tue, 15 Feb 2011 16:56:59 GMT Server: ECAcc (chd/077B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 284 Connection: close
2024-04-29 20:14:19 UTC	284	IN	Data Raw: 47 49 46 38 39 61 02 00 22 00 d5 00 00 d0 d0 d1 ce ce cf c3 c3 c4 ee ee ee cf cf cf cc cc cd c7 c7 c8 f4 f4 f5 d4 d4 d5 eb eb eb e7 e7 e8 f4 f4 f4 c5 c5 c6 c4 c4 c5 ea ea ea c8 c8 c9 c9 c9 ca ef ef f0 f0 f0 f1 c1 c1 c2 ea ea eb ed ed ee ec ec ed ee ee ef cd cd cd e9 e9 ea e9 e9 e9 d1 d1 d2 ca ca cb f2 f2 f2 bf bf c1 cd cd ce cf cf d0 ec ec ec d5 d5 d7 eb eb ec c6 c6 c7 d0 d0 d0 cb cb cc f1 f1 f2 e8 e8 e9 f1 f1 f1 d2 d2 d3 c2 c2 c3 bf bf c0 e8 e8 e8 f3 f3 f4 d3 d3 d4 ef ef ef c0 c0 c1 e6 e6 e6 c6 c6 c6 f2 f2 f3 e6 e6 e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 22 00 00 06 39 40 d1 01 b1 78 b9 8c 2a 5a 72 d3 01 9c 4a 29 50 8a 20 09 44 3e 30 0c ac 70 31 0d 38 15 88 Data Ascii: GIF89a"!,"9@x*ZrJ)P D>0p18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	50074	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	631	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1714421657506&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421657279&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:14:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	50076	142.250.190.36	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	1052	OUT	GET /pagead/1p-user-list/978081151/?random=1714421657406&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZhjeo9P96pwvyTTkEXURw3BrxCq7bRP--YAvTGMqjcedJ-WX&random=445740669&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	50077	104.244.42.133	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	752	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b176e0d-6c26-40a4-a8c6-2567e44b57a6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=182d92b9-1dc2-43be-ad26-39910f60fc47&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91
2024-04-29 20:14:19 UTC	393	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:19 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: b817e3447cf094c8 strict-transport-security: max-age=0 x-response-time: 72 x-connection-hash: cde41f484e39311eda0ea6a920594092ffea0979ba112ba054c03c5af3800d0e connection: close
2024-04-29 20:14:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	50078	104.244.42.131	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	773	OUT	GET /i/adsct?bci=3&eci=2&event_id=3b176e0d-6c26-40a4-a8c6-2567e44b57a6&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=182d92b9-1dc2-43be-ad26-39910f60fc47&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="
2024-04-29 20:14:19 UTC	401	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:19 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e9b9243b25893f81 strict-transport-security: max-age=631138519 x-response-time: 82 x-connection-hash: bf532a3dbf2d87d42a4a194a8ff5f11f48f993b30ea382d484eeb0a834dcc0d0 connection: close
2024-04-29 20:14:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.6	50079	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	668	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1714421657506&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421657279&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:19 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:14:19 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:14:19 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	50080	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:19 UTC	1381	OUT	GET /favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; kampyleUserSession=1714421658752; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
2024-04-29 20:14:19 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42699 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Mon, 29 Apr 2024 20:14:19 GMT Etag: "47e-54f3e483bd280" Last-Modified: Thu, 11 May 2017 11:56:42 GMT Server: ECAcc (chd/0709) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1150 Connection: close
2024-04-29 20:14:19 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	50083	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:20 UTC	1126	OUT	GET /favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; kampyleUserSession=1714421658752; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
2024-04-29 20:14:20 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 42700 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Mon, 29 Apr 2024 20:14:20 GMT Etag: "47e-54f3e483bd280" Last-Modified: Thu, 11 May 2017 11:56:42 GMT Server: ECAcc (chd/0709) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1150 Connection: close
2024-04-29 20:14:20 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	50090	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:21 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 971 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:21 UTC	971	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 30 61 39 31 61 65 39 33 2d 32 36 33 37 2d 34 34 36 39 2d 62 61 38 32 2d 30 38 33 62 33 66 34 38 38 65 33 33 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 61 34 30 37 37 34 62 61 2d 34 34 36 39 2d 34 38 35 39 2d 62 39 37 31 2d 34 61 30 36 31 64 34 32 62 39 64 65 22 2c 22 73 73 22 3a 22 34 61 35 37 61 38 64 62 2d 61 31 36 65 2d 34 31 64 39 2d 38 66 32 38 2d 65 65 30 66 32 65 64 62 34 37 61 61 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"0a91ae93-2637-4469-ba82-083b3f488e33","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"a40774ba-4469-4859-b971-4a061d42b9de","ss":"4a57a8db-a16e-41d9-8f28-ee0f2edb47aa","bg":true,"s
2024-04-29 20:14:21 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:21 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	50085	152.195.33.23	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:22 UTC	1464	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.832995956.1714421630; mab_usps=67; tmab_usps=26; _gid=GA1.2.1339673146.1714421633; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=4892831e-07b6-481f-8e43-56e5cbaffc9e; _fbp=fb.1.1714421635178.1536025524; _pin_unauth=dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1714421632.1.1.1714421654.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1714421633.1.1.1714421657.0.0.0; _ga=GA1.1.2047863913.1714421633; _rdt_uuid=1714421634122.e10700e5-4bd4-4251-8484-21dafb70a244; _scid_r=4892831e-07b6-481f-8e43-56e5cbaffc9e; _uetsid=00a17d80066511efa0a371d71c87cd78; _uetvid=00a1bd40066511ef84bed9b2b928448d; kampyleUserSession=1714421658752; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1 If-Modified-Since: Mon, 29 Apr 2024 19:56:15 GMT
2024-04-29 20:14:22 UTC	1056	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://www.usps.com Age: 1087 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Date: Mon, 29 Apr 2024 20:14:22 GMT Last-Modified: Mon, 29 Apr 2024 19:56:15 GMT Server: ECAcc (chd/0796) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	50088	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:25 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-29 20:14:25 UTC	511	IN	HTTP/1.1 304 Not Modified Date: Mon, 29 Apr 2024 20:14:25 GMT Connection: close x-amz-id-2: CVIWUzhXbL8kEPsw9eqLi+vo2RVFsLwccZkbXFgU2I6jYf49hb0B/QkA3Oyo8mledU+V1Uj27s8= x-amz-request-id: 2D295QHHB4YS63NJ Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 958 Expires: Mon, 29 Apr 2024 20:19:25 GMT Server: cloudflare CF-RAY: 87c1f54f2b6961a2-ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	50094	104.16.40.28	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:27 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Np.p5N3X2zPuIJNo4oLO8.AecJYqTqHSyy3i8329I9I-1714421628-1.0.1.1-V9HofFLIspYBSWtYN4m4rzgQBxNEENUkmacIk5PhHCfzVvBZgGlpSpS2kYjJqJCff.Zm7Yp6CLhtFUamPHHCaw If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-29 20:14:28 UTC	487	IN	HTTP/1.1 304 Not Modified Date: Mon, 29 Apr 2024 20:14:27 GMT Connection: close x-amz-id-2: b20cEZl8BZBZCcu3jpxwMvR7o9Oa4SyfHTAy2SNhjvKDg2oL2lmiqyUxcUIuZFYoQU3seIhAHEw= x-amz-request-id: NBW2CKFJND9K6HR6 Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 5965 Server: cloudflare CF-RAY: 87c1f560aa4086e7-ORD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.6	50096	23.205.89.137	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:28 UTC	687	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421667821 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5
2024-04-29 20:14:29 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Mon, 29 Apr 2024 20:14:28 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5; expires=Tue, 29-Apr-2025 20:14:28 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-29 20:14:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	50102	146.75.80.157	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:29 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-29 20:14:29 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Mon, 29 Apr 2024 20:14:29 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-chi-klot8100167-CHI X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	50106	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:29 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421668308 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:29 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:29 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:29 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	50105	142.250.190.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:29 UTC	1245	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:29 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:29 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-29 20:14:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	50104	142.250.191.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:29 UTC	1234	OUT	GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:29 UTC	1138	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.6	50108	142.250.190.38	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:29 UTC	1216	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:29 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2921406631134629860"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x6ae1ee7dd828cd9d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x8aecf35b1750b6cd","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0x97c508194177655b","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb54dbc62b892537c","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12371830535867120039","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2921406631134629860","filters":[{"14":["8937389"],"source_ty [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 29-May-2024 20:14:29 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	50087	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&cb=1714421671037&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:33 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 9122744046571706 Date: Mon, 29 Apr 2024 20:14:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:33 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	50111	151.101.193.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	885	OUT	GET /rp.gif?ts=1714421670935&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:33 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	50110	142.250.190.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	1324	OUT	GET /td/rul/978081151?random=1714421670851&cv=11&fst=1714421670851&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:33 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:33 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 35 32 39 37 35 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUr
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b Data Ascii: u0026rp_id=1j481529751","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 37 33 22 2c 22 36 36 33 39 35 35 37 38 30 39 37 30 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c Data Ascii: 73","663955780970",null,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 Data Ascii: "owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.double
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 Data Ascii: 4","metadata":["146009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=$
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 6c 6c 2c 22 31 39 36 37 32 30 34 32 35 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 Data Ascii: ll,"19672042544"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j80646376
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 Data Ascii: oubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 34 36 30 30 39 30 39 30 31 35 36 22 2c 22 36 36 33 38 35 38 34 34 37 37 36 32 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 36 34 35 33 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 65 6e 44 6c 66 50 78 74 6c 58 41 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 30 30 39 30 39 30 31 35 36 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 32 36 38 31 36 38 31 36 39 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 Data Ascii: 46009090156","663858447762",null,"19663896453"],"adRenderId":"enDlfPxtlXA"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146009090156\u0026cr_id=689268168169\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u00
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 34 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5f 42 61 71 6a 68 6d 68 2d 75 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 37 34 31 30 38 32 30 38 37 33 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 39 31 31 33 30 39 37 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 Data Ascii: 44"],"adRenderId":"_Baqjhmh-uk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=147410820873\u0026cr_id=689391130976\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j7639828228","metadata

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	50116	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	848	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1714421672032&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421668687&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:14:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	50115	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1714421672032&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421668687&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:14:33 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:14:33 UTC	1576	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-29 20:14:33 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-04-29 20:14:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	50109	172.217.4.34	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	1200	OUT	GET /pagead/viewthroughconversion/978081151/?random=1714421670851&cv=11&fst=1714421670851&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:33 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:33 UTC	552	IN	Data Raw: 39 66 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9fc(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-29 20:14:33 UTC	756	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 34 34 32 30 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 6f 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 57 65 6c 63 6f 6d 65 Data Ascii: st\x3d1714420800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44o0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2F\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dWelcome
2024-04-29 20:14:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	50118	151.101.128.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	1465	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421672137 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:33 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:14:33 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 7962136539562664 Date: Mon, 29 Apr 2024 20:14:33 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:33 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	50114	52.46.155.104	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	645	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; ad-privacy=0
2024-04-29 20:14:33 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 29 Apr 2024 20:14:33 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: PS6382GKMH91GGAJZT49 Set-Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 20:14:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 20:14:33 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-29 20:14:33 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	50119	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=251939a8-ae54-42c6-b40b-2e8075d7303a&u_sclid=fb8dd112-c192-4ccc-bb60-2cd0a4a651fa HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	385	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:33 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	50121	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1168 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	1168	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 61 38 31 39 37 66 34 39 2d 37 31 31 39 2d 34 36 36 38 2d 61 64 39 35 2d 31 61 66 63 30 30 30 62 62 65 39 64 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 33 64 34 33 63 35 65 34 2d 66 30 34 65 2d 34 32 31 30 2d 38 30 34 65 2d 64 37 65 35 65 66 62 37 31 32 36 34 22 2c 22 73 73 22 3a 22 32 35 31 39 33 39 61 38 2d 61 65 35 34 2d 34 32 63 36 2d 62 34 30 62 2d 32 65 38 30 37 35 64 37 33 30 33 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"a8197f49-7119-4668-ad95-1afc000bbe9d","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"3d43c5e4-f04e-4210-804e-d7e5efb71264","ss":"251939a8-ae54-42c6-b40b-2e8075d7303a","df":true,"s
2024-04-29 20:14:33 UTC	451	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:33 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	50120	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.16.0-2404242003 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	492	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:33 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 175 x-envoy-upstream-service-time: 43 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:33 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	50123	142.250.191.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	1268	OUT	GET /activityi;dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:33 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:33 GMT Expires: Mon, 29 Apr 2024 20:14:33 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-29 20:14:33 UTC	592	IN	Data Raw: 63 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 70 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 70 2e 70 6c 3f 61 3d 31 30 30 30 30 26 2e 79 70 3d 31 30 30 34 39 30 38 37 26 65 Data Ascii: c08<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&e
2024-04-29 20:14:33 UTC	1255	IN	Data Raw: 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 74 64 5f 64 6f 6d 5f 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 20 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 28 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: "text/javascript"></script> <script type="text/javascript"> ttd_dom_ready( function() { if (typeof TTDUniversalPixelApi === 'function') { var universalPixelApi = new TTDUniversalPixelApi();
2024-04-29 20:14:33 UTC	1240	IN	Data Raw: 72 67 6f 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 2c 6e 2c 6f 2c 63 2c 64 29 7b 65 2e 6b 64 73 7c 7c 28 28 6f 3d 65 2e 6b 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6f 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 75 73 68 3d 6f 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 2c 6f 2e 71 75 65 75 65 3d 5b 5d 2c 28 63 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 61 73 79 6e 63 3d 21 30 2c 63 2e 73 72 63 3d 22 2f 2f 73 74 6f 72 61 67 65 2e 63 6c 6f Data Ascii: rgo Pixel Code --><script>!function(e,s,t,n,o,c,d){e.kds\|\|((o=e.kds=function(){o.callMethod?o.callMethod.apply(o,arguments):o.queue.push(arguments)}).push=o,o.loaded=!0,o.version="1.0",o.queue=[],(c=s.createElement("script")).async=!0,c.src="//storage.clo
2024-04-29 20:14:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	50125	172.217.0.166	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:33 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 32 33 37 31 38 33 30 35 33 35 38 36 37 31 32 30 30 33 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"12371830535867120039"},"type":"trigger-no-matching-source"}]
2024-04-29 20:14:33 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 29 Apr 2024 20:14:33 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	50124	104.244.42.67	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	990	OUT	GET /i/adsct?bci=3&eci=2&event_id=d15e05a2-8617-4813-b2ce-8375e71f8b33&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b1121a1c-d1fa-4240-afc9-bcbac49185ed&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="
2024-04-29 20:14:33 UTC	401	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:33 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f6169cabd146a93e strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: ae39ec3c1f4419c16acf22b95d0640462c1729f29bb344cdcb2a6a7070cc30c9 connection: close
2024-04-29 20:14:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.6	50122	104.244.42.5	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	969	OUT	GET /i/adsct?bci=3&eci=2&event_id=d15e05a2-8617-4813-b2ce-8375e71f8b33&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b1121a1c-d1fa-4240-afc9-bcbac49185ed&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91
2024-04-29 20:14:33 UTC	392	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:33 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 231a1bd0b53e325e strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 1ed1152749cca274804c81edd780d5dcb6987285cfd8fea80513085648f14a4d connection: close
2024-04-29 20:14:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	50126	142.250.190.4	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	1256	OUT	GET /pagead/1p-user-list/978081151/?random=1714421670851&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqFpkw6SuJ-M5cDYTKBrZxIOCl9AbqsKnuPxDsZ_eVNs99dkry&random=3792461231&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	50127	52.84.18.31	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:33 UTC	711	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: not-event-source=navigation-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Mon, 29 Apr 2024 20:14:34 GMT x-amzn-RequestId: be7ccaab-4f0e-4fa1-9d42-bda04e9ad62d Access-Control-Allow-Origin: https://www.usps.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 7fca1c00381ef50504deb286fd5fc26c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C2 X-Amz-Cf-Id: 2MeJsqr-iFM_7B9JSG3bUfEZ6OA00Put7ipMmLHTFIWI62lQckVhAQ==
2024-04-29 20:14:34 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	50131	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	885	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 61 38 31 39 37 66 34 39 2d 37 31 31 39 2d 34 36 36 38 2d 61 64 39 35 2d 31 61 66 63 30 30 30 62 62 65 39 64 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 61 34 36 35 35 38 61 65 2d 63 33 62 65 2d 34 63 30 36 2d 62 39 34 61 2d 62 66 34 39 31 62 61 35 33 37 38 36 22 2c 22 73 73 22 3a 22 32 35 31 39 33 39 61 38 2d 61 65 35 34 2d 34 32 63 36 2d 62 34 30 62 2d 32 65 38 30 37 35 64 37 33 30 33 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"a8197f49-7119-4668-ad95-1afc000bbe9d","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"a46558ae-c3be-4c06-b94a-bf491ba53786","ss":"251939a8-ae54-42c6-b40b-2e8075d7303a","df":true,"s
2024-04-29 20:14:34 UTC	360	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:34 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.6	50133	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	805	OUT	GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNRfZt!DDrh.wL4W1Qw3Co>-'1
2024-04-29 20:14:34 UTC	1485	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:34 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 0ed2df70-1ed3-4e2b-8b43-47b278c959c8 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:34 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNM-Kxn]4NQD$25ADb6_:!<o1UDkUO2; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:34 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:34 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:34 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	50135	142.250.191.162	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	1063	OUT	GET /ddm/fls/z/dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	50129	50.17.194.92	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	644	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	710	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:34 GMT Expires: Mon, 29 Apr 2024 20:14:34 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-29 20:14:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.6	50144	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1714421668308 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:34 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.6	50143	142.250.190.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	911	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUlVd6Hds8okwIXYfv_lu0FdWPknz9VYI1iG1_1ycZP5_qwWNcrWFktP7kQv
2024-04-29 20:14:34 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2921406631134629860"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x6ae1ee7dd828cd9d","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x8aecf35b1750b6cd","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0x97c508194177655b","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb54dbc62b892537c","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"12371830535867120039","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2921406631134629860","filters":[{"14":["8937389"],"source_ty [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 29-May-2024 20:14:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.6	50145	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&cb=1714421671037&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:34 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 9274532100431935 Date: Mon, 29 Apr 2024 20:14:34 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:34 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.6	50132	15.197.193.217	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	137	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:34 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-29 20:14:34 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.6	50130	52.204.90.22	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	657	OUT	GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	174	IN	HTTP/1.1 404 Not Found Date: Mon, 29 Apr 2024 20:14:34 GMT Content-Type: text/html Content-Length: 1971 Connection: close Vary: Accept-Encoding ETag: "631f1a4d-7b3"
2024-04-29 20:14:34 UTC	1971	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 36 39 34 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6f 66 70 6f 69 6e 74 20 54 61 72 67 65 74 65 64 20 41 74 74 61 63 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=694, user-scalable=no"> <title>Proofpoint Targeted Attack Protection</title> <link href="/error/common.css" media="all" rel="styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.6	50146	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	616	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1714421672032&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421668687&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=110, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Mon, 29 Apr 2024 20:14:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.6	50148	35.190.43.134	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 5236 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	5236	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 34 38 39 32 38 33 31 65 2d 30 37 62 36 2d 34 38 31 66 2d 38 65 34 33 2d 35 36 65 35 63 62 61 66 66 63 39 65 22 2c 22 6c 63 22 3a 22 61 38 31 39 37 66 34 39 2d 37 31 31 39 2d 34 36 36 38 2d 61 64 39 35 2d 31 61 66 63 30 30 30 62 62 65 39 64 22 2c 22 6c 73 22 3a 22 66 62 38 64 64 31 31 32 2d 63 31 39 32 2d 34 63 63 63 2d 62 62 36 30 2d 32 63 64 30 61 34 61 36 35 31 66 61 22 2c 22 72 22 3a 22 36 61 39 62 34 36 35 35 2d 39 33 34 33 2d 34 33 64 61 2d 38 61 61 39 2d 30 37 39 61 33 61 36 63 66 66 63 31 22 2c 22 73 73 22 3a 22 32 35 31 39 33 39 61 38 2d 61 65 35 34 2d 34 32 63 36 2d 62 34 30 62 2d 32 65 38 30 37 35 64 37 33 30 33 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"4892831e-07b6-481f-8e43-56e5cbaffc9e","lc":"a8197f49-7119-4668-ad95-1afc000bbe9d","ls":"fb8dd112-c192-4ccc-bb60-2cd0a4a651fa","r":"6a9b4655-9343-43da-8aa9-079a3a6cffc1","ss":"251939a8-ae54-42c6-b40b-2e8075d7303a","df":true,"s
2024-04-29 20:14:34 UTC	452	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:34 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload Content-Length: 0 x-envoy-upstream-service-time: 45 server: API Gateway strict-transport-security: max-age=31536000; includeSubDomains access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.6	50149	151.101.1.140	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	653	OUT	GET /rp.gif?ts=1714421670935&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=e10700e5-4bd4-4251-8484-21dafb70a244&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_3ba1cddf&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Mon, 29 Apr 2024 20:14:34 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.6	50150	157.240.254.35	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	653	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1714421672032&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1714421635178.1536025524&ler=empty&cdl=API_unavailable&it=1714421668687&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-29 20:14:34 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-29 20:14:34 UTC	1609	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.6	50152	151.101.0.84	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	1267	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU1qSTJZamxqWkRVdFl6WTJNeTAwTVdNeUxXSXhOamt0TVdWbFpqZGpaakEwWkRBeA%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%221b7f3d0e%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.134%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1714421672137 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-29 20:14:34 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Tue, 29 Apr 2025 20:14:34 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 4907640369737071 Date: Mon, 29 Apr 2024 20:14:34 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 219d758fc6c272afdb21541dfea642f69cb734f9
2024-04-29 20:14:34 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.6	50141	23.205.89.137	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	455	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1714421667821 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5
2024-04-29 20:14:34 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Mon, 29 Apr 2024 20:14:34 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_662fff81-89aa-4371-b733-2a8e6c4b39d5; expires=Tue, 29-Apr-2025 20:14:34 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.6	50151	52.46.151.131	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	474	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; ad-privacy=0
2024-04-29 20:14:34 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Mon, 29 Apr 2024 20:14:34 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: HP84PSJWJ7FFQ2HHBWDH Set-Cookie: ad-id=A_n33XVtKEySkCHN3U6L4_0; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 20:14:34 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 20:14:34 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-29 20:14:34 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.6	50155	104.244.42.133	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	737	OUT	GET /i/adsct?bci=3&eci=2&event_id=d15e05a2-8617-4813-b2ce-8375e71f8b33&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b1121a1c-d1fa-4240-afc9-bcbac49185ed&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=f608c323-4c1e-46a3-a1a9-2c56507bdf91
2024-04-29 20:14:34 UTC	393	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:34 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 8463d60499416f76 strict-transport-security: max-age=0 x-response-time: 86 x-connection-hash: 891995bc3fbab03930da46abb84b8527d85e6e76dadf27666ef5ec5a2f649bc0 connection: close
2024-04-29 20:14:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.6	50156	104.244.42.131	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	758	OUT	GET /i/adsct?bci=3&eci=2&event_id=d15e05a2-8617-4813-b2ce-8375e71f8b33&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=b1121a1c-d1fa-4240-afc9-bcbac49185ed&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_k0MzqvLOwHusOFN4itbvrQ=="
2024-04-29 20:14:34 UTC	401	IN	HTTP/1.1 200 OK date: Mon, 29 Apr 2024 20:14:34 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: a6051939d077b7f1 strict-transport-security: max-age=631138519 x-response-time: 70 x-connection-hash: 7e3a3294b6dec5dc9a96787f5b5c55be34c1e639bfbedc6fc091a467ae983921 connection: close
2024-04-29 20:14:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.6	50158	52.84.18.96	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	436	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1714421668325 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Mon, 29 Apr 2024 20:14:34 GMT x-amzn-RequestId: 91fdf11e-9afa-4a9e-ad44-120c399c091f X-Cache: Miss from cloudfront Via: 1.1 1fc014a0fca745817935078cd0086d42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ORD53-C2 X-Amz-Cf-Id: gFC6H8kIcp6r03rejHEV2Dl2UBJWRRNHceLH30jZ_yDwA_DAJQW7ag==
2024-04-29 20:14:34 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.6	50157	142.250.190.36	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	1024	OUT	GET /pagead/1p-user-list/978081151/?random=1714421670851&cv=11&fst=1714420800000&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqFpkw6SuJ-M5cDYTKBrZxIOCl9AbqsKnuPxDsZ_eVNs99dkry&random=3792461231&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.6	50159	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	596	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:14:34 UTC	546	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uPrkz9nN0NE2V%2F0NPGjRRDAQV6NZgzgYrjP3bwdUc8mVGDfA4V%2FRtJDxtCgCmnh%2BNsI5Nbd4CVOshIvNNNr8IzPjLsSzB2K7y%2FKlzdZC4EorfOj1vq8cJju%2F9MkBePisFcE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f58b9c78615c-ORD
2024-04-29 20:14:34 UTC	823	IN	Data Raw: 37 64 37 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d7d(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 70 45 72 72 6f 72 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b 5d 3b 20 76 61 72 Data Ascii: pErrorObj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = []; var
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 Data Ascii: , we want to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String.fromC
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 28 27 2e 27 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 Data Ascii: ('.')); } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domain;
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 20 20 20 20 7d 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 79 3a 20 66 75 6e Data Ascii: }) } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCopy: fun
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 76 69 65 77 7c 70 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 54 54 50 42 75 69 Data Ascii: view\|purchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , HTTPBui
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 Data Ascii: function(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {}; var s
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 20 20 20 20 20 20 Data Ascii: ; var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr;
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 3b 22 29 5b 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 Data Ascii: ;")[0] } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElementByI
2024-04-29 20:14:34 UTC	1369	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 64 29 20 7b 0a 20 Data Ascii: } , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(uid) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.6	50160	3.225.229.68	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 680 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538
2024-04-29 20:14:34 UTC	680	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 37 30 38 37 65 39 31 2d 36 64 39 62 2d 34 32 33 61 2d 39 36 36 37 2d 64 37 33 30 36 33 63 63 64 38 64 34 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 36 32 64 39 38 32 31 64 2d 65 30 39 37 2d 34 36 36 64 2d 39 34 63 38 2d 36 34 63 36 64 36 63 34 65 37 37 34 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"b7087e91-6d9b-423a-9667-d73063ccd8d4","kimp":null,"event":"init","params":{"view_id":"62d9821d-e097-466d-94c8-64c6d6c4e774"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-29 20:14:35 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:14:34 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-29 20:14:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.6	50161	3.225.229.68	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:34 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 684 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538
2024-04-29 20:14:34 UTC	684	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 62 37 30 38 37 65 39 31 2d 36 64 39 62 2d 34 32 33 61 2d 39 36 36 37 2d 64 37 33 30 36 33 63 63 64 38 64 34 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 48 6f 6d 65 50 61 67 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 36 32 64 39 38 32 31 64 2d 65 30 39 37 2d 34 36 36 64 2d 39 34 63 38 2d 36 34 63 36 64 36 63 34 65 37 37 34 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 Data Ascii: {"partner_id":"8005988f","client_id":"b7087e91-6d9b-423a-9667-d73063ccd8d4","kimp":null,"event":"HomePage","params":{"view_id":"62d9821d-e097-466d-94c8-64c6d6c4e774"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doub
2024-04-29 20:14:35 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=957fd6ca-9699-028a-3c0c-5da8a3b38538; Path=/; Domain=kargo.com; Expires=Tue, 29 Apr 2025 20:14:34 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-29 20:14:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.6	50163	172.217.4.194	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	816	OUT	GET /ddm/fls/z/dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:35 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 29 Apr 2024 20:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-29 20:14:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.6	50162	54.88.71.74	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	397	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:35 UTC	710	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:35 GMT Expires: Mon, 29 Apr 2024 20:14:35 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS/9.1.10.112 Age: 0 Connection: close Via: http/1.1 traffic_server (ApacheTrafficServer/9.1.10.112) Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-29 20:14:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.6	50166	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	607	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:14:35 UTC	535	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6BQalwXCKqgNB%2BZhq9w8T3tuMeQ03lqJqf69oCTy7blCAXWa7GmgE1dLdWWqKBYL87TUUIlIiYR4U3OHMsy46tBxKF%2F6YDUmnn3tLpzgAICHUAfYzZx%2FRLo0Ny4lR2engRs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f58f1b8922ee-ORD
2024-04-29 20:14:35 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-29 20:14:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.6	50167	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	1449	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCP78-rSe6IUDFZgX-QAdWLsL3A%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D3240872018289%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D1376471778%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=52cc9d85-71e9-4e99-ac91-36403952324b&an_seg=18564794&type=imp&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:14:35 UTC	587	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3eaRPOSlkQ8qBGFnu6jfnmnzwqzjPr%2FeY8vK1TQgjKpzXh6meScPywLu29EwwAh7lKpQsWyywRIPpdYBRRc4isxGGMVDUVHq168%2Fe%2FExIw%2FINT6DRp4GnSOUXeNtfbNkTik%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f58e3c4613e7-ORD
2024-04-29 20:14:35 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-29 20:14:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.6	50168	104.26.9.177	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	1476	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCP78-rSe6IUDFZgX-QAdWLsL3A%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D3240872018289%3Bnpa%3D0%3Bauiddc%3D832995956.1714421630%3Bps%3D1%3Bpcor%3D1376471778%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.134%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.134%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44o0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=52cc9d85-71e9-4e99-ac91-36403952324b&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-4abbc509-8ba9-4507-b4ca-b1f737cff49b
2024-04-29 20:14:35 UTC	583	IN	HTTP/1.1 302 Found Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564790 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vLMTNW3DGMrpMYdNnZMsGIdelbiWkGADwZEeIfyHx0e1ILswKVb%2FhThHkyLUVh5TFZpLGmIXeeVwUTTIrQRn6VfzfjZ4MiWpVJKJZb6OCuccMM3BLZcKPoV%2BDMfK85Nod3Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87c1f58e4cc81122-ORD
2024-04-29 20:14:35 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-29 20:14:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.6	50169	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	870	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNM-Kxn]4NQD$25ADb6_:!<o1UDkUO2
2024-04-29 20:14:35 UTC	1458	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 505937cd-9a3b-4e57-837f-4c7bf83864c1 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNPdoDn^rYbD$25ADb6_:!=Go)[?qsz; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.6	50164	52.223.40.198	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:35 UTC	137	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-29 20:14:35 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.6	50170	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	856	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNM-Kxn]4NQD$25ADb6_:!<o1UDkUO2
2024-04-29 20:14:35 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 4ede1ece-ffd0-4e6c-b895-a4dba321a0b5 Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNWUF.!dejT9sk@3@'s>ToU%hR; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.6	50171	68.67.160.75	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	856	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; receive-cookie-deprecation=1; uuid2=3573331821899056676; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNM-Kxn]4NQD$25ADb6_:!<o1UDkUO2
2024-04-29 20:14:36 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fa71eb6d-90ee-44c2-a216-dca73e2cfdfd Set-Cookie: XANDR_PANID=rl28dFzjuJtC-yp84igAxfBeo2ijsasXNRROk2f_Fdh8RCyTswrj7Z4hKMamWiKZMg3Qt_zjq7_jtFKsvQrAjNRfQRxAHfm5pVTGX2s8Yfw.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNWUF.!dejT9sk@3@'s>ToU%hR; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:35 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 673.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.6	50172	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:35 UTC	623	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; receive-cookie-deprecation=1; XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNPdoDn^rYbD$25ADb6_:!=Go)[?qsz
2024-04-29 20:14:36 UTC	1458	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 4bb10e61-25db-45a8-854e-94ea31a8460d Set-Cookie: XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNWUF.n[g5MD$25ADb6_:!=J.l]X2B%; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.6	50173	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:36 UTC	604	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; receive-cookie-deprecation=1; XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNWUF.!dejT9sk@3@'s>ToU%hR
2024-04-29 20:14:36 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: bee17d64-f518-435c-a4a9-f5993134c84e Set-Cookie: XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNO$d3!dejT9sk@3@'s>To[p?A; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.6	50174	68.67.160.26	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:36 UTC	604	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3573331821899056676; receive-cookie-deprecation=1; XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNWUF.!dejT9sk@3@'s>ToU%hR
2024-04-29 20:14:36 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 29 Apr 2024 20:14:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: b0a44087-82ea-422d-8ba4-550f55a5d33a Set-Cookie: XANDR_PANID=tHOoR3hnwx2bm7aX_sNqlFvREfj9HSHs7pduSVpvIWw9LMVrfHB-z5pMnBJCfBqm6QnH7Wf_LNIxhoaxUBTNOMw6hKlojV1DziazU-UXz54.; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2Hc$s/JYVNO$d3!dejT9sk@3@'s>To[p?A; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Mon, 17-Apr-2034 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3573331821899056676; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 28-Jul-2024 20:14:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.62.90; 81.181.62.90; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-29 20:14:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.6	50175	15.197.193.217	443	6292	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-29 20:14:36 UTC	763	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23endnav&upid=ftfeq77&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-29 20:14:36 UTC	136	IN	HTTP/1.1 200 OK Date: Mon, 29 Apr 2024 20:14:36 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Target ID:	0
Start time:	22:13:16
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	22:13:23
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=2004,i,14648356518188033823,13625772419691981786,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	22:13:26
Start date:	29/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uaqtu.com"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://td.doubleclick.net/td/rul/978081151?random=1714421634515&cv=11&fst=1714421634515&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CMG1u6Se6IUDFUsS-QAdY20IaQ;src=3976941;type=uspsc0;cat=gener0;ord=7964956718108;npa=0;auiddc=832995956.1714421630;ps=1;pcor=297351633;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	HTTP Parser: No favicon
Source: https://crb.kargo.com/api/v1/initsync/b7087e91-6d9b-423a-9667-d73063ccd8d4?partners=Tapad&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://www.usps.com/globals/site-index.htm	HTTP Parser: No favicon
Source: https://www.usps.com/globals/site-index.htm	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1714421657406&cv=11&fst=1714421657406&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1714421670851&cv=11&fst=1714421670851&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44o0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=832995956.1714421630&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CP78-rSe6IUDFZgX-QAdWLsL3A;src=3976941;type=uspsc0;cat=gener0;ord=3240872018289;npa=0;auiddc=832995956.1714421630;ps=1;pcor=1376471778;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44o0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	HTTP Parser: No favicon

Source: chromecache_294.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.facebook.com (Facebook)
Source: chromecache_294.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.twitter.com (Twitter)
Source: chromecache_294.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.youtube.com (Youtube)
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_297.2.dr, chromecache_294.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_193.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_374.2.dr, chromecache_208.2.dr	String found in binary or memory: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script> equals www.yahoo.com (Yahoo)
Source: chromecache_306.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_306.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Xg:d,Vg:e,Wg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!CC&&JC(x[A],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_231.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Jz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!p.length)return!0;var q=Fz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!vI(q, equals www.facebook.com (Facebook)
Source: chromecache_314.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src=document.location.protocol+"//www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_413.2.dr, chromecache_241.2.dr, chromecache_204.2.dr, chromecache_231.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.11.208.106
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: uaqtu.com
Source: global traffic	DNS traffic detected: DNS query: usps.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: trkn.us
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: s.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: www.redditstatic.com
Source: global traffic	DNS traffic detected: DNS query: sc-static.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: c.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: r.turn.com
Source: global traffic	DNS traffic detected: DNS query: 3976941.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: tr.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ct.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: w3-reporting-nel.reddit.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: tr6.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: urldefense.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ara.paa-reporting-advertising.amazon
Source: global traffic	DNS traffic detected: DNS query: getrockerbox.com
Source: global traffic	DNS traffic detected: DNS query: storage.cloud.kargo.com
Source: global traffic	DNS traffic detected: DNS query: crb.kargo.com
Source: global traffic	DNS traffic detected: DNS query: kds-pixel.kargo.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://uaqtu.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Windows Analysis Report
https://uaqtu.com