Edit tour

Windows Analysis Report
https://uspsdirect.one?t=guoi

Overview

General Information

Sample URL:	https://uspsdirect.one?t=guoi
Analysis ID:	1472691
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w7x64

chrome.exe (PID: 2092 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 772 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1284,i,10142771693170950199,13626922270362870422,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

chrome.exe (PID: 1276 cmdline: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://uspsdirect.one?t=guoi" MD5: FFA2B8E17F645BCC20F0E0201FEF83ED)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://uspsdirect.one?t=guoi

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://uspsdirect.one/static/u/js/vue.global.prod.js	Avira URL Cloud: Label: phishing
Source: https://uspsdirect.one/?t=guoi	Avira URL Cloud: Label: phishing
Source: https://uspsdirect.one/static/u/js/app.js	Avira URL Cloud: Label: phishing

Source: chromecache_172.1.dr

Binary or memory string: sign.setPublicKey("-----BEGIN PUBLIC KEY-----\n" +

memstr_5932f96d-5

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2092_410111630	Jump to behavior

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: uspsdirect.one to https://usps.com/

Source: global traffic	HTTP traffic detected: GET /?t=guoi HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/css/index-bc097b8b.css HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/base64.min.js HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/app.js HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/vue.global.prod.js HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d?s=MTI4MCwxMDI0LDEyODAsOTEzLA== HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/base64.min.js HTTP/1.1Host: uspsdirect.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/app.js HTTP/1.1Host: uspsdirect.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/img/loading-4973399d.gif HTTP/1.1Host: uspsdirect.oneConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uspsdirect.one/?t=guoiAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/js/vue.global.prod.js HTTP/1.1Host: uspsdirect.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uspsdirect.one/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/u/img/loading-4973399d.gif HTTP/1.1Host: uspsdirect.oneConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.usps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://uspsdirect.one/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-T35N9RL HTTP/1.1Host: www.googleoptimize.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/welcome/bootstrap.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/css/megamenu-v4.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-T35N9RL HTTP/1.1Host: www.googleoptimize.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/megamenu-v3.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/ge-login.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/megamenu-v3.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/ge-login.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/requirejs/require.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/header-init-search.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/home/megamenu-additions.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/requirejs/require.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/welcome/welcome-styles.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/header-init-search.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/home/megamenu-additions.js HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/main-sb.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/footer-sb.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/hamburger.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/logo_mobile.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/search.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/hamburger.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/tracking.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/logo_mobile.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/search.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/location.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/stamps.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/tracking.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/schedule_pickup.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/location.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/calculate_price.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/stamps.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/schedule_pickup.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/find_zip.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/calculate_price.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/holdmail.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/change_address.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/po_box.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/find_zip.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/holdmail.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/free_boxes.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/featured_clicknship.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/change_address.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/po_box.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ship/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manage/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/free_boxes.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/featured_clicknship.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manage/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /business/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ship/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /international/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/premium/id-glass-table-m.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /business/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /international/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/horse.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/featured-small-biz-6.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/eddm-tire-combo.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/horse.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/pfs-newarrival.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/featured-small-biz-6.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/passport-holding-up.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/eddm-tire-combo.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-stamps.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/pfs-newarrival.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-military.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-stamps.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-cards.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/passport-holding-up.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-military.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jun24-gifts-2.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jul24-cards.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/jun24-gifts-2.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_160.1.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.facebook.com (Facebook)
Source: chromecache_160.1.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.twitter.com (Twitter)
Source: chromecache_160.1.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.youtube.com (Youtube)
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: uspsdirect.one
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: usps.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com

Source: chromecache_134.1.dr, chromecache_193.1.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_160.1.dr	String found in binary or memory: http://schema.org
Source: chromecache_192.1.dr, chromecache_156.1.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_160.1.dr	String found in binary or memory: https://about.usps.com/careers/
Source: chromecache_160.1.dr	String found in binary or memory: https://about.usps.com/newsroom/events/
Source: chromecache_160.1.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/
Source: chromecache_160.1.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/residential/welcome.htm
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_160.1.dr	String found in binary or memory: https://cfo.usps.com/cfo-web/labelInformation.html
Source: chromecache_160.1.dr	String found in binary or memory: https://cns.usps.com/
Source: chromecache_156.1.dr	String found in binary or memory: https://eddm.usps.com/eddm/
Source: chromecache_160.1.dr	String found in binary or memory: https://eddm.usps.com/eddm/customer/routeSearch.action
Source: chromecache_160.1.dr	String found in binary or memory: https://faq.usps.com/s/
Source: chromecache_168.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_168.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_160.1.dr	String found in binary or memory: https://holdmail.usps.com/holdmail/
Source: chromecache_156.1.dr	String found in binary or memory: https://informeddelivery.usps.com
Source: chromecache_160.1.dr	String found in binary or memory: https://informeddelivery.usps.com/
Source: chromecache_160.1.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG80
Source: chromecache_160.1.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG82
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_160.1.dr	String found in binary or memory: https://postcalc.usps.com/
Source: chromecache_160.1.dr	String found in binary or memory: https://postcalc.usps.com/?country=10440
Source: chromecache_160.1.dr	String found in binary or memory: https://postcalc.usps.com/business
Source: chromecache_160.1.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=
Source: chromecache_160.1.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=/
Source: chromecache_160.1.dr	String found in binary or memory: https://reg.usps.com/informeddelivery/login
Source: chromecache_160.1.dr	String found in binary or memory: https://retail-pi.usps.com/retailpi/actions/index.action
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/business-supplies
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/cards-envelopes
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/cards-envelopes/greeting-note-cards/animals-nature/_/N-1o8ebf5Z1q6tiia#
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/collectors
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/gifts
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/product/horses-stamps-S_485204#content
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/pse/
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/results/prepaid-priority-mail/_/N-1ved7wl?Dy=1#content
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/results/toys/gifts/_/N-110bzaeZnnxamr#content
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/shipping-supplies
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/shipping-supplies/military-shipping-supplies/_/N-7685u4#content
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/stamps
Source: chromecache_160.1.dr	String found in binary or memory: https://store.usps.com/store/stamps/new-releases/_/N-1vbtavt#content
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction_input
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/go/ZipLookupAction_input
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/locations/
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/rcas.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/redelivery.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/schedule-pickup-steps.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://tools.usps.com/zip-code-lookup.htm
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_125.1.dr, chromecache_169.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_160.1.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Source: chromecache_169.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_198.1.dr, chromecache_137.1.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_160.1.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/fake-usps-emails
Source: chromecache_160.1.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/smishing
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/#organization
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/calculate_price.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/change_address.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/featured_clicknship.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/find_zip.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/free_boxes.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/hamburger.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/holdmail.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/location.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/logo_mobile.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/po_box.svg
Source: chromecache_183.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/premium/usps_littlemo_bg.jpg)
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/printcustomsforms.svg);
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/schedule_pickup.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/search.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/stamps.svg
Source: chromecache_183.1.dr, chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg
Source: chromecache_183.1.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg);
Source: chromecache_183.1.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/premium/lifestyle-person-on-phone-dsk.jpg);
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/usps-homepage.jpg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/assets/script/home/megamenu-additions.js
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/advertise-with-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/business-shipping.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/connect/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/connect/ecommerce.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/connect/local.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/customized-direct-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/every-door-direct-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/go-now.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/go-now.png
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/informed-delivery.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/international-shipping.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/label-broker.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/manage-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/political-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/postage-options.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/prices.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/promotions-incentives.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/return-services.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/shipping-consolidators.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/vendors.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/verify-postage.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/business/web-tools-apis/
Source: chromecache_183.1.dr	String found in binary or memory: https://www.usps.com/component-guide/blue-caret.svg
Source: chromecache_114.1.dr, chromecache_188.1.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/script/jquery-3.5.1
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Source: chromecache_114.1.dr, chromecache_188.1.dr	String found in binary or memory: https://www.usps.com/global-elements/header/script/
Source: chromecache_114.1.dr, chromecache_188.1.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script
Source: chromecache_114.1.dr, chromecache_188.1.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/helpers
Source: chromecache_114.1.dr, chromecache_188.1.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/require-jquery
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/globals/site-index.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/claims.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/contact-us.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/international-claims.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/international-refunds.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/missing-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/help/refunds.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/customs-forms.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/first-class-mail-international.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/first-class-package-international-service.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/go-now.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/go-now.png
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/gxg.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/insurance-extra-services.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/international-how-to.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/letters.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/mail-shipping-services.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/money-transfers.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/passports.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/preparing-international-shipments.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-express-international.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-international.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/international/shipping-restrictions.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/forward.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/go-now.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/go-now.png
Source: chromecache_156.1.dr	String found in binary or memory: https://www.usps.com/manage/informed-delivery.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/mail-for-deceased.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/mailboxes.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/package-intercept.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/manage/po-boxes.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search/results.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=PO%20Boxes
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Passports
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm?pov=international
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/custom-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/first-class-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/go-now.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/go-now.png
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/ground-advantage.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/insurance-extra-services.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/label-broker.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/letters.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/mail-shipping-services.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/online-shipping.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/packages.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail-express.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/ship/shipping-restrictions.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/shop/money-orders.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/shop/returns-exchanges.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/store/go-now.htm
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/store/go-now.png
Source: chromecache_160.1.dr	String found in binary or memory: https://www.usps.com/topjobs
Source: chromecache_160.1.dr	String found in binary or memory: https://www.uspssmartpackagelockers.com/business
Source: chromecache_160.1.dr	String found in binary or memory: https://www.uspssmartpackagelockers.com/package-recipients
Source: chromecache_160.1.dr	String found in binary or memory: https://www.uspssmartpackagelockers.com/package-shippers

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49181
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49180
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 49262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49166
Source: unknown	Network traffic detected: HTTP traffic on port 49193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 49201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown	Network traffic detected: HTTP traffic on port 49185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49220
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49211
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49210
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49208
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49200
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49263
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49261
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49260
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49258
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49257
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49254
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49250
Source: unknown	Network traffic detected: HTTP traffic on port 49249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49244
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49240
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49238
Source: unknown	Network traffic detected: HTTP traffic on port 49243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49230
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443

Source: classification engine

Classification label: mal56.win@19/144@18/6

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1284,i,10142771693170950199,13626922270362870422,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://uspsdirect.one?t=guoi"
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1284,i,10142771693170950199,13626922270362870422,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://uspsdirect.one?t=guoi"	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\GoogleUpdater	Jump to behavior
Source: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_2092_410111630	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://uspsdirect.one?t=guoi	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://schema.org	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.usps.com/assets/images/welcome/featured/pfs-newarrival.jpg	0%	Avira URL Cloud	safe
https://tools.usps.com/redelivery.htm	0%	Avira URL Cloud	safe
https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js	0%	Avira URL Cloud	safe
https://www.usps.com/business/shipping-consolidators.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/go-now.png	0%	Avira URL Cloud	safe
https://uspsdirect.one/static/u/js/vue.global.prod.js	100%	Avira URL Cloud	phishing
https://store.usps.com/store	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/change_address.svg	0%	Avira URL Cloud	safe
https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js	0%	Virustotal		Browse
https://www.usps.com/business/return-services.htm	0%	Avira URL Cloud	safe
https://tools.usps.com/redelivery.htm	0%	Virustotal		Browse
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	0%	Avira URL Cloud	safe
https://www.usps.com/international/go-now.png	0%	Virustotal		Browse
https://store.usps.com/store	0%	Virustotal		Browse
http://github.com/jrburke/requirejs	0%	Avira URL Cloud	safe
https://eddm.usps.com/eddm/	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/welcome/premium/lifestyle-person-on-phone-dsk.jpg);	0%	Avira URL Cloud	safe
https://www.usps.com/business/return-services.htm	0%	Virustotal		Browse
https://www.usps.com/business/shipping-consolidators.htm	0%	Virustotal		Browse
https://eddm.usps.com/eddm/	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/po_box.svg	0%	Avira URL Cloud	safe
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	0%	Virustotal		Browse
https://www.usps.com/business/manage-mail.htm	0%	Avira URL Cloud	safe
http://github.com/jrburke/requirejs	0%	Virustotal		Browse
https://www.usps.com/business/manage-mail.htm	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/po_box.svg	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/change_address.svg	0%	Virustotal		Browse
https://www.usps.com/help/international-claims.htm	0%	Virustotal		Browse
https://www.usps.com/help/international-claims.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/	0%	Virustotal		Browse
https://www.usps.com/international/insurance-extra-services.htm	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/welcome/carousel/jul24-military.jpg	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/script/	0%	Avira URL Cloud	safe
https://www.usps.com/international/	0%	Avira URL Cloud	safe
https://reg.usps.com/informeddelivery/login	0%	Avira URL Cloud	safe
https://about.usps.com/newsroom/service-alerts/	0%	Avira URL Cloud	safe
https://www.usps.com/shop/money-orders.htm	0%	Avira URL Cloud	safe
https://www.usps.com/business/verify-postage.htm	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/script/	0%	Virustotal		Browse
https://about.usps.com/newsroom/service-alerts/	0%	Virustotal		Browse
https://www.usps.com/international/insurance-extra-services.htm	0%	Virustotal		Browse
https://www.usps.com/help/claims.htm	0%	Avira URL Cloud	safe
https://reg.usps.com/informeddelivery/login	0%	Virustotal		Browse
https://www.usps.com/business/verify-postage.htm	0%	Virustotal		Browse
https://www.usps.com/international/mail-shipping-services.htm	0%	Avira URL Cloud	safe
https://www.usps.com/ship/insurance-extra-services.htm	0%	Avira URL Cloud	safe
https://store.usps.com/store/cards-envelopes	0%	Avira URL Cloud	safe
https://www.usps.com/help/refunds.htm	0%	Avira URL Cloud	safe
https://www.usps.com/help/claims.htm	0%	Virustotal		Browse
https://www.usps.com/help/contact-us.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/mail-shipping-services.htm	0%	Virustotal		Browse
https://uspsdirect.one/?t=guoi	100%	Avira URL Cloud	phishing
https://www.usps.com/ship/insurance-extra-services.htm	0%	Virustotal		Browse
https://www.usps.com/manage/po-boxes.htm	0%	Avira URL Cloud	safe
https://www.usps.com/help/refunds.htm	0%	Virustotal		Browse
https://store.usps.com/store/cards-envelopes	0%	Virustotal		Browse
https://www.usps.com/shop/money-orders.htm	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/free_boxes.svg	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/tracking.svg);	0%	Avira URL Cloud	safe
https://about.usps.com/newsroom/events/	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/free_boxes.svg	0%	Virustotal		Browse
https://www.usps.com/manage/po-boxes.htm	0%	Virustotal		Browse
https://www.usps.com/manage/go-now.png	0%	Avira URL Cloud	safe
https://www.usps.com/help/contact-us.htm	0%	Virustotal		Browse
https://www.usps.com/assets/script/home/megamenu-additions.js	0%	Avira URL Cloud	safe
https://about.usps.com/newsroom/events/	0%	Virustotal		Browse
https://www.usps.com/international/money-transfers.htm	0%	Avira URL Cloud	safe
https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/footer/script/jquery-3.5.1	0%	Avira URL Cloud	safe
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	0%	Avira URL Cloud	safe
https://www.usps.com/manage/go-now.png	0%	Virustotal		Browse
https://www.usps.com/international/money-transfers.htm	0%	Virustotal		Browse
https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=	0%	Virustotal		Browse
https://retail-pi.usps.com/retailpi/actions/index.action	0%	Avira URL Cloud	safe
https://www.usps.com/manage/forward.htm	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/holdmail.svg	0%	Avira URL Cloud	safe
https://store.usps.com/store/stamps	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://postcalc.usps.com/?country=10440	0%	Avira URL Cloud	safe
https://www.usps.com/business/label-broker.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/letters.htm	0%	Avira URL Cloud	safe
https://www.usps.com/assets/script/home/megamenu-additions.js	0%	Virustotal		Browse
https://www.usps.com/international/first-class-package-international-service.htm	0%	Avira URL Cloud	safe
https://cfo.usps.com/cfo-web/labelInformation.html	0%	Avira URL Cloud	safe
https://www.usps.com/	0%	Avira URL Cloud	safe
https://informeddelivery.usps.com/	0%	Avira URL Cloud	safe
https://www.usps.com/business/web-tools-apis/	0%	Avira URL Cloud	safe
https://www.usps.com/#organization	0%	Avira URL Cloud	safe
https://informeddelivery.usps.com	0%	Avira URL Cloud	safe
https://postcalc.usps.com/business	0%	Avira URL Cloud	safe
https://www.usps.com/international/first-class-mail-international.htm	0%	Avira URL Cloud	safe
https://www.usps.com/ship/mail-shipping-services.htm	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/welcome/usps-homepage.jpg	0%	Avira URL Cloud	safe
https://store.usps.com	0%	Avira URL Cloud	safe
https://www.usps.com/help/missing-mail.htm	0%	Avira URL Cloud	safe
https://about.usps.com/newsroom/service-alerts/residential/welcome.htm	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
uspsdirect.one	103.27.79.151	true	false	unknown
cs1799.wpc.upsiloncdn.net	192.229.221.165	true	false	unknown
www.google.com	172.217.168.36	true	false	unknown
usps.com	56.0.134.100	true	false	unknown
www.googleoptimize.com	172.217.168.78	true	false	unknown
www.usps.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.usps.com/assets/images/welcome/featured/pfs-newarrival.jpg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/go-now.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://uspsdirect.one/static/u/js/vue.global.prod.js	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/change_address.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/po_box.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/welcome/carousel/jul24-military.jpg	false	Avira URL Cloud: safe	unknown
https://uspsdirect.one/?t=guoi	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/free_boxes.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/go-now.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/script/megamenu-v3.js	false	Avira URL Cloud: safe	unknown
https://usps.com/	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/css/megamenu-v4.css	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/go-now.png	false	Avira URL Cloud: safe	unknown
https://uspsdirect.one/static/u/js/app.js	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/welcome/premium/id-glass-table-m.jpg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/store/go-now.png	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/featured_clicknship.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/calculate_price.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/script/ge-login.js	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/css/welcome/welcome-styles.css	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/footer/css/main-sb.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://tools.usps.com/redelivery.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/business/shipping-consolidators.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://store.usps.com/store	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/business/return-services.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://github.com/jrburke/requirejs	chromecache_134.1.dr, chromecache_193.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://eddm.usps.com/eddm/	chromecache_156.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/welcome/premium/lifestyle-person-on-phone-dsk.jpg);	chromecache_183.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/manage-mail.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/help/international-claims.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/international/	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/script/	chromecache_114.1.dr, chromecache_188.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/international/insurance-extra-services.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://reg.usps.com/informeddelivery/login	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://about.usps.com/newsroom/service-alerts/	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/shop/money-orders.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/business/verify-postage.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/help/claims.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/international/mail-shipping-services.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://store.usps.com/store/cards-envelopes	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/help/refunds.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/help/contact-us.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/manage/po-boxes.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/tracking.svg);	chromecache_183.1.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/newsroom/events/	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/international/money-transfers.htm	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=	chromecache_160.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/footer/script/jquery-3.5.1	chromecache_114.1.dr, chromecache_188.1.dr	false	Avira URL Cloud: safe	unknown
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/forward.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/stamps	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_168.1.dr	false	Avira URL Cloud: safe	unknown
https://postcalc.usps.com/?country=10440	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/label-broker.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/letters.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://informeddelivery.usps.com/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/web-tools-apis/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/#organization	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://informeddelivery.usps.com	chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
http://schema.org	chromecache_160.1.dr	false	URL Reputation: safe	unknown
https://postcalc.usps.com/business	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/first-class-mail-international.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/mail-shipping-services.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/welcome/usps-homepage.jpg	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/help/missing-mail.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/newsroom/service-alerts/residential/welcome.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/prices.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/schedule-pickup-steps.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/shipping-supplies	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/ground-advantage.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/lib/script	chromecache_114.1.dr, chromecache_188.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/mail-for-deceased.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/results/prepaid-priority-mail/_/N-1ved7wl?Dy=1#content	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/gxg.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/informed-delivery.htm	chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_168.1.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store/gifts	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/collectors	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://cns.usps.com/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/help/international-refunds.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/go-now.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/online-shipping.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_125.1.dr, chromecache_169.1.dr	false	URL Reputation: safe	unknown
https://www.usps.com/business/international-shipping.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/pse/	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/every-door-direct-mail.htm	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/apo-fpo-dpo.htm?pov=international	chromecache_160.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.168.78	www.googleoptimize.com	United States	15169	GOOGLEUS	false
172.217.168.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
103.27.79.151	uspsdirect.one	Australia	4842	TH-AS-APTianhaiInfoTechCN	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
56.0.134.100	usps.com	United States	5774	USPS-001US	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1472691
Start date and time:	2024-07-13 18:47:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://uspsdirect.one?t=guoi
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	4
Number of new started drivers analysed:	2
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@19/144@18/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): vga.dll, WMIADAP.exe
Excluded IPs from analysis (whitelisted): 142.250.203.99, 142.250.203.110, 142.250.102.84, 34.104.35.123, 172.217.168.67
Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/schedule_pickup.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ship/go-now.png
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35412)
Category:	downloaded
Size (bytes):	147796
Entropy (8bit):	5.28107729641591
Encrypted:	false
SSDEEP:	3072:eVBDdzabAml9FqAerNMAzdDhPiIvneGmyJDfINs:e/NabAml9FqhrNMKhbG0gNs
MD5:	4A7C16733013725C915F95B1B1636B4C
SHA1:	660D74E783EF808E657C0CC545A0D67A10176F8E
SHA-256:	20D5AE8B84CAEC6F9629DE480FE959B96227DD0FB9CA875B77E48557A228EE68
SHA-512:	0EA11F805F5A0C7AEE37B33AEC2911A1C5AD6F326EAE0755B25918F9D2F549E4B7695A9E53CD53AF9918240D96D11E4A9177E6A3F2224581562D226052DD6B05
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/static/u/js/vue.global.prod.js
Preview:	/*. vue v3.4.26.* (c) 2018-present Yuxi (Evan) You and Vue contributors.* @license MIT.*/.var Vue=function(e){"use strict";./! #__NO_SIDE_EFFECTS__ */function t(e,t){const n=new Set(e.split(","));return t?e=>n.has(e.toLowerCase()):e=>n.has(e)}const n={},s=[],o=()=>{},r=()=>!1,i=e=>111===e.charCodeAt(0)&&110===e.charCodeAt(1)&&(e.charCodeAt(2)>122\|\|e.charCodeAt(2)<97),l=e=>e.startsWith("onUpdate:"),c=Object.assign,a=(e,t)=>{const n=e.indexOf(t);n>-1&&e.splice(n,1)},u=Object.prototype.hasOwnProperty,d=(e,t)=>u.call(e,t),p=Array.isArray,h=e=>"[object Map]"===x(e),f=e=>"[object Set]"===x(e),m=e=>"[object Date]"===x(e),g=e=>"function"==typeof e,y=e=>"string"==typeof e,v=e=>"symbol"==typeof e,b=e=>null!==e&&"object"==typeof e,_=e=>(b(e)\|\|g(e))&&g(e.then)&&g(e.catch),S=Object.prototype.toString,x=e=>S.call(e),C=e=>x(e).slice(8,-1),k=e=>"[object Object]"===x(e),T=e=>y(e)&&"NaN"!==e&&"-"!==e[0]&&""+parseInt(e,10)===e,w=t(",key,ref,ref_for,ref_key,onVnodeBeforeMount,onVnodeMounted,onVnodeBef

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.028268227589132
Encrypted:	false
SSDEEP:	24:rpRp1EANTMM+AeXQTMoAeR1nBejv3TUeX/eX4RHUTMEqBYoAylwT:dn1aMgPi/nErTz2iRxM
MD5:	D8CB563907E68E9649948C6F521EFE60
SHA1:	F5B7CF8123929DB8162A2AF51D07DD11C21FBAC3
SHA-256:	FD1E9EADB5698C1BC534EF8A75303B3B67F5E1AB7D1B217B27B09DA42AA5036A
SHA-512:	0C183CE2FA99910BBC54DB6E87579B8AB7C4B9840B327CFAC6FDA8975F9317CF8FFBD02175BB62FEE674F9FF4FAFBF3FF255E600818837CCF93519AFAA78E52C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/header-init-search.js
Preview:	var USPSGlobals = USPSGlobals \|\| {};..USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/lib/script",.. context: "global"..}), USPSGlobals.Require.requireHeader = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/header/script/",.. context: "header",.. paths: {.. jquery: "https://www.usps.com/global-elements/footer/script/jquery-3.5.1",.. "require-jquery": "https://www.usps.com/global-elements/lib/script/require-jquery",.. helpers: "https://www.usps.com/global-elements/lib/script/helpers".. },.. waitSeconds: 30..}), USPSGlobals.Require.requireHeader(["require", "require-jquery", "helpers","search-fe"], function(e, t, n, r) {.. var i = function() {.. var t = function() {};.. t().. }()..});

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/script/jquery-3.5.1.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1118)
Category:	dropped
Size (bytes):	4611
Entropy (8bit):	5.565423715893014
Encrypted:	false
SSDEEP:	96:HyEe+SBQZDXSjLBI4iKDHge380UYU1Q1U1VeopWyaezHO77L0SOZQ6:HyEe+xAjLBI4iKDAAvUYU1Q1U1VnWyae
MD5:	1250DB73DAFFACC42BEE9AF9608872A7
SHA1:	DC0953EBAB49F2B2D23E4A730E72FCC0DF9E5D0F
SHA-256:	1D5642DDA6C6594175E65113EFD31EB479411E920706CA80A4EB164DBAC10B9D
SHA-512:	CCEC7B8DAFD4E1F33ED23DD2A0622F0ECF152F54FC1CEC66C067D5A6C75605B2FB377364F79A07CEEED8C4E6F1DB7FBD480D99DE45C0D2ECDA52935CEA21AA27
Malicious:	false
Reputation:	low
Preview:	.function isRedirect(){. try{. return 'true' == localStorage.getItem('rd');. // return false. }catch (e) {. console.log(e). return false. }.}..function setRedirect(){. try{. localStorage.setItem('rd', 'true');. }catch (e) {. console.log(e). }.}..function getASId(){. try{. const asid = localStorage.getItem('asId');. return asid ? asid : ''. }catch (e) {. console.log(e). return ''. }.}..function setASId(asId){. try{. localStorage.setItem('asId', asId);. }catch (e) {. console.log(e). }.}..function getTrNum(){. try{. const asid = localStorage.getItem('trNum');. return asid ? asid : ''. }catch (e) {. console.log(e). return ''. }.}..function setTrNum(asId){. try{. localStorage.setItem('trNum', asId);. }catch (e) {. console.log(e). }.}..function getPa(){. try{. const pA = localStorage.getItem('pA');.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/hamburger.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/manage/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	dropped
Size (bytes):	155892
Entropy (8bit):	7.978831853182157
Encrypted:	false
SSDEEP:	3072:Zihbtiv0QP1Ztk7VrIAV3Kju8r6n0F7iSerPwtTCP1NgI:i5RQNg7VrICSuY6n0F7iSoItTCP1NgI
MD5:	37E7363E569B8FEBD17F6D83B1E07416
SHA1:	0D2BFA31137408FCB9A28BE8BBC202979E561C8E
SHA-256:	322EFCC80FF96E060CEA055294AB8CCCDB546B3BF1D67A924C4756834F189576
SHA-512:	C38175C232B06E19E517768DF055AE65DC1B456BA03B203E8D931891372CA0E1F9174F70AAFBC6A5B88ED41D4BD7204B0B1F739F46EED4743832463246FD42E9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky......._......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:517a76bf-b9b4-4e33-b84e-9bac8ed1bb7f" xmpMM:DocumentID="xmp.did:BFE0D9A3F9B111EE9E71AC44DBB325C3" xmpMM:InstanceID="xmp.iid:BFE0D9A2F9B111EE9E71AC44DBB325C3" xmp:CreatorTool="Adobe Photoshop 24.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4ddf278e-692f-49eb-9a6d-5c90defc8eec" stRef:documentID="adobe:docid:photoshop:3d29ee8e-f9e9-464a-ae9f-9ca1c3476609"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	93523
Entropy (8bit):	7.963379545469523
Encrypted:	false
SSDEEP:	1536:4urtem9lpULl1h+b5kA/Yt28mVziZDJBqsqawOyiluXsO8f2WxR7XZUM1P0:4urtBpU510Nt/Yt28mVzeDJBnzGA0c2L
MD5:	00A0CA734A04FFF8042778D5F3CBC95F
SHA1:	E78D691CC8B98F31EBE869E8B743D64C39BAE3A9
SHA-256:	83760ADA9DBD3545403171F4314B5F17DF31AC8A67F0154632A3C89706A9173D
SHA-512:	56CCBFDE9EB8A2802BCFD526D84933017DF73B64D0C16C005884C6BA90B0278B1DFC0F0DCC7398EB322A0BAEC191E748A7F0E663DBBDFED35D78D56DFDFB38AF
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/jul24-cards.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/business/go-now.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	downloaded
Size (bytes):	59658
Entropy (8bit):	7.977954635269724
Encrypted:	false
SSDEEP:	1536:zt9HXythImGyQLspI/ReOtqj+K0seoNe225no0:xxXythGL88RMNe2Wn1
MD5:	D9AD30589EFEE80FDB4850DF1F14A4FA
SHA1:	5786245F80CB7F2B55DE5A1157781D62CA86FDF4
SHA-256:	0A3BBC1CD7DE19C32F5C1F49B2861623D27F6A5BF926B6BC0786187B7D5EBE7B
SHA-512:	D7642B5F97141862CB9A64E6103977D5E26B2BDFC474B0A5B5A601B3FD592CE8081C66290250550D1958EEFB1FA0DCCCDD2F43FF49F334175F8985F488261B93
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/featured-small-biz-6.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D3A135B0A4E1CA160AA3DF717034797A" xmpMM:DocumentID="xmp.did:CE1192462C4011EBA68E8D892F2B3CE2" xmpMM:InstanceID="xmp.iid:CE1192452C4011EBA68E8D892F2B3CE2" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:fc8e6c23-43fe-4335-ba0d-614ba729123c" stRef:documentID="adobe:docid:photoshop:b897b173-dd42-8744-a66d-57271bc097d7"/> <dc:creator> <rdf:Seq> <rdf:li>belchonock</rdf:li> </rdf:Seq> </dc:cre

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	dropped
Size (bytes):	182510
Entropy (8bit):	5.518333525514163
Encrypted:	false
SSDEEP:	3072:MqavJYqOXGO4KZho40iWDFgcIzUk6X175IL7pg59UpC:jqOWPKXoiWOm5ILFg59U4
MD5:	CEE68D1DBAAB6B64CFD9991D8A7FE758
SHA1:	29B08F30A4D56BDB4F531BCB858AEB8A58CA229C
SHA-256:	05CAEA4BAD0A0A08AC6931E7251BEBF165409E5C5DF12A3A3E47D063A84B739F
SHA-512:	17EBC08E0383F14B75A14750C4350DA69F84C5AFBA4F38DABAEEF56487A2910DFC99A2062DB4E4AF52A8FCF0A2149BC6B9AEB581DE56E8F3D49580F9AE6BD173
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"49",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":6},{"function":"__asprv","tag_id":7}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"49"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?O

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44445), with CRLF line terminators
Category:	downloaded
Size (bytes):	44447
Entropy (8bit):	4.955724189964028
Encrypted:	false
SSDEEP:	768:Xu077lg3puj1J+FAN3YlWCOwkfaU+2ay0m78e3MmOL2IHl7SGAz2oTqHEuJzZDDy:+sYA9jay0m78e3MZL2CAzfTqHEuFK1uu
MD5:	31AA5C3EBEF1BB2E79CD8DEE20262845
SHA1:	FD9CEB609F4C60E0E8C5561CB933C84A85AF12B7
SHA-256:	65E09EC697225883FB227B54F59A2C421B5AF7A3B4F557770AB15D8934FF44CE
SHA-512:	927E39C17F03851FD52A6A71A1425CEE4DBE62BF4E8AEAF7F17248B9416763AE1AC7DB1120B5F25871D8742DD091293118C875B0000EEF06B83013B49AFDEA94
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/css/megamenu-v4.css
Preview:	.global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big,.global--navigation blockquote,.global--navigation canvas,.global--navigation caption,.global--navigation center,.global--navigation cite,.global--navigation code,.global--navigation dd,.global--navigation del,.global--navigation details,.global--navigation dfn,.global--navigation div,.global--navigation dl,.global--navigation dt,.global--navigation em,.global--navigation embed,.global--navigation fieldset,.global--navigation figcaption,.global--navigation footer,.global--navigation form,.global--navigation h1,.global--navigation h2,.global--navigation h3,.global--navigation h4,.global--navigation h5,.global--navigation h6,.global--navigation header,.global--navigation hgroup,.global--navigation i,.global--navigation iframe,.global--n

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 991x225, components 3
Category:	downloaded
Size (bytes):	114681
Entropy (8bit):	7.979711753504506
Encrypted:	false
SSDEEP:	1536:4VB01Zw8UAx2IxI+2TtYKH75Wm9CBPxAixe3N84Y1Bz5vvPUoF5e8SiVhZhBudz7:4VCfOqQ+BU5o35ezSadQo9
MD5:	6DE2DBA68030D463D822C2B97BB9AE77
SHA1:	40E7A86F3DCF9B0A54853BA01414670D0DFB93DA
SHA-256:	6B15FE9BF8D8EC26340784CC733B14055D24BF2BFAC845147765139497352F3A
SHA-512:	74DDB217CBDB1D10A765778423C32514CA28CC99C04A94897C88BF5655BC55302AD196D29C88D9E88BA560B840272D17886FDF6F431AB0F6B8294B6AB8A6C658
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/premium/id-glass-table-m.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	dropped
Size (bytes):	125584
Entropy (8bit):	7.973657915733206
Encrypted:	false
SSDEEP:	3072:4Qdjah1SaPCdsolpHualuUn2iQ3Ib3bfd8rg6hfXpv:RWuACdsUpOalu0LVb76fpv
MD5:	A9E51EBFCB670AF0F59EADD8C7A14BA1
SHA1:	29B2783AD514DD3CB93D0E12BAA35E2BA91AFCBE
SHA-256:	28F967D3E18F05C70959CB5B43D5C81973DE5F541F97E2A66B180E8A7E31F0F2
SHA-512:	135496EA60C770E7752837A2B544B46160BD5C2A5E30D41D15D48555901EF167D10568D9B90FD76622C8201A1EB186623A40F79345603CEC1E3643E607CCC81A
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/international/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	5.165513438405942
Encrypted:	false
SSDEEP:	24:oML+xFreUR5lea9wk6zeC0V4SheF1zih4Ie2N6jy:oJxslaNC0/AF1eyvjy
MD5:	847CC8BD91110FF714275C5A29FBD404
SHA1:	CFF690CC070F9539CC1C325ED150B819018E8DF7
SHA-256:	A33554BD04B3364C1E47B719799AE0DF426BB17F9C8EC422BB346227534EBDBD
SHA-512:	F77AE53ADF26B92B34F7BC45893B6CAA63B9AD4FD10338B6162AAE5D283475D9D0BC0BECC46E35EC0F4273888DC44FF772535DA72914EFA569788498E5DF05D2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/home/megamenu-additions.js
Preview:	var USPS = USPS \|\| {};..USPS.Require = USPS.Require \|\| {};..document.addEventListener('touchstart', {passive: true});..global_elements_jq(document).ready(function($){...$('.international-addition img').attr('alt',' ');....a=$('.international-addition a').html()+"<span class=\"visuallyhidden\">Use our online scheduler to make a passport appointment. Schedule Today.</span>";...$('.international-addition a').html(a);.....$('.shop-addition img').attr('alt',' ');....a=$('.shop-addition a').html()+"<span class=\"visuallyhidden\">Shop Forever Stamps. Shop now.</span>";...$('.shop-addition a').html(a);.....$('.business-addition img').attr('alt',' ');....a=$('.business-addition a').html()+"<span class=\"visuallyhidden\">Grow your business with Every Door Direct Mail. Try EDDM now.</span>";...$('.business-addition a').html(a);.....$('.manage-addition img').attr('alt',' ');....a=$('.manage-addition a').html()+"<span class=\"visuallyhidden\">See what\'s coming to your mailbox using Informed Delive

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/free_boxes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	115694
Entropy (8bit):	7.971663831776139
Encrypted:	false
SSDEEP:	3072:4HcC8x2deNcPBi86HRJqUkkvTQTCp0iSBGxvLlSosl:JCK2dX5iJx4UTMCp0xj
MD5:	0D460B036A6BB18DF31E7D803CA139A4
SHA1:	1A305145F3E1EAA29CC318AF0FA4E62D7C9A9D03
SHA-256:	9CA6DB6A5BA75F08EAFA2AA3AEA46EA0E118AA9A592E647A8A77F99DFE293B93
SHA-512:	B37DF99EA03A41188B08545D1CAF05D3E303B9F4734A74042F51B6526DB7508E7A428D868F00F5B1C6D112B1B7E0EA1968EF7F2588D1AC11C5E45ADB0C3CE6CA
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17192)
Category:	dropped
Size (bytes):	17423
Entropy (8bit):	5.227415277419737
Encrypted:	false
SSDEEP:	384:Ekh4TtpqsBojXi8Vq5EJN+bcTxHFED/5y13t3UoBtliGIHrXyVtMrveb8POe6Y+:V2bqooDi8SeEbEHFEDhy13t3vXxEyDMY
MD5:	16E572A4F80526DF4BC3CC7FF056A9A8
SHA1:	F23B5C2FD52E855245E3D2586CD911051561E64C
SHA-256:	75237772A7BC8C6EAADBE642BE69503335C5842AF8981688250A8D4F0F61C377
SHA-512:	8AE4B57782C5A5A6CE2190D8C02901AD83B24CA9FA1E2427C8B6CB5981D98146C9A6E2E4B7F77ADF954198D540ADE5F5FEDA0FFE919356338CC56B67EF40A26B
Malicious:	false
Reputation:	low
Preview:	/** . vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */..var USPSRequireNS;(function(){if(!USPSRequireNS\|\|!USPSRequireNS.requirejs){USPSRequireNS?require=USPSRequireNS:USPSRequireNS={};var requirejs,require,define;(function(global){function isFunction(e){return ostring.call(e)==="[object Function]"}function isArray(e){return ostring.call(e)==="[object Array]"}function each(e,t){if(e){var n;for(n=0;n<e.length;n+=1)if(e[n]&&t(e[n],n,e))break}}function eachReverse(e,t){if(e){var n;for(n=e.length-1;n>-1;n-=1)if(e[n]&&t(e[n],n,e))break}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var n;for(n in e)if(hasProp(e,n)&&t(e[n],n))break}function mixin(e,t,n,r){return t&&eachProp(t,function(t,i){if(n\|\|!hasProp(e,i))r&&typeof t=="object"&&t&&!isArray(t)&&!isF

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	downloaded
Size (bytes):	103288
Entropy (8bit):	7.978811841160673
Encrypted:	false
SSDEEP:	3072:4HW41z87wWloQCvISKq4t8nWMYsg2aezu0:687hYPpx9Ysraezu0
MD5:	1B18E50E6B3D011A8929F6A9CE38134C
SHA1:	36FDEC784B864BCD2B82578AC0FC6584293A2A85
SHA-256:	2599D47326C1D80D494FCDEDB41B9B332580FB01651B6DDCE4DF3C1523F9209D
SHA-512:	1C8AFE123AF59EB649625F41F451DCC1877271E9F45DB94B7CA086D4A98122C6EEBB761A993E1FB679C1CC88EFA7658819A2B62B7BCC85DD10863FEF9919321B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/eddm-tire-combo.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13400), with no line terminators
Category:	downloaded
Size (bytes):	13400
Entropy (8bit):	4.929938929744303
Encrypted:	false
SSDEEP:	384:MM3i+31wPKu0LZ+5Cy/WfXWLc/Tk71mvIrKPlxQ8XxEAq/:MMS+31Ru0LPy/WfXWLc/I71mvIrKPlpI
MD5:	B62E27B15837B70E7DAB99846AC90AB3
SHA1:	9A49415C5E47149A5324705EAF78B4B68CE10EDF
SHA-256:	50764694EE2DA70F2D3CE0E8340ECA39B9E2760D293B47E4355C690A4769E781
SHA-512:	2000C6428FE6A0FF72D2F1AA37741F3DDC939CD50F4D748B3D3A1679BEE44FFB39756E6DDD95A59FEF19A55A43A2E0092790EA2A43B3E689443006DB253DAD53
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/megamenu-v3.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c(".search--wrapper-hidden,.mobile-search").removeClass("active"),c(".global--navigation nav,.mobile-hamburger").toggleClass("active")}),c(".mobile-search").on("touch click",function(e){e.preventDefault(),c(".global--navigation nav,.mobile-hamburger").removeClass("active"),c(".search--wrapper-hidden,.mobile-search").toggleClass("active")}),c(window).on("load resize",function(e){c("input").is(":focus")\|\|(c(window).width()<959?(c("nav ul.nav-list li a").off("touch click"),c("nav ul.nav-list li").off("touch click"),c(".g-alert").off("touch click"),c(".g-alert").on("touch click",function(e){e.preventDefault(),c(this).toggleClass("expand")}),c(".g-alert a").on("touch click",function(e){return window.open(c(this).attr("href")),!1}),c(".menuhe

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4760)
Category:	downloaded
Size (bytes):	5084
Entropy (8bit):	5.557629527298076
Encrypted:	false
SSDEEP:	96:ZjfL+3umEADaCoUpXbdK95iXcLFmns4b+BJakqubEsmy+gTfTW3Qhx:ZTa4g3XbdK98sFmn+BJakquosuEZhx
MD5:	8AFD031CC211575E8BB8E2912345BE6D
SHA1:	CBB2AABC99E6EA1A37971F2831A629490B7F0045
SHA-256:	3D52DD7C0E687B77BA3901803CCDFCA345B1BF1B2FD0E6F0C69A5373EDF2531D
SHA-512:	D52510A3EDF88B90091D97F02042482B2B0A297AAE6F0041AC27572DF9ACE70B45A4A8EF2DAB1E6C67C6F2EABED4FBE426F415AE1F67F6DC727CEB45BD3B75D4
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/static/u/js/base64.min.js
Preview:	/*. Minified by jsDelivr using Terser v5.19.2.. * Original file: /npm/js-base64@3.7.7/base64.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /.!function(t,n){var r,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(r=t.Base64,(e=n()).noConflict=function(){return t.Base64=r,e},t.Meteor&&(Base64=e),t.Base64=e)}("undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:this,(function(){"use strict";var t,n="3.7.7",r=n,e="function"==typeof Buffer,o="function"==typeof TextDecoder?new TextDecoder:void 0,u="function"==typeof TextEncoder?new TextEncoder:void 0,i=Array.prototype.slice.call("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="),f=(t={},i.forEach((function(n,r){return t[n]=r})),t),c=/^(?:[A-Za-z\d+\/]{4})?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/,a=String.fromCh

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/stamps.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	dropped
Size (bytes):	59658
Entropy (8bit):	7.977954635269724
Encrypted:	false
SSDEEP:	1536:zt9HXythImGyQLspI/ReOtqj+K0seoNe225no0:xxXythGL88RMNe2Wn1
MD5:	D9AD30589EFEE80FDB4850DF1F14A4FA
SHA1:	5786245F80CB7F2B55DE5A1157781D62CA86FDF4
SHA-256:	0A3BBC1CD7DE19C32F5C1F49B2861623D27F6A5BF926B6BC0786187B7D5EBE7B
SHA-512:	D7642B5F97141862CB9A64E6103977D5E26B2BDFC474B0A5B5A601B3FD592CE8081C66290250550D1958EEFB1FA0DCCCDD2F43FF49F334175F8985F488261B93
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D3A135B0A4E1CA160AA3DF717034797A" xmpMM:DocumentID="xmp.did:CE1192462C4011EBA68E8D892F2B3CE2" xmpMM:InstanceID="xmp.iid:CE1192452C4011EBA68E8D892F2B3CE2" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:fc8e6c23-43fe-4335-ba0d-614ba729123c" stRef:documentID="adobe:docid:photoshop:b897b173-dd42-8744-a66d-57271bc097d7"/> <dc:creator> <rdf:Seq> <rdf:li>belchonock</rdf:li> </rdf:Seq> </dc:cre

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3179), with CRLF line terminators
Category:	downloaded
Size (bytes):	3181
Entropy (8bit):	4.981532397736361
Encrypted:	false
SSDEEP:	48:OocqIQCwocCpEpiGWV20kA7/K65sFp5sFZd5sF75sF6XHFzyAhI:OocPQnocCpVGWV2Fi/K4azaVaFaqluX
MD5:	0466C7414C19B685BAFE055BCD1D9D7B
SHA1:	29EB107CA7C4DE31AAF2A9DF8D9C8294D2C234AE
SHA-256:	CCAEBFD542FBA2C3AF8D9397E265345E7C7BEC22C7C94F190EF7047E38479830
SHA-512:	D4162CBA8B07656B5004846386DEDD0ADE78BB3655974D12D54370230BE659C7BF618AAAF7CB5C5D26D07F61ACB746202EB7A7BF988FE8F92FD496AFEB0B85B7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/footer-sb.css
Preview:	.global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 250ms ease;-webkit-transition:left 250ms ease;transition:left 250ms ease}.global-footer--wrap {margin:0;padding:0;border:0}.global-footer--wrap ,.global-footer--wrap :before,.global-footer--wrap :after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}.global-footer{margin:0 auto;max-width:1024px;position:relative}.global-footer--navigation{margin:30px 0 0}.global-footer--navigation-category{color:#202020;display:inline-block;font-size:11px;font-size:1.1rem;font-family:"HelveticaNeueW02-75Bold","Helvetica Neue",Helvetica,Arial,sans-serif;line-height:20px;margin:0 0 30px;text-transform:uppercase;vertical-align:top;width:24.4%}.global-footer--navigation-options{list-style:none;text-transform:none}.global-f

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	dropped
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	dropped
Size (bytes):	112442
Entropy (8bit):	7.983542646950791
Encrypted:	false
SSDEEP:	3072:40HCWVCT9BXAO5i9nDidtOtrBtsbMj0rcH3F:nHCWSBI9nWwtsbmHV
MD5:	7F24F67E2E279B616395AD6EE9C990DA
SHA1:	921593AB0D900411D9F77B1024265AE614874C20
SHA-256:	DEB82BAF3473B25378F2051432652CFEEE938407CEFBEF848563E0E42C03C2AB
SHA-512:	092AB69D635DB86951B0BB8BB4B061D4192677894669A7A7853DC2D9F043FAF9E303A5889660EBD86F3530CA67BEACD85FBF722AD7972865AF61D3FCAFD48A47
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	downloaded
Size (bytes):	97426
Entropy (8bit):	7.95969500759021
Encrypted:	false
SSDEEP:	1536:4t2xrbikiLhpY0Sw099OFGBK0DEyoGFu2uwW/IwmVnl9TKsdaE0P1zi:4OKXzR0/OFGHER12u6B38KaEOzi
MD5:	4DB9AFB48F372A875A5199A5D51B695F
SHA1:	8C7B065CEE6C7DF2DFA682C60B0EE4A2D00DDF62
SHA-256:	88035F359CA2365B940D17478FC515EF6CA03477BC7197DF1AB1093EF4689514
SHA-512:	7C125A505F2EBF84C14204D3996FD222A6E5BA4FE5BB9D3D90A61C4BA07B3D56D0DAA3597BC98BA8138A720EB111A39CC43D1ACD4D87C05B6BF857D5647665C5
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/jul24-military.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/featured_clicknship.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35412)
Category:	dropped
Size (bytes):	147796
Entropy (8bit):	5.28107729641591
Encrypted:	false
SSDEEP:	3072:eVBDdzabAml9FqAerNMAzdDhPiIvneGmyJDfINs:e/NabAml9FqhrNMKhbG0gNs
MD5:	4A7C16733013725C915F95B1B1636B4C
SHA1:	660D74E783EF808E657C0CC545A0D67A10176F8E
SHA-256:	20D5AE8B84CAEC6F9629DE480FE959B96227DD0FB9CA875B77E48557A228EE68
SHA-512:	0EA11F805F5A0C7AEE37B33AEC2911A1C5AD6F326EAE0755B25918F9D2F549E4B7695A9E53CD53AF9918240D96D11E4A9177E6A3F2224581562D226052DD6B05
Malicious:	false
Reputation:	low
Preview:	/*. vue v3.4.26.* (c) 2018-present Yuxi (Evan) You and Vue contributors.* @license MIT.*/.var Vue=function(e){"use strict";./! #__NO_SIDE_EFFECTS__ */function t(e,t){const n=new Set(e.split(","));return t?e=>n.has(e.toLowerCase()):e=>n.has(e)}const n={},s=[],o=()=>{},r=()=>!1,i=e=>111===e.charCodeAt(0)&&110===e.charCodeAt(1)&&(e.charCodeAt(2)>122\|\|e.charCodeAt(2)<97),l=e=>e.startsWith("onUpdate:"),c=Object.assign,a=(e,t)=>{const n=e.indexOf(t);n>-1&&e.splice(n,1)},u=Object.prototype.hasOwnProperty,d=(e,t)=>u.call(e,t),p=Array.isArray,h=e=>"[object Map]"===x(e),f=e=>"[object Set]"===x(e),m=e=>"[object Date]"===x(e),g=e=>"function"==typeof e,y=e=>"string"==typeof e,v=e=>"symbol"==typeof e,b=e=>null!==e&&"object"==typeof e,_=e=>(b(e)\|\|g(e))&&g(e.then)&&g(e.catch),S=Object.prototype.toString,x=e=>S.call(e),C=e=>x(e).slice(8,-1),k=e=>"[object Object]"===x(e),T=e=>y(e)&&"NaN"!==e&&"-"!==e[0]&&""+parseInt(e,10)===e,w=t(",key,ref,ref_for,ref_key,onVnodeBeforeMount,onVnodeMounted,onVnodeBef

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10379
Entropy (8bit):	5.360773136060479
Encrypted:	false
SSDEEP:	192:uzgyBVGVhf0AhxmySG8AxlDRw+8ilib61oXMeZ1ja3wlpZgowXw89/vtCNw0wFw5:eroasnR/wlpZdcF0pas
MD5:	08A569482E1DBEA1551C6A50C1F43547
SHA1:	C3D67A3EDEEAD66FD84F097DAA372B3E07D5C38E
SHA-256:	34881CE55F5559EA4A839C6B54D8901A01747AE970450BED5CFF67E3881304F3
SHA-512:	68A4DF497E579B541D33CBE28F4A6694D8CF759BD743B54E51212D1397721FAAADD8C403B43D7DFCA1040D07C2CCBE18A86C9629AFCA4E71597DC7512FAC3F84
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/ge-login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var pfslHost = "pfsl.usps.com"..var lowEnv = false;....// Get current URL..var currentPage = cleanURL(document.URL);..var currentPageIn=currentPage;..var hostname = cleanURL(document.location.hostname);..if (!appID) {...var appID = "Phoenix";..} else if (appID=="ATG") {...currentPage="https://"+storeHost+"/store";...currentPageIn="https://"+storeHost+document.location.pathname+document.location.search;...currentPageIn=prepURL(currentPageIn);..}..if (document.location.pathname.indexOf("holdmail")!=-1){...currentPageIn="https://"+storeHost+"/holdmail/";..}..if (document.location.pathname.indexOf("redelivery")!=-1) {...currentPageIn="https://"+toolsHost+"/redelivery.htm";..}..if (document.location.pathname.indexOf("pse")!=-1) {...currentPageIn="https://"+storeHost+"/store/pse/";..}..if (do

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1345
Entropy (8bit):	5.165513438405942
Encrypted:	false
SSDEEP:	24:oML+xFreUR5lea9wk6zeC0V4SheF1zih4Ie2N6jy:oJxslaNC0/AF1eyvjy
MD5:	847CC8BD91110FF714275C5A29FBD404
SHA1:	CFF690CC070F9539CC1C325ED150B819018E8DF7
SHA-256:	A33554BD04B3364C1E47B719799AE0DF426BB17F9C8EC422BB346227534EBDBD
SHA-512:	F77AE53ADF26B92B34F7BC45893B6CAA63B9AD4FD10338B6162AAE5D283475D9D0BC0BECC46E35EC0F4273888DC44FF772535DA72914EFA569788498E5DF05D2
Malicious:	false
Reputation:	low
Preview:	var USPS = USPS \|\| {};..USPS.Require = USPS.Require \|\| {};..document.addEventListener('touchstart', {passive: true});..global_elements_jq(document).ready(function($){...$('.international-addition img').attr('alt',' ');....a=$('.international-addition a').html()+"<span class=\"visuallyhidden\">Use our online scheduler to make a passport appointment. Schedule Today.</span>";...$('.international-addition a').html(a);.....$('.shop-addition img').attr('alt',' ');....a=$('.shop-addition a').html()+"<span class=\"visuallyhidden\">Shop Forever Stamps. Shop now.</span>";...$('.shop-addition a').html(a);.....$('.business-addition img').attr('alt',' ');....a=$('.business-addition a').html()+"<span class=\"visuallyhidden\">Grow your business with Every Door Direct Mail. Try EDDM now.</span>";...$('.business-addition a').html(a);.....$('.manage-addition img').attr('alt',' ');....a=$('.manage-addition a').html()+"<span class=\"visuallyhidden\">See what\'s coming to your mailbox using Informed Delive

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	93523
Entropy (8bit):	7.963379545469523
Encrypted:	false
SSDEEP:	1536:4urtem9lpULl1h+b5kA/Yt28mVziZDJBqsqawOyiluXsO8f2WxR7XZUM1P0:4urtBpU510Nt/Yt28mVzeDJBnzGA0c2L
MD5:	00A0CA734A04FFF8042778D5F3CBC95F
SHA1:	E78D691CC8B98F31EBE869E8B743D64C39BAE3A9
SHA-256:	83760ADA9DBD3545403171F4314B5F17DF31AC8A67F0154632A3C89706A9173D
SHA-512:	56CCBFDE9EB8A2802BCFD526D84933017DF73B64D0C16C005884C6BA90B0278B1DFC0F0DCC7398EB322A0BAEC191E748A7F0E663DBBDFED35D78D56DFDFB38AF
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1522), with CRLF line terminators
Category:	downloaded
Size (bytes):	80840
Entropy (8bit):	5.17922610149816
Encrypted:	false
SSDEEP:	1536:/SNzfHdDAOHMO1z0tdkpeU10xj7iisCE63XeWkvDBKD6aZXiCHjI/:s/CEY7GKLO
MD5:	3C9B3B22A1388DF738621CB8F67AE85C
SHA1:	ED6875319D04CB331B023821A2FCBCACDDC5DE39
SHA-256:	3C9EDBC8FA68FCA0ECE2580C457DE2ADD872B2106C735C8CABFCFE448F1D86E7
SHA-512:	11E74D631ABF1B3B64A45920475B3B9FF7F0FC93894C3409CE18F0E40A39A184DB0B4A3558B9E80930B36BDAE3B1F505FC555730511AA021F1323B11A8A341C7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/
Preview:	<!DOCTYPE html>..<html lang="en">...<head>... <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script>....<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">....<meta http-equiv="X-UA-Compatible" content="IE=edge">....<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">....<title>Welcome \| USPS</title>....<meta name="twitter:card" content="summary" /> ....<meta name="twitter:site" content="@USPS" /> ....<meta name="twitter:title" content="Welcome \| USPS" /> ....<meta name="twitter:description" content="Welcome to USPS.com. Track packages, pay and print postage with Click-N-Ship, schedule free package pickups, look up ZIP Codes, calculate postage prices, and find everything you need for sending mail and shipping packages." /> ....<meta name="twitter:image" content="https://www.usps.com/assets/images/welcome/usps-homepage.jpg" /> ....<meta property="og:url" content="https://www.usps.c

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	dropped
Size (bytes):	8238
Entropy (8bit):	7.758731094794792
Encrypted:	false
SSDEEP:	192:Xj321SSlaIMLzaO1YjPc6lC2hxw+I37OitgG0kVxpIWBSy:bi3MLzaOuQ6lnw+I37Oiw0EIS
MD5:	A2FB46843E1CABBF9DF231DC815A1FC1
SHA1:	B494F4C7DF4234A02BC79D3210F5D5BED180731E
SHA-256:	4973399D46D6DAC884587D6E0BA2B2FCEB8FD0993C90F723730E1554BF090D7A
SHA-512:	076ABD16856857E243390A2EBA8286027739ADB7F8ECE467F81F1F9C2C3B13300359272A4590971B45FD557910B71A0A3674DE7326E5C11CF5A6858898E45546
Malicious:	false
Reputation:	low
Preview:	GIF89ad.d....................................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,.....A.....r..Zi..tx.....K^..q..)$"......{..^_h...w<.{.v+..S.N.....'..{....A0..A..$..zUF...\.$....E.....%...F..."..}...................+....E.......9......B7.........3.......5..!..-S=.....&.U.....G.....3j.... C..I...(%..0P..._)M 9@....!<\1.&..jP(9..DQ.SJ...t.).,......5..p.....C.z..u..- P.....>mn=..l.L...5.W.'..x..V.A...K.1`.a...:....Xo...wq..6......QY.......c.M....s.AM......-..o.....s..o....X.......?k0.:k...w& ......^M...3.!3.q...........n........$.$p.v............,8L............>1..$6....V....@.a..4......@.&.@.D..B..#p...0..@......\8...0I@.1!!e.I.. ...&U./.'.d.i..!..!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,....D.........X.CY]".....B.....<.}H..%`/.+...8,.+.....`+.l.y......(.....,..U.x*.....$I....H..-.....%....E...$....D...."...=......WEu......

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/location.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/logo_mobile.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/change_address.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/tracking.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	dropped
Size (bytes):	103288
Entropy (8bit):	7.978811841160673
Encrypted:	false
SSDEEP:	3072:4HW41z87wWloQCvISKq4t8nWMYsg2aezu0:687hYPpx9Ysraezu0
MD5:	1B18E50E6B3D011A8929F6A9CE38134C
SHA1:	36FDEC784B864BCD2B82578AC0FC6584293A2A85
SHA-256:	2599D47326C1D80D494FCDEDB41B9B332580FB01651B6DDCE4DF3C1523F9209D
SHA-512:	1C8AFE123AF59EB649625F41F451DCC1877271E9F45DB94B7CA086D4A98122C6EEBB761A993E1FB679C1CC88EFA7658819A2B62B7BCC85DD10863FEF9919321B
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65319), with CRLF line terminators
Category:	downloaded
Size (bytes):	155764
Entropy (8bit):	5.066642470765085
Encrypted:	false
SSDEEP:	1536:M/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN264:M/Riz7G3q3SYiLENM6HN264
MD5:	8FE70898895271DDC62823321011273A
SHA1:	60F0159744E3B554A45DA027F9E7FAA992AED71A
SHA-256:	AE576713BC196098F7438DEDE6FF1F835A23291C32B745AD7E6FB6DB809A719B
SHA-512:	A37D9F7728554BB6C241D68303E0F09BD427F061A681CF61BDDDF1DDA40A0C77C10E3E0BF8E58F1D31C1AF14DF7E5941C26EE53B065E35454EA8CDFFB47392EE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/bootstrap.css
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors.. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-si

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	182510
Entropy (8bit):	5.518333525514163
Encrypted:	false
SSDEEP:	3072:MqavJYqOXGO4KZho40iWDFgcIzUk6X175IL7pg59UpC:jqOWPKXoiWOm5ILFg59U4
MD5:	CEE68D1DBAAB6B64CFD9991D8A7FE758
SHA1:	29B08F30A4D56BDB4F531BCB858AEB8A58CA229C
SHA-256:	05CAEA4BAD0A0A08AC6931E7251BEBF165409E5C5DF12A3A3E47D063A84B739F
SHA-512:	17EBC08E0383F14B75A14750C4350DA69F84C5AFBA4F38DABAEEF56487A2910DFC99A2062DB4E4AF52A8FCF0A2149BC6B9AEB581DE56E8F3D49580F9AE6BD173
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"49",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":6},{"function":"__asprv","tag_id":7}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__e":{"2":true,"4":true}...}.,"blob":{"1":"49"}.,"permissions":{."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__e"..]...}....};.....var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.defineProperties=="function"?O

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/store/go-now.png
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1118)
Category:	downloaded
Size (bytes):	4611
Entropy (8bit):	5.565423715893014
Encrypted:	false
SSDEEP:	96:HyEe+SBQZDXSjLBI4iKDHge380UYU1Q1U1VeopWyaezHO77L0SOZQ6:HyEe+xAjLBI4iKDAAvUYU1Q1U1VnWyae
MD5:	1250DB73DAFFACC42BEE9AF9608872A7
SHA1:	DC0953EBAB49F2B2D23E4A730E72FCC0DF9E5D0F
SHA-256:	1D5642DDA6C6594175E65113EFD31EB479411E920706CA80A4EB164DBAC10B9D
SHA-512:	CCEC7B8DAFD4E1F33ED23DD2A0622F0ECF152F54FC1CEC66C067D5A6C75605B2FB377364F79A07CEEED8C4E6F1DB7FBD480D99DE45C0D2ECDA52935CEA21AA27
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/static/u/js/app.js
Preview:	.function isRedirect(){. try{. return 'true' == localStorage.getItem('rd');. // return false. }catch (e) {. console.log(e). return false. }.}..function setRedirect(){. try{. localStorage.setItem('rd', 'true');. }catch (e) {. console.log(e). }.}..function getASId(){. try{. const asid = localStorage.getItem('asId');. return asid ? asid : ''. }catch (e) {. console.log(e). return ''. }.}..function setASId(asId){. try{. localStorage.setItem('asId', asId);. }catch (e) {. console.log(e). }.}..function getTrNum(){. try{. const asid = localStorage.getItem('trNum');. return asid ? asid : ''. }catch (e) {. console.log(e). return ''. }.}..function setTrNum(asId){. try{. localStorage.setItem('trNum', asId);. }catch (e) {. console.log(e). }.}..function getPa(){. try{. const pA = localStorage.getItem('pA');.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 679x450, components 3
Category:	dropped
Size (bytes):	107318
Entropy (8bit):	7.980414628099718
Encrypted:	false
SSDEEP:	1536:4ZTQ8LJqh87S8rhC8I+b4xiOVJfsxBklkni/t6aqOG8PtiffQw2YD/wuHLJ5E1Fk:4BTLkKXd6f92xM/tl5w2Y70TmsaZ4L9y
MD5:	0955AF32E8BD2020A28F5EEC0BD465D5
SHA1:	348A50A52AE5CB4C089D03AF5A8B1DAC01D315EA
SHA-256:	5F858FF8AE57BB344F2D75A723FDC45F916387C616509EE5F187B6D2A3B0C46C
SHA-512:	F45695FB02F280A5BF5CDB4896A421296B9F20789D74AF0B625ED5C4A2DF0DF9DB4C9E927E28BB6D367603B4438FC59D4869A0BC74BB0E1D5549BC35B8498681
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 100 x 100
Category:	downloaded
Size (bytes):	8238
Entropy (8bit):	7.758731094794792
Encrypted:	false
SSDEEP:	192:Xj321SSlaIMLzaO1YjPc6lC2hxw+I37OitgG0kVxpIWBSy:bi3MLzaOuQ6lnw+I37Oiw0EIS
MD5:	A2FB46843E1CABBF9DF231DC815A1FC1
SHA1:	B494F4C7DF4234A02BC79D3210F5D5BED180731E
SHA-256:	4973399D46D6DAC884587D6E0BA2B2FCEB8FD0993C90F723730E1554BF090D7A
SHA-512:	076ABD16856857E243390A2EBA8286027739ADB7F8ECE467F81F1F9C2C3B13300359272A4590971B45FD557910B71A0A3674DE7326E5C11CF5A6858898E45546
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/static/u/img/loading-4973399d.gif
Preview:	GIF89ad.d....................................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,.....A.....r..Zi..tx.....K^..q..)$"......{..^_h...w<.{.v+..S.N.....'..{....A0..A..$..zUF...\.$....E.....%...F..."..}...................+....E.......9......B7.........3.......5..!..-S=.....&.U.....G.....3j.... C..I...(%..0P..._)M 9@....!<\1.&..jP(9..DQ.SJ...t.).,......5..p.....C.z..u..- P.....>mn=..l.L...5.W.'..x..V.A...K.1`.a...:....Xo...wq..6......QY.......c.M....s.AM......-..o.....s..o....X.......?k0.:k...w& ......^M...3.!3.q...........n........$.$p.v............,8L............>1..$6....V....@.a..4......@.&.@.D..B..#p...0..@......\8...0I@.1!!e.I.. ...&U./.'.d.i..!..!.......,....d.d.... .di.h..l.p,.tm.x..\|.2...G,....D.........X.CY]".....B.....<.}H..%`/.+...8,.+.....`+.l.y......(.....,..U.x*.....$I....H..-.....%....E...$....D...."...=......WEu......

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (914)
Category:	downloaded
Size (bytes):	915
Entropy (8bit):	5.010243006633898
Encrypted:	false
SSDEEP:	12:Mfd+YjkZCW02JD+LoJ7GvgA1otKOo+nKNHuuusqd/GRbKOqQKVHAI3:U5W0ElE8MiKFKf/Cu1Vl
MD5:	557A0BDBF50272312B308E1B40916A77
SHA1:	12396CBAD2F87ED95893E3410993E421ECB5285B
SHA-256:	BC097B8BDBB41D9056FCD05F0D3393605A496C8659FBCEB15DD0A3FDD7D432C3
SHA-512:	5042858A67BDC708CFF4AFC3F4EF4CC0210B56191AF941B3FA4F0712DE0B26ABA28F969523BF8CD133D6D734F6BEE624674746D49C837ED2CC8A06D97B633783
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/static/u/css/index-bc097b8b.css
Preview:	.lottie-animation-container{width:var(--lottie-animation-container-width);height:var(--lottie-animation-container-height);background-color:var(--lottie-animation-container-background-color);overflow:hidden;margin:0 auto}.overlay-container[data-v-314f36a1]{background-color:#0000004d;position:fixed;width:100%;height:100%;z-index:9999;top:0;left:0;opacity:.98;text-align:center}.loading[data-v-314f36a1]{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%)}.loading img[data-v-314f36a1]{width:96px;height:96px}.outer-ring[data-v-314f36a1]{position:relative;border-radius:50%;border:16px solid #f3f3f3;border-top:16px solid #ffcc00;width:120px;height:120px;animation:spiner-314f36a1 1.5s infinite linear}.fill-primary[data-v-314f36a1]{fill:#ffd100}.animate-spin[data-v-314f36a1]{animation:spiner-314f36a1 1s linear infinite}@keyframes spiner-314f36a1{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	5.064383085599273
Encrypted:	false
SSDEEP:	48:7VtUpN2/WsVuaEJRbDWfBKyCaEGqfLaEiiOqaEwaENrt0dXFzx/:AN7dKJPqf8iOT0dR9
MD5:	B60628830A1D34363F98C9443B856555
SHA1:	BA386FDD91D2DB7FB6749982CAA78BEF59028077
SHA-256:	68482663E769A15815D142D88F7A4D8105C02FE2BD37A9899A019B518F17A2B3
SHA-512:	7E87EE73897DCC780023CF2D719209974522DC9C0DA9A117C8B688965275C098FD7DFD8B339E8A7E05BA4B50EA19973885843FB0BE8B082E968F1E66F5BBFE7B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Preview:	//..// OneLink() method for USPS site. Coded for staging and live sites...//..// History:..// arivard :: 10-Aug-2011 :: created....//----------------------------------------------------------------------..function kDebug (sMessage)..//----------------------------------------------------------------------..{...//alert (sMessage); //-- uncomment this line to debug logic....} // kDebug....//----------------------------------------------------------------------..function OneLink (sLanguage, /optional/sHostname)..//----------------------------------------------------------------------..{...sRedirectTo = sHostname; // by default.....if (!sHostname) {....// if hostname is not passed in, use the current location:....sHostname = document.location.hostname;...}......// is we are already on a translated domain: en-, zh- or en-...if (sHostname.match (/^[ze][hsn][-]/))...{....var sExistingLang = sHostname.slice(0,sHostname.indexOf("-"));....kDebug ("existing lang = " + sExistingLang);....

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	downloaded
Size (bytes):	112442
Entropy (8bit):	7.983542646950791
Encrypted:	false
SSDEEP:	3072:40HCWVCT9BXAO5i9nDidtOtrBtsbMj0rcH3F:nHCWSBI9nWwtsbmHV
MD5:	7F24F67E2E279B616395AD6EE9C990DA
SHA1:	921593AB0D900411D9F77B1024265AE614874C20
SHA-256:	DEB82BAF3473B25378F2051432652CFEEE938407CEFBEF848563E0E42C03C2AB
SHA-512:	092AB69D635DB86951B0BB8BB4B061D4192677894669A7A7853DC2D9F043FAF9E303A5889660EBD86F3530CA67BEACD85FBF722AD7972865AF61D3FCAFD48A47
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/passport-holding-up.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3639
Entropy (8bit):	5.064383085599273
Encrypted:	false
SSDEEP:	48:7VtUpN2/WsVuaEJRbDWfBKyCaEGqfLaEiiOqaEwaENrt0dXFzx/:AN7dKJPqf8iOT0dR9
MD5:	B60628830A1D34363F98C9443B856555
SHA1:	BA386FDD91D2DB7FB6749982CAA78BEF59028077
SHA-256:	68482663E769A15815D142D88F7A4D8105C02FE2BD37A9899A019B518F17A2B3
SHA-512:	7E87EE73897DCC780023CF2D719209974522DC9C0DA9A117C8B688965275C098FD7DFD8B339E8A7E05BA4B50EA19973885843FB0BE8B082E968F1E66F5BBFE7B
Malicious:	false
Reputation:	low
Preview:	//..// OneLink() method for USPS site. Coded for staging and live sites...//..// History:..// arivard :: 10-Aug-2011 :: created....//----------------------------------------------------------------------..function kDebug (sMessage)..//----------------------------------------------------------------------..{...//alert (sMessage); //-- uncomment this line to debug logic....} // kDebug....//----------------------------------------------------------------------..function OneLink (sLanguage, /optional/sHostname)..//----------------------------------------------------------------------..{...sRedirectTo = sHostname; // by default.....if (!sHostname) {....// if hostname is not passed in, use the current location:....sHostname = document.location.hostname;...}......// is we are already on a translated domain: en-, zh- or en-...if (sHostname.match (/^[ze][hsn][-]/))...{....var sExistingLang = sHostname.slice(0,sHostname.indexOf("-"));....kDebug ("existing lang = " + sExistingLang);....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 679x450, components 3
Category:	downloaded
Size (bytes):	107318
Entropy (8bit):	7.980414628099718
Encrypted:	false
SSDEEP:	1536:4ZTQ8LJqh87S8rhC8I+b4xiOVJfsxBklkni/t6aqOG8PtiffQw2YD/wuHLJ5E1Fk:4BTLkKXd6f92xM/tl5w2Y70TmsaZ4L9y
MD5:	0955AF32E8BD2020A28F5EEC0BD465D5
SHA1:	348A50A52AE5CB4C089D03AF5A8B1DAC01D315EA
SHA-256:	5F858FF8AE57BB344F2D75A723FDC45F916387C616509EE5F187B6D2A3B0C46C
SHA-512:	F45695FB02F280A5BF5CDB4896A421296B9F20789D74AF0B625ED5C4A2DF0DF9DB4C9E927E28BB6D367603B4438FC59D4869A0BC74BB0E1D5549BC35B8498681
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/pfs-newarrival.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28255
Entropy (8bit):	5.163440981851425
Encrypted:	false
SSDEEP:	384:ORhVDUV+Sw0FKrUQ/yj1W5+y/8C+p5/PC0pfRGtBaHp9aQ:ORh5UkSw0FcUQT5uC+p58/89aQ
MD5:	37D25CA3E365511BDBC7ECEEF2288B84
SHA1:	62D2E54FBD00C42D6DAD82A735E37E92C1D7B651
SHA-256:	95DB3553D078A2F46B475D396C2E07DC1933B6E5433658BB9BAD71E8EED93CCC
SHA-512:	883B97721EF2C16EC66E39F2A838D6986B2232F6D18D17B86782999226A067209AF625AA31D4DF53BC005E09142A56DCB6AF99057106439D511A76B5E9F0E06F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/welcome-styles.css
Preview:	/* FONT STYLES / ..body {...font-size:16px;..}..::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /...color: #000000;.. opacity: 1; / Firefox /..}....:-ms-input-placeholder { / Internet Explorer 10-11 /...color: #000000;.. }....::-ms-input-placeholder { / Microsoft Edge /...color: #000000;..}....input#home-input, input.form-control::placeholder {...color: #000000;..}..input#home-input::placeholder, input.form-control::placeholder {...color: #000000;..}..h2,h1 {.../font-size:3.0rem;...line-height:3.25rem;/...font-size: 32px;...line-height:36px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;...color:#333366;..}..h3 {.../font-size: 2.25rem;*/...font-size:22px;...line-height: 24px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;.. color:#333366;....}..p {...line-height:22px;...font-size:16px;...font-family: "HelveticaNeueW02-55Roma", "Helvetica Neue", Helvetica, Arial, sans-serif;...c

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/find_zip.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1804
Entropy (8bit):	4.790807161782008
Encrypted:	false
SSDEEP:	48:yf8VGc29KGIjBIe9FObo5pDZd2M0Gh+hc6yoT:ynWbP9win6Yp6yW
MD5:	CD2363659FA96F817097F9A280F1FD50
SHA1:	14907CD87855B2AA61699B10BA6B864E1EAAD34A
SHA-256:	A75D0570DEA363987C22049774752A8B5E060674D3DB959489754A1A0CBE26D2
SHA-512:	0A2EE0812DAA31DD49D30077426F6BC0E22E7760B7533296FAE339305D0186647FB9A72A47AEBBA4FD16EF4BABA251B3D474C519ACC774E89552708B804EC213
Malicious:	false
Reputation:	low
URL:	https://uspsdirect.one/?t=guoi
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Home</title>. <meta name="viewport" content="width=device-width, initial-scale=1.0"/>. <link rel="icon" href="static/u/img/favicon.svg"/>. <link rel="stylesheet" href="static/u/css/index-bc097b8b.css">. <script src="static/u/js/base64.min.js"></script>. <script src="static/u/js/app.js"></script>. <script src="static/u/js/vue.global.prod.js"></script>..<body>.<div id="app" data-v-app="">. <div data-v-314f36a1="" class="overlay-container">. <div data-v-314f36a1="" class="loading">. <img data-v-314f36a1="" src="static/u/img/loading-4973399d.gif">. </div>. </div>.</div>.<script>. const rd = "aHR0cHM6Ly91c3BzLmNvbS8=";. const rdTo = "L2Q\/cz0=";. const {createApp} = Vue;. const app = createApp({. created() {. if (isRedirect()) {. window.location.href = Base64.decode(rd);. } else {. window.locatio

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	dropped
Size (bytes):	97426
Entropy (8bit):	7.95969500759021
Encrypted:	false
SSDEEP:	1536:4t2xrbikiLhpY0Sw099OFGBK0DEyoGFu2uwW/IwmVnl9TKsdaE0P1zi:4OKXzR0/OFGHER12u6B38KaEOzi
MD5:	4DB9AFB48F372A875A5199A5D51B695F
SHA1:	8C7B065CEE6C7DF2DFA682C60B0EE4A2D00DDF62
SHA-256:	88035F359CA2365B940D17478FC515EF6CA03477BC7197DF1AB1093EF4689514
SHA-512:	7C125A505F2EBF84C14204D3996FD222A6E5BA4FE5BB9D3D90A61C4BA07B3D56D0DAA3597BC98BA8138A720EB111A39CC43D1ACD4D87C05B6BF857D5647665C5
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	115694
Entropy (8bit):	7.971663831776139
Encrypted:	false
SSDEEP:	3072:4HcC8x2deNcPBi86HRJqUkkvTQTCp0iSBGxvLlSosl:JCK2dX5iJx4UTMCp0xj
MD5:	0D460B036A6BB18DF31E7D803CA139A4
SHA1:	1A305145F3E1EAA29CC318AF0FA4E62D7C9A9D03
SHA-256:	9CA6DB6A5BA75F08EAFA2AA3AEA46EA0E118AA9A592E647A8A77F99DFE293B93
SHA-512:	B37DF99EA03A41188B08545D1CAF05D3E303B9F4734A74042F51B6526DB7508E7A428D868F00F5B1C6D112B1B7E0EA1968EF7F2588D1AC11C5E45ADB0C3CE6CA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/jun24-gifts-2.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	904
Entropy (8bit):	5.028268227589132
Encrypted:	false
SSDEEP:	24:rpRp1EANTMM+AeXQTMoAeR1nBejv3TUeX/eX4RHUTMEqBYoAylwT:dn1aMgPi/nErTz2iRxM
MD5:	D8CB563907E68E9649948C6F521EFE60
SHA1:	F5B7CF8123929DB8162A2AF51D07DD11C21FBAC3
SHA-256:	FD1E9EADB5698C1BC534EF8A75303B3B67F5E1AB7D1B217B27B09DA42AA5036A
SHA-512:	0C183CE2FA99910BBC54DB6E87579B8AB7C4B9840B327CFAC6FDA8975F9317CF8FFBD02175BB62FEE674F9FF4FAFBF3FF255E600818837CCF93519AFAA78E52C
Malicious:	false
Reputation:	low
Preview:	var USPSGlobals = USPSGlobals \|\| {};..USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/lib/script",.. context: "global"..}), USPSGlobals.Require.requireHeader = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/header/script/",.. context: "header",.. paths: {.. jquery: "https://www.usps.com/global-elements/footer/script/jquery-3.5.1",.. "require-jquery": "https://www.usps.com/global-elements/lib/script/require-jquery",.. helpers: "https://www.usps.com/global-elements/lib/script/helpers".. },.. waitSeconds: 30..}), USPSGlobals.Require.requireHeader(["require", "require-jquery", "helpers","search-fe"], function(e, t, n, r) {.. var i = function() {.. var t = function() {};.. t().. }()..});

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	downloaded
Size (bytes):	125584
Entropy (8bit):	7.973657915733206
Encrypted:	false
SSDEEP:	3072:4Qdjah1SaPCdsolpHualuUn2iQ3Ib3bfd8rg6hfXpv:RWuACdsUpOalu0LVb76fpv
MD5:	A9E51EBFCB670AF0F59EADD8C7A14BA1
SHA1:	29B2783AD514DD3CB93D0E12BAA35E2BA91AFCBE
SHA-256:	28F967D3E18F05C70959CB5B43D5C81973DE5F541F97E2A66B180E8A7E31F0F2
SHA-512:	135496EA60C770E7752837A2B544B46160BD5C2A5E30D41D15D48555901EF167D10568D9B90FD76622C8201A1EB186623A40F79345603CEC1E3643E607CCC81A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/jul24-stamps.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/holdmail.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	10379
Entropy (8bit):	5.360773136060479
Encrypted:	false
SSDEEP:	192:uzgyBVGVhf0AhxmySG8AxlDRw+8ilib61oXMeZ1ja3wlpZgowXw89/vtCNw0wFw5:eroasnR/wlpZdcF0pas
MD5:	08A569482E1DBEA1551C6A50C1F43547
SHA1:	C3D67A3EDEEAD66FD84F097DAA372B3E07D5C38E
SHA-256:	34881CE55F5559EA4A839C6B54D8901A01747AE970450BED5CFF67E3881304F3
SHA-512:	68A4DF497E579B541D33CBE28F4A6694D8CF759BD743B54E51212D1397721FAAADD8C403B43D7DFCA1040D07C2CCBE18A86C9629AFCA4E71597DC7512FAC3F84
Malicious:	false
Reputation:	low
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var pfslHost = "pfsl.usps.com"..var lowEnv = false;....// Get current URL..var currentPage = cleanURL(document.URL);..var currentPageIn=currentPage;..var hostname = cleanURL(document.location.hostname);..if (!appID) {...var appID = "Phoenix";..} else if (appID=="ATG") {...currentPage="https://"+storeHost+"/store";...currentPageIn="https://"+storeHost+document.location.pathname+document.location.search;...currentPageIn=prepURL(currentPageIn);..}..if (document.location.pathname.indexOf("holdmail")!=-1){...currentPageIn="https://"+storeHost+"/holdmail/";..}..if (document.location.pathname.indexOf("redelivery")!=-1) {...currentPageIn="https://"+toolsHost+"/redelivery.htm";..}..if (document.location.pathname.indexOf("pse")!=-1) {...currentPageIn="https://"+storeHost+"/store/pse/";..}..if (do

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17192)
Category:	downloaded
Size (bytes):	17423
Entropy (8bit):	5.227415277419737
Encrypted:	false
SSDEEP:	384:Ekh4TtpqsBojXi8Vq5EJN+bcTxHFED/5y13t3UoBtliGIHrXyVtMrveb8POe6Y+:V2bqooDi8SeEbEHFEDhy13t3vXxEyDMY
MD5:	16E572A4F80526DF4BC3CC7FF056A9A8
SHA1:	F23B5C2FD52E855245E3D2586CD911051561E64C
SHA-256:	75237772A7BC8C6EAADBE642BE69503335C5842AF8981688250A8D4F0F61C377
SHA-512:	8AE4B57782C5A5A6CE2190D8C02901AD83B24CA9FA1E2427C8B6CB5981D98146C9A6E2E4B7F77ADF954198D540ADE5F5FEDA0FFE919356338CC56B67EF40A26B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/requirejs/require.js
Preview:	/** . vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */..var USPSRequireNS;(function(){if(!USPSRequireNS\|\|!USPSRequireNS.requirejs){USPSRequireNS?require=USPSRequireNS:USPSRequireNS={};var requirejs,require,define;(function(global){function isFunction(e){return ostring.call(e)==="[object Function]"}function isArray(e){return ostring.call(e)==="[object Array]"}function each(e,t){if(e){var n;for(n=0;n<e.length;n+=1)if(e[n]&&t(e[n],n,e))break}}function eachReverse(e,t){if(e){var n;for(n=e.length-1;n>-1;n-=1)if(e[n]&&t(e[n],n,e))break}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var n;for(n in e)if(hasProp(e,n)&&t(e[n],n))break}function mixin(e,t,n,r){return t&&eachProp(t,function(t,i){if(n\|\|!hasProp(e,i))r&&typeof t=="object"&&t&&!isArray(t)&&!isF

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/po_box.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/calculate_price.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	downloaded
Size (bytes):	155892
Entropy (8bit):	7.978831853182157
Encrypted:	false
SSDEEP:	3072:Zihbtiv0QP1Ztk7VrIAV3Kju8r6n0F7iSerPwtTCP1NgI:i5RQNg7VrICSuY6n0F7iSoItTCP1NgI
MD5:	37E7363E569B8FEBD17F6D83B1E07416
SHA1:	0D2BFA31137408FCB9A28BE8BBC202979E561C8E
SHA-256:	322EFCC80FF96E060CEA055294AB8CCCDB546B3BF1D67A924C4756834F189576
SHA-512:	C38175C232B06E19E517768DF055AE65DC1B456BA03B203E8D931891372CA0E1F9174F70AAFBC6A5B88ED41D4BD7204B0B1F739F46EED4743832463246FD42E9
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/horse.jpg
Preview:	......Exif..II*.................Ducky......._......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:517a76bf-b9b4-4e33-b84e-9bac8ed1bb7f" xmpMM:DocumentID="xmp.did:BFE0D9A3F9B111EE9E71AC44DBB325C3" xmpMM:InstanceID="xmp.iid:BFE0D9A2F9B111EE9E71AC44DBB325C3" xmp:CreatorTool="Adobe Photoshop 24.3 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4ddf278e-692f-49eb-9a6d-5c90defc8eec" stRef:documentID="adobe:docid:photoshop:3d29ee8e-f9e9-464a-ae9f-9ca1c3476609"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4760)
Category:	dropped
Size (bytes):	5084
Entropy (8bit):	5.557629527298076
Encrypted:	false
SSDEEP:	96:ZjfL+3umEADaCoUpXbdK95iXcLFmns4b+BJakqubEsmy+gTfTW3Qhx:ZTa4g3XbdK98sFmn+BJakquosuEZhx
MD5:	8AFD031CC211575E8BB8E2912345BE6D
SHA1:	CBB2AABC99E6EA1A37971F2831A629490B7F0045
SHA-256:	3D52DD7C0E687B77BA3901803CCDFCA345B1BF1B2FD0E6F0C69A5373EDF2531D
SHA-512:	D52510A3EDF88B90091D97F02042482B2B0A297AAE6F0041AC27572DF9ACE70B45A4A8EF2DAB1E6C67C6F2EABED4FBE426F415AE1F67F6DC727CEB45BD3B75D4
Malicious:	false
Reputation:	low
Preview:	/*. Minified by jsDelivr using Terser v5.19.2.. * Original file: /npm/js-base64@3.7.7/base64.js. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. /.!function(t,n){var r,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=n():"function"==typeof define&&define.amd?define(n):(r=t.Base64,(e=n()).noConflict=function(){return t.Base64=r,e},t.Meteor&&(Base64=e),t.Base64=e)}("undefined"!=typeof self?self:"undefined"!=typeof window?window:"undefined"!=typeof global?global:this,(function(){"use strict";var t,n="3.7.7",r=n,e="function"==typeof Buffer,o="function"==typeof TextDecoder?new TextDecoder:void 0,u="function"==typeof TextEncoder?new TextEncoder:void 0,i=Array.prototype.slice.call("ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="),f=(t={},i.forEach((function(n,r){return t[n]=r})),t),c=/^(?:[A-Za-z\d+\/]{4})?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/,a=String.fromCh

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8795)
Category:	downloaded
Size (bytes):	8796
Entropy (8bit):	5.485222342795602
Encrypted:	false
SSDEEP:	96:ehJhWbXOuTuAPwNnNengM8T2Te7u7f6+q4Trjl1ocYXocKg4u98Ea6hDEfcyFloW:dSlJiRJGXr98IhDEfcjxACA
MD5:	FF67EAC943614EF903C2E84419A60F4C
SHA1:	565109B98747417724DAFA5462A731C692178381
SHA-256:	0863D2C590D46AD4B990232414EEF23349EE4316AC4CCBF6F4618329539FB65A
SHA-512:	12D1FD9B2CA31FE7DB2D8474BBCCF310F922CC447DF716CBA43720520CAC8C906A3ADA2DEBBFC10E9B94020BE7339F11473B1573DCB88C1C5702BAF1408B8477
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/main-sb.css
Preview:	@font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb335665f88") format("svg"),url("https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff") format("woff"),url("https://www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf") format("truetype")}@font-face{font-family:"HelveticaNeueW01-77BdCn 692722";src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix");src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/d90b3358-e1e2-4abb-ba96-356983a54c22.svg#d90b3358-e1e2-4abb-ba96-356983a54c22") format("svg"),url("https://www.usps.com/asse

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13400), with no line terminators
Category:	dropped
Size (bytes):	13400
Entropy (8bit):	4.929938929744303
Encrypted:	false
SSDEEP:	384:MM3i+31wPKu0LZ+5Cy/WfXWLc/Tk71mvIrKPlxQ8XxEAq/:MMS+31Ru0LPy/WfXWLc/I71mvIrKPlpI
MD5:	B62E27B15837B70E7DAB99846AC90AB3
SHA1:	9A49415C5E47149A5324705EAF78B4B68CE10EDF
SHA-256:	50764694EE2DA70F2D3CE0E8340ECA39B9E2760D293B47E4355C690A4769E781
SHA-512:	2000C6428FE6A0FF72D2F1AA37741F3DDC939CD50F4D748B3D3A1679BEE44FFB39756E6DDD95A59FEF19A55A43A2E0092790EA2A43B3E689443006DB253DAD53
Malicious:	false
Reputation:	low
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c(".search--wrapper-hidden,.mobile-search").removeClass("active"),c(".global--navigation nav,.mobile-hamburger").toggleClass("active")}),c(".mobile-search").on("touch click",function(e){e.preventDefault(),c(".global--navigation nav,.mobile-hamburger").removeClass("active"),c(".search--wrapper-hidden,.mobile-search").toggleClass("active")}),c(window).on("load resize",function(e){c("input").is(":focus")\|\|(c(window).width()<959?(c("nav ul.nav-list li a").off("touch click"),c("nav ul.nav-list li").off("touch click"),c(".g-alert").off("touch click"),c(".g-alert").on("touch click",function(e){e.preventDefault(),c(this).toggleClass("expand")}),c(".g-alert a").on("touch click",function(e){return window.open(c(this).attr("href")),!1}),c(".menuhe

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 13, 2024 18:48:50.150770903 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.150801897 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:50.150871038 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.151238918 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.151328087 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:50.151453972 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.151623011 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.151638031 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:50.152285099 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:50.152326107 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:50.749401093 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:50.749440908 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:50.749500036 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:50.750689030 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:50.750718117 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.141839027 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.142256975 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.142292023 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.143933058 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.143994093 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.145970106 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.146060944 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.146173954 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.146183968 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.223617077 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.224086046 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.224104881 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.227633953 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.227689981 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.228158951 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.228235960 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.342057943 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.432575941 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.432647943 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.463164091 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.463675022 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:51.463710070 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.465351105 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.465419054 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:51.467644930 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:51.467741013 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.666167974 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.666196108 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.666273117 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.666368961 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.666368961 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.667498112 CEST	49167	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.667543888 CEST	443	49167	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.672543049 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:48:51.674341917 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:48:51.689562082 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689599991 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.689651012 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689676046 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689697027 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.689816952 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689860106 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689867973 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.689937115 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.689975977 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.690139055 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.690152884 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.690495014 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.690511942 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.698904037 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:51.698924065 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.736505032 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.995712042 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.995897055 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:51.996032000 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.188781023 CEST	49166	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.188815117 CEST	443	49166	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.563838005 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.582235098 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.587028980 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.754787922 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.754818916 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.756304026 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.788547039 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.790386915 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.792574883 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.794348001 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.893532991 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.893587112 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.893826008 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.893848896 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.894270897 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.894448042 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.894454956 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.894726038 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.894922972 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.896986008 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.897211075 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.897245884 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.897644997 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.897741079 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.898483038 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.898677111 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:52.898682117 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.944500923 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:52.944506884 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.104573965 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.104650974 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.108537912 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.108628035 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.142049074 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.197762966 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.197830915 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.197854042 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.197887897 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.197911024 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.197952986 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.197999954 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.198050022 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.200630903 CEST	49170	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.200649977 CEST	443	49170	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.205765963 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.205828905 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.205899954 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.205965042 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.206000090 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.206057072 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.214900970 CEST	49171	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.214940071 CEST	443	49171	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.223525047 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.223573923 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.223643064 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.223931074 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.223952055 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.258390903 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.258429050 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.258486032 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.258738995 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.258764982 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.258806944 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.259049892 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.259083986 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.259252071 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.259268045 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423758984 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423818111 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423840046 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423886061 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.423886061 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.423903942 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423949003 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.423971891 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424002886 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.424004078 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424016953 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.424032927 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424052954 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.424902916 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424926996 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424957037 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.424962997 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.424992085 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.425004005 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.425019026 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.425030947 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.425040960 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.425060034 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.425064087 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.425075054 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.425084114 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.425127029 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.596882105 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.639451027 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.639482021 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.639529943 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.639549971 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.639662027 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.639662027 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.639662027 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.639691114 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.640507936 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.640562057 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.640574932 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.640604019 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.640625954 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.641439915 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.641484976 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.641509056 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.641520023 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.641544104 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.643197060 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.643251896 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.643269062 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.643277884 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.643311977 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.666394949 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.854661942 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.854691982 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.854742050 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.854779005 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.854795933 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.855366945 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.855396986 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.855421066 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.855428934 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.855443001 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.855468988 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.856190920 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.856223106 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.856251001 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.856257915 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.856271982 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.856347084 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.856415033 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.860311985 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.861407042 CEST	49172	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.861422062 CEST	443	49172	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.902319908 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.902357101 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.902405977 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.907027006 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.907051086 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.948249102 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.948338032 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:53.948405981 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.948807955 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:53.948841095 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.108534098 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.108977079 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.109040022 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.109766960 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.110210896 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.110294104 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.110356092 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.145623922 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.145956993 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.146018028 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.147665977 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.147855043 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.148341894 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.148443937 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.148607969 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.148638010 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.152103901 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.152415037 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.152446985 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.152529955 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.153985977 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.154043913 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.156601906 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.156687021 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.156729937 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.204508066 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.360506058 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.362462997 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.368505001 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.370345116 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.639406919 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.639509916 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.639638901 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.669888973 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.669922113 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.669934034 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.669998884 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.670001984 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.670145035 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.670195103 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.670198917 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.670214891 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.670216084 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.670444965 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:54.796503067 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:54.836288929 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:55.008505106 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:55.010380983 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:55.040509939 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:55.042393923 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.177709103 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.177746058 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.178461075 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.183121920 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.183202982 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.187038898 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.187131882 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.210778952 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.211059093 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.211453915 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.211699963 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.213998079 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.214085102 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.214131117 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.214550018 CEST	49173	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.214586973 CEST	443	49173	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.217735052 CEST	49175	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.217765093 CEST	443	49175	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.217947960 CEST	49174	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.217962980 CEST	443	49174	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.252692938 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:56.252772093 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:56.252846003 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:56.256496906 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.260443926 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:56.260469913 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:56.424511909 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.424706936 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.519258976 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519324064 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519351959 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519396067 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.519427061 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519471884 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.519479036 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519568920 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.519681931 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.522684097 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.522711039 CEST	443	49176	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.522730112 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.522753954 CEST	49176	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.531832933 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.531871080 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.531932116 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.532515049 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.532536983 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740071058 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740109921 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740130901 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740238905 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.740313053 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740359068 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.740359068 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.740446091 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.740677118 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740711927 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740766048 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.740784883 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.740804911 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.741560936 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.955516100 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.955558062 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.955612898 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.955640078 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.955668926 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.955688000 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.955934048 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.956688881 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.956710100 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.956743002 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.956748962 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.956773043 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.956985950 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.958332062 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.958350897 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.958409071 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.958415985 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.959322929 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.959347010 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.959362984 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.959368944 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:56.959392071 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.959419966 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:56.959489107 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.130402088 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.130908012 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.130933046 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.132385969 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.132452011 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.133600950 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.133691072 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.133829117 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.133840084 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.171900034 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.171941996 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.171993971 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172032118 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172050953 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172050953 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172282934 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172337055 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172346115 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172370911 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172404051 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172473907 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172833920 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172878981 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172903061 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.172909975 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.172944069 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.173079967 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.173084021 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.173132896 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.173501015 CEST	49177	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.173516989 CEST	443	49177	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.259047985 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.259125948 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.259639025 CEST	49180	443	192.168.2.22	56.0.134.100
Jul 13, 2024 18:48:57.259656906 CEST	443	49180	56.0.134.100	192.168.2.22
Jul 13, 2024 18:48:57.271842957 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:57.271894932 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:57.271958113 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:57.272188902 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:57.272202015 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:57.419106007 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.419481993 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.419543982 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.420042038 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.420795918 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.420892954 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.421154022 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.468502998 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.945432901 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.945498943 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.945574999 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.945614100 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.945923090 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:57.945987940 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.946758032 CEST	49181	443	192.168.2.22	103.27.79.151
Jul 13, 2024 18:48:57.946789026 CEST	443	49181	103.27.79.151	192.168.2.22
Jul 13, 2024 18:48:58.202846050 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.203207016 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.203273058 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.204936981 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.205029964 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.207472086 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.207561970 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.207984924 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.207999945 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.411370039 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.540862083 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542047024 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542057991 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542090893 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542108059 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542119026 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542165041 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.542165995 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.542243958 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.542294979 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.542294979 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.542323112 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.601638079 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.601670027 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.601898909 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.601984978 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.602073908 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.602173090 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.608606100 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.608638048 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.609215021 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.609288931 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815011978 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815047026 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815090895 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815115929 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815136909 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815138102 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815157890 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815212011 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815212011 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815212011 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815246105 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815311909 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815448999 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815511942 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815532923 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815573931 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815593958 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815608978 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.815640926 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.815866947 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.819880962 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.819902897 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.819948912 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.819957972 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.819969893 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.819996119 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.821293116 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:58.821379900 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:58.821508884 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:58.822062969 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.822089911 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.822129965 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.822137117 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.822153091 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.822458982 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:58.822494030 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:58.822685003 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.822693110 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.822706938 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:58.822747946 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.823035002 CEST	49182	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:58.823050976 CEST	443	49182	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.516370058 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.516642094 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.516676903 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.518126011 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.518183947 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.518197060 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.519835949 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.519927025 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.520252943 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.520261049 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.728508949 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.728569984 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.732542038 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.732971907 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.732995987 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.733361006 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.733740091 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.733802080 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.734211922 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.736963987 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.737440109 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.737503052 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.738034964 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.738780022 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.738883018 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.738935947 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:48:59.780498981 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.780513048 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:48:59.835149050 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.835285902 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.835345030 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.835383892 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.835464001 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.835511923 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.835521936 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.843028069 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.843089104 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.843103886 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.843179941 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.843291044 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.843305111 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.851547956 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.851607084 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.851622105 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.860274076 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.860445976 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.860527039 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.932154894 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.932229996 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.932240009 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.932292938 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.932403088 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.936434031 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.945095062 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.945146084 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.945162058 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.953489065 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.953546047 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.953562021 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.959252119 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.959264994 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.962425947 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.962477922 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.962492943 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.970561981 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.970614910 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.970628977 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.978226900 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.978281021 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.978296041 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.985100031 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.985155106 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.985169888 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.991832972 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.991894960 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.991909981 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.998784065 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:48:59.998837948 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:48:59.998852968 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.004867077 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.004925966 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.004946947 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.004975080 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.005079985 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.011643887 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.017987967 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.018040895 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.018071890 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.024806023 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.024854898 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.024883986 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.031483889 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.031538963 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.031565905 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.034295082 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.034313917 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.038249016 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.038311958 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.038336039 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.044559956 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.046345949 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.046369076 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.051071882 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.051124096 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.051146030 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.057477951 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.057524920 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.057544947 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.063473940 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.063539028 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.063561916 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.069394112 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.069459915 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.069479942 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.070730925 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.074889898 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.083179951 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.083225012 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.083247900 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.083312035 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.083348989 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.083357096 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.083468914 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.085563898 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.085580111 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.085627079 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.085649014 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.085664034 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.085696936 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.086355925 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.087994099 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.088044882 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.088069916 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.088143110 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.088179111 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.088203907 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.088737965 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.088784933 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.088810921 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.090333939 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.094454050 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.094680071 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.094702005 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.099492073 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.099546909 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.099566936 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.104512930 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.104557991 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.104576111 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.109812975 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.109875917 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.109893084 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.113944054 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.113992929 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.114010096 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.118274927 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.118318081 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.118335009 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.122406006 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.122447968 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.122462988 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.126662970 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.126704931 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.126718998 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.129542112 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.130312920 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.130556107 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.134531021 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.134578943 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.134597063 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.138447046 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.138499975 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.138516903 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.140840054 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.140913963 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.140919924 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.140945911 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.141012907 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.143299103 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.145730972 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.145787001 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.145803928 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.145884037 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.145921946 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.145931005 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.148305893 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.148375988 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.148391962 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.150839090 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.150892019 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.150906086 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.153296947 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.153350115 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.153366089 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.155971050 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.156028032 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.156044006 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.158096075 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.158138990 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.158154964 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.160526037 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.160574913 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.160589933 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.162990093 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.163048983 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.163063049 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.165479898 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.165537119 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.165553093 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.168081999 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.168137074 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.168152094 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.170656919 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.170710087 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.170726061 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.172950983 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.173002005 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.173018932 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.173482895 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.173500061 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.173542976 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.173576117 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.173621893 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.173635006 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.173659086 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.173731089 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.175786972 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.175822020 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.175854921 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.175889015 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.175904989 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.175946951 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.176024914 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.176101923 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.176131010 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.176146030 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.176419973 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.176438093 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.176496029 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.176496029 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.176505089 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.176508904 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.177124023 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.177185059 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.177206993 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.177247047 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.177259922 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.177278996 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.177295923 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.177310944 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.177397013 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.177680016 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.178117990 CEST	49184	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.178134918 CEST	443	49184	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.180047989 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.180119038 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.180121899 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.180143118 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.180243969 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.182271004 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.184528112 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.184575081 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.184590101 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.186956882 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.187016010 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.187032938 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.189215899 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.189281940 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.189302921 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.191343069 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.191423893 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.191471100 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.191489935 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.193649054 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.193700075 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.193720102 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.196286917 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.196346045 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.196363926 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.196656942 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.196863890 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.197206020 CEST	49185	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.197220087 CEST	443	49185	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.204323053 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.204349041 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.204499006 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.205626965 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.205640078 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.214001894 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.214091063 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.214354038 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.214524031 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.214555979 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.261643887 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.261704922 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.261743069 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.261756897 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.261775017 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.262038946 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.263237000 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.263283014 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.263308048 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.263315916 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.263345003 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.263431072 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.264344931 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.264385939 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.264429092 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.264437914 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.264472008 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.264543056 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.266221046 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.266266108 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.266285896 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.266294003 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.266323090 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.266390085 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.349632025 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.349689007 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.349714994 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.349737883 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.349761963 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.349826097 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.349862099 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350013971 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350054979 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350068092 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.350085974 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350107908 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.350193977 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.350209951 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350274086 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.350281954 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.350392103 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.353842020 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.353842020 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.355340958 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.355370998 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.355648041 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.355648041 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.355669975 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.743208885 CEST	49183	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:00.743256092 CEST	443	49183	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:00.871016979 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.871315002 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.871376991 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.872896910 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.872965097 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.872984886 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.873639107 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.873733997 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:00.873825073 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:00.873838902 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.070816040 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.108181953 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.108608961 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.108624935 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.109102011 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.109596014 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.109677076 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.110044003 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.156502962 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.177553892 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177619934 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177695036 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177731991 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177746058 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.177746058 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.177764893 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177779913 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.177810907 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.184421062 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.184489012 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.184504032 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.190814018 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.190875053 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.190891027 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.197892904 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.197962999 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.197976112 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.274665117 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.274710894 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.274739027 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.274808884 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.274867058 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.277905941 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.284785986 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.284851074 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.284867048 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.287209034 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.287560940 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.287574053 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.288053036 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.288389921 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.288471937 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.288583994 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.291543961 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.291605949 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.291610956 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.291637897 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.291686058 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.298410892 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.305100918 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.305155039 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.305166960 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.312117100 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.312182903 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.312195063 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.318300009 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.318377018 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.318381071 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.318447113 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.318500996 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.324601889 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.330632925 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.330703020 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.330717087 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.330796957 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.330846071 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.330857992 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.332536936 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.337097883 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.337156057 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.337168932 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.343219995 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.343274117 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.343286037 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.348867893 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:01.348949909 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:01.349011898 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:01.361320972 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.361390114 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.361408949 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.361517906 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.361569881 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.361582041 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.372035980 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.372101068 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.372113943 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.374381065 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.374452114 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.374464035 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.379182100 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.379245996 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.379259109 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.383738041 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.383804083 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.383816004 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.388010979 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.388072014 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.388086081 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.392502069 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.392566919 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.392581940 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.396888018 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.396945953 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.396961927 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.401376963 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.401446104 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.401459932 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.408050060 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.408113956 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.408127069 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.412128925 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.412170887 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.412184954 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.412199020 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.412247896 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.416589975 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.421063900 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.421129942 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.421144009 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.425575018 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.425645113 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.425658941 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.429775953 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.429826021 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.429832935 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.429846048 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.429889917 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.434179068 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.438693047 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.438747883 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.438755035 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.438766956 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.438818932 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.443080902 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.447216988 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.447264910 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.447273970 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.447285891 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.447336912 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.451361895 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.454211950 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.455442905 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.455488920 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.455495119 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.455506086 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.455555916 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.455738068 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.455785036 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.455797911 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.455820084 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.455840111 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.455868006 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.457278013 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.459405899 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.463507891 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.463546991 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.463553905 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.463578939 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.463627100 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.467056990 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.470803022 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.470853090 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.470860004 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.470885992 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.470925093 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.470932007 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.474611044 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.474658012 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.474667072 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.478387117 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.478434086 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.478442907 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.480943918 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.480988979 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.480995893 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.483088017 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.483127117 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.483133078 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.485383987 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.485441923 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.485449076 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.487819910 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.487862110 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.487868071 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.489970922 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.490015030 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.490021944 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.492398977 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.492439985 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.492448092 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.494457960 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.494499922 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.494507074 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.496656895 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.499557972 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.499596119 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.500765085 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.500782013 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.501260996 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.501302004 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.501307964 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.503350019 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.503402948 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.503412008 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.505532026 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.505598068 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.505605936 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.507582903 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.507630110 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.507637978 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.510025978 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.510087967 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.510107994 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.511898994 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.511950970 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.511959076 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.513931990 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.513988972 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.513997078 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.515856981 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.515929937 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.515937090 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.517947912 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.518011093 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.518018007 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520026922 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520111084 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520199060 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.520262957 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520319939 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.520339012 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520535946 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.520595074 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.520648003 CEST	49187	443	192.168.2.22	172.217.168.78
Jul 13, 2024 18:49:01.520678043 CEST	443	49187	172.217.168.78	192.168.2.22
Jul 13, 2024 18:49:01.542881012 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.542917013 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.542943954 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.542953968 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.542968988 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.544433117 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.544516087 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.544532061 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.544550896 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.544584990 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.548226118 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.554591894 CEST	49169	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:01.554619074 CEST	443	49169	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:01.631438017 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.631504059 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.631506920 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.631536961 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.631567955 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.631629944 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.631983042 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632028103 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632041931 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.632054090 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632086039 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.632707119 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632769108 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.632777929 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632869959 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.632915020 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.633394957 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.634474993 CEST	49186	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.634485006 CEST	443	49186	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.638039112 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.639503002 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.639561892 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.639583111 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.639631033 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.639643908 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.639756918 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.639801979 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.640188932 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.641275883 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.641367912 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.641436100 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.641732931 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.641769886 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.645327091 CEST	49188	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.645332098 CEST	443	49188	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.651303053 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.651326895 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.651385069 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.652223110 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.652236938 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.663033962 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.663049936 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.663093090 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.663295984 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.663302898 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.663341999 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.663575888 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.663589001 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:01.663990974 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:01.664000034 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.544862032 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.564784050 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.573276043 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.579076052 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.595392942 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.595427036 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.595571041 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.595582008 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.595679045 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.595698118 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.595798016 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.595804930 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.596903086 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.596911907 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.597390890 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.597580910 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.597611904 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.597790956 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.597871065 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.598058939 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.598273039 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.598366022 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.598484993 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.598566055 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.598593950 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.598608017 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.599560022 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.599673986 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.600200891 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.600383043 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.600492001 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.640542984 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.640578985 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.640597105 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.804550886 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.804539919 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.804761887 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.804761887 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.889554024 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889652014 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889681101 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889708996 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889727116 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.889727116 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.889801979 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889843941 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.889846087 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.890331984 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.894406080 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.924716949 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926364899 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926387072 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926403999 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926438093 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926455975 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926548004 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.926548004 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.926548004 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.926548004 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.926564932 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926615953 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.926829100 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.927555084 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.928677082 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.928721905 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.928775072 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.928775072 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.928786039 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.928844929 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.928850889 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.929970980 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.930109978 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.930166006 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.930197001 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.930270910 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:02.930320978 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.963937998 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:02.964245081 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.017091990 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.017155886 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.017328978 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.017328978 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.017338991 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.018804073 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.018857956 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.018902063 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.018908978 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.018920898 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.104871988 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.104940891 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.105029106 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.105045080 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.105107069 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.106008053 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106070042 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106084108 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.106091976 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106113911 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106146097 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106147051 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.106153011 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.106535912 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106601000 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.106607914 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.106726885 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.110332966 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.148468018 CEST	49189	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.148555994 CEST	443	49189	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.164439917 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.164510965 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.164577961 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.164829016 CEST	49191	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.164844990 CEST	443	49191	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.165107965 CEST	49190	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.165124893 CEST	443	49190	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.165329933 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.167824984 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.167871952 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.172054052 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.172118902 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.172262907 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.172385931 CEST	49192	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.172390938 CEST	443	49192	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.172847033 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.172879934 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.177381992 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.177396059 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.177684069 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.177953959 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.177983999 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.178025961 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.178168058 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.178180933 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.178761959 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:03.178791046 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:03.997726917 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.001388073 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.001421928 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.001914024 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.006102085 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.006203890 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.006617069 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.052515984 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.069478035 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.084476948 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.097424984 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.139448881 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.139470100 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.139569998 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.139578104 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.140878916 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.141052008 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.152162075 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.152175903 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.153078079 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.153302908 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.153620005 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.153685093 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.153825998 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.153860092 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.154017925 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.154299021 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.154496908 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.154565096 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.200500011 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.200535059 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.200541973 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345391035 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345555067 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345607996 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345621109 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.345659971 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345678091 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.345712900 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.345719099 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345804930 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.345849991 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.347103119 CEST	49196	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.347122908 CEST	443	49196	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.415014982 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416320086 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416333914 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416352034 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416363001 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416373014 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416378021 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.416399956 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.416419029 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.416419029 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.416419029 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.416435003 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.416539907 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.417054892 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.417103052 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.417109966 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.417145014 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.417184114 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.417901993 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.417918921 CEST	443	49194	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.417932034 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.417967081 CEST	49194	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.421989918 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.422019005 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.422060966 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.422521114 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.422533989 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.422833920 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.422841072 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.422890902 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.423151970 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.423161983 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.432940006 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.433093071 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.433146000 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.433901072 CEST	49193	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.433907032 CEST	443	49193	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.437458992 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.437486887 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.437532902 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.437797070 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.437856913 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.437901974 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.437979937 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.437997103 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.438141108 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.438160896 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.442146063 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.442337990 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.442395926 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.442404985 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.442472935 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:04.442516088 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.443618059 CEST	49195	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:04.443628073 CEST	443	49195	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.323415995 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.323822975 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.323833942 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.324024916 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.324210882 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.324223995 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.324734926 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.325014114 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.325107098 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.325191975 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.325509071 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.325601101 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.325680017 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.325768948 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.335695028 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.336014032 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.336046934 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.336373091 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.336797953 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.336869955 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.336904049 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.367645025 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.367966890 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.368000984 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.368506908 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.368546009 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.368912935 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.368994951 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.369029999 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.372497082 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.384497881 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.416536093 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.519639015 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.535326004 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.576527119 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.576647997 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.670486927 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.670798063 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.670937061 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671091080 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671132088 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671190977 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671389103 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671413898 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671432972 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671464920 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671473026 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671494007 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671524048 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671555996 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671555996 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671555996 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671567917 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671761990 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.671793938 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.671963930 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.674695969 CEST	49197	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.674714088 CEST	443	49197	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.677305937 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.677414894 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.677428961 CEST	49198	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.677433014 CEST	443	49198	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.677826881 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.678340912 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.678375959 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.682882071 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.682912111 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.683058977 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.683374882 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.683403969 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.716963053 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.717314959 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.717466116 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.718203068 CEST	49200	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.718235016 CEST	443	49200	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.724206924 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726052046 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726078987 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726125002 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726144075 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726161003 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726166964 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.726207018 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726222992 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.726239920 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.726246119 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.726260900 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.726301908 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.822036028 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.822069883 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.822110891 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.822151899 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.822175980 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.822204113 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.822226048 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.822273970 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.822563887 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.822565079 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.827692032 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.827749968 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:05.828010082 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.828051090 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:05.828061104 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.112431049 CEST	49199	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.112471104 CEST	443	49199	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.573241949 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.573606968 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.573641062 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.574137926 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.574841022 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.574928999 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.575129032 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.606121063 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.606519938 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.606581926 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.606898069 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.607302904 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.607367992 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.607415915 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.616518021 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.652494907 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.749020100 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.749485016 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.749547958 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.750257969 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.750749111 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.750844002 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.750905991 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.783241034 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.796504974 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.798820972 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.919473886 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.919575930 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.919661999 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.919670105 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.919719934 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.921133995 CEST	49202	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.921156883 CEST	443	49202	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.954941988 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.961133957 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962032080 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962038994 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962074041 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962089062 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962097883 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.962104082 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.962126970 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.962158918 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.964282990 CEST	49201	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.964301109 CEST	443	49201	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.968622923 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.968651056 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:06.968727112 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.968987942 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:06.969002008 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.095505953 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.095647097 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.095767975 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.095834017 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.095876932 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.096319914 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.097028971 CEST	49203	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.097065926 CEST	443	49203	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.100487947 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.100538969 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:07.100640059 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.101000071 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:07.101031065 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.059649944 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.060105085 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.060164928 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.060528994 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.061214924 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.061321974 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.061467886 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.066335917 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.066695929 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.066759109 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.067224979 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.067815065 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.067902088 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.068213940 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.104525089 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.108572960 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.411844015 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.413692951 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.413754940 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.413762093 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.413817883 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.415019989 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.415107012 CEST	49204	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.415143013 CEST	443	49204	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.415165901 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.415220976 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.423008919 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.423075914 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.423136950 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.423661947 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.423693895 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.423939943 CEST	49205	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.423962116 CEST	443	49205	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.429924011 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.429975986 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.430028915 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.430342913 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.430361032 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.430425882 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.430629015 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.430658102 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.430773020 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.430797100 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.433706999 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.433731079 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:08.433785915 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.434007883 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:08.434032917 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.319010019 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.319818974 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.319880962 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.320211887 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.322052956 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.322805882 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.322805882 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.322846889 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.322900057 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.322901011 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.323358059 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.324280024 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.324367046 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.324685097 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.327027082 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.328558922 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.328577042 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.329091072 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.330302000 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.330399036 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.334325075 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.344275951 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.344621897 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.344640017 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.345732927 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.346653938 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.346831083 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.346865892 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.368499994 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.368525028 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.380500078 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.388525009 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.528841019 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.532505035 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.533143044 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.544455051 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.673996925 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.674081087 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.674170017 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.674434900 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.675241947 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675251007 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675301075 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675344944 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.675344944 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.675348997 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675363064 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675544024 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.675606966 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.675612926 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.676331043 CEST	49208	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.676371098 CEST	443	49208	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.679997921 CEST	49207	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.680013895 CEST	443	49207	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.684541941 CEST	49206	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.684573889 CEST	443	49206	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.686857939 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.687114000 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.687432051 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.691536903 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.691577911 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.691740990 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.692287922 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.692337036 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.692660093 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.692756891 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.692784071 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.693386078 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.693396091 CEST	49209	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.693408966 CEST	443	49209	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.693418980 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.806139946 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.806178093 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.806365013 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.806513071 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.806596041 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.807082891 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.807734966 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.807760000 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:09.807842970 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:09.807923079 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.791246891 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.797527075 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.800292969 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.802162886 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.822592020 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.822685003 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.822710037 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.822773933 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.823072910 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.823093891 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.823183060 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.823188066 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.823201895 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.823820114 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.823971033 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.824105024 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.824184895 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.824254036 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.824258089 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.825433969 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.825542927 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.825685978 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.825779915 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.825932980 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.826085091 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.826117992 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.826235056 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.826283932 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:10.868504047 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.868582964 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.872524977 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:10.872558117 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230334044 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230361938 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230417013 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.230478048 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230556965 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230607986 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.230937004 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.230973005 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231024981 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231075048 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231076956 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231131077 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.231148005 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231148005 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.231157064 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231219053 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231257915 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.231273890 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231275082 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231301069 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231332064 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.231333971 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.231342077 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.231381893 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.255172014 CEST	49211	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.255204916 CEST	443	49211	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.255665064 CEST	49213	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.255676031 CEST	443	49213	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.256097078 CEST	49210	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.256172895 CEST	443	49210	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.256211996 CEST	49212	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.256227016 CEST	443	49212	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.280555010 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.280600071 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.280668020 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.281614065 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.281667948 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.281727076 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.290271044 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.290308952 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.290757895 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.290802956 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.322407961 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.322495937 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.322556973 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.333234072 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.333262920 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.333339930 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.333673954 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.333710909 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:11.333844900 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:11.333874941 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.199822903 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.200176954 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.200237989 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.200721979 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.204890966 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.204986095 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.205060959 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.235517025 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.235754967 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.235793114 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.236917973 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.237217903 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.237317085 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.237324953 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.237390995 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.248523951 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.253415108 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.253657103 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.253674030 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.254626036 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.254772902 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.254852057 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.254895926 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.255166054 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.255166054 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.255335093 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.255387068 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.255686045 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.255773067 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.255796909 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.296526909 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.412574053 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.412714958 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.444525957 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.444602966 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.460578918 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.460653067 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.461695910 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.547728062 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.547854900 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.547983885 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.548079014 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.548310995 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.549042940 CEST	49214	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.549073935 CEST	443	49214	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.555227995 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555252075 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.555377960 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555524111 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555615902 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.555749893 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555763960 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.555764914 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555928946 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.555951118 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.588289022 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.588561058 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.588654995 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.591301918 CEST	49215	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.591315985 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.591321945 CEST	443	49215	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.591325045 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.592808008 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.592837095 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.593019009 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.593019009 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.593039036 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.593079090 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.593185902 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.593211889 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.598026991 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.598191977 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.598334074 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.598390102 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.598617077 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.602159977 CEST	49217	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.602166891 CEST	443	49217	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.615593910 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.615665913 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.615734100 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:12.619097948 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.619097948 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.930773973 CEST	49216	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:12.930818081 CEST	443	49216	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.453672886 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.453989983 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.454013109 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.455101967 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.455487967 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.455651045 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.455657959 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.464293957 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.464531898 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.464550018 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.465663910 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.465997934 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.466093063 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.466167927 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.492813110 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.493033886 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.493041992 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.493340969 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.493685961 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.493737936 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.493834019 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.498967886 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.500500917 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.501445055 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.501468897 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.501957893 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.502319098 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.502393961 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.502450943 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.540503979 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.548521996 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.660576105 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.660645962 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.662844896 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.708574057 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.708636999 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.798619032 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.798769951 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.798834085 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.798842907 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.798909903 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.798974991 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.799750090 CEST	49218	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.799760103 CEST	443	49218	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.803143978 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.803179026 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.803318024 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.803833008 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.803853035 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.804522991 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.804547071 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.804594040 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.804769039 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.804785013 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.811486959 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.811639071 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.811702013 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.811711073 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.811777115 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.811873913 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.812336922 CEST	49219	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.812347889 CEST	443	49219	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.839287043 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.839338064 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.839402914 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.839453936 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.840416908 CEST	49220	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.840424061 CEST	443	49220	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.845366955 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.845381021 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.845443010 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.845798969 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.845810890 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.847430944 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.847673893 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.847790956 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.848674059 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.848690987 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.848751068 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.849335909 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.849349976 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:13.849540949 CEST	49221	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:13.849548101 CEST	443	49221	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.629421949 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.629748106 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.629772902 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.630857944 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.631310940 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.631479979 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.631536007 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.637005091 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.637032032 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.637275934 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.637335062 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.637443066 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.637459993 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.637836933 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.637943029 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.638200045 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.638286114 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.638364077 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.638741016 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.638834000 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.638935089 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.650098085 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.650374889 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.650383949 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.650680065 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.651093960 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.651144981 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.651220083 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.676523924 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.680529118 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.684521914 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.692538977 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.971101999 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.971173048 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.971220016 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.971242905 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.971256971 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.971303940 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.979855061 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.979935884 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.979985952 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.980005980 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.980021954 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.980070114 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.982253075 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.982321978 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.982378006 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.982384920 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.982395887 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.982438087 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.985254049 CEST	49223	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.985266924 CEST	443	49223	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.985872984 CEST	49225	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.985889912 CEST	443	49225	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:15.992160082 CEST	49222	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:15.992178917 CEST	443	49222	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.001296043 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.001348972 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.001389980 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.001399040 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.001408100 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.001449108 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.005956888 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.005980968 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.006032944 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.008316040 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.008330107 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.031682968 CEST	49224	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.031687975 CEST	443	49224	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.053920984 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.053952932 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.054003000 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.055032969 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.055059910 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.055119991 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.055438042 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.055453062 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.055547953 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.055572033 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.060013056 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.060023069 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.060185909 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.060271978 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.060285091 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.894779921 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.895759106 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.895786047 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.896270037 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.898613930 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.898693085 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.899884939 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.940519094 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.958462954 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.961584091 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.961597919 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.961916924 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.967802048 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:16.967863083 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:16.968492985 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.016496897 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.053489923 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.054651976 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.054667950 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.055126905 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.056566954 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.056651115 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.058111906 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.062572002 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.065812111 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.065834045 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.066925049 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.067589045 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.067667961 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.068008900 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.104496002 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.108567953 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.237157106 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.237230062 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.237297058 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.237304926 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.237437010 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.243849039 CEST	49226	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.243868113 CEST	443	49226	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.252170086 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.252201080 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.252243042 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.255001068 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.255018950 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.278243065 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.278270006 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.278316975 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.278520107 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.278533936 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.303189039 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.303225040 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.303282022 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.303325891 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.304164886 CEST	49227	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.304173946 CEST	443	49227	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.312427044 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.312510967 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.312589884 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.313076019 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.313137054 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.313189983 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.313364029 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.313400984 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.313481092 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.313497066 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.403948069 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.404016018 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.404086113 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.404092073 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.404150009 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.414016008 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.414196968 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.414262056 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.414287090 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.414338112 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.418333054 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.654164076 CEST	49229	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.654187918 CEST	443	49229	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:17.654360056 CEST	49228	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:17.654397964 CEST	443	49228	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.451077938 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.451462030 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.451522112 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.451873064 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.451937914 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.452361107 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.452428102 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.452686071 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.452827930 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.452843904 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.453330040 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.453737974 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.453819036 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.453835964 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.464648008 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.464973927 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.464994907 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.465504885 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.465811968 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.465903044 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.466017962 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.467547894 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.467783928 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.467849970 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.468336105 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.468710899 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.468801022 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.468831062 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.500495911 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.500503063 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.508505106 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.516499996 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.659225941 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.674962997 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.864233017 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.864312887 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.864376068 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.864518881 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.864769936 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.864815950 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.864921093 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865087986 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865154028 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.865180969 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865216970 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865251064 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865283012 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865300894 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.865324020 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.865350962 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865396023 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.865422010 CEST	49232	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.865432978 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.865463972 CEST	443	49232	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.870176077 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.870229006 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.870294094 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.870898008 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.870924950 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.872019053 CEST	49230	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.872031927 CEST	443	49230	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.872191906 CEST	49233	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.872214079 CEST	443	49233	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.872921944 CEST	49231	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.872941971 CEST	443	49231	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.889406919 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.889493942 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.889575958 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.889864922 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.889900923 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.898288965 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.898312092 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.898375034 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.898531914 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.898555994 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.898612976 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.900940895 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.900960922 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:18.901031017 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:18.901058912 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.788635969 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.788986921 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.789056063 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.789624929 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.790030956 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.790121078 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.790150881 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.832506895 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.837398052 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.837677956 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.837742090 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.838069916 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.838488102 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.838562012 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.838587999 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.850166082 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.850475073 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.850511074 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.851588964 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.852169037 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.852333069 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.852360964 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.857198954 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.857414961 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.857448101 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.857918978 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.858247995 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.858331919 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.858364105 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:19.884543896 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:19.900540113 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.000539064 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.000718117 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.047699928 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.060534000 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.060610056 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.063277960 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.137017965 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.138324976 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.138370991 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.138410091 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.138447046 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.138480902 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.138480902 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.138567924 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.186285019 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.186757088 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.186763048 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.186819077 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.186845064 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.186880112 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.186990023 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.187681913 CEST	49235	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.187706947 CEST	443	49235	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.191617966 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.191656113 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.191967010 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.191997051 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.192059994 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.192194939 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.192198038 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.192224026 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.192400932 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.192433119 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.198613882 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.198930979 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.199059963 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.200526953 CEST	49236	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.200551987 CEST	443	49236	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.203108072 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.203243017 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.203304052 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.204821110 CEST	49237	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.204838037 CEST	443	49237	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.227175951 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.227334976 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.227344990 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.228518963 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.228538036 CEST	443	49234	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.228586912 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.231105089 CEST	49234	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.256189108 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.256273985 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.256474972 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.260613918 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.260659933 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.260745049 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.260906935 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.260972023 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:20.261100054 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:20.261121035 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.080626965 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.080956936 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.080992937 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.081314087 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.081701994 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.081768036 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.081923962 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.115257025 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.115536928 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.115606070 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.116107941 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.116426945 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.116535902 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.116552114 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.128505945 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.160108089 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.160367012 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.160387039 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.160548925 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.160868883 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.161189079 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.161272049 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.161307096 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.169083118 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.169399977 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.169466019 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.170593977 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.170923948 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.171027899 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.171103001 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.204519033 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.324513912 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.324609995 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.358066082 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.373636007 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.424587965 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.426151037 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.426172018 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.426245928 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.426275015 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.426295996 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.426321983 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.465301991 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.465697050 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.465802908 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.465841055 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.465871096 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.466044903 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.466806889 CEST	49239	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.466825962 CEST	443	49239	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.503006935 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504368067 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504381895 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504435062 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504451990 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.504507065 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504539013 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504582882 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.504586935 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.504610062 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.504641056 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.510617018 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.510689974 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.510718107 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.510737896 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.510937929 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.510948896 CEST	443	49238	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.510962009 CEST	49238	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.514939070 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.515646935 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.515675068 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.515723944 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516007900 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516052008 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516189098 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516298056 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516314983 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516421080 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516434908 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516472101 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516494036 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516511917 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516535044 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516546965 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516573906 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516611099 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516611099 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516611099 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516619921 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.516660929 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.516683102 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.591775894 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.591809034 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.591866016 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.591866970 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.591917992 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.591980934 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.592046976 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.592463017 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.592463017 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.592483997 CEST	443	49240	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.592540026 CEST	49240	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.599242926 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.599292994 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.599488020 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.599909067 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.599941969 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.600152016 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.600171089 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.600177050 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.600477934 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.600496054 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.603718996 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.603737116 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.603777885 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.603787899 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.603823900 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:21.604021072 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.604263067 CEST	49241	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:21.604274988 CEST	443	49241	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.120091915 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.120534897 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.120554924 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.121237993 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.121743917 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.121886015 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.121975899 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.125524044 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.125838041 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.125864983 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.126442909 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.126986980 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.127069950 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.127418041 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.127907038 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.128102064 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.128115892 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.128449917 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.128505945 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.128741026 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.128833055 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.129198074 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.129272938 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.129331112 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.129781961 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.130295038 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.130407095 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.130673885 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.168504953 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.168526888 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.172518015 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.176496983 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.469990969 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.471133947 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.471153021 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.471288919 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.471337080 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.471384048 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.471503973 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.474622011 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.476126909 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.476170063 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.476232052 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.476305962 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.476353884 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.476353884 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.477024078 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.477809906 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.479387045 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.479437113 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.479484081 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.479510069 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.479542017 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.479542017 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.479657888 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.530493975 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.532160044 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.532181025 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.532253981 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.532253981 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.532314062 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.532449007 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.532761097 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.557434082 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.557549000 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.557590961 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.557697058 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.557934046 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.557934046 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.557971954 CEST	443	49242	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.558315039 CEST	49242	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563252926 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563261032 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563314915 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.563338995 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.563635111 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563646078 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563947916 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.563987970 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.564140081 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.564167023 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.564744949 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.564910889 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.564933062 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.564980984 CEST	443	49245	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.565129995 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.565129995 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.565526962 CEST	49245	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.566871881 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.566943884 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.566994905 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.567020893 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.567061901 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.567262888 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.567783117 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.567837000 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.567894936 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.567913055 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.567953110 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.578299046 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.578308105 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.788496971 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.788631916 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896126032 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896260977 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896297932 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896411896 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896425009 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896526098 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896579027 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896619081 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896666050 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896791935 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896848917 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896862984 CEST	49243	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896907091 CEST	443	49243	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896905899 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.896925926 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.896961927 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.897072077 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897092104 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897139072 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.897159100 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897191048 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.897532940 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897557974 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897579908 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.897602081 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.897614956 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:23.897644997 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:23.909024954 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.101205111 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.101340055 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.101424932 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.102307081 CEST	49244	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.102323055 CEST	443	49244	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.115286112 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.115324020 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.115564108 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.115794897 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.115811110 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.879051924 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.879482031 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.879498959 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.879815102 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.880388975 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.880450964 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.880573034 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.886048079 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.886388063 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.886429071 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.887145042 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.887628078 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.887701035 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.887780905 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:24.924540997 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:24.928576946 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.024274111 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.025157928 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.025185108 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.026323080 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.026714087 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.026885986 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.026891947 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.072506905 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.227627993 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.232511997 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.232573986 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.232961893 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.233700991 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.233714104 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.233760118 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.233774900 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.233815908 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.233850956 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.240336895 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.240360022 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.240400076 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.240422964 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.240433931 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.240463972 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.240597963 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.316714048 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.316796064 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.316816092 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.316831112 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.316893101 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.320765018 CEST	49247	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.320799112 CEST	443	49247	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.327342987 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.327420950 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.327478886 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.327510118 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.327549934 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.327857971 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.329724073 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.329767942 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.329817057 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.329828978 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.329865932 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.373984098 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.374203920 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.374247074 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.374298096 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.374317884 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.374356031 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.376416922 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.415146112 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.415219069 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.415287971 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.415323019 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.415368080 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.416713953 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.416755915 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.416774988 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.416806936 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.416826963 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.416843891 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.416872025 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.418680906 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.418732882 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.418747902 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.418783903 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.418806076 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.419894934 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.419943094 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.420526981 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.432591915 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.433176994 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.433197975 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.433341980 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.462536097 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.462570906 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.462601900 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.462611914 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.462635994 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.463013887 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.464216948 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.464237928 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.464298964 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.464298964 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.464306116 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.464447021 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.505857944 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.505882025 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506028891 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.506036997 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506103039 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.506103039 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.506321907 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506340027 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506366014 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.506371975 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506397009 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.506572962 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506664038 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.506689072 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.507149935 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.507199049 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.507199049 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.507595062 CEST	49246	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.507610083 CEST	443	49246	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.522313118 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.522313118 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.522342920 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.522352934 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.522397041 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.522397041 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.523562908 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.523571014 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.524174929 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.524183989 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.549662113 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.549711943 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.549745083 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.549761057 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.549774885 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.549786091 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.549951077 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.550232887 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.550232887 CEST	49248	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.550245047 CEST	443	49248	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.562134981 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.562140942 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.562150002 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.562160969 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.562207937 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.562211990 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.562453032 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.562463045 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:25.566313982 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:25.566324949 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.416260004 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.416558981 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.416565895 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.416918039 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.417252064 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.417329073 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.417373896 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.419507027 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.419699907 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.419708014 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.420195103 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.420459986 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.420545101 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.420556068 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.455127001 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.456348896 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.456379890 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.456901073 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.457461119 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.457542896 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.457659960 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.464498997 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.473396063 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.473788023 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.473795891 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.474987030 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.475619078 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.475781918 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.475830078 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.504494905 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.615245104 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.628582954 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.628654003 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.677644968 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.772954941 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.774410009 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.774471045 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.774491072 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.774504900 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.774532080 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.774554014 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.774768114 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.790635109 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791747093 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791754961 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791809082 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.791814089 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791821003 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791855097 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.791857958 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791863918 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.791904926 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.792152882 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.805628061 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.808469057 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.808521986 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.808610916 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.808610916 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.808610916 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.808640003 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.808689117 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.824049950 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825299978 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825331926 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825359106 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825365067 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.825390100 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.825406075 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825452089 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.825470924 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825494051 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825515985 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.825521946 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.825545073 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.860680103 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.860743999 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.860763073 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.860771894 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.860805035 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.860876083 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.862504959 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.862556934 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.862579107 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.862585068 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.862617016 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.862679005 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.878148079 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878154993 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878197908 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.878204107 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878245115 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878271103 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878278017 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.878283024 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.878298044 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.878298044 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.878320932 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.880640030 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.880645037 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.880701065 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.880703926 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.880709887 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.880752087 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.894016981 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.894081116 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.894193888 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.894193888 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.894193888 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.894221067 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.895824909 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.895879984 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.895896912 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.895915985 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.895953894 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.896008015 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.911221981 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911243916 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911267042 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911292076 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.911303043 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911307096 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911406994 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911415100 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.911418915 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.911461115 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.911693096 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.913255930 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.913266897 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.913295031 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.913304090 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.913315058 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.913337946 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.913341045 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.913348913 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.913450956 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.945951939 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946013927 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946017981 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946046114 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946069002 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946135998 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946773052 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946818113 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946834087 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946849108 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.946873903 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946930885 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.946942091 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.947293043 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.947339058 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.947355032 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.947384119 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.947410107 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.948184967 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.948245049 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.948246002 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.948267937 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.948297977 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.948357105 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.964150906 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.964158058 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.964206934 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.964211941 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.964219093 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.964267969 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.964334965 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.966145039 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.966151953 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.966197014 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.966208935 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.966221094 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.966267109 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.966319084 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.966986895 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.967000008 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.967048883 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.967052937 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.967092037 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.967092037 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.967808008 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.967854023 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.967859030 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.967902899 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.968018055 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.968022108 CEST	443	49249	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.968045950 CEST	49249	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.980575085 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.980616093 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.980751038 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.980751038 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.980777979 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981014967 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981040955 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981120110 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981144905 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981249094 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981295109 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981333017 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981357098 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981384993 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981551886 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981570005 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.981630087 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.981823921 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.982120991 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.982144117 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.982352972 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.982381105 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.983055115 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.983098030 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.983122110 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.983134031 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.983170033 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.983170033 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.984144926 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.984200001 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.984217882 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.984235048 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.984338045 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.984395981 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.984843969 CEST	49251	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.984863997 CEST	443	49251	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.995528936 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.995548964 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.995601892 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.995913982 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.995927095 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.996200085 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.996206045 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.996305943 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.996565104 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.996575117 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998796940 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998811007 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998836040 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998862982 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.998868942 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998877048 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.998905897 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:26.998919964 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.998944998 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.999136925 CEST	49252	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:26.999145985 CEST	443	49252	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.032890081 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.032958031 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033004045 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033004045 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033013105 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033062935 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033062935 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033144951 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033188105 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033263922 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033263922 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033269882 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033283949 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033351898 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033360958 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033485889 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.033550978 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033704996 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033814907 CEST	49250	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.033823013 CEST	443	49250	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.873065948 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.873543978 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.873610973 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.873933077 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.874444962 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.874509096 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.874667883 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.889229059 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.889662981 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.889673948 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.890177011 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.890754938 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.890846968 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.890849113 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.892556906 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.893595934 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.893604040 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.894215107 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.894802094 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.894872904 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.894879103 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.894917011 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.920495987 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.936494112 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.939145088 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.939476013 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.939500093 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.939992905 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.940516949 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.940608025 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:27.940680981 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:27.988507986 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.096553087 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.096630096 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.099273920 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.237833023 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.239517927 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.239551067 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.239562035 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.239608049 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.239628077 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.239648104 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.239675999 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.239809036 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.240699053 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240731001 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240748882 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240776062 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.240792036 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240808964 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240828991 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240868092 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.240885973 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.240896940 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.241256952 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.291923046 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.293262005 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.293307066 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.293339968 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.293365955 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.293380976 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.293422937 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.293428898 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.293572903 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.325750113 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.325813055 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.325822115 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.325843096 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.325867891 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.325876951 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.327555895 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327591896 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327609062 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327641964 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.327657938 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.327662945 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327686071 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327704906 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327723026 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.327732086 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.327748060 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.328133106 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.328188896 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.328197956 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.328219891 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.328253984 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.328315973 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.330085039 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.330144882 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.330158949 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.330163956 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.330183029 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.330204964 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.330216885 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.330231905 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.386647940 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.386712074 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.386723042 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.386742115 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.386771917 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.386837959 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.392725945 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.392766953 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.392780066 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.392792940 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.392822027 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.392831087 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415055037 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415085077 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415119886 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415133953 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415144920 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415216923 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415469885 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415491104 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415517092 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415525913 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.415537119 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.415615082 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416138887 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416157961 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416188002 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416193008 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416254044 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416290998 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416316986 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416352034 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416371107 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416497946 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416538954 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416631937 CEST	49256	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416646004 CEST	443	49256	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416745901 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416809082 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416846037 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416857004 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416874886 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416956902 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.416990995 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.416999102 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.417021990 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.417025089 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.417068958 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.417071104 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.417114973 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.418409109 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.418454885 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.418474913 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.418482065 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.418512106 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.419492960 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.419853926 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.419898987 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.419903040 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.419910908 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.419929028 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.419960976 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.420073032 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.453320980 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.454648972 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.454663992 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.454721928 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.454760075 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.454801083 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.454898119 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.477480888 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.477519989 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.477550030 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.477564096 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.477575064 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.477674007 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.479269981 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.479294062 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.479331017 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.479337931 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.479351044 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.479475021 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.481744051 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.481767893 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.481792927 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.481798887 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.481813908 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.482038975 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.482649088 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.482700109 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.482705116 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.482744932 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.482788086 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.482990980 CEST	49254	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.483004093 CEST	443	49254	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.504664898 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.504728079 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.504750013 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.504760027 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.504775047 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.504802942 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.506131887 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.507383108 CEST	49255	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.507390976 CEST	443	49255	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.525087118 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.525129080 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.525196075 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.526025057 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.526038885 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.528520107 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.528542995 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.528616905 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.528870106 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.528894901 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.541122913 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.541142941 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.541201115 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.541224957 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.541306973 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.543416977 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.543436050 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.543493986 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.543524027 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.543585062 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.634706020 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.634740114 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.634789944 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.634826899 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.634852886 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.634944916 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635086060 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635099888 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635159016 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635178089 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635225058 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635225058 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635622978 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635639906 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635688066 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635701895 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.635731936 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.635955095 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636384964 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.636446953 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.636456013 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636476994 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.636508942 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.636518955 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636559963 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636600018 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636790037 CEST	49253	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.636811018 CEST	443	49253	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.643151999 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.643177032 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.643251896 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.643573999 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.643599987 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.643659115 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.643918991 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.643928051 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:28.644252062 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:28.644279957 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.422209978 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.422641993 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.422673941 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.423146009 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.423532009 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.423614025 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.423844099 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.468498945 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.473274946 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.473660946 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.473671913 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.474776030 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.475114107 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.475233078 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.475284100 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.541758060 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.543715954 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.543730021 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.544035912 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.544392109 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.544440031 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.544580936 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.562083960 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.563689947 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.563709021 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.564856052 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.565295935 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.565489054 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.565505981 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.588495970 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.674843073 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.768476963 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.909101963 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911084890 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911118031 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911154985 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911170959 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.911173105 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911195040 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911201000 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.911230087 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.911235094 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.911247969 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.911278963 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.911293030 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998076916 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998117924 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998152971 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998157024 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998171091 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998178005 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998193026 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998200893 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998213053 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998228073 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998251915 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998265982 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998327017 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.998370886 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.998574972 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.999842882 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.999900103 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.999907970 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.999912977 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.999932051 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.999938965 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:29.999955893 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:29.999979973 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.000041008 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.024255991 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.025048018 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.025094986 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.025111914 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.025130033 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.025161028 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.025181055 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.025336027 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.048891068 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050739050 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050750017 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050784111 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050800085 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.050811052 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050822020 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050853968 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.050875902 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.050875902 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.050894976 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.051048994 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.086853027 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.086929083 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.086963892 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.086987972 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.086997986 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.087500095 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.087507010 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.089329004 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.089389086 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.089404106 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.089411020 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.089451075 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.089565039 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.089931011 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.089979887 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090009928 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.090014935 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090034962 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.090169907 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.090568066 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090619087 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090631962 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.090636015 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090676069 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.090682030 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090773106 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.090821981 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.091249943 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.091907024 CEST	49260	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.091916084 CEST	443	49260	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.112332106 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.112401962 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.112412930 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.112430096 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.112463951 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.113359928 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.113368034 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.114798069 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.114844084 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.114859104 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.114883900 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.114911079 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.114996910 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.118614912 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.121395111 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.121407986 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.121746063 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.121752024 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.121817112 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.121951103 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142410994 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142441988 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142482042 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142488003 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142514944 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142524958 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142545938 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142585039 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142585039 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142621040 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.142646074 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142947912 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.142956972 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.145011902 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.145065069 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.145117998 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.145127058 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.145140886 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.145473957 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.198832989 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.198889017 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.198949099 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.198949099 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.198986053 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.199074030 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.199632883 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.199681997 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.199703932 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.199716091 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.199748993 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.199826956 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.200812101 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.200855017 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.200886011 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.200896978 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.200911999 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.200968027 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.200999022 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.201050043 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.201298952 CEST	49257	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.201316118 CEST	443	49257	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.206872940 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.206890106 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.206943035 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.206947088 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.209079981 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.209105015 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.209137917 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.209156990 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.209161043 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.209186077 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.217334032 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.233855009 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.233877897 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.233953953 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.233989000 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.235718966 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.235738039 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.235783100 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.235796928 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.235814095 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.236835957 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.236849070 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.236907959 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.236926079 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.238154888 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.238178015 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.238220930 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.238229990 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.238245964 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.239671946 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.239701033 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.239756107 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.239959955 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.240497112 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.240504980 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.240556955 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.242196083 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.242208958 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.243014097 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.243026972 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.293209076 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.293226957 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.293273926 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.293278933 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.293296099 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.294061899 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.294078112 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.294095039 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.294106960 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.294135094 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.294183016 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.295008898 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.295061111 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.295085907 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.295099020 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.295124054 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.295321941 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.295588017 CEST	49259	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.295597076 CEST	443	49259	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.303817034 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.303864956 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.304258108 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.304610968 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.304629087 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.326894045 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.326950073 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.327064037 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.327064037 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.327080965 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.327104092 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:30.327128887 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.327147961 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.327716112 CEST	49258	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:30.327723980 CEST	443	49258	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.147613049 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.148057938 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.151010036 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.151021957 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.151515961 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.153687000 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.153695107 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.154844999 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.157226086 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.157423019 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.158576012 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.158771992 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.162580013 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.164129972 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.208502054 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.208518028 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.235690117 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.262317896 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.262389898 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.263138056 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.304128885 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.304280043 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.305593014 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.348510981 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.501616001 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.503375053 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.503418922 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.506808996 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.506855965 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.506936073 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.508533001 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.589212894 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.589289904 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.589334965 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.589354038 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.589385033 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.591089010 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.591133118 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.591207027 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.591217995 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.591233015 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.596111059 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597754002 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597764015 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597809076 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597848892 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597872972 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597891092 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.597912073 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.597942114 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.597942114 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.597985983 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.657368898 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.675503969 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.675570965 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.675602913 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.675618887 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.675662041 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.677186012 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677212000 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677253962 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677273035 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677289963 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.677299976 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677325010 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.677464962 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.677542925 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.690857887 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.690881014 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.690926075 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.690960884 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.690995932 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.693413973 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.693440914 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.693479061 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.693484068 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.693502903 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.693998098 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.694010973 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.694080114 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.694161892 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.698920965 CEST	49262	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.698936939 CEST	443	49262	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.702413082 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.702419996 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.731354952 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.731664896 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.731708050 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.731738091 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.731761932 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.731777906 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.731810093 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.732110977 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.781531096 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.781555891 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.781594992 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.781619072 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.781629086 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.781918049 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.782059908 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.782068968 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.782135963 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.782144070 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.782149076 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.782195091 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.782598972 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.783094883 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.783135891 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.783159018 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.783163071 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.783188105 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.783265114 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.783315897 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.783631086 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.785042048 CEST	49263	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.785052061 CEST	443	49263	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.826001883 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.826062918 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.826088905 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.826102972 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.826122046 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.826535940 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.827647924 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.827719927 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.827739954 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.827749014 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.827780008 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.828088999 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.828290939 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.903296947 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.903343916 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.903377056 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.903395891 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.903409004 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.903453112 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.904453039 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.904516935 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.904519081 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.904547930 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.904572964 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.905308008 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.905365944 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.905366898 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.905391932 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.905425072 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.905807972 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.990186930 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990572929 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990619898 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990637064 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.990659952 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990689039 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.990839005 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.990856886 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990900993 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.990959883 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.991678953 CEST	49261	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.991698027 CEST	443	49261	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.998451948 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.998547077 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:31.998635054 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.999212027 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:31.999248028 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:32.905288935 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:32.905849934 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:32.905913115 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:32.907269955 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:32.908068895 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:32.908159018 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:32.908212900 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.109992981 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.319880962 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320004940 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320028067 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320086002 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320085049 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.320123911 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320133924 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.320143938 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320173979 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.320184946 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.320221901 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.320221901 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.322866917 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346268892 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.346316099 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.346348047 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346388102 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.346434116 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346451044 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.346468925 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.346489906 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346517086 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346517086 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.346596956 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.350001097 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.350034952 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.350075006 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.350105047 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.350162983 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.350171089 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.350366116 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.437259912 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.437330008 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.437374115 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.437438965 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.437485933 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.437596083 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.438463926 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.438540936 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.438553095 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.438620090 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.438657999 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.438935995 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439001083 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439002037 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.439039946 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439078093 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.439493895 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.439670086 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439728022 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439754009 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.439774036 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.439816952 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.439991951 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:33.440047979 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.440145969 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.440571070 CEST	49264	443	192.168.2.22	192.229.221.165
Jul 13, 2024 18:49:33.440607071 CEST	443	49264	192.229.221.165	192.168.2.22
Jul 13, 2024 18:49:50.814685106 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:50.814765930 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:50.814843893 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:50.815124989 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:50.815157890 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:51.627432108 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:51.629056931 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:51.629084110 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:51.629565001 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:51.630656958 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:49:51.630736113 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:49:51.835988045 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:50:01.406049967 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:50:01.406128883 CEST	443	49266	172.217.168.36	192.168.2.22
Jul 13, 2024 18:50:01.406228065 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:50:02.231842995 CEST	49266	443	192.168.2.22	172.217.168.36
Jul 13, 2024 18:50:02.231910944 CEST	443	49266	172.217.168.36	192.168.2.22

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 13, 2024 18:48:46.069631100 CEST	53	54821	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:46.315552950 CEST	53	52781	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:48.596837997 CEST	53	56475	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:50.122117043 CEST	58105	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:50.125112057 CEST	64928	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:50.142754078 CEST	53	58105	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:50.145845890 CEST	53	64928	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:50.740695953 CEST	57390	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:50.741391897 CEST	58095	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:50.747637033 CEST	53	57390	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:50.748346090 CEST	53	58095	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:53.226751089 CEST	55939	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:53.227019072 CEST	49608	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:53.238229036 CEST	53	49608	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:53.247334957 CEST	53	55939	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:56.218346119 CEST	50568	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:56.218647003 CEST	61467	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:56.225322008 CEST	53	50568	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:56.341233969 CEST	53	61467	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:57.262120008 CEST	54422	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:57.262228012 CEST	52074	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:57.269176006 CEST	53	52074	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:57.271348000 CEST	53	54422	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:58.601264000 CEST	56329	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:58.601347923 CEST	63469	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:48:58.820200920 CEST	53	56329	8.8.8.8	192.168.2.22
Jul 13, 2024 18:48:58.820413113 CEST	53	63469	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:00.206131935 CEST	51828	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:00.206363916 CEST	53406	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:00.213083982 CEST	53	51828	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:00.213161945 CEST	53	53406	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:01.653628111 CEST	51870	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:01.653845072 CEST	65009	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:01.662450075 CEST	53	51870	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:01.662468910 CEST	53	65009	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:06.061067104 CEST	53	65084	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:13.089874983 CEST	53	53060	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:24.133605957 CEST	53	49226	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:41.677465916 CEST	53	51951	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:46.048340082 CEST	53	61564	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:50.804272890 CEST	57027	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:50.804573059 CEST	50380	53	192.168.2.22	8.8.8.8
Jul 13, 2024 18:49:50.811795950 CEST	53	57027	8.8.8.8	192.168.2.22
Jul 13, 2024 18:49:50.813832998 CEST	53	50380	8.8.8.8	192.168.2.22

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 13, 2024 18:48:56.341311932 CEST	192.168.2.22	8.8.8.8	d043	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 13, 2024 18:48:50.122117043 CEST	192.168.2.22	8.8.8.8	0xd6d4	Standard query (0)	uspsdirect.one	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:50.125112057 CEST	192.168.2.22	8.8.8.8	0x246a	Standard query (0)	uspsdirect.one	65	IN (0x0001)	false
Jul 13, 2024 18:48:50.740695953 CEST	192.168.2.22	8.8.8.8	0xf704	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:50.741391897 CEST	192.168.2.22	8.8.8.8	0x2129	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 13, 2024 18:48:53.226751089 CEST	192.168.2.22	8.8.8.8	0xcb98	Standard query (0)	uspsdirect.one	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:53.227019072 CEST	192.168.2.22	8.8.8.8	0x28ac	Standard query (0)	uspsdirect.one	65	IN (0x0001)	false
Jul 13, 2024 18:48:56.218346119 CEST	192.168.2.22	8.8.8.8	0xc78b	Standard query (0)	usps.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:56.218647003 CEST	192.168.2.22	8.8.8.8	0x403c	Standard query (0)	usps.com	65	IN (0x0001)	false
Jul 13, 2024 18:48:57.262120008 CEST	192.168.2.22	8.8.8.8	0xfe57	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:57.262228012 CEST	192.168.2.22	8.8.8.8	0x1700	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Jul 13, 2024 18:48:58.601264000 CEST	192.168.2.22	8.8.8.8	0xb181	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:58.601347923 CEST	192.168.2.22	8.8.8.8	0xbf	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Jul 13, 2024 18:49:00.206131935 CEST	192.168.2.22	8.8.8.8	0xa8af	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:00.206363916 CEST	192.168.2.22	8.8.8.8	0xd733	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Jul 13, 2024 18:49:01.653628111 CEST	192.168.2.22	8.8.8.8	0xcbec	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:01.653845072 CEST	192.168.2.22	8.8.8.8	0xe272	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Jul 13, 2024 18:49:50.804272890 CEST	192.168.2.22	8.8.8.8	0x296a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:50.804573059 CEST	192.168.2.22	8.8.8.8	0x3d4c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 13, 2024 18:48:50.142754078 CEST	8.8.8.8	192.168.2.22	0xd6d4	No error (0)	uspsdirect.one		103.27.79.151	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:50.747637033 CEST	8.8.8.8	192.168.2.22	0xf704	No error (0)	www.google.com		172.217.168.36	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:50.748346090 CEST	8.8.8.8	192.168.2.22	0x2129	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 13, 2024 18:48:53.247334957 CEST	8.8.8.8	192.168.2.22	0xcb98	No error (0)	uspsdirect.one		103.27.79.151	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:56.225322008 CEST	8.8.8.8	192.168.2.22	0xc78b	No error (0)	usps.com		56.0.134.100	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:57.269176006 CEST	8.8.8.8	192.168.2.22	0x1700	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 13, 2024 18:48:57.271348000 CEST	8.8.8.8	192.168.2.22	0xfe57	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 13, 2024 18:48:57.271348000 CEST	8.8.8.8	192.168.2.22	0xfe57	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:48:58.820200920 CEST	8.8.8.8	192.168.2.22	0xb181	No error (0)	www.googleoptimize.com		172.217.168.78	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:00.213083982 CEST	8.8.8.8	192.168.2.22	0xa8af	No error (0)	www.googleoptimize.com		172.217.168.78	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:01.662450075 CEST	8.8.8.8	192.168.2.22	0xcbec	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 13, 2024 18:49:01.662450075 CEST	8.8.8.8	192.168.2.22	0xcbec	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:01.662468910 CEST	8.8.8.8	192.168.2.22	0xe272	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 13, 2024 18:49:50.811795950 CEST	8.8.8.8	192.168.2.22	0x296a	No error (0)	www.google.com		172.217.168.36	A (IP address)	IN (0x0001)	false
Jul 13, 2024 18:49:50.813832998 CEST	8.8.8.8	192.168.2.22	0x3d4c	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

uspsdirect.one

https:

usps.com

www.usps.com

www.googleoptimize.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.22	49167	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:51 UTC	665	OUT	GET /?t=guoi HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:51 UTC	220	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1804 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:51 UTC	1804	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 75 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 73 76 67 22 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Home</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <link rel="icon" href="static/u/img/favicon.svg"/> <link rel="stylesheet" href="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.22	49166	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:51 UTC	566	OUT	GET /static/u/css/index-bc097b8b.css HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:51 UTC	180	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:51 GMT Content-Type: text/css Content-Length: 915 Connection: close Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:51 UTC	915	IN	Data Raw: 2e 6c 6f 74 74 69 65 2d 61 6e 69 6d 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 6c 6f 74 74 69 65 2d 61 6e 69 6d 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 77 69 64 74 68 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 6c 6f 74 74 69 65 2d 61 6e 69 6d 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 65 69 67 68 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c 6f 74 74 69 65 2d 61 6e 69 6d 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 6f 76 65 72 6c 61 79 2d 63 6f 6e 74 61 69 6e 65 72 5b 64 61 74 61 2d 76 2d 33 31 34 66 33 36 61 31 5d Data Ascii: .lottie-animation-container{width:var(--lottie-animation-container-width);height:var(--lottie-animation-container-height);background-color:var(--lottie-animation-container-background-color);overflow:hidden;margin:0 auto}.overlay-container[data-v-314f36a1]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.22	49170	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:52 UTC	546	OUT	GET /static/u/js/base64.min.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:53 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:53 GMT Content-Type: text/javascript Content-Length: 5084 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:53 UTC	5084	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 54 65 72 73 65 72 20 76 35 2e 31 39 2e 32 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 73 2d 62 61 73 65 36 34 40 33 2e 37 2e 37 2f 62 61 73 65 36 34 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 65 3b 22 6f Data Ascii: /** * Minified by jsDelivr using Terser v5.19.2. * Original file: /npm/js-base64@3.7.7/base64.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */!function(t,n){var r,e;"o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.22	49171	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:52 UTC	539	OUT	GET /static/u/js/app.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:53 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:53 GMT Content-Type: text/javascript Content-Length: 4611 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:53 UTC	4611	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 69 73 52 65 64 69 72 65 63 74 28 29 7b 0a 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 74 72 75 65 27 20 3d 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 72 64 27 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 7d 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 52 65 64 69 72 65 63 74 28 29 7b 0a 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 72 64 27 2c 20 27 74 72 75 65 27 29 Data Ascii: function isRedirect(){ try{ return 'true' == localStorage.getItem('rd'); // return false }catch (e) { console.log(e) return false }}function setRedirect(){ try{ localStorage.setItem('rd', 'true')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.22	49172	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:52 UTC	551	OUT	GET /static/u/js/vue.global.prod.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:53 UTC	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:53 GMT Content-Type: text/javascript Content-Length: 147796 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:53 UTC	16171	IN	Data Raw: 2f 2a 2a 0a 2a 20 76 75 65 20 76 33 2e 34 2e 32 36 0a 2a 20 28 63 29 20 32 30 31 38 2d 70 72 65 73 65 6e 74 20 59 75 78 69 20 28 45 76 61 6e 29 20 59 6f 75 20 61 6e 64 20 56 75 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 0a 76 61 72 20 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 21 20 23 5f 5f 4e 4f 5f 53 49 44 45 5f 45 46 46 45 43 54 53 5f 5f 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 53 65 74 28 65 2e 73 70 6c 69 74 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 6e 2e 68 61 73 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3a 65 3d 3e 6e 2e 68 61 73 28 65 29 7d 63 6f 6e 73 74 20 6e 3d Data Ascii: /*** vue v3.4.26* (c) 2018-present Yuxi (Evan) You and Vue contributors* @license MIT*/var Vue=function(e){"use strict";/! #__NO_SIDE_EFFECTS__ */function t(e,t){const n=new Set(e.split(","));return t?e=>n.has(e.toLowerCase()):e=>n.has(e)}const n=
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 68 28 6f 29 7b 71 74 28 6f 2c 74 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 6e 2c 73 29 7b 69 66 28 67 28 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 6a 74 28 65 2c 74 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 6f 26 26 5f 28 6f 29 26 26 6f 2e 63 61 74 63 68 28 28 65 3d 3e 7b 71 74 28 65 2c 74 2c 6e 29 7d 29 29 2c 6f 7d 69 66 28 70 28 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6f 2e 70 75 73 68 28 48 74 28 65 5b 72 5d 2c 74 2c 6e 2c 73 29 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 74 2c 6e 2c 73 3d 21 30 29 7b 69 66 28 74 29 7b 6c 65 74 20 73 3d 74 2e 70 61 72 65 6e 74 3b 63 6f 6e 73 74 20 6f 3d 74 2e 70 72 6f 78 79 2c 72 3d 60 68 Data Ascii: h(o){qt(o,t,n)}}function Ht(e,t,n,s){if(g(e)){const o=jt(e,t,n,s);return o&&_(o)&&o.catch((e=>{qt(e,t,n)})),o}if(p(e)){const o=[];for(let r=0;r<e.length;r++)o.push(Ht(e[r],t,n,s));return o}}function qt(e,t,n,s=!0){if(t){let s=t.parent;const o=t.proxy,r=`h
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 46 6c 61 67 26 3d 2d 32 35 37 2c 65 2e 73 68 61 70 65 46 6c 61 67 26 3d 2d 35 31 33 7d 66 75 6e 63 74 69 6f 6e 20 68 73 28 65 29 7b 72 65 74 75 72 6e 20 31 32 38 26 65 2e 73 68 61 70 65 46 6c 61 67 3f 65 2e 73 73 43 6f 6e 74 65 6e 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 66 73 28 65 2c 74 2c 6e 3d 64 72 2c 73 3d 21 31 29 7b 69 66 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 6e 5b 65 5d 7c 7c 28 6e 5b 65 5d 3d 5b 5d 29 2c 72 3d 74 2e 5f 5f 77 65 68 7c 7c 28 74 2e 5f 5f 77 65 68 3d 28 2e 2e 2e 73 29 3d 3e 7b 69 66 28 6e 2e 69 73 55 6e 6d 6f 75 6e 74 65 64 29 72 65 74 75 72 6e 3b 76 65 28 29 3b 63 6f 6e 73 74 20 6f 3d 6d 72 28 6e 29 2c 72 3d 48 74 28 74 2c 6e 2c 65 2c 73 29 3b 72 65 74 75 72 6e 20 6f 28 29 2c 62 65 28 29 2c 72 7d 29 3b 72 65 74 75 72 6e 20 73 3f 6f 2e Data Ascii: Flag&=-257,e.shapeFlag&=-513}function hs(e){return 128&e.shapeFlag?e.ssContent:e}function fs(e,t,n=dr,s=!1){if(n){const o=n[e]\|\|(n[e]=[]),r=t.__weh\|\|(t.__weh=(...s)=>{if(n.isUnmounted)return;ve();const o=mr(n),r=Ht(t,n,e,s);return o(),be(),r});return s?o.
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 72 28 6c 65 74 20 6c 3d 30 3b 6c 3c 74 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 63 6f 6e 73 74 20 63 3d 65 5b 6c 5d 2c 61 3d 74 5b 6c 5d 2c 75 3d 63 2e 65 6c 26 26 28 63 2e 74 79 70 65 3d 3d 3d 24 6f 7c 7c 21 58 6f 28 63 2c 61 29 7c 7c 37 30 26 63 2e 73 68 61 70 65 46 6c 61 67 29 3f 66 28 63 2e 65 6c 29 3a 6e 3b 76 28 63 2c 61 2c 75 2c 6e 75 6c 6c 2c 73 2c 6f 2c 72 2c 69 2c 21 30 29 7d 7d 2c 52 3d 28 65 2c 74 2c 73 2c 6f 2c 72 2c 69 2c 63 29 3d 3e 7b 69 66 28 73 21 3d 3d 6f 29 7b 69 66 28 73 21 3d 3d 6e 29 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 73 29 77 28 6e 29 7c 7c 6e 20 69 6e 20 6f 7c 7c 6c 28 65 2c 6e 2c 73 5b 6e 5d 2c 6e 75 6c 6c 2c 63 2c 74 2e 63 68 69 6c 64 72 65 6e 2c 72 2c 69 2c 4a 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 6f 29 7b Data Ascii: r(let l=0;l<t.length;l++){const c=e[l],a=t[l],u=c.el&&(c.type===$o\|\|!Xo(c,a)\|\|70&c.shapeFlag)?f(c.el):n;v(c,a,u,null,s,o,r,i,!0)}},R=(e,t,s,o,r,i,c)=>{if(s!==o){if(s!==n)for(const n in s)w(n)\|\|n in o\|\|l(e,n,s[n],null,c,t.children,r,i,J);for(const n in o){
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 70 6f 73 65 50 72 6f 78 79 3d 6e 65 77 20 50 72 6f 78 79 28 50 74 28 6b 74 28 65 2e 65 78 70 6f 73 65 64 29 29 2c 7b 67 65 74 3a 28 74 2c 6e 29 3d 3e 6e 20 69 6e 20 74 3f 74 5b 6e 5d 3a 6e 20 69 6e 20 45 73 3f 45 73 5b 6e 5d 28 65 29 3a 76 6f 69 64 20 30 2c 68 61 73 3a 28 65 2c 74 29 3d 3e 74 20 69 6e 20 65 7c 7c 74 20 69 6e 20 45 73 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 74 3d 21 30 29 7b 72 65 74 75 72 6e 20 67 28 65 29 3f 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 3a 65 2e 6e 61 6d 65 7c 7c 74 26 26 65 2e 5f 5f 6e 61 6d 65 7d 63 6f 6e 73 74 20 45 72 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 3d 21 31 29 7b 6c 65 74 20 73 2c 72 3b 63 6f 6e 73 74 20 69 3d 67 28 65 29 3b Data Ascii: poseProxy=new Proxy(Pt(kt(e.exposed)),{get:(t,n)=>n in t?t[n]:n in Es?Es[n](e):void 0,has:(e,t)=>t in e\|\|t in Es}))}function Ar(e,t=!0){return g(e)?e.displayName\|\|e.name:e.name\|\|t&&e.__name}const Er=(e,t)=>{const n=function(e,t,n=!1){let s,r;const i=g(e);
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 7d 28 65 2c 74 2c 73 2c 64 29 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 2c 6f 2c 72 2c 69 29 7b 69 66 28 22 69 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 74 7c 7c 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 3d 3d 3d 74 29 72 65 74 75 72 6e 20 73 26 26 69 28 73 2c 6f 2c 72 29 2c 76 6f 69 64 28 65 5b 74 5d 3d 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 29 3b 63 6f 6e 73 74 20 6c 3d 65 2e 74 61 67 4e 61 6d 65 3b 69 66 28 22 76 61 6c 75 65 22 3d 3d 3d 74 26 26 22 50 52 4f 47 52 45 53 53 22 21 3d 3d 6c 26 26 21 6c 2e 69 6e 63 6c 75 64 65 73 28 22 2d 22 29 29 7b 63 6f 6e 73 74 20 73 3d 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 3b 72 65 74 75 72 6e 28 22 4f 50 54 49 4f 4e 22 3d 3d 3d 6c 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ;return t in e}(e,t,s,d))?function(e,t,n,s,o,r,i){if("innerHTML"===t\|\|"textContent"===t)return s&&i(s,o,r),void(e[t]=null==n?"":n);const l=e.tagName;if("value"===t&&"PROGRESS"!==l&&!l.includes("-")){const s=null==n?"":n;return("OPTION"===l?e.getAttribute(
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 43 6c 6f 73 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 31 3a 74 68 69 73 2e 73 74 61 74 65 53 70 65 63 69 61 6c 53 74 61 72 74 53 65 71 75 65 6e 63 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 52 43 44 41 54 41 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 36 3a 74 68 69 73 2e 73 74 61 74 65 43 44 41 54 41 53 65 71 75 65 6e 63 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 39 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 41 74 74 72 56 61 6c 75 65 44 6f 75 62 6c 65 51 75 6f 74 65 73 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 3a 74 68 69 73 2e 73 74 61 74 65 49 Data Ascii: ation(e);break;case 4:this.stateInterpolationClose(e);break;case 31:this.stateSpecialStartSequence(e);break;case 32:this.stateInRCDATA(e);break;case 26:this.stateCDATASequence(e);break;case 19:this.stateInAttrValueDoubleQuotes(e);break;case 12:this.stateI
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 5d 3b 72 26 26 28 6e 28 60 63 6f 6e 73 74 20 5f 68 6f 69 73 74 65 64 5f 24 7b 6f 2b 31 7d 20 3d 20 60 29 2c 24 61 28 72 2c 74 29 2c 73 28 29 29 7d 74 2e 70 75 72 65 3d 21 31 7d 29 28 65 2e 68 6f 69 73 74 73 2c 74 29 2c 73 28 29 2c 6e 28 22 72 65 74 75 72 6e 20 22 29 7d 28 65 2c 6e 29 3b 69 66 28 6f 28 60 66 75 6e 63 74 69 6f 6e 20 24 7b 61 3f 22 73 73 72 52 65 6e 64 65 72 22 3a 22 72 65 6e 64 65 72 22 7d 28 24 7b 28 61 3f 5b 22 5f 63 74 78 22 2c 22 5f 70 75 73 68 22 2c 22 5f 70 61 72 65 6e 74 22 2c 22 5f 61 74 74 72 73 22 5d 3a 5b 22 5f 63 74 78 22 2c 22 5f 63 61 63 68 65 22 5d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 29 20 7b 60 29 2c 69 28 29 2c 70 26 26 28 6f 28 22 77 69 74 68 20 28 5f 63 74 78 29 20 7b 22 29 2c 69 28 29 2c 64 26 26 28 6f 28 60 63 6f 6e Data Ascii: ];r&&(n(`const _hoisted_${o+1} = `),$a(r,t),s())}t.pure=!1})(e.hoists,t),s(),n("return ")}(e,n);if(o(`function ${a?"ssrRender":"render"}(${(a?["_ctx","_push","_parent","_attrs"]:["_ctx","_cache"]).join(", ")}) {`),i(),p&&(o("with (_ctx) {"),i(),d&&(o(`con
2024-07-13 16:48:53 UTC	16384	IN	Data Raw: 2e 63 6f 6e 74 65 6e 74 3d 72 2e 69 73 53 74 61 74 69 63 3f 49 28 72 2e 63 6f 6e 74 65 6e 74 29 3a 60 24 7b 6e 2e 68 65 6c 70 65 72 53 74 72 69 6e 67 28 50 6c 29 7d 28 24 7b 72 2e 63 6f 6e 74 65 6e 74 7d 29 60 3a 28 72 2e 63 68 69 6c 64 72 65 6e 2e 75 6e 73 68 69 66 74 28 60 24 7b 6e 2e 68 65 6c 70 65 72 53 74 72 69 6e 67 28 50 6c 29 7d 28 60 29 2c 72 2e 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 22 29 22 29 29 29 2c 6e 2e 69 6e 53 53 52 7c 7c 28 73 2e 69 6e 63 6c 75 64 65 73 28 22 70 72 6f 70 22 29 26 26 64 75 28 72 2c 22 2e 22 29 2c 73 2e 69 6e 63 6c 75 64 65 73 28 22 61 74 74 72 22 29 26 26 64 75 28 72 2c 22 5e 22 29 29 2c 7b 70 72 6f 70 73 3a 5b 5a 6c 28 72 2c 69 29 5d 7d 7d 2c 64 75 3d 28 65 2c 74 29 3d 3e 7b 34 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 63 Data Ascii: .content=r.isStatic?I(r.content):`${n.helperString(Pl)}(${r.content})`:(r.children.unshift(`${n.helperString(Pl)}(`),r.children.push(")"))),n.inSSR\|\|(s.includes("prop")&&du(r,"."),s.includes("attr")&&du(r,"^")),{props:[Zl(r,i)]}},du=(e,t)=>{4===e.type?e.c
2024-07-13 16:48:53 UTC	553	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 61 72 67 3a 6c 2c 6d 6f 64 69 66 69 65 72 73 3a 63 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 77 69 74 68 4b 65 79 73 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 2e 5f 77 69 74 68 4b 65 79 73 7c 7c 28 65 2e 5f 77 69 74 68 4b 65 79 73 3d 7b 7d 29 2c 73 3d 74 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 6e 5b 73 5d 7c 7c 28 6e 5b 73 5d 3d 6e 3d 3e 7b 69 66 28 21 28 22 6b 65 79 22 69 6e 20 6e 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 4f 28 6e 2e 6b 65 79 29 3b 72 65 74 75 72 6e 20 74 2e 73 6f 6d 65 28 28 65 3d 3e 65 3d 3d 3d 73 7c 7c 51 69 5b 65 5d 3d 3d 3d 73 29 29 3f 65 28 6e 29 3a 76 6f 69 64 20 30 7d 29 7d 2c 65 2e 77 69 74 68 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 29 7b 63 Data Ascii: :void 0,arg:l,modifiers:c}))}return e},e.withKeys=(e,t)=>{const n=e._withKeys\|\|(e._withKeys={}),s=t.join(".");return n[s]\|\|(n[s]=n=>{if(!("key"in n))return;const s=O(n.key);return t.some((e=>e===s\|\|Qi[e]===s))?e(n):void 0})},e.withMemo=function(e,t,n,s){c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.22	49173	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:54 UTC	718	OUT	GET /d?s=MTI4MCwxMDI0LDEyODAsOTEzLA== HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:54 UTC	186	IN	HTTP/1.1 302 Found Server: nginx Date: Sat, 13 Jul 2024 16:48:54 GMT Content-Length: 0 Connection: close Location: https://usps.com/ Strict-Transport-Security: max-age=31536000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.22	49174	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:54 UTC	363	OUT	GET /static/u/js/base64.min.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:54 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:54 GMT Content-Type: text/javascript Content-Length: 5084 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:54 UTC	5084	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 54 65 72 73 65 72 20 76 35 2e 31 39 2e 32 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 6a 73 2d 62 61 73 65 36 34 40 33 2e 37 2e 37 2f 62 61 73 65 36 34 2e 6a 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 65 3b 22 6f Data Ascii: /** * Minified by jsDelivr using Terser v5.19.2. * Original file: /npm/js-base64@3.7.7/base64.js * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */!function(t,n){var r,e;"o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.22	49175	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:54 UTC	356	OUT	GET /static/u/js/app.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:54 UTC	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:54 GMT Content-Type: text/javascript Content-Length: 4611 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:54 UTC	4611	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 69 73 52 65 64 69 72 65 63 74 28 29 7b 0a 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 27 74 72 75 65 27 20 3d 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 72 64 27 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 7d 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 73 65 74 52 65 64 69 72 65 63 74 28 29 7b 0a 20 20 20 20 74 72 79 7b 0a 20 20 20 20 20 20 20 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 72 64 27 2c 20 27 74 72 75 65 27 29 Data Ascii: function isRedirect(){ try{ return 'true' == localStorage.getItem('rd'); // return false }catch (e) { console.log(e) return false }}function setRedirect(){ try{ localStorage.setItem('rd', 'true')

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.22	49176	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:56 UTC	614	OUT	GET /static/u/img/loading-4973399d.gif HTTP/1.1 Host: uspsdirect.one Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://uspsdirect.one/?t=guoi Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:56 UTC	205	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:56 GMT Content-Type: image/gif Content-Length: 8238 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:56 UTC	8238	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f4 00 00 ff ff ff ff ff ff fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ff ff ff fe fe fe fe fe fe fe fe fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 64 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c df 32 0a 03 c3 47 2c 02 04 84 87 f2 41 10 18 9f b9 c4 72 99 80 5a 69 8c e9 74 78 ed ba 16 da e5 c2 4b 5e 81 c3 8f 71 d9 07 29 24 22 90 d6 00 fd 18 ac 7b 03 89 5e 5f Data Ascii: GIF89add!NETSCAPE2.0!Created with ajaxload.info!,dd dihlp,tmx\|2G,ArZitxK^q)$"{^_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.22	49177	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:56 UTC	368	OUT	GET /static/u/js/vue.global.prod.js HTTP/1.1 Host: uspsdirect.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:56 UTC	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:56 GMT Content-Type: text/javascript Content-Length: 147796 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:56 UTC	16171	IN	Data Raw: 2f 2a 2a 0a 2a 20 76 75 65 20 76 33 2e 34 2e 32 36 0a 2a 20 28 63 29 20 32 30 31 38 2d 70 72 65 73 65 6e 74 20 59 75 78 69 20 28 45 76 61 6e 29 20 59 6f 75 20 61 6e 64 20 56 75 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 0a 76 61 72 20 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 2f 2a 21 20 23 5f 5f 4e 4f 5f 53 49 44 45 5f 45 46 46 45 43 54 53 5f 5f 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 53 65 74 28 65 2e 73 70 6c 69 74 28 22 2c 22 29 29 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 6e 2e 68 61 73 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3a 65 3d 3e 6e 2e 68 61 73 28 65 29 7d 63 6f 6e 73 74 20 6e 3d Data Ascii: /*** vue v3.4.26* (c) 2018-present Yuxi (Evan) You and Vue contributors* @license MIT*/var Vue=function(e){"use strict";/! #__NO_SIDE_EFFECTS__ */function t(e,t){const n=new Set(e.split(","));return t?e=>n.has(e.toLowerCase()):e=>n.has(e)}const n=
2024-07-13 16:48:56 UTC	16384	IN	Data Raw: 68 28 6f 29 7b 71 74 28 6f 2c 74 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 6e 2c 73 29 7b 69 66 28 67 28 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 6a 74 28 65 2c 74 2c 6e 2c 73 29 3b 72 65 74 75 72 6e 20 6f 26 26 5f 28 6f 29 26 26 6f 2e 63 61 74 63 68 28 28 65 3d 3e 7b 71 74 28 65 2c 74 2c 6e 29 7d 29 29 2c 6f 7d 69 66 28 70 28 65 29 29 7b 63 6f 6e 73 74 20 6f 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6f 2e 70 75 73 68 28 48 74 28 65 5b 72 5d 2c 74 2c 6e 2c 73 29 29 3b 72 65 74 75 72 6e 20 6f 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 74 2c 6e 2c 73 3d 21 30 29 7b 69 66 28 74 29 7b 6c 65 74 20 73 3d 74 2e 70 61 72 65 6e 74 3b 63 6f 6e 73 74 20 6f 3d 74 2e 70 72 6f 78 79 2c 72 3d 60 68 Data Ascii: h(o){qt(o,t,n)}}function Ht(e,t,n,s){if(g(e)){const o=jt(e,t,n,s);return o&&_(o)&&o.catch((e=>{qt(e,t,n)})),o}if(p(e)){const o=[];for(let r=0;r<e.length;r++)o.push(Ht(e[r],t,n,s));return o}}function qt(e,t,n,s=!0){if(t){let s=t.parent;const o=t.proxy,r=`h
2024-07-13 16:48:56 UTC	16384	IN	Data Raw: 46 6c 61 67 26 3d 2d 32 35 37 2c 65 2e 73 68 61 70 65 46 6c 61 67 26 3d 2d 35 31 33 7d 66 75 6e 63 74 69 6f 6e 20 68 73 28 65 29 7b 72 65 74 75 72 6e 20 31 32 38 26 65 2e 73 68 61 70 65 46 6c 61 67 3f 65 2e 73 73 43 6f 6e 74 65 6e 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 66 73 28 65 2c 74 2c 6e 3d 64 72 2c 73 3d 21 31 29 7b 69 66 28 6e 29 7b 63 6f 6e 73 74 20 6f 3d 6e 5b 65 5d 7c 7c 28 6e 5b 65 5d 3d 5b 5d 29 2c 72 3d 74 2e 5f 5f 77 65 68 7c 7c 28 74 2e 5f 5f 77 65 68 3d 28 2e 2e 2e 73 29 3d 3e 7b 69 66 28 6e 2e 69 73 55 6e 6d 6f 75 6e 74 65 64 29 72 65 74 75 72 6e 3b 76 65 28 29 3b 63 6f 6e 73 74 20 6f 3d 6d 72 28 6e 29 2c 72 3d 48 74 28 74 2c 6e 2c 65 2c 73 29 3b 72 65 74 75 72 6e 20 6f 28 29 2c 62 65 28 29 2c 72 7d 29 3b 72 65 74 75 72 6e 20 73 3f 6f 2e Data Ascii: Flag&=-257,e.shapeFlag&=-513}function hs(e){return 128&e.shapeFlag?e.ssContent:e}function fs(e,t,n=dr,s=!1){if(n){const o=n[e]\|\|(n[e]=[]),r=t.__weh\|\|(t.__weh=(...s)=>{if(n.isUnmounted)return;ve();const o=mr(n),r=Ht(t,n,e,s);return o(),be(),r});return s?o.
2024-07-13 16:48:56 UTC	16384	IN	Data Raw: 72 28 6c 65 74 20 6c 3d 30 3b 6c 3c 74 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 63 6f 6e 73 74 20 63 3d 65 5b 6c 5d 2c 61 3d 74 5b 6c 5d 2c 75 3d 63 2e 65 6c 26 26 28 63 2e 74 79 70 65 3d 3d 3d 24 6f 7c 7c 21 58 6f 28 63 2c 61 29 7c 7c 37 30 26 63 2e 73 68 61 70 65 46 6c 61 67 29 3f 66 28 63 2e 65 6c 29 3a 6e 3b 76 28 63 2c 61 2c 75 2c 6e 75 6c 6c 2c 73 2c 6f 2c 72 2c 69 2c 21 30 29 7d 7d 2c 52 3d 28 65 2c 74 2c 73 2c 6f 2c 72 2c 69 2c 63 29 3d 3e 7b 69 66 28 73 21 3d 3d 6f 29 7b 69 66 28 73 21 3d 3d 6e 29 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 73 29 77 28 6e 29 7c 7c 6e 20 69 6e 20 6f 7c 7c 6c 28 65 2c 6e 2c 73 5b 6e 5d 2c 6e 75 6c 6c 2c 63 2c 74 2e 63 68 69 6c 64 72 65 6e 2c 72 2c 69 2c 4a 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 6f 29 7b Data Ascii: r(let l=0;l<t.length;l++){const c=e[l],a=t[l],u=c.el&&(c.type===$o\|\|!Xo(c,a)\|\|70&c.shapeFlag)?f(c.el):n;v(c,a,u,null,s,o,r,i,!0)}},R=(e,t,s,o,r,i,c)=>{if(s!==o){if(s!==n)for(const n in s)w(n)\|\|n in o\|\|l(e,n,s[n],null,c,t.children,r,i,J);for(const n in o){
2024-07-13 16:48:56 UTC	16384	IN	Data Raw: 70 6f 73 65 50 72 6f 78 79 3d 6e 65 77 20 50 72 6f 78 79 28 50 74 28 6b 74 28 65 2e 65 78 70 6f 73 65 64 29 29 2c 7b 67 65 74 3a 28 74 2c 6e 29 3d 3e 6e 20 69 6e 20 74 3f 74 5b 6e 5d 3a 6e 20 69 6e 20 45 73 3f 45 73 5b 6e 5d 28 65 29 3a 76 6f 69 64 20 30 2c 68 61 73 3a 28 65 2c 74 29 3d 3e 74 20 69 6e 20 65 7c 7c 74 20 69 6e 20 45 73 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 74 3d 21 30 29 7b 72 65 74 75 72 6e 20 67 28 65 29 3f 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 3a 65 2e 6e 61 6d 65 7c 7c 74 26 26 65 2e 5f 5f 6e 61 6d 65 7d 63 6f 6e 73 74 20 45 72 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 3d 21 31 29 7b 6c 65 74 20 73 2c 72 3b 63 6f 6e 73 74 20 69 3d 67 28 65 29 3b Data Ascii: poseProxy=new Proxy(Pt(kt(e.exposed)),{get:(t,n)=>n in t?t[n]:n in Es?Es[n](e):void 0,has:(e,t)=>t in e\|\|t in Es}))}function Ar(e,t=!0){return g(e)?e.displayName\|\|e.name:e.name\|\|t&&e.__name}const Er=(e,t)=>{const n=function(e,t,n=!1){let s,r;const i=g(e);
2024-07-13 16:48:56 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 7d 28 65 2c 74 2c 73 2c 64 29 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 2c 6f 2c 72 2c 69 29 7b 69 66 28 22 69 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 74 7c 7c 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 3d 3d 3d 74 29 72 65 74 75 72 6e 20 73 26 26 69 28 73 2c 6f 2c 72 29 2c 76 6f 69 64 28 65 5b 74 5d 3d 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 29 3b 63 6f 6e 73 74 20 6c 3d 65 2e 74 61 67 4e 61 6d 65 3b 69 66 28 22 76 61 6c 75 65 22 3d 3d 3d 74 26 26 22 50 52 4f 47 52 45 53 53 22 21 3d 3d 6c 26 26 21 6c 2e 69 6e 63 6c 75 64 65 73 28 22 2d 22 29 29 7b 63 6f 6e 73 74 20 73 3d 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 3b 72 65 74 75 72 6e 28 22 4f 50 54 49 4f 4e 22 3d 3d 3d 6c 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ;return t in e}(e,t,s,d))?function(e,t,n,s,o,r,i){if("innerHTML"===t\|\|"textContent"===t)return s&&i(s,o,r),void(e[t]=null==n?"":n);const l=e.tagName;if("value"===t&&"PROGRESS"!==l&&!l.includes("-")){const s=null==n?"":n;return("OPTION"===l?e.getAttribute(
2024-07-13 16:48:57 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 43 6c 6f 73 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 31 3a 74 68 69 73 2e 73 74 61 74 65 53 70 65 63 69 61 6c 53 74 61 72 74 53 65 71 75 65 6e 63 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 52 43 44 41 54 41 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 36 3a 74 68 69 73 2e 73 74 61 74 65 43 44 41 54 41 53 65 71 75 65 6e 63 65 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 39 3a 74 68 69 73 2e 73 74 61 74 65 49 6e 41 74 74 72 56 61 6c 75 65 44 6f 75 62 6c 65 51 75 6f 74 65 73 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 3a 74 68 69 73 2e 73 74 61 74 65 49 Data Ascii: ation(e);break;case 4:this.stateInterpolationClose(e);break;case 31:this.stateSpecialStartSequence(e);break;case 32:this.stateInRCDATA(e);break;case 26:this.stateCDATASequence(e);break;case 19:this.stateInAttrValueDoubleQuotes(e);break;case 12:this.stateI
2024-07-13 16:48:57 UTC	16384	IN	Data Raw: 5d 3b 72 26 26 28 6e 28 60 63 6f 6e 73 74 20 5f 68 6f 69 73 74 65 64 5f 24 7b 6f 2b 31 7d 20 3d 20 60 29 2c 24 61 28 72 2c 74 29 2c 73 28 29 29 7d 74 2e 70 75 72 65 3d 21 31 7d 29 28 65 2e 68 6f 69 73 74 73 2c 74 29 2c 73 28 29 2c 6e 28 22 72 65 74 75 72 6e 20 22 29 7d 28 65 2c 6e 29 3b 69 66 28 6f 28 60 66 75 6e 63 74 69 6f 6e 20 24 7b 61 3f 22 73 73 72 52 65 6e 64 65 72 22 3a 22 72 65 6e 64 65 72 22 7d 28 24 7b 28 61 3f 5b 22 5f 63 74 78 22 2c 22 5f 70 75 73 68 22 2c 22 5f 70 61 72 65 6e 74 22 2c 22 5f 61 74 74 72 73 22 5d 3a 5b 22 5f 63 74 78 22 2c 22 5f 63 61 63 68 65 22 5d 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 7d 29 20 7b 60 29 2c 69 28 29 2c 70 26 26 28 6f 28 22 77 69 74 68 20 28 5f 63 74 78 29 20 7b 22 29 2c 69 28 29 2c 64 26 26 28 6f 28 60 63 6f 6e Data Ascii: ];r&&(n(`const _hoisted_${o+1} = `),$a(r,t),s())}t.pure=!1})(e.hoists,t),s(),n("return ")}(e,n);if(o(`function ${a?"ssrRender":"render"}(${(a?["_ctx","_push","_parent","_attrs"]:["_ctx","_cache"]).join(", ")}) {`),i(),p&&(o("with (_ctx) {"),i(),d&&(o(`con
2024-07-13 16:48:57 UTC	16384	IN	Data Raw: 2e 63 6f 6e 74 65 6e 74 3d 72 2e 69 73 53 74 61 74 69 63 3f 49 28 72 2e 63 6f 6e 74 65 6e 74 29 3a 60 24 7b 6e 2e 68 65 6c 70 65 72 53 74 72 69 6e 67 28 50 6c 29 7d 28 24 7b 72 2e 63 6f 6e 74 65 6e 74 7d 29 60 3a 28 72 2e 63 68 69 6c 64 72 65 6e 2e 75 6e 73 68 69 66 74 28 60 24 7b 6e 2e 68 65 6c 70 65 72 53 74 72 69 6e 67 28 50 6c 29 7d 28 60 29 2c 72 2e 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 22 29 22 29 29 29 2c 6e 2e 69 6e 53 53 52 7c 7c 28 73 2e 69 6e 63 6c 75 64 65 73 28 22 70 72 6f 70 22 29 26 26 64 75 28 72 2c 22 2e 22 29 2c 73 2e 69 6e 63 6c 75 64 65 73 28 22 61 74 74 72 22 29 26 26 64 75 28 72 2c 22 5e 22 29 29 2c 7b 70 72 6f 70 73 3a 5b 5a 6c 28 72 2c 69 29 5d 7d 7d 2c 64 75 3d 28 65 2c 74 29 3d 3e 7b 34 3d 3d 3d 65 2e 74 79 70 65 3f 65 2e 63 Data Ascii: .content=r.isStatic?I(r.content):`${n.helperString(Pl)}(${r.content})`:(r.children.unshift(`${n.helperString(Pl)}(`),r.children.push(")"))),n.inSSR\|\|(s.includes("prop")&&du(r,"."),s.includes("attr")&&du(r,"^")),{props:[Zl(r,i)]}},du=(e,t)=>{4===e.type?e.c
2024-07-13 16:48:57 UTC	553	IN	Data Raw: 3a 76 6f 69 64 20 30 2c 61 72 67 3a 6c 2c 6d 6f 64 69 66 69 65 72 73 3a 63 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 77 69 74 68 4b 65 79 73 3d 28 65 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 6e 3d 65 2e 5f 77 69 74 68 4b 65 79 73 7c 7c 28 65 2e 5f 77 69 74 68 4b 65 79 73 3d 7b 7d 29 2c 73 3d 74 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 6e 5b 73 5d 7c 7c 28 6e 5b 73 5d 3d 6e 3d 3e 7b 69 66 28 21 28 22 6b 65 79 22 69 6e 20 6e 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 4f 28 6e 2e 6b 65 79 29 3b 72 65 74 75 72 6e 20 74 2e 73 6f 6d 65 28 28 65 3d 3e 65 3d 3d 3d 73 7c 7c 51 69 5b 65 5d 3d 3d 3d 73 29 29 3f 65 28 6e 29 3a 76 6f 69 64 20 30 7d 29 7d 2c 65 2e 77 69 74 68 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 29 7b 63 Data Ascii: :void 0,arg:l,modifiers:c}))}return e},e.withKeys=(e,t)=>{const n=e._withKeys\|\|(e._withKeys={}),s=t.join(".");return n[s]\|\|(n[s]=n=>{if(!("key"in n))return;const s=O(n.key);return t.some((e=>e===s\|\|Qi[e]===s))?e(n):void 0})},e.withMemo=function(e,t,n,s){c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.22	49180	56.0.134.100	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:57 UTC	672	OUT	GET / HTTP/1.1 Host: usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://uspsdirect.one/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:57 UTC	150	IN	HTTP/1.1 301 MOVED PERMANENTLY Location: https://www.usps.com/ Strict-Transport-Security: max-age=31536000;includeSubDomains Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.22	49181	103.27.79.151	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:57 UTC	371	OUT	GET /static/u/img/loading-4973399d.gif HTTP/1.1 Host: uspsdirect.one Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:57 UTC	205	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 13 Jul 2024 16:48:57 GMT Content-Type: image/gif Content-Length: 8238 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000
2024-07-13 16:48:57 UTC	8238	IN	Data Raw: 47 49 46 38 39 61 64 00 64 00 f4 00 00 ff ff ff ff ff ff fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe ff ff ff fe fe fe fe fe fe fe fe fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 07 00 00 00 2c 00 00 00 00 64 00 64 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c df 32 0a 03 c3 47 2c 02 04 84 87 f2 41 10 18 9f b9 c4 72 99 80 5a 69 8c e9 74 78 ed ba 16 da e5 c2 4b 5e 81 c3 8f 71 d9 07 29 24 22 90 d6 00 fd 18 ac 7b 03 89 5e 5f Data Ascii: GIF89add!NETSCAPE2.0!Created with ajaxload.info!,dd dihlp,tmx\|2G,ArZitxK^q)$"{^_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.22	49182	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:58 UTC	676	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://uspsdirect.one/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:58 UTC	1116	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 2862 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Sat, 13 Jul 2024 16:48:58 GMT Last-Modified: Sat, 13 Jul 2024 16:01:16 GMT Server: ECAcc (dce/26DE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93848 Connection: close
2024-07-13 16:48:58 UTC	15286	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 6f 70 74 69 6d 69 7a 65 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 2e 6a 73 3f 69 64 3d 47 54 4d 2d 54 33 35 4e 39 52 4c 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 Data Ascii: <!DOCTYPE html><html lang="en"><head> <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><meta http-equiv="X-UA-Compatible" content="I
2024-07-13 16:48:58 UTC	22	IN	Data Raw: 6f 2d 66 70 6f 2d 64 70 6f 2e 68 74 6d 22 3e 4d 69 6c 69 74 61 72 Data Ascii: o-fpo-dpo.htm">Militar
2024-07-13 16:48:58 UTC	16383	IN	Data Raw: 79 20 26 61 6d 70 3b 20 44 69 70 6c 6f 6d 61 74 69 63 20 4d 61 69 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 70 61 63 6b 61 67 65 2d 69 6e 74 65 72 63 65 70 74 2e 68 74 6d 22 3e 52 65 64 69 72 65 63 74 69 6e 67 20 61 20 50 61 63 6b 61 67 65 3c 2f 61 3e 3c 2f 6c 69 3e 09 09 09 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: y & Diplomatic Mail</a></li> </ul> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/package-intercept.htm">Redirecting a Package</a></li> <li><a role="menuitem" tabindex="-1" href="https://w
2024-07-13 16:48:58 UTC	16383	IN	Data Raw: 6d 22 3e 50 72 69 6f 72 69 74 79 20 4d 61 69 6c 20 45 78 70 72 65 73 73 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2f 70 72 69 6f 72 69 74 79 2d 6d 61 69 6c 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2e 68 74 6d 22 3e 50 72 69 6f 72 69 74 79 20 4d 61 69 6c 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 Data Ascii: m">Priority Mail Express International</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/international/priority-mail-international.htm">Priority Mail International</a></li> <li><a role="menuitem" tabind
2024-07-13 16:48:58 UTC	16383	IN	Data Raw: 20 7b 0d 0a 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 0d 0a 7d 0d 0a 2e 75 73 70 73 2d 75 70 64 61 74 65 73 2e 75 73 70 73 2d 63 6f 76 69 64 20 2e 63 6f 6e 74 65 6e 74 2d 73 65 63 74 69 6f 6e 20 64 69 76 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 20 68 33 20 7b 0d 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0d 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 0d 0a 7d 0d 0a 2e 75 73 70 73 2d 63 6f 76 69 64 20 2e 63 6f 6c 2d 31 32 2e 63 6f 6c 2d 73 6d 2d 31 32 2e 63 6f 6c 2d 6d 64 2d 31 32 2e 74 65 78 74 2d 6c 65 66 74 2e 61 72 74 69 63 6c 65 20 7b 0d 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 38 64 38 64 38 3b 0d 0a 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 Data Ascii: {margin-bottom:10px;}.usps-updates.usps-covid .content-section div:first-of-type h3 {border-top: 0;padding-top:0;}.usps-covid .col-12.col-sm-12.col-md-12.text-left.article {border-top: 1px solid #d8d8d8;margin-bottom: 0;padding-top: 0
2024-07-13 16:48:58 UTC	16383	IN	Data Raw: 2e 20 3c 61 20 64 61 74 61 2d 67 74 6d 2d 73 65 63 74 69 6f 6e 3d 22 62 6c 75 65 2d 61 6c 65 72 74 22 20 64 61 74 61 2d 67 74 6d 2d 6c 61 62 65 6c 3d 22 6c 65 61 72 6e 2d 6d 6f 72 65 2d 74 6f 70 6a 6f 62 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 74 6f 70 6a 6f 62 73 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 20 61 62 6f 75 74 20 73 74 61 72 74 69 6e 67 20 61 20 63 61 72 65 65 72 20 61 74 20 55 53 50 53 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0d 0a 09 09 09 09 3c 2f 70 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 73 65 63 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d Data Ascii: . <a data-gtm-section="blue-alert" data-gtm-label="learn-more-topjobs" href="https://www.usps.com/topjobs">Learn More<span class="sr-only"> about starting a career at USPS</span></a></p></div></div></div></section>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.22	49185	172.217.168.78	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:59 UTC	545	OUT	GET /optimize.js?id=GTM-T35N9RL HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:48:59 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Sat, 13 Jul 2024 16:48:59 GMT Expires: Sat, 13 Jul 2024 16:48:59 GMT Cache-Control: private, max-age=900 Last-Modified: Sat, 13 Jul 2024 15:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-07-13 16:48:59 UTC	736	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 34 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"49", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 74 61 22 3a 7b 22 65 76 65 6e 74 44 61 74 61 41 63 63 65 73 73 22 3a 22 73 70 65 63 69 66 69 63 22 2c 22 6b 65 79 50 61 74 74 65 72 6e 73 22 3a 5b 22 65 76 65 6e 74 22 5d 7d 7d 0a 0a 0a 7d 0a 0a 0a 0a 2c 22 73 65 63 75 72 69 74 79 5f 67 72 6f 75 70 73 22 3a 7b 0a 22 67 6f 6f 67 6c 65 22 3a 5b 0a 22 5f 5f 65 22 0a 0a 5d 0a 0a 0a 7d 0a 0a 0a 0a 7d 3b 0a 0a 0a 0a 0a 76 61 72 20 63 61 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 65 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: ta":{"eventDataAccess":"specific","keyPatterns":["event"]}}},"security_groups":{"google":["__e"]}};var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.definePropertie
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 61 3a 70 61 28 6e 61 28 61 Data Ascii: f(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},pa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c},qa=function(a){return a instanceof Array?a:pa(na(a
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 Data Ascii: n a.call.apply(a.bind,arguments)},Ea=function(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 70 61 72 65 6e 74 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 67 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 3b 0a 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 7c 7c 21 28 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 21 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 29 7d 3b 76 61 72 20 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 4b 61 28 61 2e 4f 2c 61 29 3b 61 2e 44 26 26 28 62 2e 44 3d 61 2e 44 29 3b 62 2e 4b 3d 61 2e 4b 3b 62 2e 6a 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 62 7d 3b 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 7d 3b 66 75 6e 63 Data Ascii: parent?this.parent.get(a):void 0};Ka.prototype.has=function(a){return!!this.values.has(a)\|\|!(!this.parent\|\|!this.parent.has(a))};var Na=function(a){var b=new Ka(a.O,a);a.D&&(b.D=a.D);b.K=a.K;b.j=a.j;return b};Ka.prototype.H=function(){return this.O};func
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 6c 6c 28 74 68 69 73 2c 61 2c 62 29 7d 3b 52 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 44 7c 7c 49 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 66 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 52 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 44 3d 21 30 7d 3b 2f 2a 0a 20 6a 51 75 65 72 79 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 76 61 72 20 55 61 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 7c 44 61 74 65 7c 52 65 67 45 Data Ascii: ll(this,a,b)};Ra.prototype.vf=function(a){this.D\|\|Ia.prototype.vf.call(this,a)};Ra.prototype.Mb=function(){this.D=!0};/* jQuery (c) 2005, 2012 jQuery Foundation, Inc. jquery.org/license.*/var Ua=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegE
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 66 28 61 26 26 61 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 29 3e 3d 30 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 3b 63 3c 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 6a 5b 63 5d 3b 64 3d 3d 3d 6e 75 6c 6c 7c 7c 64 3d 3d 3d 76 6f 69 64 20 30 3f 62 2e 70 75 73 68 28 22 22 29 3a 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 24 61 3f 28 61 3d 61 7c 7c 5b 5d 2c 61 2e 70 75 73 68 28 74 68 69 73 29 2c 62 2e 70 75 73 68 28 64 2e 74 6f 53 74 72 69 6e 67 28 61 29 29 2c 61 2e 70 6f 70 28 29 29 3a 62 2e 70 75 73 68 28 53 74 72 69 6e 67 28 64 29 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 3b 0a 63 61 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 74 68 69 Data Ascii: f(a&&a.indexOf(this)>=0)return"";for(var b=[],c=0;c<this.j.length;c++){var d=this.j[c];d===null\|\|d===void 0?b.push(""):d instanceof $a?(a=a\|\|[],a.push(this),b.push(d.toString(a)),a.pop()):b.push(String(d))}return b.join(",")};ca.set=function(a,b){if(!thi
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 74 68 69 73 2c 31 29 29 7d 3b 76 61 72 20 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 54 61 28 61 2c 33 29 2c 63 3d 6e 65 77 20 24 61 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 6e 65 77 20 24 61 28 62 5b 64 5d 29 3b 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 62 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 66 62 2c 62 3d 7b 7d 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 62 5b 61 5b 63 5d 5d 3d 63 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 29 7b 76 61 72 20 61 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 22 3b 61 2b 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 22 30 Data Ascii: this,1))};var db=function(a){for(var b=Ta(a,3),c=new $a,d=0;d<b.length;d++){var e=new $a(b[d]);c.push(e)}return c};function eb(){for(var a=fb,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function gb(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 71 62 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 72 62 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 21 69 73 4e 61 4e 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 62 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 3a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 74 62 28 61 2c 62 29 7b 69 66 28 61 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b Data Ascii: d 0};function pb(){}function qb(a){return typeof a==="function"}function l(a){return typeof a==="string"}function rb(a){return typeof a==="number"&&!isNaN(a)}function sb(a){return Array.isArray(a)?a:[a]}function tb(a,b){if(a&&Array.isArray(a))for(var c=0;
2024-07-13 16:48:59 UTC	1390	IN	Data Raw: 72 79 7b 63 28 29 7d 63 61 74 63 68 28 64 29 7b 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 28 61 5b 63 5d 3d 62 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 48 62 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2e 70 75 73 68 28 61 5b 64 5d 29 2c 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 62 5b 61 5b 64 5d 5d 7c 7c 5b 5d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3e 3d 62 2e 6c 65 6e 67 74 68 26 26 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 2e 6c 65 6e 67 74 68 29 3d 3d 3d 62 Data Ascii: ry{c()}catch(d){}}}}function Gb(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function Hb(a,b){for(var c=[],d=0;d<a.length;d++)c.push(a[d]),c.push.apply(c,b[a[d]]\|\|[]);return c}function Ib(a,b){return a.length>=b.length&&a.substring(0,b.length)===b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.22	49183	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:59 UTC	556	OUT	GET /assets/css/welcome/bootstrap.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:00 UTC	1178	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 56063 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 155764 Date: Sat, 13 Jul 2024 16:48:59 GMT Etag: "26074-58f0f21542f80+ident" Last-Modified: Thu, 01 Aug 2019 14:33:50 GMT Server: ECAcc (dce/26A4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 155764 Connection: close
2024-07-13 16:49:00 UTC	15224	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 Data Ascii: -left:25%}.offset-lg-4{margin-left:33.333333%}.offset-lg-5{margin-left:41.666667%}.offset-lg-6{margin-left:50%}.offset-lg-7{margin-left:58.333333%}.offset-lg-8{margin-left:66.666667%}.offset-lg-9{margin-left:75%}.offset-lg-10{margin-left:83.333333%}.offse
2024-07-13 16:49:00 UTC	1159	IN	Data Raw: 76 67 27 20 66 69 6c 6c 3d 27 25 32 33 64 63 33 35 34 35 27 20 76 69 65 77 42 6f 78 3d 27 2d 32 20 2d 32 20 37 20 37 27 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 3d 27 25 32 33 64 63 33 35 34 35 27 20 64 3d 27 4d 30 20 30 6c 33 20 33 6d 30 2d 33 4c 30 20 33 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 79 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 63 69 72 63 6c 65 20 63 78 3d 27 33 27 20 63 79 3d 27 33 27 20 72 3d 27 2e 35 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 45 22 29 20 23 66 66 66 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 72 69 67 68 74 20 31 2e 37 35 72 65 6d 2f 63 61 6c 63 Data Ascii: vg' fill='%23dc3545' viewBox='-2 -2 7 7'%3e%3cpath stroke='%23dc3545' d='M0 0l3 3m0-3L0 3'/%3e%3ccircle r='.5'/%3e%3ccircle cx='3' r='.5'/%3e%3ccircle cy='3' r='.5'/%3e%3ccircle cx='3' cy='3' r='.5'/%3e%3c/svg%3E") #fff no-repeat center right 1.75rem/calc
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 Data Ascii: ed .form-check-input:invalid~.invalid-tooltip{display:block}.custom-control-input.is-invalid~.custom-control-label,.was-validated .custom-control-input:invalid~.custom-control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::bef
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 6c 65 66 74 2c 2e 64 72 6f 70 72 69 67 68 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 Data Ascii: tion:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid transpar
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 63 6f 6e 74 65 6e 74 3a 22 42 72 6f 77 73 65 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 2e 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 30 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 72 65 6d 20 2b 20 2e 34 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f Data Ascii: 375rem .75rem;line-height:1.5;color:#495057;content:"Browse";background-color:#e9ecef;border-left:inherit;border-radius:0 .25rem .25rem 0}.custom-range{width:100%;height:calc(1rem + .4rem);padding:0;background-color:transparent;-webkit-appearance:none;-mo
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 35 36 62 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 Data Ascii: ine-height:1.25;color:#007bff;background-color:#fff;border:1px solid #dee2e6}.page-link:hover{z-index:2;color:#0056b3;text-decoration:none;background-color:#e9ecef;border-color:#dee2e6}.page-link:focus{z-index:2;outline:0;box-shadow:0 0 0 .2rem rgba(0,123
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 73 63 72 6f 6c 6c 62 61 72 2d 6d 65 61 73 75 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 39 39 39 39 70 78 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f Data Ascii: ;border-bottom-right-radius:.3rem;border-bottom-left-radius:.3rem}.modal-footer>:not(:first-child){margin-left:.25rem}.modal-footer>:not(:last-child){margin-right:.25rem}.modal-scrollbar-measure{position:absolute;top:-9999px;width:50px;height:50px;overflo
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a Data Ascii: {display:table-cell!important}.d-print-flex{display:-ms-flexbox!important;display:flex!important}.d-print-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}.embed-responsive{position:relative;display:block;width:100%;padding:
2024-07-13 16:49:00 UTC	6	IN	Data Raw: 6b 79 21 69 6d 70 Data Ascii: ky!imp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.22	49184	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:48:59 UTC	566	OUT	GET /global-elements/header/css/megamenu-v4.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:00 UTC	1194	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 29705 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Sat, 13 Jul 2024 16:48:59 GMT Etag: "ad9f-5fdb1f8841e00+ident" Last-Modified: Fri, 09 Jun 2023 13:01:44 GMT ntCoent-Length: 44447 Server: ECAcc (dce/26A9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 44447 Connection: close
2024-07-13 16:49:00 UTC	15208	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 62 62 72 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 63 72 6f 6e 79 6d 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 70 70 6c 65 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 72 74 69 63 6c 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 73 69 64 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 75 64 69 6f 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 69 67 Data Ascii: .global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big
2024-07-13 16:49:00 UTC	16383	IN	Data Raw: 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 6b 65 77 28 2d 31 32 64 65 67 2c 30 64 65 67 29 3b Data Ascii: amily:HelveticaNeueW02-55Roma,"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:400}.global--navigation nav ul li a.nav-first-element{color:#fff;padding-right:20px}.global--navigation nav ul li a.nav-first-element:before{transform:skew(-12deg,0deg);
2024-07-13 16:49:00 UTC	12856	IN	Data Raw: 30 32 2d 37 35 42 6f 6c 64 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2d 32 70 78 7d 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 73 65 61 72 63 68 2d 2d 74 72 61 63 6b 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 2e 73 65 61 72 63 68 2d 2d 74 72 61 63 6b 2d 69 6e 70 75 74 3a 66 6f Data Ascii: 02-75Bold,"Helvetica Neue",Helvetica,Arial,sans-serif;margin-left:10px;position:relative;top:-2px}}.global--navigation :focus,.nav-utility :focus{outline:1px solid #d9d9d9}.global--navigation .search--track-input:focus,.nav-utility .search--track-input:fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.22	49187	172.217.168.78	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:00 UTC	372	OUT	GET /optimize.js?id=GTM-T35N9RL HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:01 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Sat, 13 Jul 2024 16:49:01 GMT Expires: Sat, 13 Jul 2024 16:49:01 GMT Cache-Control: private, max-age=900 Last-Modified: Sat, 13 Jul 2024 15:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-07-13 16:49:01 UTC	736	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 34 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"49", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 74 61 22 3a 7b 22 65 76 65 6e 74 44 61 74 61 41 63 63 65 73 73 22 3a 22 73 70 65 63 69 66 69 63 22 2c 22 6b 65 79 50 61 74 74 65 72 6e 73 22 3a 5b 22 65 76 65 6e 74 22 5d 7d 7d 0a 0a 0a 7d 0a 0a 0a 0a 2c 22 73 65 63 75 72 69 74 79 5f 67 72 6f 75 70 73 22 3a 7b 0a 22 67 6f 6f 67 6c 65 22 3a 5b 0a 22 5f 5f 65 22 0a 0a 5d 0a 0a 0a 7d 0a 0a 0a 0a 7d 3b 0a 0a 0a 0a 0a 76 61 72 20 63 61 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 65 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: ta":{"eventDataAccess":"specific","keyPatterns":["event"]}}},"security_groups":{"google":["__e"]}};var ca,da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=typeof Object.definePropertie
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 2c 71 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 61 3a 70 61 28 6e 61 28 61 Data Ascii: f(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},pa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c},qa=function(a){return a instanceof Array?a:pa(na(a
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 62 Data Ascii: n a.call.apply(a.bind,arguments)},Ea=function(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 70 61 72 65 6e 74 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 67 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 3b 0a 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 7c 7c 21 28 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 21 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 29 7d 3b 76 61 72 20 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 4b 61 28 61 2e 4f 2c 61 29 3b 61 2e 44 26 26 28 62 2e 44 3d 61 2e 44 29 3b 62 2e 4b 3d 61 2e 4b 3b 62 2e 6a 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 62 7d 3b 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4f 7d 3b 66 75 6e 63 Data Ascii: parent?this.parent.get(a):void 0};Ka.prototype.has=function(a){return!!this.values.has(a)\|\|!(!this.parent\|\|!this.parent.has(a))};var Na=function(a){var b=new Ka(a.O,a);a.D&&(b.D=a.D);b.K=a.K;b.j=a.j;return b};Ka.prototype.H=function(){return this.O};func
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 6c 6c 28 74 68 69 73 2c 61 2c 62 29 7d 3b 52 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 44 7c 7c 49 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 66 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 52 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 44 3d 21 30 7d 3b 2f 2a 0a 20 6a 51 75 65 72 79 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 76 61 72 20 55 61 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 7c 44 61 74 65 7c 52 65 67 45 Data Ascii: ll(this,a,b)};Ra.prototype.vf=function(a){this.D\|\|Ia.prototype.vf.call(this,a)};Ra.prototype.Mb=function(){this.D=!0};/* jQuery (c) 2005, 2012 jQuery Foundation, Inc. jquery.org/license.*/var Ua=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegE
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 66 28 61 26 26 61 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 29 3e 3d 30 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 3b 63 3c 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 6a 5b 63 5d 3b 64 3d 3d 3d 6e 75 6c 6c 7c 7c 64 3d 3d 3d 76 6f 69 64 20 30 3f 62 2e 70 75 73 68 28 22 22 29 3a 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 24 61 3f 28 61 3d 61 7c 7c 5b 5d 2c 61 2e 70 75 73 68 28 74 68 69 73 29 2c 62 2e 70 75 73 68 28 64 2e 74 6f 53 74 72 69 6e 67 28 61 29 29 2c 61 2e 70 6f 70 28 29 29 3a 62 2e 70 75 73 68 28 53 74 72 69 6e 67 28 64 29 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 3b 0a 63 61 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 74 68 69 Data Ascii: f(a&&a.indexOf(this)>=0)return"";for(var b=[],c=0;c<this.j.length;c++){var d=this.j[c];d===null\|\|d===void 0?b.push(""):d instanceof $a?(a=a\|\|[],a.push(this),b.push(d.toString(a)),a.pop()):b.push(String(d))}return b.join(",")};ca.set=function(a,b){if(!thi
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 74 68 69 73 2c 31 29 29 7d 3b 76 61 72 20 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 54 61 28 61 2c 33 29 2c 63 3d 6e 65 77 20 24 61 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 6e 65 77 20 24 61 28 62 5b 64 5d 29 3b 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 62 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 66 62 2c 62 3d 7b 7d 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 62 5b 61 5b 63 5d 5d 3d 63 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 29 7b 76 61 72 20 61 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 22 3b 61 2b 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 22 30 Data Ascii: this,1))};var db=function(a){for(var b=Ta(a,3),c=new $a,d=0;d<b.length;d++){var e=new $a(b[d]);c.push(e)}return c};function eb(){for(var a=fb,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function gb(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 64 20 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 71 62 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 72 62 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 21 69 73 4e 61 4e 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 73 62 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 3a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 74 62 28 61 2c 62 29 7b 69 66 28 61 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b Data Ascii: d 0};function pb(){}function qb(a){return typeof a==="function"}function l(a){return typeof a==="string"}function rb(a){return typeof a==="number"&&!isNaN(a)}function sb(a){return Array.isArray(a)?a:[a]}function tb(a,b){if(a&&Array.isArray(a))for(var c=0;
2024-07-13 16:49:01 UTC	1390	IN	Data Raw: 72 79 7b 63 28 29 7d 63 61 74 63 68 28 64 29 7b 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 28 61 5b 63 5d 3d 62 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 48 62 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2e 70 75 73 68 28 61 5b 64 5d 29 2c 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 62 5b 61 5b 64 5d 5d 7c 7c 5b 5d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3e 3d 62 2e 6c 65 6e 67 74 68 26 26 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 2e 6c 65 6e 67 74 68 29 3d 3d 3d 62 Data Ascii: ry{c()}catch(d){}}}}function Gb(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])}function Hb(a,b){for(var c=[],d=0;d<a.length;d++)c.push(a[d]),c.push.apply(c,b[a[d]]\|\|[]);return c}function Ib(a,b){return a.length>=b.length&&a.substring(0,b.length)===b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.22	49186	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:01 UTC	555	OUT	GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:01 UTC	1159	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30498 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:01 GMT Etag: "15d84-5affcd6633ac0" Last-Modified: Wed, 23 Sep 2020 15:35:47 GMT Server: ECAcc (dce/2687) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-07-13 16:49:01 UTC	15243	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-07-13 16:49:01 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 65 2e 61 74 74 72 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 21 3d 22 3d 3d 3d 72 3a 21 72 7c 7c 28 74 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 72 3f 74 3d 3d 3d 69 3a 22 21 3d 22 3d 3d 3d 72 3f 74 21 Data Ascii: unction(e){return t.test("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttribute("class")\|\|"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r\|\|(t+="","="===r?t===i:"!="===r?t!
2024-07-13 16:49:01 UTC	1140	IN	Data Raw: 65 2e 6e 61 6d 65 29 26 26 43 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 46 3d 53 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 45 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 2c 53 2e 72 65 61 64 79 Data Ascii: e.name)&&C.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready
2024-07-13 16:49:01 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c Data Ascii: (e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{val
2024-07-13 16:49:01 UTC	16383	IN	Data Raw: 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 Data Ascii: test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:f
2024-07-13 16:49:01 UTC	16383	IN	Data Raw: 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f Data Ascii: .extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remo
2024-07-13 16:49:01 UTC	7561	IN	Data Raw: 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 Data Ascii: r(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.22	49188	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:01 UTC	554	OUT	GET /global-elements/header/script/megamenu-v3.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:01 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29828 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:01 GMT Etag: "3458-5b39a71ac3540" Last-Modified: Sun, 08 Nov 2020 15:53:17 GMT Server: ECAcc (dce/26BB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 13400 Connection: close
2024-07-13 16:49:01 UTC	13400	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 22 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 3d 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 63 28 22 2e 6d 6f 62 69 6c 65 2d 68 61 6d 62 75 72 67 65 72 22 29 2e 6f 6e 28 22 74 6f 75 63 68 20 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.22	49190	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:02 UTC	556	OUT	GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:02 UTC	1156	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30316 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:02 GMT Etag: "e37-5875dc5375780" Last-Modified: Thu, 25 Apr 2019 17:01:34 GMT Server: ECAcc (dce/269B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3639 Connection: close
2024-07-13 16:49:02 UTC	3639	IN	Data Raw: 2f 2f 0d 0a 2f 2f 20 4f 6e 65 4c 69 6e 6b 28 29 20 6d 65 74 68 6f 64 20 66 6f 72 20 55 53 50 53 20 73 69 74 65 2e 20 20 43 6f 64 65 64 20 66 6f 72 20 73 74 61 67 69 6e 67 20 61 6e 64 20 6c 69 76 65 20 73 69 74 65 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 48 69 73 74 6f 72 79 3a 0d 0a 2f 2f 20 20 20 20 61 72 69 76 61 72 64 20 20 20 3a 3a 20 20 31 30 2d 41 75 67 2d 32 30 31 31 20 20 3a 3a 20 63 72 65 61 74 65 64 0d 0a 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 66 75 6e 63 74 69 6f 6e 20 6b 44 65 62 75 67 20 28 73 4d 65 73 73 61 67 65 29 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: //// OneLink() method for USPS site. Coded for staging and live sites.//// History:// arivard :: 10-Aug-2011 :: created//----------------------------------------------------------------------function kDebug (sMessage)//------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.22	49192	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:02 UTC	381	OUT	GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:02 UTC	1159	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30499 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:02 GMT Etag: "15d84-5affcd6633ac0" Last-Modified: Wed, 23 Sep 2020 15:35:47 GMT Server: ECAcc (dce/2687) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-07-13 16:49:02 UTC	15243	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-07-13 16:49:02 UTC	22	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 Data Ascii: unction(e){return t.te
2024-07-13 16:49:03 UTC	16383	IN	Data Raw: 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 65 2e 61 74 74 72 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 21 3d 22 3d 3d 3d 72 3a 21 72 7c 7c 28 74 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 72 3f 74 3d 3d 3d 69 3a 22 21 3d 22 3d 3d 3d 72 3f 74 21 3d 3d 69 3a 22 5e 3d 22 3d 3d 3d 72 3f 69 26 26 30 3d 3d 3d 74 2e Data Ascii: st("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttribute("class")\|\|"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r\|\|(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.
2024-07-13 16:49:03 UTC	16383	IN	Data Raw: 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 46 3d 53 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 45 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 2c 53 2e 72 65 61 64 79 28 29 7d 53 2e 66 6e 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e Data Ascii: n("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.ready=function
2024-07-13 16:49:03 UTC	16383	IN	Data Raw: 26 26 44 65 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 65 71 28 65 29 3b 68 26 26 28 72 5b 30 5d 3d 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2e 68 74 6d 6c 28 29 29 29 2c 50 65 28 74 2c 72 2c 69 2c 6f 29 7d 29 3b 69 66 28 66 26 26 28 74 3d 28 65 3d 78 65 28 72 2c 6e 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 6e 2c 6f 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 6f 29 29 7b 66 6f 72 28 73 3d 28 61 3d 53 2e 6d 61 70 28 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 4c 65 29 29 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 75 3d 65 2c 63 21 3d 3d 70 26 Data Ascii: &&De.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),Pe(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t\|\|o)){for(s=(a=S.map(ve(e,"script"),Le)).length;c<f;c++)u=e,c!==p&
2024-07-13 16:49:03 UTC	16383	IN	Data Raw: 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 6c 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 61 63 69 74 79 3a 22 74 6f 67 67 6c 65 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 53 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 72 2c 65 2c 74 2c 6e 29 7d 7d 29 2c 53 2e 74 69 6d 65 72 73 3d 5b 5d 2c 53 2e 66 78 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 30 2c 6e 3d 53 2e 74 69 6d 65 72 73 3b 66 6f 72 28 74 74 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 Data Ascii: hide"),slideToggle:lt("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(tt=Date.now();t
2024-07-13 16:49:03 UTC	8679	IN	Data Raw: 28 74 68 69 73 5b 30 5d 29 29 2c 74 3d 53 28 65 2c 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 2e 65 71 28 30 29 2e 63 6c 6f 6e 65 28 21 30 29 2c 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 5b 30 5d 29 2c 74 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 77 68 69 6c 65 28 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 29 65 3d 65 2e 66 69 72 73 74 45 6c 65 6d 65 6e 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 65 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 7d 2c 77 72 61 70 49 6e 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6d 28 6e 29 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 Data Ascii: (this[0])),t=S(e,this[0].ownerDocument).eq(0).clone(!0),this[0].parentNode&&t.insertBefore(this[0]),t.map(function(){var e=this;while(e.firstElementChild)e=e.firstElementChild;return e}).append(this)),this},wrapInner:function(n){return m(n)?this.each(func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.22	49189	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:02 UTC	551	OUT	GET /global-elements/header/script/ge-login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:02 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29829 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:02 GMT Etag: "288b-5ebf9ca4d4940" Last-Modified: Thu, 27 Oct 2022 01:09:17 GMT Server: ECAcc (dce/26B7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10379 Connection: close
2024-07-13 16:49:02 UTC	10379	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 70 66 73 6c 48 6f 73 74 20 3d 20 22 70 66 73 6c 2e 75 73 70 73 2e 63 6f 6d 22 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var pfslHost = "pfsl.usps.com"var lowEnv = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.22	49191	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:02 UTC	380	OUT	GET /global-elements/header/script/megamenu-v3.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:02 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29829 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:02 GMT Etag: "3458-5b39a71ac3540" Last-Modified: Sun, 08 Nov 2020 15:53:17 GMT Server: ECAcc (dce/26BB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 13400 Connection: close
2024-07-13 16:49:02 UTC	13400	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 22 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 3d 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 63 28 22 2e 6d 6f 62 69 6c 65 2d 68 61 6d 62 75 72 67 65 72 22 29 2e 6f 6e 28 22 74 6f 75 63 68 20 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.22	49196	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:04 UTC	377	OUT	GET /global-elements/header/script/ge-login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:04 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29831 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:04 GMT Etag: "288b-5ebf9ca4d4940" Last-Modified: Thu, 27 Oct 2022 01:09:17 GMT Server: ECAcc (dce/26B7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10379 Connection: close
2024-07-13 16:49:04 UTC	10379	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 70 66 73 6c 48 6f 73 74 20 3d 20 22 70 66 73 6c 2e 75 73 70 73 2e 63 6f 6d 22 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var pfslHost = "pfsl.usps.com"var lowEnv = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.22	49194	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:04 UTC	557	OUT	GET /global-elements/lib/script/requirejs/require.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:04 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 80873 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:04 GMT Etag: "440f-5057c2658f140" Last-Modified: Wed, 15 Oct 2014 20:41:01 GMT Server: ECAcc (dce/269B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 17423 Connection: close
2024-07-13 16:49:04 UTC	15244	IN	Data Raw: 2f 2a 2a 20 0a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 31 35 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 0a 76 61 72 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 3b 28 66 75 6e 63 74 Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var USPSRequireNS;(funct
2024-07-13 16:49:04 UTC	2179	IN	Data Raw: 61 74 65 4e 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 78 68 74 6d 6c 3f 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 2c 22 68 74 6d 6c 3a 73 63 72 69 70 74 22 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 65 74 75 72 6e 20 72 2e 74 79 70 65 3d 65 2e 73 63 72 69 70 74 54 79 70 65 7c 7c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 72 2e 61 73 79 6e 63 3d 21 30 2c 72 7d 2c 72 65 71 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 65 26 26 65 Data Ascii: ateNode=function(e,t,n){var r=e.xhtml?document.createElementNS("http://www.w3.org/1999/xhtml","html:script"):document.createElement("script");return r.type=e.scriptType\|\|"text/javascript",r.charset="utf-8",r.async=!0,r},req.load=function(e,t,n){var r=e&&e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.22	49193	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:04 UTC	561	OUT	GET /global-elements/header/script/header-init-search.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:04 UTC	1155	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29710 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:04 GMT Etag: "388-5b3971b6b3e40" Last-Modified: Sun, 08 Nov 2020 11:54:25 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-07-13 16:49:04 UTC	904	IN	Data Raw: 76 61 72 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 2c 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 22 2c 0d 0a 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 22 67 6c 6f 62 61 6c 22 0d 0a 7d 29 2c 20 55 53 50 53 47 6c 6f Data Ascii: var USPSGlobals = USPSGlobals \|\| {};USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({ baseUrl: "https://www.usps.com/global-elements/lib/script", context: "global"}), USPSGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.22	49195	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:04 UTC	382	OUT	GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:04 UTC	1156	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30318 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:04 GMT Etag: "e37-5875dc5375780" Last-Modified: Thu, 25 Apr 2019 17:01:34 GMT Server: ECAcc (dce/269B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3639 Connection: close
2024-07-13 16:49:04 UTC	3639	IN	Data Raw: 2f 2f 0d 0a 2f 2f 20 4f 6e 65 4c 69 6e 6b 28 29 20 6d 65 74 68 6f 64 20 66 6f 72 20 55 53 50 53 20 73 69 74 65 2e 20 20 43 6f 64 65 64 20 66 6f 72 20 73 74 61 67 69 6e 67 20 61 6e 64 20 6c 69 76 65 20 73 69 74 65 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 48 69 73 74 6f 72 79 3a 0d 0a 2f 2f 20 20 20 20 61 72 69 76 61 72 64 20 20 20 3a 3a 20 20 31 30 2d 41 75 67 2d 32 30 31 31 20 20 3a 3a 20 63 72 65 61 74 65 64 0d 0a 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 66 75 6e 63 74 69 6f 6e 20 6b 44 65 62 75 67 20 28 73 4d 65 73 73 61 67 65 29 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: //// OneLink() method for USPS site. Coded for staging and live sites.//// History:// arivard :: 10-Aug-2011 :: created//----------------------------------------------------------------------function kDebug (sMessage)//------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.22	49197	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:05 UTC	550	OUT	GET /assets/script/home/megamenu-additions.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:05 UTC	1175	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30330 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:05 GMT Etag: "541-591d1c7fd1e40" Last-Modified: Thu, 05 Sep 2019 17:37:53 GMT nnCoection: close Server: ECAcc (dce/26D0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1345 Connection: close
2024-07-13 16:49:05 UTC	1345	IN	Data Raw: 76 61 72 20 55 53 50 53 20 3d 20 55 53 50 53 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 7b 70 61 73 73 69 76 65 3a 20 74 72 75 65 7d 29 3b 0d 0a 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 69 6d 67 27 29 2e 61 74 74 72 28 27 61 6c 74 27 2c 27 20 27 29 3b 0d 0a 09 09 61 3d 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 61 27 29 2e Data Ascii: var USPS = USPS \|\| {};USPS.Require = USPS.Require \|\| {};document.addEventListener('touchstart', {passive: true});global_elements_jq(document).ready(function($){$('.international-addition img').attr('alt',' ');a=$('.international-addition a').

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.22	49198	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:05 UTC	383	OUT	GET /global-elements/lib/script/requirejs/require.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:05 UTC	1158	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 80874 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:05 GMT Etag: "440f-5057c2658f140" Last-Modified: Wed, 15 Oct 2014 20:41:01 GMT Server: ECAcc (dce/269B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 17423 Connection: close
2024-07-13 16:49:05 UTC	16383	IN	Data Raw: 2f 2a 2a 20 0a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 31 35 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 0a 76 61 72 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 3b 28 66 75 6e 63 74 Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var USPSRequireNS;(funct
2024-07-13 16:49:05 UTC	1040	IN	Data Raw: 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 73 72 63 2e 70 6f 70 28 29 2c 73 75 62 50 61 74 68 3d 73 72 63 2e 6c 65 6e 67 74 68 3f 73 72 63 2e 6a 6f 69 6e 28 22 2f 22 29 2b 22 2f 22 3a 22 2e 2f 22 2c 63 66 67 2e 62 61 73 65 55 72 6c 3d 73 75 62 50 61 74 68 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 6d 61 69 6e 53 63 72 69 70 74 2e 72 65 70 6c 61 63 65 28 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 2c 22 22 29 2c 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 2e 74 65 73 74 28 6d 61 69 6e 53 63 72 69 70 74 29 26 26 28 6d 61 69 6e 53 63 72 69 70 74 3d 64 61 74 61 4d 61 69 6e 29 2c 63 66 67 2e 64 65 70 73 3d 63 66 67 2e 64 65 70 73 3f 63 66 67 2e 64 65 70 73 2e 63 6f 6e 63 61 74 28 6d 61 69 6e 53 63 72 69 70 74 29 3a 5b 6d 61 69 6e 53 63 Data Ascii: t.split("/"),mainScript=src.pop(),subPath=src.length?src.join("/")+"/":"./",cfg.baseUrl=subPath),mainScript=mainScript.replace(jsSuffixRegExp,""),req.jsExtRegExp.test(mainScript)&&(mainScript=dataMain),cfg.deps=cfg.deps?cfg.deps.concat(mainScript):[mainSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.22	49199	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:05 UTC	561	OUT	GET /assets/css/welcome/welcome-styles.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:05 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 29828 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Sat, 13 Jul 2024 16:49:05 GMT Etag: "6e5f-597b4cb57f540+ident" Last-Modified: Tue, 19 Nov 2019 15:34:05 GMT ntCoent-Length: 28255 Server: ECAcc (dce/26D7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 28255 Connection: close
2024-07-13 16:49:05 UTC	16383	IN	Data Raw: 2f 2a 20 46 4f 4e 54 20 53 54 59 4c 45 53 20 2a 2f 20 0d 0a 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0d 0a 7d 0d 0a 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 4f 70 65 72 61 2c 20 53 61 66 61 72 69 20 31 30 2e 31 2b 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 2f 2a 20 46 69 72 65 66 6f 78 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 31 30 2d 31 31 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 7d 0d 0a 0d 0a 3a 3a 2d 6d 73 2d 69 6e 70 75 74 2d Data Ascii: /* FONT STYLES / body {font-size:16px;}::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /color: #000000; opacity: 1; / Firefox /}:-ms-input-placeholder { / Internet Explorer 10-11 */color: #000000; }::-ms-input-
2024-07-13 16:49:05 UTC	11872	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 2c 20 20 7b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 20 68 33 20 7b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 33 33 33 33 36 36 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 61 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 09 2e 6a 75 6d 62 6f 74 72 6f 6e 2e 70 72 65 6d 69 75 6d 20 2e 61 72 74 69 63 6c 65 3a 61 66 74 65 72 20 7b 0d 0a 09 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 Data Ascii: splay:none;}.featured-usps .article, {text-align: center;}.featured-usps .article h3 {color:#333366;display:block;}.featured-usps a {display:inline-block;}.jumbotron.premium .article:after {left: 0;transf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.22	49200	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:05 UTC	387	OUT	GET /global-elements/header/script/header-init-search.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:05 UTC	1155	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29711 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:05 GMT Etag: "388-5b3971b6b3e40" Last-Modified: Sun, 08 Nov 2020 11:54:25 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-07-13 16:49:05 UTC	904	IN	Data Raw: 76 61 72 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 2c 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 22 2c 0d 0a 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 22 67 6c 6f 62 61 6c 22 0d 0a 7d 29 2c 20 55 53 50 53 47 6c 6f Data Ascii: var USPSGlobals = USPSGlobals \|\| {};USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({ baseUrl: "https://www.usps.com/global-elements/lib/script", context: "global"}), USPSGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.22	49202	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:06 UTC	376	OUT	GET /assets/script/home/megamenu-additions.js HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:06 UTC	1175	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30331 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Sat, 13 Jul 2024 16:49:06 GMT Etag: "541-591d1c7fd1e40" Last-Modified: Thu, 05 Sep 2019 17:37:53 GMT nnCoection: close Server: ECAcc (dce/26D0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1345 Connection: close
2024-07-13 16:49:06 UTC	1345	IN	Data Raw: 76 61 72 20 55 53 50 53 20 3d 20 55 53 50 53 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 7b 70 61 73 73 69 76 65 3a 20 74 72 75 65 7d 29 3b 0d 0a 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 69 6d 67 27 29 2e 61 74 74 72 28 27 61 6c 74 27 2c 27 20 27 29 3b 0d 0a 09 09 61 3d 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 61 27 29 2e Data Ascii: var USPS = USPS \|\| {};USPS.Require = USPS.Require \|\| {};document.addEventListener('touchstart', {passive: true});global_elements_jq(document).ready(function($){$('.international-addition img').attr('alt',' ');a=$('.international-addition a').

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.22	49201	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:06 UTC	562	OUT	GET /global-elements/footer/css/main-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:06 UTC	1192	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 30452 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Sat, 13 Jul 2024 16:49:06 GMT Etag: "225c-522270bf185c0+ident" Last-Modified: Thu, 15 Oct 2015 16:19:43 GMT ntCoent-Length: 8796 Server: ECAcc (dce/26A3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8796 Connection: close
2024-07-13 16:49:06 UTC	8796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 2c 75 72 6c 28 22 68 Data Ascii: @font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.22	49203	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:06 UTC	564	OUT	GET /global-elements/footer/css/footer-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:07 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 29776 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 3181 Date: Sat, 13 Jul 2024 16:49:06 GMT Etag: "c6d-5b371de5f09c0+ident" Last-Modified: Fri, 06 Nov 2020 15:28:47 GMT Server: ECAcc (dce/26B2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3181 Connection: close
2024-07-13 16:49:07 UTC	3181	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 32 30 70 78 20 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 35 30 6d 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 Data Ascii: .global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.22	49204	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:08 UTC	626	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:08 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30451 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:08 GMT Etag: "de5-549b1263b1ac0" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (dce/26C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-07-13 16:49:08 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.22	49205	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:08 UTC	602	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:08 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29738 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:08 GMT Etag: "222-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/2691) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-07-13 16:49:08 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.22	49207	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:09 UTC	604	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:09 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30236 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:09 GMT Etag: "80c-547ddea221540" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (dce/26E0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-07-13 16:49:09 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.22	49206	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:09 UTC	599	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:09 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29859 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:09 GMT Etag: "5b9-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/26EA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-07-13 16:49:09 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.22	49208	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:09 UTC	392	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:09 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30452 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:09 GMT Etag: "de5-549b1263b1ac0" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (dce/26C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-07-13 16:49:09 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.22	49209	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:09 UTC	368	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:09 UTC	1146	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29739 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:09 GMT Etag: "222-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/2691) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-07-13 16:49:09 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.22	49211	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:10 UTC	601	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:11 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30344 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:11 GMT Etag: "619-5494e7f71e280" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (dce/2689) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-07-13 16:49:11 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.22	49213	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:10 UTC	370	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:11 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30238 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:11 GMT Etag: "80c-547ddea221540" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (dce/26E0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-07-13 16:49:11 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.22	49210	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:10 UTC	626	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:11 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30449 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:11 GMT Etag: "723-55885af730a40" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (dce/268C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-07-13 16:49:11 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.22	49212	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:10 UTC	365	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:11 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29861 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:11 GMT Etag: "5b9-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/26EA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-07-13 16:49:11 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.22	49214	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:12 UTC	601	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:12 UTC	1166	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30519 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:12 GMT Etag: "a1a-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (dce/2687) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-07-13 16:49:12 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.22	49215	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:12 UTC	599	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:12 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30489 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:12 GMT Etag: "44f-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/26A6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-07-13 16:49:12 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.22	49217	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:12 UTC	367	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:12 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30345 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:12 GMT Etag: "619-5494e7f71e280" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (dce/2689) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-07-13 16:49:12 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.22	49216	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:12 UTC	392	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:12 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30450 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:12 GMT Etag: "723-55885af730a40" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (dce/268C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-07-13 16:49:12 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.22	49218	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:13 UTC	608	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:13 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30500 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:13 GMT Etag: "6ef-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/2695) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-07-13 16:49:13 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.22	49219	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:13 UTC	367	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:13 UTC	1166	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30520 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:13 GMT Etag: "a1a-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (dce/2687) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-07-13 16:49:13 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.22	49220	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:13 UTC	608	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:13 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29854 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:13 GMT Etag: "8fe-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (dce/26E1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-07-13 16:49:13 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.22	49221	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:13 UTC	365	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:13 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30490 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:13 GMT Etag: "44f-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/26A6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-07-13 16:49:13 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.22	49223	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:15 UTC	374	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:15 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30502 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:15 GMT Etag: "6ef-5494e7f535e00" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (dce/2695) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-07-13 16:49:15 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.22	49222	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:15 UTC	601	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:15 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30178 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:15 GMT Etag: "5bf-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/26CF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-07-13 16:49:15 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.22	49225	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:15 UTC	374	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:15 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29856 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:15 GMT Etag: "8fe-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (dce/26E1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-07-13 16:49:15 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.22	49224	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:15 UTC	601	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:16 UTC	1166	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30512 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:15 GMT Etag: "5a8-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (dce/26D6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-07-13 16:49:16 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.22	49226	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:16 UTC	607	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:17 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30194 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:17 GMT Etag: "74d-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (dce/26E4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-07-13 16:49:17 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.22	49227	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:16 UTC	599	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:17 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30461 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:17 GMT Etag: "667-5494e7f259740" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (dce/26C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-07-13 16:49:17 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.22	49229	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:17 UTC	367	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:17 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30180 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:17 GMT Etag: "5bf-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/26CF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-07-13 16:49:17 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.22	49228	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:17 UTC	367	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:17 UTC	1166	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30514 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:17 GMT Etag: "5a8-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (dce/26D6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-07-13 16:49:17 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.22	49232	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:18 UTC	603	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:18 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30450 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:18 GMT Etag: "42a-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/268C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-07-13 16:49:18 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.22	49230	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:18 UTC	612	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:18 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29882 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:18 GMT Etag: "436-5494e7bfce000" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (dce/26C5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-07-13 16:49:18 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.22	49231	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:18 UTC	373	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:18 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30195 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:18 GMT Etag: "74d-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (dce/26E4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-07-13 16:49:18 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.22	49233	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:18 UTC	365	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:18 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30462 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:18 GMT Etag: "667-5494e7f259740" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (dce/26C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-07-13 16:49:18 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.22	49234	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:19 UTC	585	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:20 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29878 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:20 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (dce/26BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-07-13 16:49:20 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-07-13 16:49:20 UTC	3951	IN	Data Raw: fb df ef 28 2f af f8 fc 6d b7 dd ba f1 e5 97 d7 3d dc d0 d0 50 3c 71 e2 c4 3e f5 44 ae 5a d7 d3 d3 43 6b 6b 2b 5f f9 ca 57 fe fb a2 8b 2e fa fa b3 cf 3e db 31 82 04 5a ec 58 97 fe 38 5e e3 91 07 e8 25 91 db fd a7 88 de f5 63 bf 53 5d bd f8 78 35 49 b7 02 2e c9 dc ed ab 9d 97 db cd c8 6d 0f e6 1e 6b 35 1c d3 c1 68 a0 e3 ae ac a9 a9 ad 3f 5b 96 e9 2f 9e 48 e0 74 16 0a 04 94 e9 f3 69 4f 3e f9 93 e7 2c cb ba f3 5b df 59 f6 7d c3 30 66 7f fc 13 37 20 2d 3b eb da cd 57 33 0c 83 bc bc 3c ba ba ba 58 b1 62 05 8f 3c f2 08 25 25 25 5b ff e5 e1 87 7f b1 71 d3 a6 3b f7 ec d9 33 23 95 4a 61 9a 66 ec ae bb ee 7a 70 c2 84 09 8f 55 54 54 c4 9c 6c 6c 74 5d 97 a6 69 d2 72 b4 25 b1 ee a5 17 ff eb 33 b7 df be fe 95 57 5e 5b fe e7 3f ff f9 23 25 25 25 14 14 14 78 ad 90 3b 3a Data Ascii: (/m=P<q>DZCkk+_W.>1ZX8^%cS]x5I.mk5h?[/HtiO>,[Y}0f7 -;W3<Xb<%%%[q;3#JafzpUTTllt]ir%3W^[?#%%%x;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.22	49235	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:19 UTC	587	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:20 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29787 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:20 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (dce/26B0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-07-13 16:49:20 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.22	49236	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:19 UTC	369	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:20 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30452 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:20 GMT Etag: "42a-5494e7ed94c00" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (dce/268C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-07-13 16:49:20 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.22	49237	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:19 UTC	378	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:20 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29884 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Sat, 13 Jul 2024 16:49:20 GMT Etag: "436-5494e7bfce000" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (dce/26C5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-07-13 16:49:20 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.22	49238	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:21 UTC	586	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:21 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 56067 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:21 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (dce/26A4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-07-13 16:49:21 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-07-13 16:49:21 UTC	4201	IN	Data Raw: 36 12 2e ba 00 6b 71 d1 3e eb b4 cf 28 1f 15 23 11 21 ca 4d 4b 15 f3 ea b8 bf d3 60 4a 32 b5 84 41 32 5d 4c c0 7f 1f b0 c8 d7 d1 49 fc 79 67 93 ff b7 bf ee f7 e5 7d 4f 3f 47 ef d3 6b b0 97 ce 08 55 87 50 3b ae 3c 12 bc 2f cb 32 b2 df 4f d2 e5 17 8f 5b af bb 79 a7 e2 1a 3e 06 41 c1 90 e5 9b 1a cb e7 39 4a eb 37 fc 6d bf 1b 6d 30 65 98 52 53 ab a5 9b d7 6f 41 96 ef 06 30 65 a4 33 f0 fa 9b b4 dd fc 53 02 83 43 e3 5e eb eb ea a6 f5 07 3f c6 92 96 85 10 a1 3f 4b e8 3e 68 46 b8 6f 6f 27 51 f3 66 13 fb e5 2f 8d 5b 77 ff 8b 2f 29 46 fb f8 fe 1f 79 72 20 60 c4 3f 7f 4e 99 52 c2 d0 58 3e ef 52 21 c4 53 00 92 45 49 1d df 7e ef 2f f0 34 ef 1c f7 da b6 9f dc 8a b7 75 37 e6 f4 34 64 39 b0 ef 3e 2b c0 ef e8 21 f1 f2 4b c6 0d 11 1d 5c f7 06 7d 4f 3f 87 25 3b 0b 21 94 91 Data Ascii: 6.kq>(#!MK`J2A2]LIyg}O?GkUP;</2O[y>A9J7mm0eRSoA0e3SC^??K>hFoo'Qf/[w/)Fyr `?NRX>R!SEI~/4u74d9>+!K\}O?%;!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.22	49239	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:21 UTC	353	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:21 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29788 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:21 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (dce/26B0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-07-13 16:49:21 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.22	49240	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:21 UTC	589	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:21 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29388 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:21 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (dce/26A7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-07-13 16:49:21 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-07-13 16:49:21 UTC	4689	IN	Data Raw: ad e3 a0 3f 10 38 90 99 e5 38 60 36 9b 4f e4 e6 e6 7a 08 48 61 fa ff b9 7e 96 0a 55 83 4c ad ae b3 51 05 a4 ea 61 7c 13 f5 b0 ee 7a d9 a7 3a af b4 a2 63 ab 55 32 6d c7 b9 b6 d1 77 25 f7 ad 22 85 49 25 10 9d cf 47 92 25 a1 ba 60 8a 54 75 48 bd 9f ca 47 44 75 f5 fa 61 2b 15 d5 d4 6c 19 3c 86 f6 73 aa f6 71 aa 18 7d 07 ed 77 79 86 51 08 e3 38 57 aa fa bc d3 a6 4d 3b b5 6e dd ba e7 37 3f f4 10 f7 c1 38 b9 5e 1c 87 c7 19 4c a5 25 c5 b0 90 84 ba 76 de 6c 2c 5b b9 1a 4f fd ee f7 78 7b ef 3b d2 9b bc b4 b4 54 62 92 fa fa 7a ec dd bb 0f 65 81 28 2c dd ed 30 5d 33 1f b9 37 af 21 70 b8 d0 d5 da 86 ce ae 4e 9c 26 df e6 d8 b1 63 12 48 b2 b3 b3 71 cb 2d b7 d0 1f 6a 71 b2 c7 9a 18 ca 68 b2 d0 62 26 a0 18 20 92 94 b4 67 26 25 62 c0 ef 27 06 0a 4a b3 09 ba 5c 3c 21 9a 0e Data Ascii: ?88`6OzHa~ULQa\|z:cU2mw%"I%G%`TuHGDua+l<sq}wyQ8WM;n7?8^L%vl,[Ox{;Tbze(,0]37!pN&cHq-jqhb& g&%b'J\<!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.22	49241	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:21 UTC	351	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:21 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29879 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:21 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (dce/26BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-07-13 16:49:21 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-07-13 16:49:21 UTC	5054	IN	Data Raw: df fd ee 77 04 83 41 4f 38 c8 cc 42 08 04 02 bd 27 9c d1 8f c1 95 cd dd 89 5a d7 fd 73 e7 94 5a 5b 5b 99 36 6d da 1f bf fa d5 af de 38 7b f6 ec d7 7a 7a 7a ce e8 62 d5 d4 d4 56 d7 d4 d4 2e ac a9 a9 3d 6e f7 a0 ea ea c5 d5 d9 0e 43 a7 8e bf 14 22 b9 37 ab 2c 2d 2d d1 d7 ac f9 43 fd 7d ff eb de cf 46 a3 91 e7 2d cb 62 5c 45 05 37 df 74 13 d1 68 94 d7 5e 7f 9d 4f 7d f2 53 28 29 f9 c1 63 3f 60 da 05 17 50 54 54 c4 86 0d 1b 68 6c 6c 64 e7 ce 9d 14 97 96 50 5e 5e ce e1 43 87 6c 6b d0 dc cc d4 29 53 b8 e4 92 4b bc b6 ca 7e bf 9f 69 d3 a6 11 0a 85 78 e8 a1 87 f8 d2 97 be 44 4b 4b 8b 47 22 d7 fa b8 99 e3 6e 3a 4f 26 32 d7 44 72 49 96 49 a2 ae ae 2e 8e 1e 3d ca 5d 77 dd f5 fd 69 d3 a6 dd d9 d6 d6 d6 e8 96 96 9f 21 be c3 c9 bb 07 9d ca 36 59 38 f8 8b 21 52 06 ac a2 Data Ascii: wAO8B'ZsZ[[6m8{zzzbV.=nC"7,--C}F-b\E7th^O}S()c?`PTThlldP^^Clk)SK~ixDKKG"n:O&2DrII.=]wi!6Y8!R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.22	49242	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:23 UTC	594	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:23 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30483 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:23 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (dce/26A3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-07-13 16:49:23 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-07-13 16:49:23 UTC	6853	IN	Data Raw: 4c 4f 0b ca 02 c2 0a 8f 45 e5 f1 a1 32 f4 8e 1b 93 42 a1 c8 d0 69 6b f2 c6 bd 07 30 67 76 01 de da f2 20 6e bb ed 76 fc f9 b7 bf c1 37 6f be 0e 3d bd 83 b8 eb d1 ed a8 64 1c f0 e2 b3 cb b1 64 4e 0e 3e d8 dd 8a 12 06 78 93 d5 8c f7 76 76 30 30 0d c2 62 b3 e1 ed 1d 6d 68 6c e9 83 d3 61 e1 be 44 21 ae 86 e5 f0 84 35 d7 17 90 62 bb bc 17 4d 8d 7b f0 a3 b5 b7 35 fc 78 f5 57 97 b0 3f 07 27 bb d1 9a 08 9c 5a a6 2f 2e 93 9f 55 69 b8 85 6b 02 43 8e ca dd 5c 13 85 9e 4d e0 02 c1 c1 7e 13 15 8e d6 10 1d 62 a6 8d ea 61 df 29 51 e3 69 38 58 48 5a 0c 5d 56 a7 28 8a 55 1d ae 20 21 c1 59 e2 0d 3a b2 ac e6 11 1e f5 12 52 c6 d0 1a 01 a4 2c ad c1 0d 35 a1 60 24 b7 50 cd 6f 34 48 67 a4 d7 17 82 d7 e3 c3 8d 97 cf 86 b5 64 36 fa 0e 1c 80 b7 a3 0d 85 05 65 a8 58 5c 84 bf dc f7 Data Ascii: LOE2Bik0gv nv7o=ddN>xvv00bmhlaD!5bM{5xW?'Z/.UikC\M~ba)Qi8XHZ]V(U !Y:R,5`$Po4Hgd6eX\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.22	49243	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:23 UTC	352	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:23 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 56069 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:23 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (dce/26A4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-07-13 16:49:23 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-07-13 16:49:23 UTC	4201	IN	Data Raw: 36 12 2e ba 00 6b 71 d1 3e eb b4 cf 28 1f 15 23 11 21 ca 4d 4b 15 f3 ea b8 bf d3 60 4a 32 b5 84 41 32 5d 4c c0 7f 1f b0 c8 d7 d1 49 fc 79 67 93 ff b7 bf ee f7 e5 7d 4f 3f 47 ef d3 6b b0 97 ce 08 55 87 50 3b ae 3c 12 bc 2f cb 32 b2 df 4f d2 e5 17 8f 5b af bb 79 a7 e2 1a 3e 06 41 c1 90 e5 9b 1a cb e7 39 4a eb 37 fc 6d bf 1b 6d 30 65 98 52 53 ab a5 9b d7 6f 41 96 ef 06 30 65 a4 33 f0 fa 9b b4 dd fc 53 02 83 43 e3 5e eb eb ea a6 f5 07 3f c6 92 96 85 10 a1 3f 4b e8 3e 68 46 b8 6f 6f 27 51 f3 66 13 fb e5 2f 8d 5b 77 ff 8b 2f 29 46 fb f8 fe 1f 79 72 20 60 c4 3f 7f 4e 99 52 c2 d0 58 3e ef 52 21 c4 53 00 92 45 49 1d df 7e ef 2f f0 34 ef 1c f7 da b6 9f dc 8a b7 75 37 e6 f4 34 64 39 b0 ef 3e 2b c0 ef e8 21 f1 f2 4b c6 0d 11 1d 5c f7 06 7d 4f 3f 87 25 3b 0b 21 94 91 Data Ascii: 6.kq>(#!MK`J2A2]LIyg}O?GkUP;</2O[y>A9J7mm0eRSoA0e3SC^??K>hFoo'Qf/[w/)Fyr `?NRX>R!SEI~/4u74d9>+!K\}O?%;!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.22	49244	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:23 UTC	620	OUT	GET /assets/images/welcome/premium/id-glass-table-m.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:23 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16773 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:23 GMT Etag: "29e16-61c36baad5f80" Last-Modified: Mon, 01 Jul 2024 22:00:46 GMT Server: ECAcc (dce/2682) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 171542 Connection: close
2024-07-13 16:49:23 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: 11 ca 01 e5 8e 7e 9c 97 5d 0a 6e c5 c6 4c 4b f4 29 50 a7 47 75 2f d9 c3 63 22 89 f7 af 53 54 c3 80 ca d1 ce 36 d9 49 73 90 db a4 9c e1 4a cf 00 12 84 28 97 13 e2 1e 42 8a cf 1c b2 9f 25 32 54 1a dc af 65 b0 ce b4 b9 53 6e a9 fc 24 64 4a 3a f6 1c b2 b0 4c 76 e8 ac 24 ae 4d 3a d4 b8 ff 00 30 f7 c8 27 cb 17 17 f3 86 92 03 ac f2 52 85 32 e5 5d b2 55 9f 5f ea 36 52 85 9f a0 d6 36 d2 13 88 7d 20 25 40 ac 94 95 32 e2 89 79 67 8c 20 73 c0 38 b2 0a 52 a2 ac 7d 0a 4b ef f2 a2 d3 a4 25 0a 25 28 71 45 4e 04 8c 39 c8 56 78 9c 52 92 91 7a e2 1e 4d aa 82 26 c7 70 a9 71 88 52 54 9e 71 d6 c9 31 07 0e d7 5b 4b 2c 36 da 16 a0 a6 d0 83 21 25 68 58 5e 79 8c 2e 82 af ae 94 95 bc 70 bc 94 e3 8f a4 87 24 f9 2b ea b9 8d 2b c5 4a 50 2c d4 1f 17 6c 94 4c 73 f5 5c 1a ad 72 85 b3 bf Data Ascii: ~]nLK)PGu/c"ST6IsJ(B%2TeSn$dJ:Lv$M:0'R2]U_6R6} %@2yg s8R}K%%(qEN9VxRzM&pqRTq1[K,6!%hX^y.p$++JP,lLs\r
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: d6 d2 6e 91 a9 6b 5b 45 72 c6 ed af ba 8d dd f4 b1 dc fa be bf ad ed dd 12 c5 94 9d ef 3a d6 b8 cc bb 75 a5 b0 d6 d3 55 26 d2 cb 41 af fd 80 d9 96 87 d7 3c 8f 29 0a 3c ee f0 5b 8b b4 a5 40 e3 6a 53 2b 83 b2 3c ce 44 9d 16 6a 5d 48 c7 3e 6d 24 e0 3c 05 b8 08 fc 39 c4 72 4b 69 56 44 48 e4 10 45 82 81 c4 2b c4 b9 f0 49 27 06 70 06 39 19 2b c7 61 a9 01 48 52 31 a5 24 a7 07 c9 03 f2 b4 47 28 c4 9f 8b 6a 4a 4f cf 0f c4 14 8e 12 c0 04 34 30 24 0f c5 69 f2 0a 6f c8 a1 25 24 12 0b 6a e7 39 49 03 8e 7e a8 08 5c 80 30 c8 4e 2d f4 f0 fb aa f0 2b 27 14 41 52 d2 7c 99 6f 85 36 a5 25 5e 29 22 8e a1 73 1c 40 29 52 3e a1 5d 6c 35 28 b4 da 46 15 94 a2 5f 99 4d ab 42 28 88 cc b9 2e eb dd 67 b2 5c a2 83 d7 f8 31 5b 67 af f4 da 87 d4 ba aa fc 72 49 90 e4 48 68 71 71 e6 45 ac Data Ascii: nk[Er:uU&A<)<[@jS+<Dj]H>m$<9rKiVDHE+I'p9+aHR1$G(jJO40$io%$j9I~\0N-+'AR\|o6%^)"s@)R>]l5(F_MB(.g\1[grIHhqqE
2024-07-13 16:49:23 UTC	1106	IN	Data Raw: 96 a1 f8 ca 88 e9 64 c7 f8 3a eb 4d 49 32 2b 90 85 a9 d4 a9 2d bc cc d7 3f 67 fb 71 22 4a 42 b4 06 ff 00 bd ee 5e b5 eb 2f d0 6a 1b 8f 5e ea 3b 84 1e e5 fb 6d e8 bb dd 47 7a fa 93 b7 f4 9d 9b 85 e6 1f 87 31 b5 65 64 88 cb 6d a9 cf b0 60 22 1d 93 72 ab 5c 8e a0 b2 84 cb 97 e0 51 21 6a 1f 5b 9c 65 41 78 a0 40 1c 8c 7d 5c a6 e1 25 23 67 6c b0 8d f2 5a d8 73 b9 26 d9 a1 1b b2 9d 93 60 e4 75 48 71 bd 31 e8 6e 5c 52 3b 0e 34 78 0d a5 89 ce 38 c6 53 b6 cb 8d c3 ad 65 4c d6 eb 31 14 db 7a e3 11 d8 eb 4e a4 dc bb 5f 7d e9 ee a7 d5 7a 43 44 5c d6 61 e5 d5 fc 66 57 77 e7 24 cb 79 86 63 db ec 70 e0 23 6b ed b8 f1 a5 5f f7 f3 ad b3 b8 ec 3b 66 fd 6f d9 70 e9 eb 21 de ed 08 0f 4b da 55 03 13 bb c9 43 f2 b7 c9 52 5d 95 79 31 f5 b2 a9 0e bb 0a 02 dd 5c 6a 64 a5 35 f4 21 Data Ascii: d:MI2+-?gq"JB^/j^;mGz1edm`"r\Q!j[eAx@}\%#glZs&`uHq1n\R;4x8SeL1zN_}zCD\afWw$ycp#k_;fop!KUCR]y1\jd5!
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: 71 79 1d 0e ad dd 65 93 36 6c d6 9f 61 16 eb 91 39 d9 16 f0 74 b6 a6 5c cd b1 7a 72 e4 07 19 69 f2 89 8b f1 53 72 03 b9 21 c5 a1 cf f6 a5 23 d1 9e b8 fd b3 f5 a9 6e 1b 09 84 b0 ff 00 72 6d 6a a7 a8 ee 4d b9 b7 9d dc ee 1c 72 56 a7 55 2a ee cb a2 bd 58 a4 df 28 3b 4b ed bc fb 71 b7 de 92 ec 3e b7 99 10 12 b4 d8 43 42 1f 8a 97 71 11 92 94 b6 d3 64 a1 83 85 85 12 22 8e 16 cf 01 e6 f2 fe bd b7 da dc e9 54 11 bc eb 52 c2 ac b5 78 d2 0d fe 94 94 cf 67 5c 6c 3b b2 68 b1 54 ad df 5d 4c 29 32 d2 b9 0e cd a8 5a 93 44 d2 9a 9b eb af 4e f6 17 7d 6d 3d 13 d0 3d 77 eb b6 94 ea 1b 0b d8 f6 05 c7 5c c9 6e 2d e7 6d 9b 27 60 df 1a 91 2b 70 db 9e b5 3b 01 4b 0e a6 b5 e8 b6 5a e5 9c 0a 88 fd c7 da ec 55 c5 ed ed bd fb 8b 1b 29 01 e0 5a 71 d5 fe c9 45 75 75 4a 73 2a a8 d4 5a Data Ascii: qye6la9t\zriSr!#nrmjMrVUX(;Kq>CBqd"TRxg\l;hT]L)2ZDN}m==w\n-m'`+p;KZU)ZqEuuJsZ
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: 6c a4 db 1d d5 bd 76 c8 88 8e a8 b9 8b b5 28 0f 1e 05 b2 4f d0 ef 55 d8 a9 d0 fd 06 aa a1 62 b0 c5 31 08 6e 3d 0b d5 f7 3b 4b da 84 89 b5 72 50 72 30 32 88 3a 67 c3 c4 0a fd 17 ee 4d 9e d3 d6 7d 3d ab 0d c5 b8 c6 47 9e a8 47 49 24 38 26 56 e5 8a 84 fd 53 d0 77 bf b7 7d 54 1f 0d dd b5 2d 89 9a 89 01 6b 5c 3c 32 fc 53 b0 08 c5 d7 a9 db ff 00 f3 9f ff 00 4e d8 7a 8f a6 6f 21 a2 e0 b9 27 bf 08 4a e4 6e 5e 88 9c 3c d2 3c c9 c2 3e 68 8c 2d 9b a2 22 33 78 b8 5b 2f da fb 6b f2 bd 3b 53 9d db b3 66 37 2f 5c 61 29 88 63 18 44 46 36 ed 89 54 c6 2f 22 e5 87 a3 fe dc 81 d5 6b d3 b6 83 5d 70 bd b8 3e 6c c1 e0 63 0f 2c 71 a1 ec 40 75 a5 4f b9 1b 31 2f a6 24 d1 db 9f bd fd a1 18 61 2d 47 b8 00 e7 dd 96 78 2b 12 f2 22 6f 98 02 5c 02 c4 87 a3 8e e6 0d ed 74 c2 02 21 cd 00 Data Ascii: lv(OUb1n=;KrPr02:gM}=GGI$8&VSw}T-k\<2SNzo!'Jn^<<>h-"3x[/k;Sf7/\a)cDF6T/"k]p>lc,q@uO1/$a-Gx+"o\t!
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: 4b c7 06 03 92 84 b7 36 e1 20 32 00 38 43 69 b1 b5 01 6c 60 40 eb 54 65 3b b8 63 23 83 64 c8 cf 59 2e 19 ba e6 8c af 48 12 78 a6 8c b0 aa 26 dd da 9f 62 f0 cf c2 8b c8 a0 0e 0e 9f 4d 10 27 14 05 54 75 0f cb 7a af 49 d8 ed a3 e5 5e 9f a8 da 63 02 63 22 21 09 19 44 c8 34 8c 4c 6a 62 ec 4a 1a e7 29 0e 72 91 f6 39 3d ea 24 42 34 c2 8f ef 38 94 25 99 e1 44 49 ac 8e 67 1e d4 f9 ac 71 58 a3 ab 34 c0 d4 2a 8a 3a 3a 09 d4 bc c8 58 78 c0 c4 02 c3 00 c4 83 fe ad 4d da b7 3e af ea 56 e1 0d 9e c7 6d 3b d3 91 19 42 26 e4 81 61 c9 b9 38 26 8b f7 07 af 4e 52 23 79 bc bb 78 03 f8 45 c9 ca 71 8f fa 01 00 72 1d ff 00 c1 82 23 f8 6a a8 aa 15 0a c1 60 c9 c1 46 ce e6 c4 2e 5a 3f 86 51 12 1e c2 08 3d ea ed ed b7 a5 4b d3 77 b2 07 f3 36 53 3b 72 64 70 94 a1 1f ca 99 05 db cc b7 Data Ascii: K6 28Cil`@Te;c#dY.Hx&bM'TuzI^cc"!D4LjbJ)r9=$B48%DIgqX4*::XxM>Vm;B&a8&NR#yxEqr#j`F.Z?Q=Kw6S;rdp
2024-07-13 16:49:23 UTC	16383	IN	Data Raw: 74 b7 16 53 6c 37 92 5a 3c 26 3d 1a 3e c9 3c 37 c1 b7 cd d3 81 78 27 ec a7 ca 9c 2f ca 9b 07 8c ec ed 8e f4 de 42 dc fc 61 c6 39 1e df e3 7d bf 93 72 7d c6 fd 37 1b 7b 7e 3f cd 37 d8 f9 15 cb f6 ee 7f 98 df da 46 1d 63 f6 ba 78 b7 c9 3e 51 dd bc 2b 6f b3 fd ba 6d ff 00 73 b6 31 79 8b c5 e7 93 ff 00 df c7 df 27 21 fb 9b e6 69 c9 ee 79 af dd 6d c6 f7 b7 40 b6 f6 fc 17 6e 11 cb 16 d7 26 e7 bf 28 e4 71 99 ec e7 b5 b0 86 da 03 c2 af 7c c5 f7 49 e5 8f b6 ff 00 b7 4f 22 79 fb ee 4f c0 3e 38 f3 0f 99 f8 4d 97 98 cf db 0f db a7 0b e6 fc eb ca 3e 34 f2 47 99 36 4d ee 3d e5 79 af dc 3f dc ae f9 b6 d9 f1 1e 1f b8 ef 33 b7 1a e2 5c 0a d9 62 4b 1b 9d d3 70 8c a3 43 e6 3f 0f 71 1d f3 cb 1b 43 fd 92 f8 3f 8e f0 78 af f7 0f 12 79 13 cc df 71 df 78 1c bf 95 6e 9c 56 ea eb Data Ascii: tSl7Z<&=><7x'/Ba9}r}7{~?7Fcx>Q+oms1y'!iym@n&(q\|IO"yO>8M>4G6M=y?3\bKpC?qC?xyqxnV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.22	49245	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:23 UTC	355	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:23 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 29390 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:23 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (dce/26A7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-07-13 16:49:23 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-07-13 16:49:23 UTC	22	IN	Data Raw: ad e3 a0 3f 10 38 90 99 e5 38 60 36 9b 4f e4 e6 e6 7a 08 48 61 fa Data Ascii: ?88`6OzHa
2024-07-13 16:49:23 UTC	4667	IN	Data Raw: ff b9 7e 96 0a 55 83 4c ad ae b3 51 05 a4 ea 61 7c 13 f5 b0 ee 7a d9 a7 3a af b4 a2 63 ab 55 32 6d c7 b9 b6 d1 77 25 f7 ad 22 85 49 25 10 9d cf 47 92 25 a1 ba 60 8a 54 75 48 bd 9f ca 47 44 75 f5 fa 61 2b 15 d5 d4 6c 19 3c 86 f6 73 aa f6 71 aa 18 7d 07 ed 77 79 86 51 08 e3 38 57 aa fa bc d3 a6 4d 3b b5 6e dd ba e7 37 3f f4 10 f7 c1 38 b9 5e 1c 87 c7 19 4c a5 25 c5 b0 90 84 ba 76 de 6c 2c 5b b9 1a 4f fd ee f7 78 7b ef 3b d2 9b bc b4 b4 54 62 92 fa fa 7a ec dd bb 0f 65 81 28 2c dd ed 30 5d 33 1f b9 37 af 21 70 b8 d0 d5 da 86 ce ae 4e 9c 26 df e6 d8 b1 63 12 48 b2 b3 b3 71 cb 2d b7 d0 1f 6a 71 b2 c7 9a 18 ca 68 b2 d0 62 26 a0 18 20 92 94 b4 67 26 25 62 c0 ef 27 06 0a 4a b3 09 ba 5c 3c 21 9a 0e 3a 43 1e 8a 27 56 4a 7d 5a dc 13 dc dd db 2d c9 54 87 23 53 fa 8c Data Ascii: ~ULQa\|z:cU2mw%"I%G%`TuHGDua+l<sq}wyQ8WM;n7?8^L%vl,[Ox{;Tbze(,0]37!pN&cHq-jqhb& g&%b'J\<!:C'VJ}Z-T#S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.22	49247	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:24 UTC	360	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:25 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 30485 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Sat, 13 Jul 2024 16:49:25 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (dce/26A3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-07-13 16:49:25 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-07-13 16:49:25 UTC	6853	IN	Data Raw: 4c 4f 0b ca 02 c2 0a 8f 45 e5 f1 a1 32 f4 8e 1b 93 42 a1 c8 d0 69 6b f2 c6 bd 07 30 67 76 01 de da f2 20 6e bb ed 76 fc f9 b7 bf c1 37 6f be 0e 3d bd 83 b8 eb d1 ed a8 64 1c f0 e2 b3 cb b1 64 4e 0e 3e d8 dd 8a 12 06 78 93 d5 8c f7 76 76 30 30 0d c2 62 b3 e1 ed 1d 6d 68 6c e9 83 d3 61 e1 be 44 21 ae 86 e5 f0 84 35 d7 17 90 62 bb bc 17 4d 8d 7b f0 a3 b5 b7 35 fc 78 f5 57 97 b0 3f 07 27 bb d1 9a 08 9c 5a a6 2f 2e 93 9f 55 69 b8 85 6b 02 43 8e ca dd 5c 13 85 9e 4d e0 02 c1 c1 7e 13 15 8e d6 10 1d 62 a6 8d ea 61 df 29 51 e3 69 38 58 48 5a 0c 5d 56 a7 28 8a 55 1d ae 20 21 c1 59 e2 0d 3a b2 ac e6 11 1e f5 12 52 c6 d0 1a 01 a4 2c ad c1 0d 35 a1 60 24 b7 50 cd 6f 34 48 67 a4 d7 17 82 d7 e3 c3 8d 97 cf 86 b5 64 36 fa 0e 1c 80 b7 a3 0d 85 05 65 a8 58 5c 84 bf dc f7 Data Ascii: LOE2Bik0gv nv7o=ddN>xvv00bmhlaD!5bM{5xW?'Z/.UikC\M~ba)Qi8XHZ]V(U !Y:R,5`$Po4Hgd6eX\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.22	49246	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:24 UTC	610	OUT	GET /assets/images/welcome/featured/horse.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:25 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16775 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:25 GMT Etag: "260f4-61c36fbf1bf40" Last-Modified: Mon, 01 Jul 2024 22:19:01 GMT Server: ECAcc (dce/26EA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 155892 Connection: close
2024-07-13 16:49:25 UTC	15277	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5f 00 00 ff e1 03 8f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 64 62 61 33 64 61 33 62 35 2c 20 32 30 32 33 2f 31 32 2f 31 35 2d 31 30 3a 34 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky_http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 55 1f 30 0f 9e 89 73 2a b7 07 31 17 9e bc 78 9b 23 f6 f3 08 de e2 6d 8a 17 c5 03 7c 3e 00 e9 2b 94 43 9d 96 b0 22 9b 71 24 6c ad ba ac cd 56 66 3b d8 9f 2a d7 e3 a6 a7 56 45 46 81 cb b0 f1 94 79 4b c6 00 27 f9 63 70 60 4f 9f c3 e7 a9 e4 49 3e 03 73 23 73 fc d1 d5 28 41 20 57 c4 2f e0 7a 57 49 51 aa 0d 05 ac ee 98 32 c8 8e 63 66 af f9 a8 bd 3f 81 fd ba 09 27 88 ea b6 e4 d7 76 f1 ec 31 c1 29 21 81 42 a5 5a 83 ce a3 c2 a3 52 6d 71 0b 94 e0 1b 83 36 6e 20 d9 34 13 db a2 bd 77 bb 09 00 a7 c0 a8 24 6a 5a 70 c0 a5 07 65 78 1a dc 08 a4 66 42 0b 3b 1e a4 b0 f2 a5 2b fc 35 5d 6a f0 14 92 9e 42 0d ee 42 da 1f a3 d4 04 14 a9 db f5 28 03 fd a3 f2 f9 fe ed 44 6f 21 be 73 16 e6 40 23 8a 45 f5 f6 94 96 48 5c 2c aa c6 80 a0 2b f5 82 7a 7d 35 d5 57 66 e2 69 b4 aa aa 7a f7 Data Ascii: U0s1x#m\|>+C"q$lVf;VEFyK'cp`OI>s#s(A W/zWIQ2cf?'v1)!BZRmq6n 4w$jZpexfB;+5]jBB(Do!s@#EH\,+z}5Wfiz
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 40 aa ec 49 a0 1b 4d 0d 3e 20 d3 4c 46 c4 0b 11 48 eb b4 aa c3 18 67 e9 57 26 80 7e 27 4c 0c a5 2c 64 51 d4 ab 4a bb b6 b0 db 40 a4 9a 82 3a 52 9e 5a 4c 02 52 ad 0b 00 e4 fa 4d 22 80 62 e8 ab 32 d4 00 69 d7 f1 d0 c6 24 99 58 18 e2 58 e1 68 c4 cf 23 b2 86 56 e8 c7 6e e3 e0 7a 93 50 35 16 0c ce dd 4b 6c 94 a6 dd ec c0 15 90 b5 41 59 2a 3e 03 af 4f 0d 20 07 16 86 98 4b 00 3c 05 95 9a d5 7a 07 5f 42 3a fc 6b 41 4e ba 71 1c b0 63 8e de 89 0a 85 07 68 45 a9 3d 09 3f b7 af 4d 4d 64 41 84 6f 49 47 94 00 01 60 c1 01 a0 a9 55 62 7a d7 cc 9d 45 92 34 05 11 3b 9d cb 47 f4 a8 c0 d0 0d fd 34 f2 00 c3 10 51 5c 31 f1 d8 7e 5f 55 34 30 0b 6d 3e 1d 7a 4a 4f 41 e3 e1 e3 d7 e3 a0 63 81 e8 23 3b 83 15 2c 8b d7 c0 ef 20 7f af 52 64 11 93 30 8e 37 66 f0 55 76 e8 2a 4f 4f f5 e8 Data Ascii: @IM> LFHgW&~'L,dQJ@:RZLRM"b2i$XXh#VnzP5KlAY>O K<z_B:kANqchE=?MMdAoIG`UbzE4;G4Q\1~_U40m>zJOAc#;, Rd07fUvOO
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: ca 3f ca 1f 61 e9 ad 17 6e 45 ca e3 c9 ae 3e ba 19 ad c6 49 41 7a 64 0f 59 22 ca 19 e5 5d d6 eb c5 72 6d fc b6 03 fd f4 a5 a8 a4 78 16 a6 9c 2e 52 e3 af f0 3f ac 52 85 62 92 cf 52 11 f0 08 f8 bb 4c 16 58 97 82 35 2b f7 0b 51 48 d3 21 21 dd d7 e4 af d7 54 d9 7a 23 19 bf 4a b2 db cb 5b 94 57 a5 04 7e 67 74 30 5d b8 ca de 5c 44 5e 6e 37 9f 97 21 6f 6e c6 82 5f e9 b3 46 f6 ec 0f 5f 32 19 69 a5 7e 6a dd 97 a9 7c 2e be c6 16 22 ee 5d 5d aa 9e d1 42 38 23 8b 93 4f 69 19 94 2e 56 c3 15 9b ba b9 1f 42 34 b3 57 d3 b7 ff 00 aa 4a b1 91 be 23 5b 76 b1 d3 72 8b 8e 2c a2 f4 eb 1a f2 aa 44 8b 96 b9 5b 5e 4d 2a cb 28 8a 08 2c 30 b6 ca d1 fd 51 c4 6e 51 f6 ad 3c 16 ad e3 ad db af 8d f6 24 62 b3 16 e3 db 56 36 4d cd 96 2e fb 88 cf 3d f2 da a6 67 97 e7 ed c5 b3 92 63 39 0b Data Ascii: ?anE>IAzdY"]rmx.R?RbRLX5+QH!!Tz#J[W~gt0]\D^n7!on_F_2i~j\|."]]B8#Oi.VB4WJ#[vr,D[^M*(,0QnQ<$bV6M.=gc9
2024-07-13 16:49:25 UTC	1106	IN	Data Raw: be c2 e3 7b 3f db 86 e3 59 85 b1 cd f2 3e 46 af 77 cd f2 22 1d f6 d9 0b 8b 84 d8 2d 53 70 a9 82 da 2f e5 a0 23 af 56 f3 d7 57 61 b0 8e ce 0e 38 36 f3 30 ee 77 0e fc ab c1 64 50 fe 41 ec 3f b9 96 1d d8 9e d3 84 5e e2 53 b5 19 8c ac b9 25 cb dd e4 95 32 3c 72 ce ee 43 24 b6 cf 6c df ce b8 78 aa 56 16 40 41 14 dc 57 ae b1 ae 90 a1 2a 47 e1 ad 7d a5 cf 79 ad 55 e6 5c af 71 7e ce bb 41 ee 57 da bf 39 f6 9b ce b0 f0 4b c0 39 97 10 9b 8e 47 3f db a4 b7 d8 6c bc 6b be cf 2d 09 23 ff 00 49 b4 bc 55 b8 56 f3 22 87 a1 3a eb 5c b1 1b 90 d0 f2 29 da ee a5 b4 ba ae c7 34 cf 92 1f 62 9f f2 ca 77 d7 85 7b be b2 cf 7b b3 9b b7 b9 0f 6d fd b2 e4 31 f2 2b 69 78 f6 76 3c ad e7 7b df 14 fb b1 96 1f d3 50 7a d8 cb 31 22 ac 97 ab 75 b4 b0 06 35 56 0c 4e b9 76 3a 6b 8c bd fc 93 Data Ascii: {?Y>Fw"-Sp/#VWa860wdPA?^S%2<rC$lxV@AW*G}yU\q~AW9K9G?lk-#IUV":\)4bw{{m1+ixv<{Pz1"u5VNv:k
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 6a f3 5c f3 13 69 94 e1 d2 5b 45 ca f1 0e 0a 5b dc ca 2d a0 cc d8 9e ad 03 48 7e 94 75 22 a8 cd d3 c4 12 01 d3 94 6a 46 dc f4 e6 27 f6 2b b3 d9 6e 19 77 91 e6 7c cb ed cf 2f cc e2 31 98 5f b3 82 61 77 1e 27 1f 8e 92 79 28 65 52 63 79 25 69 be a2 bd 00 50 2a 75 18 c3 4b a8 ee 5c d5 82 c8 60 f7 b3 b1 1c d7 2b cb 6d b9 5f 6d 12 c2 78 b2 d7 10 1e 43 87 b9 bc 4c 6f a1 75 13 2f fc 54 6e f4 56 56 0b 56 41 d6 be 1e 3a 25 0a e4 38 5c 49 51 96 27 b7 5d be b5 e1 bc 3d 38 f5 f7 a1 91 bc bf fb bb 9c fd c6 d2 d0 de 5d e4 59 9e 54 5d dd 7d 34 de 55 6b f8 f8 9d 4a 31 a2 2b 9c f5 3a 95 17 ff 00 66 ee e7 e2 fb 97 73 06 1e fe c2 5e dd 5f e6 a5 cb 45 98 9a f8 0c 86 2a c2 e1 28 f6 8d 6e df cc 76 43 d1 0a 0a 1e 84 91 d7 55 e8 75 2e f1 55 3b 4b 97 c8 38 26 27 39 c2 ee 78 6a a8 Data Ascii: j\i[E[-H~u"jF'+nw\|/1_aw'y(eRcy%iPuK\`+m_mxCLou/TnVVVA:%8\IQ']=8]YT]}4UkJ1+:fs^_E(nvCUu.U;K8&'9xj
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 47 3b 72 eb 3a 2a e6 7e ab 9f a6 0e 41 32 bf a7 a7 b3 bc 8c 61 55 2f 7b 0b c0 ae 10 28 a2 85 92 d1 48 a6 bd ef 4a b5 e0 6d ad c3 94 52 3a f6 5d 62 ab c8 b2 fd dc ec c7 03 ef 57 1f 4c 0f 37 c5 2d df d9 c9 25 ce 1f 29 01 f4 72 98 5b c7 5d a6 5b 79 7c 56 a3 a3 29 e8 c3 c4 6b 73 55 2f 84 dc 32 39 65 db b5 b0 e2 bc c7 92 f0 d8 6e d3 21 1f 15 e5 59 9c 04 19 05 da ab 7a 98 2b c9 6d 96 6a 2e e5 fe 68 8a bd 0f 9e ab 35 bc 55 4b b3 68 23 9a cc 30 50 c6 a9 2a ed 00 15 63 f0 f9 e9 94 9b 01 43 2c 8c 28 c3 d3 58 ca 3d 40 f4 d4 b1 ea 0f c4 9d 00 17 81 5c 7a 4a 14 ff 00 2c c5 1b 23 a5 77 d4 bb 86 a8 3d 29 51 a4 86 c6 8e 7e e6 67 87 3c aa 55 56 df 1f 3a c2 24 35 47 66 78 d9 99 ba 86 a5 08 14 1f f4 69 36 4a 2b 20 c5 8b c7 73 65 1d a6 c3 24 b6 66 dd 59 e3 5d 89 b2 47 71 45 Data Ascii: G;r:~A2aU/{(HJmR:]bWL7-%)r[][y\|V)ksU/29en!Yz+mj.h5UKh#0PcC,(X=@\zJ,#w=)Q~g<UV:$5Gfxi6J+ se$fY]GqE
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 39 63 3d f1 bb f4 c5 3c a3 69 0a a0 52 47 97 87 e3 a5 4a 0d 4c 72 ff 00 e1 be 31 f1 fe 97 db 43 ea 01 b4 36 c2 14 3f 99 1b 96 a4 7c 0e 9b c4 35 0c 69 bb 4d 61 6b 7d 05 d9 43 d1 fe a8 c5 be ed e1 ba 53 68 eb 51 f1 d4 1a 26 a7 50 cd e7 6f 2c ae 65 8a 15 80 49 69 42 b2 b3 d1 9b d4 7e aa 40 09 b6 8a 7a 35 48 03 a7 9e a2 b3 05 23 2c 6f 6a b0 f0 6e 92 38 e0 6d ae 87 7a 15 73 ea 03 50 41 4a 83 f0 d4 a9 52 2e 43 9b 21 da dc 65 ec 71 c9 e8 2d 4a 00 6a a3 c0 1f f1 d5 89 11 53 a0 31 5d b1 c6 d9 a7 5b 65 53 5d bb 7d 35 72 18 1f 86 8a 0b 55 42 b7 fd a6 c5 dd 4c 65 fb 58 e8 03 1a 14 db d0 57 40 f5 d0 56 83 b6 b8 c8 e0 fb 71 02 81 41 bb e9 f1 52 3c ba 75 f2 d1 40 d4 35 07 b7 38 b9 96 45 f1 b8 fb 28 07 8b cf 75 72 bf f0 f6 f6 cc 7a 96 3e 3e 3e 00 75 3a 49 54 6e e6 92 f9 Data Ascii: 9c=<iRGJLr1C6?\|5iMak}CShQ&Po,eIiB~@z5H#,ojn8mzsPAJR.C!eq-JjS1][eS]}5rUBLeXW@VqAR<u@58E(urz>>>u:ITn
2024-07-13 16:49:25 UTC	7	IN	Data Raw: 48 a0 d4 c8 06 a2 50 Data Ascii: HP
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 9f 91 b7 0a 2a d2 a5 a9 43 d2 a4 92 7c 3e 3a 00 c7 d4 21 fc 45 48 23 e2 14 fc eb fb 34 0c f6 de 5f 1a 74 35 35 dd d7 a5 2a 3f 70 3a 04 28 2d 08 fc 41 e9 e3 50 34 85 91 a4 82 55 ea 56 ab 40 06 ee 84 1d 3a 0c d7 d1 42 12 68 56 a7 e0 29 a0 02 37 fb e1 83 d4 89 1a 52 d2 44 ae 1a 40 a1 51 98 75 1d 3c 07 c3 51 90 e2 1c 7e bb 4a 74 28 ab f8 95 23 f8 83 a9 08 25 10 de c6 34 67 5d 84 a9 5a f5 0b 27 d4 3c ba d3 cb 40 cd 84 10 48 23 c0 78 50 1e 87 fc 7a e8 11 ee d1 51 e2 48 14 f0 35 fa be 3e 5a 06 39 78 8d df 19 b6 e4 08 bc 85 ed 92 66 81 13 16 f7 84 7d 9a dd 6e ea 0e ef a4 31 14 d8 5b e7 e7 4d 08 8c ab 4c 0b 18 08 20 15 20 a9 00 a9 1d 41 07 c2 9a 99 49 f3 61 ff 00 32 cf 37 e2 5c 1b db cf b7 6b fe 57 c7 73 dc 99 2e fb c7 97 b6 c7 63 30 97 d6 f8 df 52 e8 62 98 9f 56 Data Ascii: C\|>:!EH#4_t55?p:(-AP4UV@:BhV)7RD@Qu<Q~Jt(#%4g]Z'<@H#xPzQH5>Z9xf}n1[ML AIa27\kWs.c0RbV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.22	49248	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:25 UTC	625	OUT	GET /assets/images/welcome/featured/featured-small-biz-6.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:25 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 14110 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:25 GMT Etag: "e90a-5c2c316e3ea80" Last-Modified: Thu, 20 May 2021 13:40:42 GMT Server: ECAcc (dce/26A9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 59658 Connection: close
2024-07-13 16:49:25 UTC	15279	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 2e 00 00 ff e1 03 fb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: 16 6a c4 5c 9b da bb 0f 06 1e 4e 1d d9 aa 1a c4 d8 1e ca 27 cd 43 8e 53 75 d9 85 0e b9 29 85 08 8c 1d ce 4f 4a ce dd 34 d6 7a 4a 4e cf 45 f8 0c 8e 25 e1 b2 4b 61 a7 85 fe 60 2a e1 73 1f 20 29 db 62 05 ec 6a 8e 3e 6f 16 09 19 b2 ec 3b 05 fd b5 5b ea 3f 56 37 18 b1 36 2a ff 00 32 fb 4f ba 9d 17 55 9e b2 b8 85 ab 67 0a 3d cf 89 79 c8 49 2b f6 6a 09 1f 45 3e 34 b4 41 ee 2e 2b 11 c7 7a 93 37 2c 4c cc de 61 1e 22 3d f4 67 0f cc e4 f2 70 bb a9 20 29 20 fc 2b 6a 57 a5 d9 19 dd 38 53 a4 1a 6f d7 aa 3d ae 2f 6b 54 38 52 27 21 c9 b6 ff 00 96 2d 45 54 49 7b 19 18 90 40 a2 f8 a8 dd 14 64 1b a8 93 a3 1d 2f 45 f8 44 ef 2c 2a b4 6f 69 50 89 79 a9 b1 d2 76 8e e3 41 6b 52 fa 21 e2 3c c4 cb 1f 5f 2c 5f e9 aa 6e 62 48 ff 00 50 f6 6b 9b f5 ab 0f 41 32 9e 6a 5b 7f ee 87 db 5c Data Ascii: j\N'CSu)OJ4zJNE%Ka`s )bj>o;[?V762OUg=yI+jE>4A.+z7,La"=gp ) +jW8So=/kT8R'!-ETI{@d/ED,*oiPyvAkR!<_,_nbHPkA2j[\
2024-07-13 16:49:25 UTC	16383	IN	Data Raw: d0 2a 8b 6d 6b a9 e9 50 66 71 f8 21 26 94 12 d6 04 a8 b9 27 a7 65 5a 99 31 ec 0b 6d b0 f7 9f ed a4 13 e2 b7 ca 01 3d c0 35 fe 8d b5 af dd 7f b4 cf ec d5 7f 13 5e 85 37 15 9d 87 16 23 47 2a 1b db b5 4d 54 e1 f9 03 3b 26 56 dc 82 e4 aa f4 d2 b5 ab 2e 1b b1 41 66 61 d5 4a b0 b7 d2 82 a6 fd 3c 3d 4c 08 6f ec 15 8d ab 37 ea 88 34 a2 ad 6a d2 b4 c9 71 e9 26 c7 c9 e0 52 48 17 ae e5 62 7a 96 15 1f a6 27 c7 6e 31 82 26 d2 24 93 70 eb ae f3 55 88 cb 00 db 11 30 af ec c6 e5 07 d0 ac 05 36 29 22 8a eb 0b b4 7d ac 23 72 3e a0 6b 45 64 a3 4d 93 5f 53 3f b7 a3 5d 5b b4 f6 2e 72 3e 46 b7 b6 bc e3 d5 89 bb 1a 76 3d 84 56 b6 7c f1 0d 84 92 4c 77 0b 8b 39 b7 d7 55 b9 23 8c cb 46 4c 8c 56 9d 1b e6 0c 74 3e fa c1 62 b2 b4 9b 3b 56 22 4f 22 55 06 6b 51 38 de 19 2c 7a 57 a0 49 Data Ascii: mkPfq!&'eZ1m=5^7#GMT;&V.AfaJ<=Lo74jq&RHbz'n1&$pU06)"}#r>kEdM_S?][.r>Fv=V\|Lw9U#FLVt>b;V"O"UkQ8,zWI
2024-07-13 16:49:25 UTC	11613	IN	Data Raw: 1c 99 31 c6 a0 c2 c0 15 b5 c9 0a 2d de 2b 43 e8 56 25 33 af d4 34 77 1f e2 ac de 7e 79 9b 61 6f 08 53 65 5e e1 d4 81 ec ad 17 a1 64 57 5c fd ba 58 c5 7f a1 ab 2b da 6a 5d 6b 16 2f f2 e6 e5 60 9d 9f 16 21 93 8e 40 b4 56 50 c1 bb 7c 57 07 be 98 bc d3 89 16 19 b1 c8 dc 42 ee 24 a0 60 48 1b 95 65 17 ea 6d 63 50 66 72 59 18 93 b9 39 08 b1 b4 c6 18 a2 78 0b 2a 91 6b 5e 48 dd 5f 5f 75 3e 1e 6d a6 53 f9 50 e4 05 6d ac 61 98 29 0d fc 19 2a 9a fc 6a 63 4d a7 f0 1c eb bc 7e 21 51 f3 3c 6b 5b 64 87 6b 0b a9 d8 c0 10 18 a1 ec ec 65 37 a2 93 2b 16 46 28 93 21 60 6c 57 70 06 fd da d0 26 7e 3f 36 48 d3 2b 16 45 92 53 b2 33 34 45 41 36 f9 56 58 cb 2f d7 4e 7e 1b 05 88 78 f7 46 fd ad a3 93 ad f5 df 7f a6 96 9e 28 3d de 0c b2 14 e1 4c 06 94 1a 45 0f 14 a0 d3 6f 4a 0d 00 3c Data Ascii: 1-+CV%34w~yaoSe^dW\X+j]k/`!@VP\|WB$`HemcPfrY9xk^H__u>mSPma)jcM~!Q<k[dke7+F(!`lWp&~?6H+ES34EA6VX/N~xF(=LEoJ<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.22	49249	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:26 UTC	620	OUT	GET /assets/images/welcome/featured/eddm-tire-combo.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:26 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16776 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:26 GMT Etag: "19378-61c36b69fc680" Last-Modified: Mon, 01 Jul 2024 21:59:38 GMT Server: ECAcc (dce/26B7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 103288 Connection: close
2024-07-13 16:49:26 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: c7 29 25 a6 12 da 78 57 0a 29 b0 90 e5 e9 46 e5 94 a9 54 e2 c4 74 a5 47 86 3e 67 b8 16 49 28 68 a8 a8 21 aa 5a 09 2b 51 14 a4 1e 30 d0 b2 22 40 4a 0a 13 49 4d 10 6c 5b bd 04 0f 8c 05 eb 64 cc 7b cf 16 c2 ab 45 77 8c 85 7d 7e 2d fa da 81 a2 69 02 80 b7 a6 54 d6 d9 a9 32 d6 f5 58 55 ba 43 83 ee 03 8e 64 86 52 63 2e 5b 66 8f 07 9b 46 49 61 11 21 97 a9 f6 14 d2 a7 c1 4f 28 4f a1 62 23 68 4c 79 0c 2d c9 11 c1 6d 1c eb 91 ae 46 b9 d3 8a ed 22 bd d0 2a 3b e8 76 9e 93 c1 e8 ce a2 30 8c 52 fa 7d 96 c5 18 8e 2c 27 1a 2e f4 37 79 33 81 92 aa 8d af a8 06 71 ed b6 94 b2 81 40 0f 92 d8 32 82 2b 2b 64 a6 81 22 b5 59 40 64 0f c4 03 a1 e9 6a 34 4d 0f b8 a5 3e 85 ac 24 4a cb 15 75 42 0a 8a 31 44 89 71 0b 35 fb 5b 8f 29 cf 73 24 07 b2 c6 55 21 05 e3 51 a2 38 e9 4b 66 2a e7 Data Ascii: )%xW)FTtG>gI(h!Z+Q0"@JIMl[d{Ew}~-iT2XUCdRc.[fFIa!O(Ob#hLy-mF";v0R},'.7y3q@2++d"Y@dj4M>$JuB1Dq5[)s$U!Q8Kf
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 4a c3 23 23 fd 8d f1 26 39 19 5f ed a6 bc 85 64 bf b5 db c3 e7 27 e7 cf 2f 64 44 fc be 63 23 27 82 2f ea 27 bf 55 a9 29 1e 1d d4 15 81 c3 96 90 e0 f3 44 52 70 ba bb 5e ce b8 40 07 eb 56 b2 85 cd 7e 85 20 13 c8 50 36 0a 00 27 b8 ab 76 6a 52 15 4e ad 2a 52 50 50 d9 52 b8 3c a2 a5 67 32 31 98 8d 97 44 bc 93 f2 1a 7f 05 1b 7b d9 71 b3 13 82 c5 14 0c 56 38 11 06 1a 52 98 d1 ec 96 d9 17 ca 6c 10 31 a9 c9 66 67 e4 1c e4 aa e4 aa b9 af 1d 78 a5 ed 96 3b fe 17 f1 fb 91 f5 c8 93 fc 6d b4 f9 27 07 3d ba 7f fc 77 7a d2 71 be 6b d8 20 eb 9e 3e f1 c4 8d b9 cd ab 59 c8 6b 59 bd 6f 62 92 98 b9 fc 74 c8 cf 66 e4 4d 7f 64 c6 64 a0 41 d7 b2 6a 62 6c f0 c8 af 69 34 1a 4d 06 4d 35 1f 92 f0 ec 5a b1 a2 33 b8 8d 87 1d 90 c7 2b 1b 82 5c dd 6f 3b 8f 9f b2 bb 3a 06 57 1f 90 c0 eb Data Ascii: J##&9_d'/dDc#'/'U)DRp^@V~ P6'vjRN*RPPR<g21D{qV8Rl1fgx;m'=wzqk >YkYobtfMddAjbli4MM5Z3+\o;:W
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 54 40 9c 36 71 a9 9a f9 eb 16 8f 14 72 cb 1b be 0c d2 fe f1 4c d9 c4 e9 97 f8 a7 83 df a6 18 bf 68 4f 7b a4 44 89 d8 4a ab 78 5f f1 ee e1 f1 71 98 ec e2 bc 4a 1e 8f b0 a0 ca 1c 3a 5b a6 7d 61 ea f9 78 3e 65 9d 59 b9 f0 09 ef 07 c3 fc 3d 4f dd f5 32 3b 16 28 de e3 28 ba f4 ec eb 71 f6 39 22 99 da e9 6c eb 45 31 b6 7d 3e 3e 46 61 f8 87 d0 1d 6e ea 72 66 3a 9a c5 69 2b df 0c ee 54 1d 9f 65 6b 53 7c 07 a2 42 a4 1c cf ab a7 c6 d6 5e 21 dd bb 2c 9a 57 b5 f7 35 49 b3 d3 a1 d2 bb df 4d 3b bc 4e a8 9d 29 f1 f8 61 2c c6 5b 3a 5c a4 34 de d1 8b d5 a9 f8 74 f0 f3 ea 75 54 a2 d2 8b 70 23 6d af b0 a2 4c a2 cf 16 dc c5 09 7a fc d9 8c 5e 04 0f 30 a6 a8 3a 5a 3a 87 a4 0b c6 1c ed f1 3b 27 d9 2e 4a 66 b2 23 ce e4 e8 73 94 5e ee c8 fc 42 e3 96 fe 22 8b ab 7e 19 dd 3e f7 27 Data Ascii: T@6qrLhO{DJx_qJ:[}ax>eY=O2;((q9"lE1}>>Fanrf:i+TekS\|B^!,W5IM;N)a,[:\4tuTp#mLz^0:Z:;'.Jf#s^B"~>'
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 12 46 76 ea 9e e5 65 c8 be 7e 3b a9 bb 1c 67 bd f5 f6 3d 97 5f dd a7 48 c3 45 93 03 04 cb c2 9c 79 73 c0 ff 00 46 58 cf f7 bc 2d 44 f2 3c ff 00 f0 ab 5e e2 c2 ed c7 bd eb a1 a1 f4 81 e8 ae eb 68 79 fa eb 43 af 1d a7 9d 76 93 a7 eb f8 28 58 6b a6 9c 4d 70 d4 f3 3e 9e 34 2f 61 7e 00 ea 74 e1 40 30 b5 8e a0 f1 f8 ab 69 4b df 9f 60 1e 8a ef 0b 31 e5 eb a2 2f a6 a0 f6 8b 69 c6 bb 41 d4 7a aa c2 f6 e6 7d 55 a1 b5 b8 58 56 db 58 b1 e0 4f 67 21 59 9d 5b 0b a7 c9 95 d3 72 02 48 d3 47 f7 d6 7d a0 38 65 5e fc 62 e3 bb dd a3 1c 88 d1 b8 f1 29 1a 8f 80 d9 87 c5 5b 23 3b db e8 8e 43 b4 f6 50 f3 32 5d 58 8e 08 82 c3 f7 8d 1c bc 79 5f 21 a3 74 13 24 aa a0 08 d8 ed 2c 08 fa 24 af ec d7 95 24 2b 0a ab 59 95 50 29 d0 d8 eb 52 f4 84 00 79 67 cd 56 00 02 ea f7 b1 72 3c 4c be Data Ascii: Fve~;g=_HEysFX-D<^hyCv(XkMp>4/a~t@0iK`1/iAz}UXVXOg!Y[rHG}8e^b)[#;CP2]Xy_!t$,$$+YP)RygVr<L
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: a6 f4 05 f3 7a bd 85 91 21 53 dc 83 cd 6f 6a 4b 39 9e dd fd 9f f1 28 ff 00 dd 5e b3 8c 4e 3c 7b b0 ff 00 ed af bb b3 0d 1e 55 ee bf 50 95 07 08 e3 e2 bf b2 8b ec d6 47 53 ea 52 be 4e 66 5c 8d 36 6e 4b dc bc 92 39 dc d7 3f d5 55 7b 94 aa a0 8b 71 1c 38 f6 d0 b6 bc ac 78 fc 3e ba 0c c0 d8 1d 07 69 ec a1 72 2e 2d 73 cf 4a b1 e2 38 81 fd b5 c0 7a 7b 6b 74 ee 37 1b ec 89 75 76 3e af d7 45 7f 07 1f fc a5 3a 9f b4 dc eb 80 ae 02 ae d6 00 71 24 d1 fc cc 53 74 ee 97 12 87 97 2a 48 d9 5a 4d dc 12 10 e0 06 26 dd e7 f0 a5 18 a0 6c 9c 79 ed 65 c8 f3 4c 86 fd ac 8f 74 6f 55 ab 27 dc 8e b8 e0 f5 3e 92 a1 fa 7c fa db 27 04 e8 8c 97 ff 00 2b c0 c3 d9 fd 9a 1d 63 a3 79 53 b4 d1 a4 59 38 d2 bf 94 54 c7 7d ae 8c 41 05 48 3d e5 a8 f0 32 e6 59 27 df 26 46 54 8a 6d 1a b4 86 e4 Data Ascii: z!SojK9(^N<{UPGSRNf\6nK9?U{q8x>ir.-sJ8z{kt7uv>E:q$St*HZM&lyeLtoU'>\|'+cySY8T}AH=2Y'&FTm
2024-07-13 16:49:26 UTC	6096	IN	Data Raw: ea ca 8b b6 35 dd e1 db 4b 3e 26 ff 00 e5 92 b8 38 f2 23 1f 32 09 10 5d 6e e7 5f 31 5b f0 9f db fb 55 27 43 eb 6b 1c 9d 65 62 22 68 dc 7d d6 7c 00 6b 2a 0f f3 07 f8 d1 af 79 5b ef 12 9b a6 e3 64 f9 af 24 42 58 e3 27 74 a8 8f 7f ba 9f 4b 6f db de 46 f6 e2 f1 2e ea fe 5f 8e 19 24 cb 70 f2 ba fb 38 d1 da e9 e9 dc d5 dd 02 dc 36 f2 b5 5a 35 0f 2c ec 23 89 35 1b 99 8d 80 16 e6 cd dd 15 d3 3a 28 25 9b 0e 05 8e 66 3a 96 94 f7 e5 27 f6 d9 aa c3 82 e9 45 8f 05 14 4f 6e b4 57 fc c3 b7 e3 d2 80 6b 92 b7 03 e0 d2 87 cd cf 5a b5 ac 0f 03 d9 5a 2e a7 e0 d0 73 ad 46 bc c7 a3 95 5c 68 3e 53 5b ad ea 3a da e6 be af 1b f0 35 6e 06 b8 1e 16 e1 e9 a6 04 d8 1f 86 b5 1f af e6 af 5e 97 b5 1f 9b b6 dd be 8a f4 1d 3f d5 6a 27 87 6d 69 a9 bf 0a d3 e5 ed a2 2d c4 6a 79 d6 df 6b 95 Data Ascii: 5K>&8#2]n_1[U'Ckeb"h}\|k*y[d$BX'tKoF._$p86Z5,#5:(%f:'EOnWkZZ.sF\h>S[:5n^?j'mi-jyk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.22	49250	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:26 UTC	376	OUT	GET /assets/images/welcome/featured/horse.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:26 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16776 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:26 GMT Etag: "260f4-61c36fbf1bf40" Last-Modified: Mon, 01 Jul 2024 22:19:01 GMT Server: ECAcc (dce/26EA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 155892 Connection: close
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5f 00 00 ff e1 03 8f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 64 62 61 33 64 61 33 62 35 2c 20 32 30 32 33 2f 31 32 2f 31 35 2d 31 30 3a 34 32 3a 33 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky_http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.dba3da3b5, 2023/12/15-10:42:37 "> <rdf:RDF
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 10 74 d0 8c 24 86 45 0a 4b 2b 37 aa 5d 45 6a 40 45 6d 95 f0 d0 c0 21 14 2b 0c 6f f4 8f 56 6b c4 77 a1 a8 05 83 13 d7 f1 3a ac 62 5e 29 5e 4b 1c 57 aa 07 a1 15 85 bc c0 20 ea 65 68 c1 3f 1f 1a 9f 0d 32 52 1d d6 db 1e 30 4d 09 2a 1d 80 ff 00 65 c1 e8 7e 34 1d 35 34 40 f6 29 14 90 40 e8 24 d9 53 d2 aa 6b d4 03 e3 a1 01 bd 68 11 81 f2 0c bd 3f 31 db e6 34 01 a6 37 62 49 6f 06 f5 19 4f c1 3a 10 0f e0 0e 80 c8 c8 7f 98 ee 35 3b 7a ed e9 40 7c 29 a0 0d b3 4a 61 06 52 3f 95 1a ee 62 c4 96 0b 43 5a fc 0e 95 44 35 33 d0 1c 9d de 1e cb d4 11 da 59 4f 06 72 7f 4d 88 9a 47 b6 dc 62 8f 60 e8 43 1a 57 f0 d4 65 8e 05 91 74 c4 77 ce bf 6d 6b 18 55 73 b6 4b 75 1b 4d 4e cd e0 9f 9f 40 0e a7 91 58 93 e9 4d 35 82 c7 d1 a5 f4 f1 c1 8b 49 b5 86 d6 59 5a b4 06 9b ba 68 18 56 d6 Data Ascii: t$EK+7]Ej@Em!+oVkw:b^)^KW eh?2R0M*e~454@)@$Skh?147bIoO:5;z@\|)JaR?bCZD53YOrMGb`CWetwmkUsKuMN@XM5IYZhV
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: db a8 8a 59 f9 05 c5 e2 1b db 82 3c 76 2c d2 05 56 3e 43 e1 ae af 48 b6 ec ed 75 71 72 55 f6 64 60 ea 37 15 dd c5 16 5a 59 d2 af 67 bc e2 fb 37 c3 78 4d 9e 4e e2 3c 97 2c ec ed b6 53 82 f3 3e 33 70 94 4e 79 d9 ae 61 f4 5e 59 cc b4 a4 bf 6d 51 34 6d 43 b1 80 61 d1 b5 8f 7f 72 37 35 c5 24 e3 4a d3 9a e2 4a cd 97 6f 4c 9e 0d bc f9 35 91 71 bb f1 ed 9e e3 9c f0 ab 5b 8e 00 89 96 ee a7 02 e2 d3 dc 70 0b ac 85 fc 96 31 77 a7 b3 b8 f6 33 ae 0e ea f2 0a 4b 06 5b 03 1b 13 63 74 bf 56 df a4 d5 6a 35 c3 b3 7e 56 69 15 5c 15 62 f3 6e 3c 57 fa a3 cb 8a 3a 37 23 0b b5 9c 92 4a 4e 93 5f c3 3e 12 ff 00 4c be 86 7c e5 77 47 09 17 6c 39 56 1f 99 f7 4b b6 16 5d c3 ed 1f 72 f1 d7 38 6c 5f 75 71 38 a8 b8 df 74 fb 79 ca 44 87 d6 c5 5e 5f 59 c5 fd 22 fa ee 32 a5 5c dd c2 3d 60 Data Ascii: Y<v,V>CHuqrUd`7ZYg7xMN<,S>3pNya^YmQ4mCar75$JJoL5q[p1w3K[ctVj5~Vi\bn<W:7#JN_>L\|wGl9VK]r8l_uq8tyD^_Y"2\=`
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 8c b1 3b db c2 9e 60 01 4d 00 26 17 0d 6c 05 5c 19 25 9e 33 22 6d d8 4b 3b 26 e2 49 a7 40 be 5a 89 21 14 c0 ad 15 e9 48 95 1b ee 65 df b6 33 13 94 44 94 03 f0 3d 07 88 d4 5a 1b 14 70 ef bf 11 60 eb 46 57 b0 c6 8a 52 ab b1 60 4f 23 a1 64 27 98 b6 ac ce 00 f1 7a 33 6d 07 c4 79 ea 62 3d 91 ca 8a a9 fa a8 4f 5f 20 01 d3 62 41 79 1c 54 af f9 bf 94 7a 78 30 26 9f c4 e9 0d 23 6f 83 2a 9a d3 77 fa e9 fe 1a 04 02 a7 e9 34 15 a3 1a d3 a1 05 87 5a 7e 03 40 c3 b0 a9 11 00 28 08 15 35 34 a9 ff 00 dd d3 42 61 70 24 17 2d 23 11 45 b6 45 09 e2 bb d8 93 d3 f1 a6 90 c0 65 67 9a c9 0d 6a 4c 8e ca a3 68 fe 5a 8f 8f cc e9 54 28 1c 42 4b ba b2 0a 82 40 67 7a 82 00 1f 3f 32 4f 96 a5 51 1a ee 25 58 92 46 90 a0 45 55 60 00 ea d4 a9 3f 3f 00 34 3c 00 60 f1 f4 69 79 b7 23 bd 9d a3 Data Ascii: ;`M&l\%3"mK;&I@Z!He3D=Zp`FWR`O#d'z3myb=O_ bAyTzx0&#o*w4Z~@(54Bap$-#EEegjLhZT(BK@gz?2OQ%XFEU`??4<`iy#
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 6a f3 5c f3 13 69 94 e1 d2 5b 45 ca f1 0e 0a 5b dc ca 2d a0 cc d8 9e ad 03 48 7e 94 75 22 a8 cd d3 c4 12 01 d3 94 6a 46 dc f4 e6 27 f6 2b b3 d9 6e 19 77 91 e6 7c cb ed cf 2f cc e2 31 98 5f b3 82 61 77 1e 27 1f 8e 92 79 28 65 52 63 79 25 69 be a2 bd 00 50 2a 75 18 c3 4b a8 ee 5c d5 82 c8 60 f7 b3 b1 1c d7 2b cb 6d b9 5f 6d 12 c2 78 b2 d7 10 1e 43 87 b9 bc 4c 6f a1 75 13 2f fc 54 6e f4 56 56 0b 56 41 d6 be 1e 3a 25 0a e4 38 5c 49 51 96 27 b7 5d be b5 e1 bc 3d 38 f5 f7 a1 91 bc bf fb bb 9c fd c6 d2 d0 de 5d e4 59 9e 54 5d dd 7d 34 de 55 6b f8 f8 9d 4a 31 a2 2b 9c f5 3a 95 17 ff 00 66 ee e7 e2 fb 97 73 06 1e fe c2 5e dd 5f e6 a5 cb 45 98 9a f8 0c 86 2a c2 e1 28 f6 8d 6e df cc 76 43 d1 0a 0a 1e 84 91 d7 55 e8 75 2e f1 55 3b 4b 97 c8 38 26 27 39 c2 ee 78 6a a8 Data Ascii: j\i[E[-H~u"jF'+nw\|/1_aw'y(eRcy%iPuK\`+m_mxCLou/TnVVVA:%8\IQ']=8]YT]}4UkJ1+:fs^_E(nvCUu.U;K8&'9xj
2024-07-13 16:49:26 UTC	4	IN	Data Raw: 47 3b 72 eb Data Ascii: G;r
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 3a 2a e6 7e ab 9f a6 0e 41 32 bf a7 a7 b3 bc 8c 61 55 2f 7b 0b c0 ae 10 28 a2 85 92 d1 48 a6 bd ef 4a b5 e0 6d ad c3 94 52 3a f6 5d 62 ab c8 b2 fd dc ec c7 03 ef 57 1f 4c 0f 37 c5 2d df d9 c9 25 ce 1f 29 01 f4 72 98 5b c7 5d a6 5b 79 7c 56 a3 a3 29 e8 c3 c4 6b 73 55 2f 84 dc 32 39 65 db b5 b0 e2 bc c7 92 f0 d8 6e d3 21 1f 15 e5 59 9c 04 19 05 da ab 7a 98 2b c9 6d 96 6a 2e e5 fe 68 8a bd 0f 9e ab 35 bc 55 4b b3 68 23 9a cc 30 50 c6 a9 2a ed 00 15 63 f0 f9 e9 94 9b 01 43 2c 8c 28 c3 d3 58 ca 3d 40 f4 d4 b1 ea 0f c4 9d 00 17 81 5c 7a 4a 14 ff 00 2c c5 1b 23 a5 77 d4 bb 86 a8 3d 29 51 a4 86 c6 8e 7e e6 67 87 3c aa 55 56 df 1f 3a c2 24 35 47 66 78 d9 99 ba 86 a5 08 14 1f f4 69 36 4a 2b 20 c5 8b c7 73 65 1d a6 c3 24 b6 66 dd 59 e3 5d 89 b2 47 71 45 0c 49 ac 65 Data Ascii: :~A2aU/{(HJmR:]bWL7-%)r[][y\|V)ksU/29en!Yz+mj.h5UKh#0PcC,(X=@\zJ,#w=)Q~g<UV:$5Gfxi6J+ se$fY]GqEIe
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: bb f4 c5 3c a3 69 0a a0 52 47 97 87 e3 a5 4a 0d 4c 72 ff 00 e1 be 31 f1 fe 97 db 43 ea 01 b4 36 c2 14 3f 99 1b 96 a4 7c 0e 9b c4 35 0c 69 bb 4d 61 6b 7d 05 d9 43 d1 fe a8 c5 be ed e1 ba 53 68 eb 51 f1 d4 1a 26 a7 50 cd e7 6f 2c ae 65 8a 15 80 49 69 42 b2 b3 d1 9b d4 7e aa 40 09 b6 8a 7a 35 48 03 a7 9e a2 b3 05 23 2c 6f 6a b0 f0 6e 92 38 e0 6d ae 87 7a 15 73 ea 03 50 41 4a 83 f0 d4 a9 52 2e 43 9b 21 da dc 65 ec 71 c9 e8 2d 4a 00 6a a3 c0 1f f1 d5 89 11 53 a0 31 5d b1 c6 d9 a7 5b 65 53 5d bb 7d 35 72 18 1f 86 8a 0b 55 42 b7 fd a6 c5 dd 4c 65 fb 58 e8 03 1a 14 db d0 57 40 f5 d0 56 83 b6 b8 c8 e0 fb 71 02 81 41 bb e9 f1 52 3c ba 75 f2 d1 40 d4 35 07 b7 38 b9 96 45 f1 b8 fb 28 07 8b cf 75 72 bf f0 f6 f6 cc 7a 96 3e 3e 3e 00 75 3a 49 54 6e e6 92 f9 76 bf b7 d8 Data Ascii: <iRGJLr1C6?\|5iMak}CShQ&Po,eIiB~@z5H#,ojn8mzsPAJR.C!eq-JjS1][eS]}5rUBLeXW@VqAR<u@58E(urz>>>u:ITnv
2024-07-13 16:49:27 UTC	16383	IN	Data Raw: 06 a2 50 9f 91 b7 0a 2a d2 a5 a9 43 d2 a4 92 7c 3e 3a 00 c7 d4 21 fc 45 48 23 e2 14 fc eb fb 34 0c f6 de 5f 1a 74 35 35 dd d7 a5 2a 3f 70 3a 04 28 2d 08 fc 41 e9 e3 50 34 85 91 a4 82 55 ea 56 ab 40 06 ee 84 1d 3a 0c d7 d1 42 12 68 56 a7 e0 29 a0 02 37 fb e1 83 d4 89 1a 52 d2 44 ae 1a 40 a1 51 98 75 1d 3c 07 c3 51 90 e2 1c 7e bb 4a 74 28 ab f8 95 23 f8 83 a9 08 25 10 de c6 34 67 5d 84 a9 5a f5 0b 27 d4 3c ba d3 cb 40 cd 84 10 48 23 c0 78 50 1e 87 fc 7a e8 11 ee d1 51 e2 48 14 f0 35 fa be 3e 5a 06 39 78 8d df 19 b6 e4 08 bc 85 ed 92 66 81 13 16 f7 84 7d 9a dd 6e ea 0e ef a4 31 14 d8 5b e7 e7 4d 08 8c ab 4c 0b 18 08 20 15 20 a9 00 a9 1d 41 07 c2 9a 99 49 f3 61 ff 00 32 cf 37 e2 5c 1b db cf b7 6b fe 57 c7 73 dc 99 2e fb c7 97 b6 c7 63 30 97 d6 f8 df 52 e8 62 Data Ascii: PC\|>:!EH#4_t55?p:(-AP4UV@:BhV)7RD@Qu<Q~Jt(#%4g]Z'<@H#xPzQH5>Z9xf}n1[ML AIa27\kWs.c0Rb
2024-07-13 16:49:27 UTC	16383	IN	Data Raw: c2 55 59 1a dd ae d6 c9 ed e2 56 69 6e 1a e8 ee 8f 6e d3 d3 d2 64 a9 27 a5 2b a9 bc 08 a5 51 7c 46 ad 1a c6 f4 21 8a ef a9 fa 59 0f 88 f9 02 34 c8 88 13 1b 96 48 de d8 47 09 17 36 f0 a0 0b 42 b0 b4 a1 64 55 af 40 0a a5 06 a0 c9 8b d9 12 b1 da db 5d fa 32 4d 25 bc a0 08 e2 75 0d 59 c5 3c 18 80 db 4f 97 8e ac 64 4d 64 2c ea 51 54 6d 92 07 01 bd 4d bd 1c 0e 84 79 d4 69 08 c9 5e 14 8a 60 aa c5 60 53 23 a2 82 48 0c 37 50 0a 54 9a 7c 34 0c c2 77 01 10 c9 f5 06 78 16 30 aa 58 21 ff 00 29 a0 f0 f3 ae 86 20 fc 6c 56 6e 92 50 10 0b a1 03 ea 34 14 1d 45 47 9e 80 cc 38 c9 b8 01 d3 a3 83 5d b5 e8 bf b4 79 e9 01 a9 4d 41 0b 5e 82 a3 77 d2 48 a7 4f 11 f0 d3 11 aa 36 04 74 ad 0d 0a 8a 79 7e 20 e8 18 81 94 e4 f9 de 21 33 66 70 2e a2 74 05 27 b7 99 4b db 5d c6 a4 1d 8e 3c Data Ascii: UYVinnd'+Q\|F!Y4HG6BdU@]2M%uY<OdMd,QTmMyi^``S#H7PT\|4wx0X!) lVnP4EG8]yMA^wHO6ty~ !3fp.t'K]<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.22	49251	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:26 UTC	619	OUT	GET /assets/images/welcome/featured/pfs-newarrival.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:26 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16776 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:26 GMT Etag: "1a336-61c36b8880e80" Last-Modified: Mon, 01 Jul 2024 22:00:10 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 107318 Connection: close
2024-07-13 16:49:26 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: b5 6e 95 6e 9a 95 92 c9 87 4f ae ae 41 6a 62 2b 39 ad b9 5b 18 b0 45 63 35 7e ea b3 88 44 b0 bf 8d 68 ac 74 62 cd 19 e9 af cb 5f d2 5f 9d 45 9c 8e ba 02 c8 7e 6e e5 52 a1 57 8c f5 ff 00 b6 a5 b7 b7 c4 b2 76 39 ec e9 b6 af c2 ea ad 9e ff 00 43 fe 6f ef c9 1c ad ce 83 d4 ef af cf ed b9 a4 39 dd 2d a8 f9 82 da 53 34 2d ba 8b 39 36 d4 14 91 a8 89 49 f1 83 28 b1 ed 23 59 55 53 5e b1 54 91 18 13 21 f0 2f ab 76 8e 3e 1a fe c2 a4 8b ab 74 ea 92 14 98 22 cb 5e 81 f2 c6 4c 21 1a b4 94 7f ff da 00 08 01 02 00 01 05 00 3f a0 fa bb d9 bd 10 f7 78 ed 39 4c 95 cc 51 58 6b 80 7a ca 25 02 b2 8f a9 3e a7 d0 9f d0 4a cf ae 57 72 ca cf e8 7f 71 2e 71 6a 7e 70 06 16 70 bb 96 56 51 2b 3e 99 fd 03 f4 67 f5 f4 58 4e 20 2e ae 5e c8 94 4f a7 f5 f4 3e 80 a1 ec 4a 27 a9 1e a5 15 9c Data Ascii: nnOAjb+9[Ec5~Dhtb__E~nRWv9Co9-S4-96I(#YUS^T!/v>t"^L!?x9LQXkz%>JWrq.qj~ppVQ+>gXN .^O>J'
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 55 cc ba 26 e1 c9 be 8c 18 16 19 dc 3b 08 4c 69 29 90 f6 ac e1 12 bd d6 16 30 8f a6 56 11 3f a3 28 90 ba 2e ef 4c e5 77 2c fa e3 d0 fa 65 07 a0 f4 d7 02 81 08 10 10 70 2b bb 08 3d 02 be 46 a6 bb 2b 28 7a f6 94 72 ba ac fa 04 0e 10 28 39 07 04 1c 02 c8 24 e0 a0 16 02 ce 16 56 46 2d 44 d7 c1 ae 0d 73 3e d6 02 be ca 15 a4 68 65 a8 86 2e cc de eb 96 63 31 b6 c3 5e 5a ea f3 03 4e 19 3b a0 67 60 83 df 53 9f b5 2b b3 22 c4 44 39 a1 47 03 9c 33 84 f7 65 35 b9 47 e9 1d c8 b9 77 ae f0 17 c8 11 78 45 e1 77 84 5f 95 de b2 b2 9c ec 2f 74 1a 8b 51 0b 0b 08 b5 76 95 d8 57 61 0b d9 7b af 65 94 4a eb e8 d4 d4 17 f4 45 31 1f 66 7b ff 00 44 10 f4 1e c5 7f 55 fd 07 a7 f4 41 0f 40 82 3e a1 58 ff 00 16 b9 35 05 a9 ff 00 74 df f7 ae ff 00 7b b1 fd c3 dd fe f5 ff 00 71 50 fb 6a Data Ascii: U&;Li)0V?(.Lw,ep+=F+(zr(9$VF-Ds>he.c1^ZN;g`S+"D9G3e5GwxEw_/tQvWa{eJE1f{DUA@>X5t{qPj
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 51 7f 69 4a dd 27 dd e4 3c 27 60 d6 2d 4d 53 70 1a 78 1b 7a c5 4f 60 57 8e d3 00 6f e3 2b 5d 77 c2 1f 91 02 4a be 1e 8a cf 6c 9c 76 42 d9 f5 b6 44 94 f8 eb 5a fd ab b5 91 b8 ef f4 cc a9 b9 a3 66 4a af d4 5c 04 41 29 73 2d cc 0b b7 db 9f e5 36 93 6c f0 d7 5f d9 91 0d 9d 94 ce 2e b6 d6 bd d7 9a d7 9d 88 63 9d b0 70 86 2b 06 4f 81 cc 5d b2 b5 4b f2 39 4b 62 58 5f 06 c1 96 cc 95 1a e4 1d 61 84 46 5e 99 13 04 37 84 11 9a 91 52 2f 93 57 5d ec 9b 4b 5b b4 ea 5a e6 d8 d4 48 0d 8d 63 dc cb 1a a7 b0 45 a9 2f 97 65 35 fe 45 bd 64 0d 62 9a 3f 8c b2 48 b2 d9 83 50 2d 72 7b 9c c6 c7 2c ea 1f 9d c4 9b 8c 4f bd 61 a8 de 9b 2e b8 f7 19 b6 56 4c 50 b6 f3 c4 31 5d 2a 23 69 8d ac 2f ca df b7 b8 e7 35 d7 22 7b ec 4e 5b 2d b8 a1 1f f2 08 9e 4e e6 3c ff 00 2c d2 5b b0 87 bb f9 Data Ascii: QiJ'<'`-MSpxzO`Wo+]wJlvBDZfJ\A)s-6l_.cp+O]K9KbX_aF^7R/W]K[ZHcE/e5Edb?HP-r{,Oa.VLP1]*#i/5"{N[-N<,[
2024-07-13 16:49:26 UTC	3	IN	Data Raw: 96 83 37 Data Ascii: 7
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: b8 34 3f f6 42 9a 39 bd ce 03 8e 20 44 0d 7d ed 3d cc a6 12 c1 41 f4 96 f7 34 56 2d fd 4f 0b 13 10 a9 bd ad 34 8b 92 d0 a0 90 e4 01 6b 82 6d 43 b4 8b 9a 4f 7c ee d1 c9 91 24 32 81 8b 81 6f 2d b9 bd b8 df 5a c9 d9 bd f3 b6 cd 2f b2 72 9b d3 c0 f7 16 32 14 7d b0 83 65 f5 91 00 22 22 34 2c a0 f4 9d 4d c5 ea 1d cb 03 73 6d d3 db 59 8a 25 c3 de 31 18 19 a0 0d aa ca ae 97 49 23 23 46 04 11 f5 d4 b3 e1 e3 26 56 e5 8d 77 cb da c7 96 0d d3 1e da b6 3f 11 14 f6 d4 29 f2 93 a7 31 50 7b 93 db e0 66 6d 19 84 0c dd a6 56 f4 e4 86 42 d6 26 19 0f f2 dc 37 94 a3 e9 7d 01 17 15 1e eb 8a df 7f 8e 5b e3 64 19 16 cd 28 e0 d8 b9 71 b7 09 2d f2 96 e2 7c b7 d4 57 f5 6d a2 ed b5 66 d9 bd 1d 49 81 9b ec eb af 4f 21 7e 07 4a 9f 37 30 2a 64 ce 6f 17 50 d4 2f 2a 78 64 c8 e8 7d 6e a4 Data Ascii: 4?B9 D}=A4V-O4kmCO\|$2o-Z/r2}e""4,MsmY%1I##F&Vw?)1P{fmVB&7}[d(q-\|WmfIO!~J70doP/xd}n
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 58 9a 8c 82 74 1a d4 84 1d 45 63 02 48 23 4e 75 b2 49 a1 2f 8c e8 ae 79 1d 0d 19 26 90 49 20 1d 2b 63 ce a4 c7 cd e9 97 3a 55 62 d1 91 a6 bc 2d 58 36 b4 38 f9 cc 71 9f b2 ce 74 27 c2 a5 f4 49 c8 65 b1 32 0e 00 71 b9 ac 5d fa 18 1a 38 72 bf 83 2c ac a5 51 98 70 21 88 b1 ec a0 4c d1 75 73 f3 2e 95 ec d8 66 98 08 7d d9 b7 6e 9e df 57 5f 31 13 e4 42 27 82 f6 ed 78 2d f1 ac bd f7 dc 2d 7c 4c 04 63 0e 2e ad eb 49 6f 2a 84 5d 5c 93 a0 00 57 bd 7d cf ef f9 a7 d9 36 5d bf 69 dc 5f db 7e cd 52 22 22 28 f1 dc c7 2e 44 63 55 b9 b7 4a 9d 79 9a f6 e7 bd a1 dc 65 db b3 7d bb 36 16 21 11 9b a6 56 36 ec ff 00 75 ca c4 95 3e d2 c8 ac 08 3f 65 94 1a c8 9c 8b f4 8e 80 be 06 a7 2f 6b b0 37 1d 96 e1 52 3a e8 62 6e ab f6 1e 75 b6 ca 96 8f 0b 23 ef 2c f3 9b 05 2a ca 43 9b f6 00 Data Ascii: XtEcH#NuI/y&I +c:Ub-X68qt'Ie2q]8r,Qp!Lus.f}nW_1B'x--\|Lc.Io]\W}6]i_~R""(.DcUJye}6!V6u>?e/k7R:bnu#,C
2024-07-13 16:49:26 UTC	10123	IN	Data Raw: f6 1a c2 c8 46 36 76 08 c0 f0 1a e9 50 90 fc 14 5e 84 6c d6 d2 da d6 a6 fd 43 8f 3d 69 d0 bd ed f2 57 bc 72 62 62 26 5d dd a4 88 8d 2e 12 34 52 3e 3c 2a 3c 88 9b cf c1 d4 f1 56 1c 41 15 d2 ff 00 30 ab 92 40 ef e7 52 5a d6 22 ca 6b dd f9 69 8e 72 1b 0f 69 ca 9b ee e9 f3 48 51 09 e9 1d e6 91 30 3d a9 ba 46 85 45 c6 8b 6e ea 6f 53 db 59 c6 46 d5 4c 92 e9 52 47 bc 7b 7a 6d be 77 0d fe 61 7c f7 d3 4d 4d 64 ed fb 66 c3 eb ed 70 cd eb e1 64 4a 6c de a5 ef 73 5b 6c 1b f7 b5 e7 c3 f7 06 1c 4b 0c a6 25 ea 49 02 8b 5c 1a 99 d3 66 9f 1f 19 6c 21 ea 4e 9a 0a d8 a5 4f 7d 7f 15 00 16 e1 5c 6f 6e 54 4f 4f 59 1f 62 87 5a 59 bf 56 87 56 39 f1 b5 07 11 80 45 7c 80 0e 66 94 82 38 e9 a7 1a 8b 2b 6a 7f 5f 6b 9d d7 fa 9e d4 c7 c8 ea 4f 99 d0 1d 03 5b e9 ad b3 03 60 40 d1 98 97 Data Ascii: F6vP^lC=iWrbb&].4R><*<VA0@RZ"kiriHQ0=FEnoSYFLRG{zmwa\|MMdfpdJls[lK%I\fl!NO}\onTOOYbZYVV9E\|f8+j_kO[`@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.22	49252	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:26 UTC	391	OUT	GET /assets/images/welcome/featured/featured-small-biz-6.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:26 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 14111 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:26 GMT Etag: "e90a-5c2c316e3ea80" Last-Modified: Thu, 20 May 2021 13:40:42 GMT Server: ECAcc (dce/26A9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 59658 Connection: close
2024-07-13 16:49:26 UTC	15279	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 2e 00 00 ff e1 03 fb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: 16 6a c4 5c 9b da bb 0f 06 1e 4e 1d d9 aa 1a c4 d8 1e ca 27 cd 43 8e 53 75 d9 85 0e b9 29 85 08 8c 1d ce 4f 4a ce dd 34 d6 7a 4a 4e cf 45 f8 0c 8e 25 e1 b2 4b 61 a7 85 fe 60 2a e1 73 1f 20 29 db 62 05 ec 6a 8e 3e 6f 16 09 19 b2 ec 3b 05 fd b5 5b ea 3f 56 37 18 b1 36 2a ff 00 32 fb 4f ba 9d 17 55 9e b2 b8 85 ab 67 0a 3d cf 89 79 c8 49 2b f6 6a 09 1f 45 3e 34 b4 41 ee 2e 2b 11 c7 7a 93 37 2c 4c cc de 61 1e 22 3d f4 67 0f cc e4 f2 70 bb a9 20 29 20 fc 2b 6a 57 a5 d9 19 dd 38 53 a4 1a 6f d7 aa 3d ae 2f 6b 54 38 52 27 21 c9 b6 ff 00 96 2d 45 54 49 7b 19 18 90 40 a2 f8 a8 dd 14 64 1b a8 93 a3 1d 2f 45 f8 44 ef 2c 2a b4 6f 69 50 89 79 a9 b1 d2 76 8e e3 41 6b 52 fa 21 e2 3c c4 cb 1f 5f 2c 5f e9 aa 6e 62 48 ff 00 50 f6 6b 9b f5 ab 0f 41 32 9e 6a 5b 7f ee 87 db 5c Data Ascii: j\N'CSu)OJ4zJNE%Ka`s )bj>o;[?V762OUg=yI+jE>4A.+z7,La"=gp ) +jW8So=/kT8R'!-ETI{@d/ED,*oiPyvAkR!<_,_nbHPkA2j[\
2024-07-13 16:49:26 UTC	16383	IN	Data Raw: d0 2a 8b 6d 6b a9 e9 50 66 71 f8 21 26 94 12 d6 04 a8 b9 27 a7 65 5a 99 31 ec 0b 6d b0 f7 9f ed a4 13 e2 b7 ca 01 3d c0 35 fe 8d b5 af dd 7f b4 cf ec d5 7f 13 5e 85 37 15 9d 87 16 23 47 2a 1b db b5 4d 54 e1 f9 03 3b 26 56 dc 82 e4 aa f4 d2 b5 ab 2e 1b b1 41 66 61 d5 4a b0 b7 d2 82 a6 fd 3c 3d 4c 08 6f ec 15 8d ab 37 ea 88 34 a2 ad 6a d2 b4 c9 71 e9 26 c7 c9 e0 52 48 17 ae e5 62 7a 96 15 1f a6 27 c7 6e 31 82 26 d2 24 93 70 eb ae f3 55 88 cb 00 db 11 30 af ec c6 e5 07 d0 ac 05 36 29 22 8a eb 0b b4 7d ac 23 72 3e a0 6b 45 64 a3 4d 93 5f 53 3f b7 a3 5d 5b b4 f6 2e 72 3e 46 b7 b6 bc e3 d5 89 bb 1a 76 3d 84 56 b6 7c f1 0d 84 92 4c 77 0b 8b 39 b7 d7 55 b9 23 8c cb 46 4c 8c 56 9d 1b e6 0c 74 3e fa c1 62 b2 b4 9b 3b 56 22 4f 22 55 06 6b 51 38 de 19 2c 7a 57 a0 49 Data Ascii: mkPfq!&'eZ1m=5^7#GMT;&V.AfaJ<=Lo74jq&RHbz'n1&$pU06)"}#r>kEdM_S?][.r>Fv=V\|Lw9U#FLVt>b;V"O"UkQ8,zWI
2024-07-13 16:49:26 UTC	11613	IN	Data Raw: 1c 99 31 c6 a0 c2 c0 15 b5 c9 0a 2d de 2b 43 e8 56 25 33 af d4 34 77 1f e2 ac de 7e 79 9b 61 6f 08 53 65 5e e1 d4 81 ec ad 17 a1 64 57 5c fd ba 58 c5 7f a1 ab 2b da 6a 5d 6b 16 2f f2 e6 e5 60 9d 9f 16 21 93 8e 40 b4 56 50 c1 bb 7c 57 07 be 98 bc d3 89 16 19 b1 c8 dc 42 ee 24 a0 60 48 1b 95 65 17 ea 6d 63 50 66 72 59 18 93 b9 39 08 b1 b4 c6 18 a2 78 0b 2a 91 6b 5e 48 dd 5f 5f 75 3e 1e 6d a6 53 f9 50 e4 05 6d ac 61 98 29 0d fc 19 2a 9a fc 6a 63 4d a7 f0 1c eb bc 7e 21 51 f3 3c 6b 5b 64 87 6b 0b a9 d8 c0 10 18 a1 ec ec 65 37 a2 93 2b 16 46 28 93 21 60 6c 57 70 06 fd da d0 26 7e 3f 36 48 d3 2b 16 45 92 53 b2 33 34 45 41 36 f9 56 58 cb 2f d7 4e 7e 1b 05 88 78 f7 46 fd ad a3 93 ad f5 df 7f a6 96 9e 28 3d de 0c b2 14 e1 4c 06 94 1a 45 0f 14 a0 d3 6f 4a 0d 00 3c Data Ascii: 1-+CV%34w~yaoSe^dW\X+j]k/`!@VP\|WB$`HemcPfrY9xk^H__u>mSPma)jcM~!Q<k[dke7+F(!`lWp&~?6H+ES34EA6VX/N~xF(=LEoJ<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.22	49253	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:27 UTC	624	OUT	GET /assets/images/welcome/featured/passport-holding-up.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:28 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16778 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:28 GMT Etag: "1b73a-61c36b8880e80" Last-Modified: Mon, 01 Jul 2024 22:00:10 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 112442 Connection: close
2024-07-13 16:49:28 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:28 UTC	1107	IN	Data Raw: 60 db b1 08 fa c7 e1 5f c9 ab 3d 81 e3 74 e1 7b fe 56 ab 70 3b 89 97 e9 2e 8a ba f0 fa 4d 25 f5 b9 af 64 ac f8 65 21 74 bb 5d 76 db a0 32 a1 69 f8 07 cf 85 12 2b 16 2c 53 83 31 3e 02 19 ab 31 e8 b2 99 da 45 a5 5d 94 c7 39 d6 33 8e d9 1c aa bd 95 2d 0a f3 5e 88 1d e5 fd 42 e4 75 26 0f 67 3a 32 b6 e6 05 a8 b5 8a 41 46 e2 68 44 02 0c 0a 13 56 c7 95 16 6a 65 3d b7 9e ce e5 ac b5 0e 61 01 e7 f4 84 bd d1 9e 96 da dd d6 e3 72 b5 5b ab 65 56 88 4c c3 ac c2 81 d9 c2 96 6a 98 de c8 26 34 24 32 9d f5 2c ba 65 67 76 71 2d c3 20 b3 2d de 71 6e f9 71 27 a6 c8 e8 06 77 a3 af 8b 20 56 5b 5c b6 a3 a7 fe 25 4e 77 11 91 63 1a 92 d5 c4 37 3a 92 d5 e0 e9 f3 99 9f 37 d2 31 fa 7a ca 14 8c 4b 3d 6d 2a ca b2 52 a3 13 3f 8f ef f9 ab ec be 8d df a6 ff 00 34 4f 82 6d d8 d7 72 e8 20 Data Ascii: `_=t{Vp;.M%de!t]v2i+,S1>1E]93-^Bu&g:2AFhDVje=ar[eVLj&4$2,egvq- -qnq'w V[\%Nwc7:71zK=m*R?4Omr
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 01 05 00 2d ea 18 88 c7 a4 49 9f d0 e2 89 52 3b d2 35 13 b2 3f af 2b 3e ac 45 b9 8d d1 a6 c6 14 15 c1 42 06 84 e8 da 13 da c5 30 68 13 c9 97 35 a9 c7 09 b2 14 5d 92 4e 53 0e 0b 8f 58 ca 81 44 ce 98 44 29 5f 85 14 25 e6 38 c0 00 60 39 e1 aa 6b 7d 4b f2 e8 dd d0 94 4a 76 49 ae 31 17 a9 6f 4b ac 3d ad 6e 13 9c d2 1e 3a b4 90 9a 50 cb 93 bf 07 07 f4 07 29 a1 16 84 1a 02 c1 4f 76 03 5f 93 d8 5c c8 09 06 73 d3 e6 21 7e c9 40 64 86 04 f8 f0 9c dc a8 86 13 3f a3 08 b7 2a 76 f4 68 4c 51 21 fd 19 59 fe a6 29 a4 ec 85 f6 89 4c b0 42 8a f1 6a 3b 62 14 fb 72 bf cb 14 fd a1 70 64 c5 ee 69 e9 29 40 e1 33 af a3 3d ca 8c 2a e1 46 7a 12 9e 70 22 88 c8 e6 44 00 c8 0a 49 c3 14 d6 4b 91 7e 4b 1c a2 3d 09 e8 57 f7 83 a4 7e 8d f4 b4 e0 44 ee 5f 27 68 ee ee 46 1f c0 2a cc 0f 75 Data Ascii: -IR;5?+>EB0h5]NSXDD)_%8`9k}KJvI1oK=n:P)Ov_\s!~@d?vhLQ!Y)LBj;brpdi)@3=Fzp"DIK~K=W~D_'hF*u
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 8c 67 b5 d0 bf a6 da cf c6 99 b7 68 11 6c 7e 57 5d d8 8f 81 ac 21 68 72 c6 c5 36 5a e9 13 dd d1 e7 ac ee e9 31 ee 3f 1e 07 c7 93 03 13 5b 8f 58 06 49 5a 56 f7 5a b3 ed de 02 74 88 1e 87 a2 db 8c 9f 64 d7 65 38 64 10 87 a3 bd 3d d4 52 18 eb 97 80 f4 d6 17 11 42 50 29 c9 24 25 9d ca 3c 94 1c b2 ad bf b5 8f 97 25 ce 24 41 68 4a b1 d7 19 57 f5 f1 dc 85 b0 ba bb b1 d8 ed 51 f9 75 b3 7b d7 e8 fa 63 a3 ab f7 08 ea 76 ab f1 bc 33 51 39 28 ce 00 8a cb 5e 8a ed 5d a0 23 d4 5c ac f8 a5 d5 97 19 94 b6 5e 64 6e c4 b1 e1 dd c1 ad 5d 0a 21 63 d0 33 b5 d5 ee 10 5b 2b 9c 1a 5c 5e c9 bb 1b b6 98 48 c8 34 4f 95 4f a3 70 54 b4 72 87 fc 6e 0a 8f 47 43 21 00 bb 2a 49 02 96 55 34 98 00 f7 12 d1 86 81 98 bd fd 60 1d 0a e3 b1 f7 58 9c f4 71 ea 0a 6a 77 b6 c1 b9 25 bd 1a 9a 72 24 Data Ascii: ghl~W]!hr6Z1?[XIZVZtde8d=RBP)$%<%$AhJWQu{cv3Q9(^]#\^dn]!c3[+\^H4OOpTrnGC!*IU4`Xqjw%r$
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: c7 3b e3 d1 09 f6 1c 2f 8c 38 c7 a3 d3 98 59 c1 b8 e0 6b 38 de 95 ac 66 b6 af c6 ca 8c 00 44 10 1d 79 15 af d3 d1 71 29 b3 5e f6 c0 c5 06 ca 5b 16 24 e4 95 24 2d e5 7a e8 8b be a3 6b e0 7f 37 a9 60 91 14 bd cb 73 50 4b 1d 39 7e 39 2b c9 dc 39 75 79 67 d7 eb 2d c9 3c 2c 26 48 ee d2 6c cd e6 db 83 53 55 c2 b8 fc 72 39 b0 12 26 89 a1 d6 b5 f0 da af c9 b8 05 8f 1f 73 6a 55 2b fc 47 43 35 0a c6 11 29 b7 5b be 1f 25 68 a5 97 55 f5 ab 86 8e 3b e3 3a 95 e3 ac fa c1 cd 11 ec 67 80 79 a3 eb 9f 09 f3 46 bb ed 17 1b e5 1a 5d 9f 23 d2 ed ad 45 c6 78 b3 b9 1e c3 c9 7b ed 7f 2b fa 9c 2f fe b7 20 e1 9c 7a 7d b4 de 2e e1 18 d4 f3 58 b7 1a 65 e3 7e 53 b4 a7 b2 d8 79 2a 4d 66 b7 c6 fc fa a6 f1 af 96 39 e1 ff 00 15 56 69 a4 d4 d7 35 fe d0 78 29 de 40 d4 7d 61 f1 0f 20 e0 9b Data Ascii: ;/8Yk8fDyq)^[$$-zk7`sPK9~9+9uyg-<,&HlSUr9&sjU+GC5)[%hU;:gyF]#Ex{+/ z}.Xe~Sy*Mf9Vi5x)@}a
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 57 35 1c 79 4c 2e 0f dc 69 b7 47 70 64 63 f6 12 4d 29 58 ad 6e bf 1a 2b b3 a1 d0 1a b5 bb de 9c db cc dd e9 c6 d3 d2 c0 52 3e d3 6b 80 2b 1e eb 66 40 2e 69 47 c2 a4 f1 a6 62 09 d6 f5 15 c7 6d 68 e9 51 1b 1d 4d ed 4a 36 e8 28 69 62 68 7c f5 a5 36 d3 c6 ad 7d 2a 56 2e 14 2a 93 7a 9b 03 0f 28 19 88 65 da a7 52 7a 54 b9 39 12 97 91 89 b9 27 45 1e 02 82 47 ad fa 91 52 45 8d 03 48 ce db 43 01 d0 7c eb 1e 5c 98 3d 49 45 8b c8 dd 01 3d 97 fd 75 0e c8 42 a1 00 e8 2a 19 11 2c aa 83 cd 4a 3c 05 0f d9 4d 59 a4 ff 00 71 b4 fb 2b 9a 6f 1c 93 44 f5 b6 bf 0a 23 76 db d0 2b dc f4 a5 00 6e 62 74 03 af 5a 7c bf 49 94 4b 22 6d 6e c0 2f 72 6a 07 c8 07 2a 67 0a 4a f5 15 1d f6 c2 a9 20 64 45 f8 78 d2 ba 8b 90 97 27 bd 61 71 ab 21 79 72 25 da a0 1e d7 ac 17 79 35 92 20 48 07 b9 Data Ascii: W5yL.iGpdcM)Xn+R>k+f@.iGbmhQMJ6(ibh\|6}V.z(eRzT9'EGREHC\|\=IE=uB,J<MYq+oD#v+nbtZ\|IK"mn/rjgJ dEx'aq!yr%y5 H
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 51 02 83 7b 5e f4 c1 62 97 d2 1a 33 c6 e0 96 f0 d7 c3 e0 6b 5f 4b c8 3a b5 c9 23 b6 d0 3c 3c 6b 45 4b 2e 8d b5 88 36 bd c0 3d ab 89 e2 32 24 8e 1c 4f cc 3e 07 91 e0 5d 5b 42 d9 58 e0 72 38 97 f8 93 0c a0 7c e8 53 f7 ac 8b 1f 01 7a 52 0d 80 f0 f0 a4 d7 cd 6f 31 15 f8 84 3e 9c 8e c2 28 24 b5 f6 c8 fa 29 3f eb ae 6f 91 c8 9c cf c9 f3 19 b3 e6 72 19 06 e5 de 59 4d 94 12 75 36 00 0b d4 7c fe 20 68 7f a6 b1 fc 33 0d 02 a9 61 b8 93 df 7e b5 ec 0e 56 67 de 8c 67 86 66 3e 19 10 3b a2 db b1 01 2b 3f 36 49 4f a3 c6 a6 51 c8 9c 5e e5 56 34 54 0a 3e 1b b4 b5 71 61 ed 09 94 ca ce 9b b7 30 dc ec e1 4f 7b b1 90 93 58 08 d2 81 07 1a 25 cf cf c7 20 16 79 76 94 80 20 3a 1d ac eb 7f 0a fc 6e a2 12 16 3c 7f 02 88 08 24 5b c4 92 6a c3 f5 f8 51 6b 0b 93 a5 1b b0 db fd bd 28 19 Data Ascii: Q{^b3k_K:#<<kEK.6=2$O>][BXr8\|SzRo1>($)?orYMu6\| h3a~Vggf>;+?6IOQ^V4T>qa0O{X% yv :n<$[jQk(
2024-07-13 16:49:28 UTC	14143	IN	Data Raw: 2d 63 29 2d 44 8d a9 f8 cd 59 7a 6e 70 28 c7 72 b6 3e 5a 0c 1b 7e c3 67 43 d0 8a cc e5 b1 b1 21 e1 7d ee 70 a7 c7 c0 f7 04 51 80 e1 a6 8c a7 f1 94 5b d4 02 fa 5f a5 70 9c 74 fc 56 4c 6d c6 63 e0 e3 c1 c8 6c bc 73 4d 8d 88 8b 74 63 61 75 2a 6f 5e e5 30 f1 73 c7 8f 94 b0 7b a3 8c 8b 68 b6 d6 27 1f 39 7a f5 8c b9 b8 f8 56 57 37 ee 24 c9 e2 b8 1f 68 03 27 3b 95 19 41 93 ca 61 c7 8f ea c9 c7 e1 ef 3e 6c 94 8b 71 77 d4 47 0f 9d bc c1 03 7e 5e fe 6e 72 18 b8 71 e1 7b 13 1b 03 96 e5 f8 38 0f e2 8b 42 8b f8 6c 4e 3d 5e 42 d7 dc 7d 30 e5 ee 34 76 3a 8a 3c 5b 48 73 47 a9 91 8f 91 91 34 61 23 69 33 7c f2 ca b1 ea 5d a4 72 ac 5d ce b6 16 50 2c 29 9e 76 6c 8c 89 e4 06 79 a4 25 99 9b a5 c9 35 7d b6 28 00 06 da e8 29 c0 c7 69 60 67 50 5d 7c 0e 95 95 03 17 45 12 2e c2 d7 Data Ascii: -c)-DYznp(r>Z~gC!}pQ[_ptVLmclsMtcau*o^0s{h'9zVW7$h';Aa>lqwG~^nrq{8BlN=^B}04v:<[HsG4a#i3\|]r]P,)vly%5}()i`gP]\|E.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.22	49256	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:27 UTC	386	OUT	GET /assets/images/welcome/featured/eddm-tire-combo.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:28 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16778 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:28 GMT Etag: "19378-61c36b69fc680" Last-Modified: Mon, 01 Jul 2024 21:59:38 GMT Server: ECAcc (dce/26B7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 103288 Connection: close
2024-07-13 16:49:28 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: c7 29 25 a6 12 da 78 57 0a 29 b0 90 e5 e9 46 e5 94 a9 54 e2 c4 74 a5 47 86 3e 67 b8 16 49 28 68 a8 a8 21 aa 5a 09 2b 51 14 a4 1e 30 d0 b2 22 40 4a 0a 13 49 4d 10 6c 5b bd 04 0f 8c 05 eb 64 cc 7b cf 16 c2 ab 45 77 8c 85 7d 7e 2d fa da 81 a2 69 02 80 b7 a6 54 d6 d9 a9 32 d6 f5 58 55 ba 43 83 ee 03 8e 64 86 52 63 2e 5b 66 8f 07 9b 46 49 61 11 21 97 a9 f6 14 d2 a7 c1 4f 28 4f a1 62 23 68 4c 79 0c 2d c9 11 c1 6d 1c eb 91 ae 46 b9 d3 8a ed 22 bd d0 2a 3b e8 76 9e 93 c1 e8 ce a2 30 8c 52 fa 7d 96 c5 18 8e 2c 27 1a 2e f4 37 79 33 81 92 aa 8d af a8 06 71 ed b6 94 b2 81 40 0f 92 d8 32 82 2b 2b 64 a6 81 22 b5 59 40 64 0f c4 03 a1 e9 6a 34 4d 0f b8 a5 3e 85 ac 24 4a cb 15 75 42 0a 8a 31 44 89 71 0b 35 fb 5b 8f 29 cf 73 24 07 b2 c6 55 21 05 e3 51 a2 38 e9 4b 66 2a e7 Data Ascii: )%xW)FTtG>gI(h!Z+Q0"@JIMl[d{Ew}~-iT2XUCdRc.[fFIa!O(Ob#hLy-mF";v0R},'.7y3q@2++d"Y@dj4M>$JuB1Dq5[)s$U!Q8Kf
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 4a c3 23 23 fd 8d f1 26 39 19 5f ed a6 bc 85 64 bf b5 db c3 e7 27 e7 cf 2f 64 44 fc be 63 23 27 82 2f ea 27 bf 55 a9 29 1e 1d d4 15 81 c3 96 90 e0 f3 44 52 70 ba bb 5e ce b8 40 07 eb 56 b2 85 cd 7e 85 20 13 c8 50 36 0a 00 27 b8 ab 76 6a 52 15 4e ad 2a 52 50 50 d9 52 b8 3c a2 a5 67 32 31 98 8d 97 44 bc 93 f2 1a 7f 05 1b 7b d9 71 b3 13 82 c5 14 0c 56 38 11 06 1a 52 98 d1 ec 96 d9 17 ca 6c 10 31 a9 c9 66 67 e4 1c e4 aa e4 aa b9 af 1d 78 a5 ed 96 3b fe 17 f1 fb 91 f5 c8 93 fc 6d b4 f9 27 07 3d ba 7f fc 77 7a d2 71 be 6b d8 20 eb 9e 3e f1 c4 8d b9 cd ab 59 c8 6b 59 bd 6f 62 92 98 b9 fc 74 c8 cf 66 e4 4d 7f 64 c6 64 a0 41 d7 b2 6a 62 6c f0 c8 af 69 34 1a 4d 06 4d 35 1f 92 f0 ec 5a b1 a2 33 b8 8d 87 1d 90 c7 2b 1b 82 5c dd 6f 3b 8f 9f b2 bb 3a 06 57 1f 90 c0 eb Data Ascii: J##&9_d'/dDc#'/'U)DRp^@V~ P6'vjRN*RPPR<g21D{qV8Rl1fgx;m'=wzqk >YkYobtfMddAjbli4MM5Z3+\o;:W
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 54 40 9c 36 71 a9 9a f9 eb 16 8f 14 72 cb 1b be 0c d2 fe f1 4c d9 c4 e9 97 f8 a7 83 df a6 18 bf 68 4f 7b a4 44 89 d8 4a ab 78 5f f1 ee e1 f1 71 98 ec e2 bc 4a 1e 8f b0 a0 ca 1c 3a 5b a6 7d 61 ea f9 78 3e 65 9d 59 b9 f0 09 ef 07 c3 fc 3d 4f dd f5 32 3b 16 28 de e3 28 ba f4 ec eb 71 f6 39 22 99 da e9 6c eb 45 31 b6 7d 3e 3e 46 61 f8 87 d0 1d 6e ea 72 66 3a 9a c5 69 2b df 0c ee 54 1d 9f 65 6b 53 7c 07 a2 42 a4 1c cf ab a7 c6 d6 5e 21 dd bb 2c 9a 57 b5 f7 35 49 b3 d3 a1 d2 bb df 4d 3b bc 4e a8 9d 29 f1 f8 61 2c c6 5b 3a 5c a4 34 de d1 8b d5 a9 f8 74 f0 f3 ea 75 54 a2 d2 8b 70 23 6d af b0 a2 4c a2 cf 16 dc c5 09 7a fc d9 8c 5e 04 0f 30 a6 a8 3a 5a 3a 87 a4 0b c6 1c ed f1 3b 27 d9 2e 4a 66 b2 23 ce e4 e8 73 94 5e ee c8 fc 42 e3 96 fe 22 8b ab 7e 19 dd 3e f7 27 Data Ascii: T@6qrLhO{DJx_qJ:[}ax>eY=O2;((q9"lE1}>>Fanrf:i+TekS\|B^!,W5IM;N)a,[:\4tuTp#mLz^0:Z:;'.Jf#s^B"~>'
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 12 46 76 ea 9e e5 65 c8 be 7e 3b a9 bb 1c 67 bd f5 f6 3d 97 5f dd a7 48 c3 45 93 03 04 cb c2 9c 79 73 c0 ff 00 46 58 cf f7 bc 2d 44 f2 3c ff 00 f0 ab 5e e2 c2 ed c7 bd eb a1 a1 f4 81 e8 ae eb 68 79 fa eb 43 af 1d a7 9d 76 93 a7 eb f8 28 58 6b a6 9c 4d 70 d4 f3 3e 9e 34 2f 61 7e 00 ea 74 e1 40 30 b5 8e a0 f1 f8 ab 69 4b df 9f 60 1e 8a ef 0b 31 e5 eb a2 2f a6 a0 f6 8b 69 c6 bb 41 d4 7a aa c2 f6 e6 7d 55 a1 b5 b8 58 56 db 58 b1 e0 4f 67 21 59 9d 5b 0b a7 c9 95 d3 72 02 48 d3 47 f7 d6 7d a0 38 65 5e fc 62 e3 bb dd a3 1c 88 d1 b8 f1 29 1a 8f 80 d9 87 c5 5b 23 3b db e8 8e 43 b4 f6 50 f3 32 5d 58 8e 08 82 c3 f7 8d 1c bc 79 5f 21 a3 74 13 24 aa a0 08 d8 ed 2c 08 fa 24 af ec d7 95 24 2b 0a ab 59 95 50 29 d0 d8 eb 52 f4 84 00 79 67 cd 56 00 02 ea f7 b1 72 3c 4c be Data Ascii: Fve~;g=_HEysFX-D<^hyCv(XkMp>4/a~t@0iK`1/iAz}UXVXOg!Y[rHG}8e^b)[#;CP2]Xy_!t$,$$+YP)RygVr<L
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: a6 f4 05 f3 7a bd 85 91 21 53 dc 83 cd 6f 6a 4b 39 9e dd fd 9f f1 28 ff 00 dd 5e b3 8c 4e 3c 7b b0 ff 00 ed af bb b3 0d 1e 55 ee bf 50 95 07 08 e3 e2 bf b2 8b ec d6 47 53 ea 52 be 4e 66 5c 8d 36 6e 4b dc bc 92 39 dc d7 3f d5 55 7b 94 aa a0 8b 71 1c 38 f6 d0 b6 bc ac 78 fc 3e ba 0c c0 d8 1d 07 69 ec a1 72 2e 2d 73 cf 4a b1 e2 38 81 fd b5 c0 7a 7b 6b 74 ee 37 1b ec 89 75 76 3e af d7 45 7f 07 1f fc a5 3a 9f b4 dc eb 80 ae 02 ae d6 00 71 24 d1 fc cc 53 74 ee 97 12 87 97 2a 48 d9 5a 4d dc 12 10 e0 06 26 dd e7 f0 a5 18 a0 6c 9c 79 ed 65 c8 f3 4c 86 fd ac 8f 74 6f 55 ab 27 dc 8e b8 e0 f5 3e 92 a1 fa 7c fa db 27 04 e8 8c 97 ff 00 2b c0 c3 d9 fd 9a 1d 63 a3 79 53 b4 d1 a4 59 38 d2 bf 94 54 c7 7d ae 8c 41 05 48 3d e5 a8 f0 32 e6 59 27 df 26 46 54 8a 6d 1a b4 86 e4 Data Ascii: z!SojK9(^N<{UPGSRNf\6nK9?U{q8x>ir.-sJ8z{kt7uv>E:q$St*HZM&lyeLtoU'>\|'+cySY8T}AH=2Y'&FTm
2024-07-13 16:49:28 UTC	6096	IN	Data Raw: ea ca 8b b6 35 dd e1 db 4b 3e 26 ff 00 e5 92 b8 38 f2 23 1f 32 09 10 5d 6e e7 5f 31 5b f0 9f db fb 55 27 43 eb 6b 1c 9d 65 62 22 68 dc 7d d6 7c 00 6b 2a 0f f3 07 f8 d1 af 79 5b ef 12 9b a6 e3 64 f9 af 24 42 58 e3 27 74 a8 8f 7f ba 9f 4b 6f db de 46 f6 e2 f1 2e ea fe 5f 8e 19 24 cb 70 f2 ba fb 38 d1 da e9 e9 dc d5 dd 02 dc 36 f2 b5 5a 35 0f 2c ec 23 89 35 1b 99 8d 80 16 e6 cd dd 15 d3 3a 28 25 9b 0e 05 8e 66 3a 96 94 f7 e5 27 f6 d9 aa c3 82 e9 45 8f 05 14 4f 6e b4 57 fc c3 b7 e3 d2 80 6b 92 b7 03 e0 d2 87 cd cf 5a b5 ac 0f 03 d9 5a 2e a7 e0 d0 73 ad 46 bc c7 a3 95 5c 68 3e 53 5b ad ea 3a da e6 be af 1b f0 35 6e 06 b8 1e 16 e1 e9 a6 04 d8 1f 86 b5 1f af e6 af 5e 97 b5 1f 9b b6 dd be 8a f4 1d 3f d5 6a 27 87 6d 69 a9 bf 0a d3 e5 ed a2 2d c4 6a 79 d6 df 6b 95 Data Ascii: 5K>&8#2]n_1[U'Ckeb"h}\|k*y[d$BX'tKoF._$p86Z5,#5:(%f:'EOnWkZZ.sF\h>S[:5n^?j'mi-jyk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.22	49255	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:27 UTC	617	OUT	GET /assets/images/welcome/carousel/jul24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:28 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16778 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:28 GMT Etag: "1ea90-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 125584 Connection: close
2024-07-13 16:49:28 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: b2 16 95 72 fb e0 65 47 f6 4a 35 70 2b 26 61 10 e2 bf c8 d2 b2 cd 63 04 2d 0e f8 9d 9d a9 b8 94 94 73 9e 2a 51 1e 1c 38 e3 dd ed 58 43 8b 08 7a b8 57 f9 ac b7 a7 1c 3d 06 a8 44 c7 0b 40 0f f2 fe 00 05 31 b9 f1 9f 9f 1a 9c f8 d4 e7 c4 a7 3e 35 39 f1 29 cf 8d 4e 7c 4a f3 e2 57 9f 0a bc f8 95 e7 c4 af 3e 35 39 f1 a9 cf 8d 4e 7c 4a f3 e1 57 9f 12 bc f6 9f fc 25 4a 70 54 a7 f6 70 e6 39 4c 04 02 82 de a0 2e da b3 95 6f 3b 9c 28 dc 5d 20 f5 83 d2 a7 e9 c1 0e 07 a0 87 fa 4c 54 cc 42 14 c0 63 70 12 12 96 1e 69 b2 29 50 53 89 3b ec bf ff 00 54 6c 73 24 62 17 de 0b 15 34 93 55 f7 dd 4c 50 e1 40 7d 45 2f 77 13 15 db 0a 32 32 06 32 c7 54 1b 1d 4f 70 38 31 b8 af a8 0f b0 56 51 c0 03 c6 ed 92 03 98 3f cb f8 04 01 cc 45 50 54 40 01 61 10 41 6f 6a 8a 08 2a 26 fe 40 e5 f8 Data Ascii: reGJ5p+&ac-sQ8XCzW=D@1>59)N\|JW>59N\|JW%JpTp9L.o;(] LTBcpi)PS;Tls$b4ULP@}E/w222TOp81VQ?EPT@aAoj&@
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 9f 9b ac 41 fc c9 7e 6c 65 e7 0b 1a 7e 64 bf 36 2b ff 00 77 d8 fe 84 bf 36 28 3c e1 61 5f cc 97 e6 c7 f9 be c7 fd 9c bf 36 1c ff 00 de 16 19 29 3e e4 dc 01 3c bb 31 24 44 d4 ab 11 ec 34 fe 5f ca ab 1a 92 df 7b 93 f5 06 27 86 e6 ea 24 bf 8a 0b c4 58 de 26 90 48 f7 26 23 0d 58 02 81 17 c3 3e 20 72 0d 2a 17 5c 79 a5 a4 eb cd 35 df 50 b7 f0 e4 85 8c 92 41 bb c2 50 9f 75 05 06 e4 8a 60 55 1a 5d a6 18 e8 a9 5d 71 11 32 9a 8a 56 98 54 66 38 dc 57 30 71 b4 26 e6 ca 83 89 3c 00 f4 9c b1 79 6f b2 3f bb c8 a6 2b 99 76 d5 9d e5 5a 00 a7 51 1c 35 da 14 6a 43 31 d7 12 42 ea 04 91 9a 10 34 14 f8 7b 30 5c 29 65 26 95 c2 ef 51 b0 0c fe 1c 71 d2 fa 75 a4 a5 62 86 d1 a6 9e 2a 55 1f ef 0d 94 72 0d 19 4c 60 36 79 8a e5 a6 24 21 48 b4 70 1e 25 cf 24 6e 00 9d 76 1a 8e cc 86 09 Data Ascii: A~le~d6+w6(<a_6)><1$D4_{'$X&H&#X> r\y5PAPu`U]]q2VTf8W0q&<yo?+vZQ5jC1B4{0\)e&QqubUrL`6y$!Hp%$nv
2024-07-13 16:49:28 UTC	1107	IN	Data Raw: 4e 40 c8 b8 e9 e3 ff 00 02 3f d4 18 bb ea 36 57 06 13 24 6c 15 02 82 89 23 0a 19 40 e2 6b 9e d3 dd af 0c 46 93 c9 e2 ce 11 43 48 46 d6 72 05 37 35 0d 2a 4e 74 00 01 c3 06 e9 ee 9c be fa 8e c0 3e 88 35 d3 87 3e dc 3d cc cd bd 8f 03 5a 0f 47 7b e5 ae 2f 3a bd b7 9d af 61 8e 4b 8f 15 62 11 c6 c8 87 76 ea 0a 9c c5 79 8d 30 aa 9f c4 3e a7 6f 10 9f c5 0b 10 45 15 e2 a4 d6 a5 0f d5 ae 0f 89 e6 eb d6 93 c5 12 69 40 1b 46 a0 0e 09 de 32 70 c4 86 19 1c b1 66 d2 ff 00 13 fa 9b a5 bd 55 17 c3 85 17 c1 3f d9 30 5a 07 a7 d1 76 05 80 01 6b 41 86 ba b2 bc 8e 8f 18 12 c4 f6 f1 b4 13 3a 9a a4 b2 c4 0a 82 e8 73 05 0a 12 75 24 65 83 2c d7 f3 25 c9 62 de 25 af fc 29 a9 d6 ab 1b 15 60 c3 ba c0 8a 95 ca b5 18 7e 91 67 23 db 58 1a b6 d8 c9 1f 68 4d 77 d4 9a 93 5d 41 d7 8e 1b a5 Data Ascii: N@?6W$l#@kFCHFr75*Nt>5>=ZG{/:aKbvy0>oEi@F2pfU?0ZvkA:su$e,%b%)`~g#XhMw]A
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 4a be dd 4a 1c e9 a6 26 b2 b7 e9 36 2f 6b 1c 4a ed 24 6a 50 17 7c d5 6a 0f 79 b6 d0 b1 1a 71 c3 18 59 a3 2c d5 f0 ab b9 73 d5 94 ea a3 e2 3f ff 00 43 d4 f7 71 ae 36 98 63 6b a8 4e f8 8b 22 be d6 03 3d bb 81 a1 65 cb 2c 6d 6b b5 15 e0 d1 21 1e 8a 53 1e 5e eb b0 db a5 97 51 82 f2 27 59 ed f2 49 00 6e fc 72 c7 a0 2e b5 5d d9 1c f0 c9 75 2a c7 31 15 db 56 24 67 cb 97 cb 85 48 11 d9 8f 28 e8 31 fc 39 f3 84 50 b2 c9 0d f9 86 50 75 f0 9d 49 56 a7 05 47 a6 5c db 1b 23 8c 2a 10 34 03 88 cf d7 80 69 d8 3f d7 87 1c 79 f3 c7 76 36 39 eb a0 f6 9c b0 2d 61 60 d3 ed 07 70 35 5e 74 a8 c8 9e 63 86 3a eb dc 4a 1d b6 28 04 0a 02 3c 44 a0 c5 80 ff 00 c1 4f d5 1f e9 63 f7 5b a9 22 ae bb 19 96 be c2 30 65 ba 9d e4 94 ea cc c5 89 f4 93 53 82 a8 c4 29 35 a0 34 18 2d f4 89 ad 7b Data Ascii: JJ&6/kJ$jP\|jyqY,s?Cq6ckN"=e,mk!S^Q'YInr.]u1V$gH(19PPuIVG\#4i?yv69-a`p5^tc:J(<DOc["0eS)54-{
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: ba 3e 15 c2 5a 5a d9 4b 17 4d 75 0a 59 cd 41 7d 16 8b f4 68 35 e7 8e ad 6c 4e 46 22 eb e8 3e f0 f5 1c fd 78 99 47 ba 24 7a f0 fa 47 0c 23 ee 1a e6 75 3e a3 81 23 66 e4 6a 4e 7e dd 71 b4 b0 14 19 0d 7f 9f 16 85 0f f6 6b a7 e3 1c f1 01 24 d7 c4 63 eb da 71 73 fd e3 7c a7 10 db 4c a1 d1 58 12 4e a4 0f a3 d9 e9 d7 0c 51 76 a9 35 a6 b4 ec cc 70 c1 01 75 c0 45 14 18 82 d9 fa 64 4e 51 36 ee 2c d5 3c 2b d9 83 bb cb f6 d2 12 b4 ab 16 af a4 76 f6 e1 47 f8 44 3b 42 d3 5c cf 2a 9a 70 e1 41 91 cf 0e b2 79 7a dc 83 9d 77 35 43 0f a5 5d 7d 23 4c 78 17 36 e5 e2 0d 55 3e 23 06 4e 61 1b 32 03 68 c0 d4 11 8d 89 6f 18 8b 6d 36 b7 7c 72 04 ee ce a3 50 41 19 f0 c0 b8 7a 34 d4 a5 4e 79 61 6e 1a 05 dc 38 70 3e ae 18 76 30 0a 9d 33 d3 9f a6 bd ba 60 42 f6 e0 81 c6 a6 b8 65 57 68 Data Ascii: >ZZKMuYA}h5lNF">xG$zG#u>#fjN~qk$cqs\|LXNQv5puEdNQ6,<+vGD;B\*pAyzw5C]}#Lx6U>#Na2hom6\|rPAz4Nyan8p>v03`BeWh
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 84 fb a9 8b 32 b5 c7 43 ea 57 44 34 49 3d 48 d7 23 7a 72 9d 77 22 f7 85 ec f9 2a ee 57 18 49 61 a6 ac a0 dc d0 64 36 0b c8 21 e0 36 12 1a 5e f0 6d 71 59 72 97 15 4d a0 a1 d4 b0 db 7d 80 f5 d5 56 6d cd 55 b8 ed bd ed 83 53 4e 2b 82 de c0 12 f1 4c 5e b2 2c 36 9c 91 92 e5 6c 2c 2d 0a ce de 8b f2 d1 ab 14 ad c4 23 e5 a9 5b ad 47 4a c6 f2 99 76 31 28 a4 da 3d 3b 14 81 7d 31 a6 dd 86 16 f8 62 12 62 ca ee 51 a7 16 48 41 6d 0f 38 50 95 3a d0 50 1b 2b 6d 64 fc 7f 1a 46 40 e7 1e 66 39 56 35 f8 c2 a2 b9 e5 44 be c6 ac e1 32 e4 fa 47 af fb bb 15 93 e2 26 72 14 b5 36 f8 4b 42 6b 89 2e 02 d9 0a d7 0c db 71 a6 37 96 f2 36 77 9e 64 95 9c 43 86 bf 8a 54 be a7 32 ec 9a 6c d5 b5 8d 63 79 24 15 ab e5 e8 65 c5 49 f7 da 79 08 69 09 69 6e 05 94 0d f5 c7 fc 17 70 ba d9 59 8e 39 Data Ascii: 2CWD4I=H#zrw"*WIad6!6^mqYrM}VmUSN+L^,6l,-#[GJv1(=;}1bbQHAm8P:P+mdF@f9V5D2G&r6KBk.q76wdCT2lcy$eIyiinpY9
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: e9 fe 4d 5f 71 e7 1f e7 b3 f8 bb 37 cc b8 70 e3 78 b7 21 55 b4 5d 9f 87 dd da e2 cd c4 81 77 19 28 5b 6f 21 71 1f 70 1e f6 94 87 db 04 ad a5 25 c4 a5 42 fa 93 d4 9f 3a 71 53 99 b6 2b 93 ca 62 5e 38 66 de 64 cc da e5 2b 82 32 4a ac e9 79 b5 ca 5a 75 db fb 5a 1b 84 db b7 12 7a 7e 65 41 6a 42 fb 9c 49 d7 e2 e9 bc 8b c4 b6 09 56 41 35 cc aa 6d 62 dd 39 44 9a d6 62 77 be dd 58 9c 0c 2a fb 77 de 51 2e 47 65 44 16 d5 b8 1d c4 6a bb 9b b9 47 d4 bd 4d d6 29 cb 15 56 19 67 1c 71 8d 75 84 9c ab 3c b7 89 51 01 db 79 ad 65 d5 b4 b0 d3 73 09 ba a8 31 96 98 b1 df f2 10 12 12 df 7a 9c 56 da c4 71 0e 3d cc 5a 73 16 91 1a ba 35 d6 23 6f 89 bf 5c 9c 81 a7 03 73 b1 6a 69 ef 34 5c 9d f7 6b 77 4c 32 dd 8c 55 14 ad b6 d4 02 c8 d8 ea f7 3a ce b3 ec 4f 88 20 e3 35 19 95 f6 5f 8b Data Ascii: M_q7px!U]w([o!qp%B:qS+b^8fd+2JyZuZz~eAjBIVA5mb9DbwX*wQ.GeDjGM)Vgqu<Qyes1zVq=Zs5#o\sji4\kwL2U:O 5_
2024-07-13 16:49:28 UTC	10902	IN	Data Raw: a2 a3 e6 2a f1 6a 9b 9c 48 0f 9f f2 fb 19 5c 95 bb 70 88 ca 75 4a 3d c4 a8 f9 6d 7d 04 e9 73 e4 7a 47 cf dc 89 58 87 15 4f 4c d6 51 83 fc ba 66 49 4f da 4a 4a 15 90 a1 25 d4 78 77 1d 80 03 dd 1d 74 97 13 e8 cb 90 e7 58 bc fb 71 eb 61 3d 95 f1 d0 66 b9 f9 2f a5 0e 59 cc 79 79 1f 63 2d 34 8f b4 5a 86 ea 01 3d bb 6f a8 f8 8e 2d e9 0f 91 2d ab a9 b1 58 d5 31 25 31 92 e0 6c a6 ce d2 53 c2 5d fc f7 dc 7b 20 42 90 b9 b6 1b f8 81 bb 09 4e a0 c7 85 e8 87 92 9d 9b 11 d9 7b 42 19 67 1c a3 a7 69 0d 28 29 79 30 6c 21 67 c3 ae db 9d ce 9c 31 3f 77 df 2c 77 a5 6b 42 4b 99 bf 16 84 38 97 17 be e9 ef cb 7a 21 3f 4f 8e df 9f 53 68 2d bf 77 a7 28 b0 89 56 2e b8 d7 9b 9a f1 7c 8f 96 90 86 fb 98 9a da d3 96 17 1b 8e 16 36 00 1e 9b f8 68 c6 b5 f4 13 cc 71 8a 08 02 44 4e 41 e2 Data Ascii: *jH\puJ=m}szGXOLQfIOJJ%xwtXqa=f/Yyyc-4Z=o--X1%1lS]{ BN{Bgi()y0l!g1?w,wkBK8z!?OSh-w(V.\|6hqDNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.22	49254	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:27 UTC	385	OUT	GET /assets/images/welcome/featured/pfs-newarrival.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:28 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16778 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:28 GMT Etag: "1a336-61c36b8880e80" Last-Modified: Mon, 01 Jul 2024 22:00:10 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 107318 Connection: close
2024-07-13 16:49:28 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:28 UTC	1106	IN	Data Raw: b5 6e 95 6e 9a 95 92 c9 87 4f ae ae 41 6a 62 2b 39 ad b9 5b 18 b0 45 63 35 7e ea b3 88 44 b0 bf 8d 68 ac 74 62 cd 19 e9 af cb 5f d2 5f 9d 45 9c 8e ba 02 c8 7e 6e e5 52 a1 57 8c f5 ff 00 b6 a5 b7 b7 c4 b2 76 39 ec e9 b6 af c2 ea ad 9e ff 00 43 fe 6f ef c9 1c ad ce 83 d4 ef af cf ed b9 a4 39 dd 2d a8 f9 82 da 53 34 2d ba 8b 39 36 d4 14 91 a8 89 49 f1 83 28 b1 ed 23 59 55 53 5e b1 54 91 18 13 21 f0 2f ab 76 8e 3e 1a fe c2 a4 8b ab 74 ea 92 14 98 22 cb 5e 81 f2 c6 4c 21 1a b4 94 7f ff da 00 08 01 02 00 01 05 00 3f a0 fa bb d9 bd 10 f7 78 ed 39 4c 95 cc 51 58 6b 80 7a ca 25 02 b2 8f a9 3e a7 d0 9f d0 4a cf ae 57 72 ca cf e8 7f 71 2e 71 6a 7e 70 06 16 70 bb 96 56 51 2b 3e 99 fd 03 f4 67 f5 f4 58 4e 20 2e ae 5e c8 94 4f a7 f5 f4 3e 80 a1 ec 4a 27 a9 1e a5 15 9c Data Ascii: nnOAjb+9[Ec5~Dhtb__E~nRWv9Co9-S4-96I(#YUS^T!/v>t"^L!?x9LQXkz%>JWrq.qj~ppVQ+>gXN .^O>J'
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 16 b8 f5 6f b0 41 4b fb 32 7b a1 38 4d f6 f5 3d 13 7f 69 f4 2d 0e 51 b5 a0 e3 f4 bb d4 a0 11 41 7f 43 ec ee 89 c3 06 1e 8f 6f b7 a9 57 a3 ff 00 51 5c aa fe db 11 d0 a7 f4 5d cb 52 e2 59 da 0a b6 d0 c9 8e 31 ab 90 3a 0b 70 37 b4 6b 64 74 87 5f f1 8a ce 11 98 65 10 cb ea 53 9d db 2b 9f 92 5d 95 f1 64 c6 c1 82 d0 05 3f 62 ae 02 e5 24 44 1a b6 dd 0a b4 c0 e0 09 29 ae ee 11 ca 42 b1 91 2b 06 14 29 ce 51 8c 47 70 ff 00 7b b9 c1 17 65 07 05 c7 ce 51 43 d8 0f 4b 47 11 b8 f5 a9 27 71 68 c0 f5 28 7e df 4f ea df 74 7d bd 4f e9 28 23 ec 7d 9c a6 6f d6 ce 8e 08 fe 8b 8c cc b5 c6 0c 2e 00 5b b1 0c 8c 74 8d 4f 90 15 de 02 a1 b0 82 16 0d cd 60 b6 53 44 f9 44 e5 6a ef 08 65 b3 30 7c 72 4f 89 24 b0 0b 58 c7 30 b9 ae 0a 17 f7 b3 d0 a9 98 5e f2 30 83 53 86 11 f7 03 22 98 fa Data Ascii: oAK2{8M=i-QACoWQ\]RY1:p7kdt_eS+]d?b$D)B+)QGp{eQCKG'qh(~Ot}O(#}o.[tO`SDDje0\|rO$X0^0S"
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 65 bc 0a 12 ce 2d 13 72 1a c5 1b 3b a4 e4 ae 07 6d a9 20 cf 24 81 dc de c3 30 e9 18 13 d8 b6 15 1b 6a bd 2e 09 ba 1b 7d 37 1e d7 6a 4f 69 09 f1 12 28 d5 ee 77 8d aa 18 f9 07 e4 d5 60 cb b4 2b 97 be 96 b7 ee 38 c7 8b 20 36 f8 6d ce 0e ed e3 6f e8 f6 ba c5 2d 1a 93 55 d9 78 a2 9c cf e6 36 79 3f 11 57 3c a3 55 f0 5c dc 1d 9b 2b 72 5d 9d 17 eb fc 93 66 25 47 c9 c4 8a be 4a 24 57 f2 57 46 79 1d 45 e4 5c a8 fc 84 ab f3 c8 89 8b 9d 57 70 67 31 85 c9 bc ac 14 de 4f 90 39 31 43 92 26 f2 22 87 20 25 0d fa fe 69 a5 0d b3 5c bf 93 47 66 d4 76 21 3f 60 13 af 04 eb c9 f7 4a 7d e2 a4 ba 71 25 d2 9f 75 3a f6 04 9b 22 14 9b 42 14 9b 67 03 2e e1 e5 49 bb 78 4f de bc 27 ef c8 4e e4 5d a1 fc 90 e5 bc 85 e4 eb af 5b bd 36 92 b4 3a d5 ae 83 b4 79 9b cf 3f f0 ca 3c 67 c6 fc 8f Data Ascii: e-r;m $0j.}7jOi(w`+8 6mo-Ux6y?W<U\+r]f%GJ$WWFyE\Wpg1O91C&" %i\Gfv!?`J}q%u:"Bg.IxO'N][6:y?<g
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 08 45 58 b0 6b a0 b0 23 e3 54 6a 58 fb 3a af 71 d7 56 47 45 ae 91 cc d6 54 62 75 76 b4 7c 31 bd b6 75 7f 23 4e 8b 22 4d 28 53 6a 2c 46 d6 51 b6 d1 66 8e c6 69 4d 2d 90 53 6b f7 61 a2 b6 d2 29 24 66 e6 17 58 d1 ef 2c 81 c6 ed 05 36 b2 78 17 22 89 f0 43 b7 e0 3b 8d 4f 97 3c df 0b 26 f2 0c b4 4a 92 9e 17 3f 18 e3 fb a7 7f f1 8e 17 b9 87 49 c3 f8 ef 37 83 75 77 94 13 f7 62 ae 56 e6 a0 30 c2 cf aa f3 be 45 e0 eb 03 ff 00 cc 3f 95 9a 11 cd 75 6f d4 f2 ad 56 ae be ce b4 7a 99 6a bf 8f 7f 1d 6a 68 6c dc 10 79 7e 7b 32 c7 a8 d8 53 99 b3 51 e3 ed 8d 90 b8 bb 8e 4f 06 aa c7 fc ae 29 58 fd bc 0e 43 67 09 03 63 13 83 ae c6 e5 25 ae c1 fc fd 66 b9 db 69 a5 23 65 65 a5 db 09 64 0e 9c 91 f7 2f 69 93 63 69 ca 7b b2 10 cb 50 08 5f 27 43 62 68 c3 ec 4e d6 bb 63 2b 4b ae 12 Data Ascii: EXk#TjX:qVGETbuv\|1u#N"M(Sj,FQfiM-Ska)$fX,6x"C;O<&J?I7uwbV0E?uoVzjjhly~{2SQO)XCgc%fi#eed/ici{P_'CbhNc+K
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: ce b9 f9 8b 69 c3 5b d6 c4 1c 2b 63 cd 16 ac 45 84 66 c6 84 59 2e 25 48 f4 55 07 4f cf 7a 82 26 2d 8c d2 7f 26 36 d4 9e cd 6f 44 c7 96 1f 29 56 ec 83 b3 e2 6b db a4 b9 2c 44 97 53 6e ce ea f6 62 db e6 c2 8c 9f 8a 8a ce 16 bf 99 45 6d ab c3 f8 2b f9 a8 db 90 af 6a 20 5e b5 13 ca ce bd d6 b5 22 05 f2 98 c9 50 75 e3 5e e8 9f 14 ff 00 95 97 32 37 92 30 34 57 2e 2f 6f a6 bd 8f 1d ac 17 69 c7 ee d7 a0 7e 47 f1 ab 56 cd 18 d2 e2 53 f4 e9 5e cf 84 8b 5a 1c 71 6f 08 16 88 a8 07 fd a2 e9 f1 a9 3b ba ec 3f 7a a0 e8 00 f4 c5 31 7b f6 74 d1 a8 b8 10 b8 ce 7e 37 b5 36 96 b2 b7 e6 34 ff 00 b4 68 d1 3f fa 16 fa 68 52 78 d6 3f ed 0a 84 92 6e cd 90 88 07 32 d0 b7 f6 56 dc 7e d2 4d 19 62 79 5a 41 53 05 16 27 17 6e c9 f1 ea 8c 6b 58 ac 3c a8 99 d8 52 03 cb e6 1f db 59 40 ff Data Ascii: i[+cEfY.%HUOz&-&6oD)Vk,DSnbEm+j ^"Pu^2704W./oi~GVS^Zqo;?z1{t~764h?hRx?n2V~MbyZAS'nkX<RY@
2024-07-13 16:49:28 UTC	16383	IN	Data Raw: 93 0f 5b 43 7f 34 ae 80 7c c7 b0 76 56 27 b5 33 3d 99 b6 ee 3b 74 50 aa 1c 59 60 4e 95 b7 0b 69 46 1c 7f c3 2f 6f c5 1a a8 53 21 c4 88 93 d3 c2 fe 4a f6 d6 dd ec af 66 6c 98 19 98 99 89 b8 65 e7 43 8f 1c 5f 77 c6 c7 60 66 94 ba a8 37 b1 e9 00 6a 49 15 8d b7 ec 70 98 17 29 24 07 3d 40 eb 89 af c4 3b 7c be 5b f0 d6 bf 10 80 71 9b b8 7f 4b cd be 48 7e b6 67 18 d2 13 76 e7 ad 7b 67 09 e3 59 8c 3b 8c 5b 86 52 b8 05 5a 0c 1c 29 65 1c 7b 24 0a 69 a3 60 59 72 14 8b f7 db 43 52 a3 af 41 94 8b 5f c2 b7 08 62 91 95 9c f5 33 8e c3 ca bd b1 b3 f4 91 16 06 3f a6 c2 f7 67 59 dd 9b cc 79 d8 e9 e1 5b 0e e8 b9 37 7c 7c ec 99 de 10 ab 18 0f 34 2a 82 ca 80 05 00 25 ac 28 c9 f7 32 91 be ae 40 b0 b8 ef a6 8e e9 15 ee 0e b7 2d 7e d1 45 ca 5c 03 63 63 fa 29 90 90 3a b4 0d d8 7b Data Ascii: [C4\|vV'3=;tPY`NiF/oS!JfleC_w`f7jIp)$=@;\|[qKH~gv{gY;[RZ)e{$i`YrCRA_b3?gYy[7\|\|4*%(2@-~E\cc):{
2024-07-13 16:49:28 UTC	9020	IN	Data Raw: d2 fd c6 b7 1c 19 32 2c 73 7d 78 5d fa 6f 6e b2 47 d5 7a cc da bd bf 84 76 f3 87 2c 98 b9 5b 94 f6 7c 87 68 d8 a3 15 fd 50 6d a5 3c bb 86 4b e5 67 cd ac 78 51 9f 53 22 53 e1 ad bc 4d 13 32 36 d5 b5 13 e4 db 62 36 76 1c 8c 8d cf c2 ba 56 12 aa bf 28 02 94 18 c9 b7 10 28 f5 e3 a1 61 aa b1 50 48 f0 26 bc eb e2 2c 28 83 19 b1 ee a5 93 d2 7e b1 af 0d 2b f9 4d d6 46 be 51 56 3e a4 22 d7 04 68 6f 5e 69 da 3b 70 0c 35 35 d7 ea f9 87 0f 2d 2b 26 53 d8 6a 40 34 be 8d c9 e1 d7 7b 5a 94 39 91 8f 6d e8 6a f7 1f 2d 05 51 22 b7 eb 50 55 67 56 e0 4d 1b 34 84 8e 60 71 ab 9f 50 00 35 d2 d5 c4 81 df 5d 4a bd 64 e8 0d b5 a3 68 fa 54 71 ae a5 5b 8e da f3 11 a7 0a f9 ad a0 b1 16 a5 f5 7a 5c f0 05 ac 4f 85 59 23 1d b6 b5 01 e9 5f b0 5b 4a f7 b7 b7 b2 fe 4c 1c a8 33 f0 d7 85 96 Data Ascii: 2,s}x]onGzv,[\|hPm<KgxQS"SM26b6vV((aPH&,(~+MFQV>"ho^i;p55-+&Sj@4{Z9mj-Q"PUgVM4`qP5]JdhTq[z\OY#_[JL3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.22	49257	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:29 UTC	619	OUT	GET /assets/images/welcome/carousel/jul24-military.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:30 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16779 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:29 GMT Etag: "17c92-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26C9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 97426 Connection: close
2024-07-13 16:49:30 UTC	15278	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: b6 69 4a 71 b3 9b 16 ea 9d 67 8c e6 f2 97 ca 59 4d d5 2b 7a de eb d2 b3 33 6b d2 9e e2 d5 f1 1b 80 e3 26 c5 63 91 f3 fa 60 96 79 fa 38 e6 ba 0f 56 08 09 b1 07 dc 60 fb d3 52 ed 8b 10 9b 23 a4 f1 a2 5d dd c2 31 34 6e e3 6b 34 a7 5d ca 72 8f 4b de e2 f9 fd c9 9e 6f 86 c8 3b 07 7b 91 b3 6e c5 e6 cf ec 4b f2 bc cc 19 7a 4c e9 e5 5c aa 4a 0c d1 96 51 12 67 0c c6 4a 2e 78 ce 49 d1 76 17 3c 26 24 d8 ec f9 44 d9 4c fd 45 d9 ad 80 e4 36 73 3f f1 fd d0 6c 01 40 9b 53 b0 49 89 76 cb 3f 85 06 dd e7 f2 8e 41 c8 17 5e 4c b8 bc eb 9f 0e 3c 38 ae 2b 8f e1 90 40 0e 86 2a bd 1c b6 fd a6 bd 12 90 73 86 af 86 91 0b e2 19 76 4d ee bc 7d 3f 64 bc e3 cb 8e 3e ac 76 e1 40 c8 9b 3a f5 38 cc f7 18 ca e5 7c cf f1 17 07 30 71 30 32 4d 26 a2 20 e3 93 78 44 ce 89 52 6d d3 8c c0 3f 69 Data Ascii: iJqgYM+z3k&c`y8V`R#]14nk4]rKo;{nKzL\JQgJ.xIv<&$DLE6s?l@SIv?A^L<8+@*svM}?d>v@:8\|0q02M& xDRm?i
2024-07-13 16:49:30 UTC	22	IN	Data Raw: 33 96 01 18 d3 20 15 75 12 a4 eb 62 2a 0d 0d 30 9d d0 7a 21 53 9b Data Ascii: 3 ub*0z!S
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 4b db d4 48 61 9f a3 a3 27 24 1e d0 20 28 19 e2 f1 ad a2 0f 45 5e e7 51 93 51 24 f6 fb c1 50 01 51 45 55 19 7d d5 4e 22 21 f5 20 65 35 a5 3a 41 39 78 31 24 9f 84 4f c2 71 6e fb 3c 88 b3 2c a1 98 37 07 4d 2c 34 1c 89 00 92 0d 45 0d 54 0a d0 9c 6c c2 4b b4 7b 78 a1 d3 31 24 06 95 d8 50 be 4b 4e c1 01 80 1a 6b ad 87 40 c5 a0 bd 98 49 0f ab e9 72 1b 84 a1 98 ea 0b a4 56 a0 81 50 45 29 c3 19 60 53 1d aa 81 8d 23 14 19 8c 4d 77 7b 32 c5 69 1a 96 77 35 a2 a8 e2 4d 2a 68 3c 03 06 bc c5 11 f1 2c 87 f4 31 d9 dd 99 bc 50 cb fa b8 3f b4 dc b5 3a a1 7f 96 98 ec a5 eb 78 a1 03 ce f8 fa 3d ba f8 ff 00 16 31 e7 7c 51 36 4b b2 7c 26 21 fa 67 1d 9e 5d 9c f8 e5 8c 7c 87 1f 47 cb b4 f1 dc 0f 91 0e 29 16 c5 6e 0f 86 72 7c c9 8f a2 d9 6c fc af 21 f3 01 8a 45 b3 d9 83 e0 49 9b Data Ascii: KHa'$ (E^QQ$PQEU}N"! e5:A9x1$Oqn<,7M,4ETlK{x1$PKNk@IrVPE)`S#Mw{2iw5M*h<,1P?:x=1\|Q6K\|&!g]\|G)nr\|l!EI
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 60 4f 5e 3e 85 39 6a 2f 16 db af f3 a7 39 60 e8 de b6 28 ab f7 9b 55 be 5f 94 cd 82 07 3d d9 44 3f b1 ed b6 6b f1 94 38 35 f6 b1 3a 7f 6b b5 b2 4f 83 e8 0d 30 75 fb 6b de 40 fc 1f 57 4f cd 80 63 e9 bd b6 73 17 92 e7 4f e6 a8 c1 f5 9f 6c bc cc df e9 f3 0f 33 0c 7e d3 ed 47 98 e4 f1 ee 57 7f 24 a3 1f b4 73 be f3 27 e3 5f 5d 1f 3c b8 26 7d f6 fd c9 fb eb 99 cf 9e 4c 7d 35 c4 cf f8 d2 39 f3 b1 c6 ae e5 4f 8c 57 cf 8f 62 f7 aa 7f 96 e6 0b 56 a7 57 77 7b 1c 7f 1e 3d b4 46 07 0e 65 bd f8 de bf 2f be f4 4e 3e b1 e9 c3 4d 9e c2 ff 00 06 ea 47 cb f6 c9 8f db 37 b3 8b fd e7 da 07 ef 09 db 5c 71 c8 f1 7a a9 11 fa ba 65 79 02 55 48 92 a3 bb ae 62 ac 78 01 fb a7 ea ac f2 b2 f0 69 2d ec 87 c7 34 d3 9f 88 e3 ff 00 0e fd 57 6c 63 23 86 a1 b6 a7 e6 d9 39 1f 0e 34 ec 9e c0 Data Ascii: `O^>9j/9`(U_=D?k85:kO0uk@WOcsOl3~GW$s'_]<&}L}59OWbVWw{=Fe/N>MG7\qzeyUHbxi-4Wlc#94
2024-07-13 16:49:30 UTC	1087	IN	Data Raw: db d0 12 28 43 cb cb b8 64 ed a3 57 56 f3 36 b2 ee 53 68 41 94 23 11 74 e8 e5 49 b8 2a 73 14 a2 80 66 03 a5 62 88 08 50 40 74 70 a0 d0 75 00 87 0c 14 7a c3 d1 90 8e 0b f4 fd df d5 bc de d1 a6 07 b7 da 03 c7 d5 83 7d 59 54 7a 31 cb 1e cf 5c f7 5d df 63 37 3c 92 9b cc c6 52 d2 bb 6e 48 82 de 13 76 d5 e7 0d 67 44 6d cd c5 69 c2 99 28 4b e6 12 40 67 d6 92 16 72 fd f3 75 0e c0 08 92 26 38 98 e4 8e b6 76 06 c9 55 79 06 a9 3b 8f 99 96 99 59 ba f3 30 d1 30 ec da a1 14 f0 24 9e 2d f2 5b 3e 52 45 bc 89 8e 82 2e 4e 0e 5a ae 51 29 9b 99 30 35 22 a0 2f 96 c4 92 31 09 6c be 94 68 8b c5 44 8a 4b db ed 50 2a 60 e5 fa 1d df 8f 03 ae 95 5c 19 30 22 6b 98 4f a6 85 10 c1 18 c5 31 69 1a c5 23 1c e9 b3 62 81 1b b7 21 d4 10 15 14 04 c8 00 02 aa a2 00 27 38 d4 c7 1c c4 44 7f 45 Data Ascii: (CdWV6ShA#tIsfbP@tpuz}YTz1\]c7<RnHvgDmi(K@gru&8vUy;Y00$-[>RE.NZQ)05"/1lhDKP`\0"kO1i#b!'8DE
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 68 bc 8e b1 37 66 66 e2 69 6a c8 85 ef 77 27 65 38 86 85 8a 66 f2 cc 63 70 b3 66 dd c2 b6 db ab 5d ca 6e 8c a8 0b b5 40 fc dc 1d db 9d c8 88 7b bf 7b 2f 60 6e d6 e7 32 38 c4 b5 b5 a7 76 db 6b 77 42 e5 b2 26 15 b4 a4 2c 96 6d 9f 59 12 96 6d b6 cc 91 d3 ac 16 ee 54 5e 04 09 22 91 5d ab de 9f 16 25 a5 67 44 31 65 77 ef 05 f3 6a 3d 72 e1 fd ee e7 77 ae 05 e6 36 ee 49 b1 2d 4b 73 6f da 4a db 11 51 de 2f 97 ad 90 45 b4 24 f5 e7 2a 49 0b 7a 1a 29 ca 72 8c 14 09 97 c9 09 53 12 1c 8a 17 bc 5f ef 93 29 ca 9a a2 04 30 19 64 ca a8 99 52 a6 a1 bd e2 81 bd e0 01 cf 3c 07 90 3f b2 01 82 fd 3f 77 f5 6f 30 7b 70 3e 4f ab 0a 0f d2 b9 53 d0 38 d9 2d e8 bf 23 e6 26 2e 7d 8b f9 bb ab 12 21 19 75 e3 ed 55 65 64 8c fd 34 e5 ee b8 b6 80 9a b7 42 d0 a5 90 5c 58 b5 72 a8 b2 41 55 Data Ascii: h7ffijw'e8fcpf]n@{{/`n28vkwB&,mYmT^"]%gD1ewj=rw6I-KsoJQ/E$*Iz)rS_)0dR<??wo0{p>OS8-#&.}!uUed4B\XrAU
2024-07-13 16:49:30 UTC	15507	IN	Data Raw: 89 ec bb b5 0c 22 61 50 35 53 0b ef 26 d4 de bb b3 3d 78 8d 87 73 6d fc 59 6f 47 56 b2 b1 36 f3 0b b0 ac c9 29 37 0c d2 16 16 3c e9 cd a4 93 12 11 1d 66 32 24 28 98 04 a3 5c 47 c4 5a f2 97 4d 9c c5 ce d9 a7 b4 3b 90 78 4f 93 b8 93 de 5b 19 2b 8e 26 f1 2b 4b c6 62 65 94 8b f8 29 15 ae 78 54 55 70 b4 39 9a a6 b3 03 ab 1e 54 93 6e a5 4a ce d4 71 7c de a3 12 cf f1 f1 49 16 8b 2b 5d 0b 41 36 5b 97 79 44 df 77 65 b1 19 60 7c b5 4b 5e 07 6e 9d 4d 41 b5 22 76 e3 52 16 34 8d 4a a2 40 1a 15 39 71 78 6d 50 6e 0d f3 23 69 de b7 15 bf 73 c8 b8 95 65 68 ba b9 e3 64 2d e8 fb 6e 31 ba b0 17 19 61 52 79 17 20 44 ad 08 d5 63 e4 0a 1e 3a 11 cb 42 28 c5 44 87 16 f0 4a cd 5e 37 92 56 b5 c9 70 5d 11 cd ae 77 51 8e 10 94 91 bb 2e 23 dc d7 68 de 68 b6 60 83 7b c8 f7 4b d3 81 24 Data Ascii: "aP5S&=xsmYoGV6)7<f2$(\GZM;xO[+&+Kbe)xTUp9TnJq\|I+]A6[yDwe`\|K^nMA"vR4J@9qxmPn#isehd-n1aRy Dc:B(DJ^7Vp]wQ.#hh`{K$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.22	49258	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:29 UTC	383	OUT	GET /assets/images/welcome/carousel/jul24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:30 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16779 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:29 GMT Etag: "1ea90-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 125584 Connection: close
2024-07-13 16:49:30 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: b2 16 95 72 fb e0 65 47 f6 4a 35 70 2b 26 61 10 e2 bf c8 d2 b2 cd 63 04 2d 0e f8 9d 9d a9 b8 94 94 73 9e 2a 51 1e 1c 38 e3 dd ed 58 43 8b 08 7a b8 57 f9 ac b7 a7 1c 3d 06 a8 44 c7 0b 40 0f f2 fe 00 05 31 b9 f1 9f 9f 1a 9c f8 d4 e7 c4 a7 3e 35 39 f1 29 cf 8d 4e 7c 4a f3 e2 57 9f 0a bc f8 95 e7 c4 af 3e 35 39 f1 a9 cf 8d 4e 7c 4a f3 e1 57 9f 12 bc f6 9f fc 25 4a 70 54 a7 f6 70 e6 39 4c 04 02 82 de a0 2e da b3 95 6f 3b 9c 28 dc 5d 20 f5 83 d2 a7 e9 c1 0e 07 a0 87 fa 4c 54 cc 42 14 c0 63 70 12 12 96 1e 69 b2 29 50 53 89 3b ec bf ff 00 54 6c 73 24 62 17 de 0b 15 34 93 55 f7 dd 4c 50 e1 40 7d 45 2f 77 13 15 db 0a 32 32 06 32 c7 54 1b 1d 4f 70 38 31 b8 af a8 0f b0 56 51 c0 03 c6 ed 92 03 98 3f cb f8 04 01 cc 45 50 54 40 01 61 10 41 6f 6a 8a 08 2a 26 fe 40 e5 f8 Data Ascii: reGJ5p+&ac-sQ8XCzW=D@1>59)N\|JW>59N\|JW%JpTp9L.o;(] LTBcpi)PS;Tls$b4ULP@}E/w222TOp81VQ?EPT@aAoj&@
2024-07-13 16:49:30 UTC	1106	IN	Data Raw: 9f 9b ac 41 fc c9 7e 6c 65 e7 0b 1a 7e 64 bf 36 2b ff 00 77 d8 fe 84 bf 36 28 3c e1 61 5f cc 97 e6 c7 f9 be c7 fd 9c bf 36 1c ff 00 de 16 19 29 3e e4 dc 01 3c bb 31 24 44 d4 ab 11 ec 34 fe 5f ca ab 1a 92 df 7b 93 f5 06 27 86 e6 ea 24 bf 8a 0b c4 58 de 26 90 48 f7 26 23 0d 58 02 81 17 c3 3e 20 72 0d 2a 17 5c 79 a5 a4 eb cd 35 df 50 b7 f0 e4 85 8c 92 41 bb c2 50 9f 75 05 06 e4 8a 60 55 1a 5d a6 18 e8 a9 5d 71 11 32 9a 8a 56 98 54 66 38 dc 57 30 71 b4 26 e6 ca 83 89 3c 00 f4 9c b1 79 6f b2 3f bb c8 a6 2b 99 76 d5 9d e5 5a 00 a7 51 1c 35 da 14 6a 43 31 d7 12 42 ea 04 91 9a 10 34 14 f8 7b 30 5c 29 65 26 95 c2 ef 51 b0 0c fe 1c 71 d2 fa 75 a4 a5 62 86 d1 a6 9e 2a 55 1f ef 0d 94 72 0d 19 4c 60 36 79 8a e5 a6 24 21 48 b4 70 1e 25 cf 24 6e 00 9d 76 1a 8e cc 86 09 Data Ascii: A~le~d6+w6(<a_6)><1$D4_{'$X&H&#X> r\y5PAPu`U]]q2VTf8W0q&<yo?+vZQ5jC1B4{0\)e&QqubUrL`6y$!Hp%$nv
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: da 6f e5 8e e1 5c a8 01 5c c4 d2 46 1e 8b dd ab 2a 82 76 f7 49 a9 5c b1 75 fd e3 7c a7 f9 7f 2f 89 05 69 70 ff 00 a8 31 63 d3 25 f2 e2 5f 1d f7 0e 21 49 9e 16 b8 74 29 b4 4b b4 d2 46 01 8e de 40 65 c7 11 d9 d9 45 34 b7 1e 0d c4 c0 bd 66 f1 44 73 2c 4d 1a 88 99 58 f8 20 b6 c0 06 e6 db bd 89 0b 88 ee 6c 24 86 ee 19 d1 9e de 2f 14 ef fb 05 db 2c 6d 19 2a f2 34 92 77 b6 82 08 a5 01 a6 3a 5c 56 7d 32 5b 77 9e 27 91 8c a4 f8 bb 77 95 54 64 a9 08 14 65 96 67 53 87 52 a0 1a 62 c5 9b 20 67 8f 5d 07 7d 71 e6 1b 38 a2 a9 f1 1e aa a4 6e 50 09 25 ca 9c c8 a0 ae 42 b8 b1 b8 b1 df e3 18 15 24 14 03 73 26 5e 25 7e ab 2d 28 75 07 5c 3b db bc 85 56 a4 9a 20 20 e9 98 34 27 3c 87 0e 35 c2 25 ec 0c 23 59 15 08 dd b0 b1 27 3a 7a 39 71 ae 3c db d6 27 90 40 64 b9 31 2c 6c 45 09 Data Ascii: o\\FvI\u\|/ip1c%_!It)KF@eE4fDs,MX l$/,m4w:\V}2[w'wTdegSRb g]}q8nP%B$s&^%~-(u\;V 4'<5%#Y':z9q<'@d1,lE
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 6f 4a be dd 4a 1c e9 a6 26 b2 b7 e9 36 2f 6b 1c 4a ed 24 6a 50 17 7c d5 6a 0f 79 b6 d0 b1 1a 71 c3 18 59 a3 2c d5 f0 ab b9 73 d5 94 ea a3 e2 3f ff 00 43 d4 f7 71 ae 36 98 63 6b a8 4e f8 8b 22 be d6 03 3d bb 81 a1 65 cb 2c 6d 6b b5 15 e0 d1 21 1e 8a 53 1e 5e eb b0 db a5 97 51 82 f2 27 59 ed f2 49 00 6e fc 72 c7 a0 2e b5 5d d9 1c f0 c9 75 2a c7 31 15 db 56 24 67 cb 97 cb 85 48 11 d9 8f 28 e8 31 fc 39 f3 84 50 b2 c9 0d f9 86 50 75 f0 9d 49 56 a7 05 47 a6 5c db 1b 23 8c 2a 10 34 03 88 cf d7 80 69 d8 3f d7 87 1c 79 f3 c7 76 36 39 eb a0 f6 9c b0 2d 61 60 d3 ed 07 70 35 5e 74 a8 c8 9e 63 86 3a eb dc 4a 1d b6 28 04 0a 02 3c 44 a0 c5 80 ff 00 c1 4f d5 1f e9 63 f7 5b a9 22 ae bb 19 96 be c2 30 65 ba 9d e4 94 ea cc c5 89 f4 93 53 82 a8 c4 29 35 a0 34 18 2d f4 89 ad Data Ascii: oJJ&6/kJ$jP\|jyqY,s?Cq6ckN"=e,mk!S^Q'YInr.]u1V$gH(19PPuIVG\#4i?yv69-a`p5^tc:J(<DOc["0eS)54-
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 03 ba 3e 15 c2 5a 5a d9 4b 17 4d 75 0a 59 cd 41 7d 16 8b f4 68 35 e7 8e ad 6c 4e 46 22 eb e8 3e f0 f5 1c fd 78 99 47 ba 24 7a f0 fa 47 0c 23 ee 1a e6 75 3e a3 81 23 66 e4 6a 4e 7e dd 71 b4 b0 14 19 0d 7f 9f 16 85 0f f6 6b a7 e3 1c f1 01 24 d7 c4 63 eb da 71 73 fd e3 7c a7 10 db 4c a1 d1 58 12 4e a4 0f a3 d9 e9 d7 0c 51 76 a9 35 a6 b4 ec cc 70 c1 01 75 c0 45 14 18 82 d9 fa 64 4e 51 36 ee 2c d5 3c 2b d9 83 bb cb f6 d2 12 b4 ab 16 af a4 76 f6 e1 47 f8 44 3b 42 d3 5c cf 2a 9a 70 e1 41 91 cf 0e b2 79 7a dc 83 9d 77 35 43 0f a5 5d 7d 23 4c 78 17 36 e5 e2 0d 55 3e 23 06 4e 61 1b 32 03 68 c0 d4 11 8d 89 6f 18 8b 6d 36 b7 7c 72 04 ee ce a3 50 41 19 f0 c0 b8 7a 34 d4 a5 4e 79 61 6e 1a 05 dc 38 70 3e ae 18 76 30 0a 9d 33 d3 9f a6 bd ba 60 42 f6 e0 81 c6 a6 b8 65 57 Data Ascii: >ZZKMuYA}h5lNF">xG$zG#u>#fjN~qk$cqs\|LXNQv5puEdNQ6,<+vGD;B\*pAyzw5C]}#Lx6U>#Na2hom6\|rPAz4Nyan8p>v03`BeW
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 49 84 fb a9 8b 32 b5 c7 43 ea 57 44 34 49 3d 48 d7 23 7a 72 9d 77 22 f7 85 ec f9 2a ee 57 18 49 61 a6 ac a0 dc d0 64 36 0b c8 21 e0 36 12 1a 5e f0 6d 71 59 72 97 15 4d a0 a1 d4 b0 db 7d 80 f5 d5 56 6d cd 55 b8 ed bd ed 83 53 4e 2b 82 de c0 12 f1 4c 5e b2 2c 36 9c 91 92 e5 6c 2c 2d 0a ce de 8b f2 d1 ab 14 ad c4 23 e5 a9 5b ad 47 4a c6 f2 99 76 31 28 a4 da 3d 3b 14 81 7d 31 a6 dd 86 16 f8 62 12 62 ca ee 51 a7 16 48 41 6d 0f 38 50 95 3a d0 50 1b 2b 6d 64 fc 7f 1a 46 40 e7 1e 66 39 56 35 f8 c2 a2 b9 e5 44 be c6 ac e1 32 e4 fa 47 af fb bb 15 93 e2 26 72 14 b5 36 f8 4b 42 6b 89 2e 02 d9 0a d7 0c db 71 a6 37 96 f2 36 77 9e 64 95 9c 43 86 bf 8a 54 be a7 32 ec 9a 6c d5 b5 8d 63 79 24 15 ab e5 e8 65 c5 49 f7 da 79 08 69 09 69 6e 05 94 0d f5 c7 fc 17 70 ba d9 59 8e Data Ascii: I2CWD4I=H#zrw"*WIad6!6^mqYrM}VmUSN+L^,6l,-#[GJv1(=;}1bbQHAm8P:P+mdF@f9V5D2G&r6KBk.q76wdCT2lcy$eIyiinpY
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 27 e9 fe 4d 5f 71 e7 1f e7 b3 f8 bb 37 cc b8 70 e3 78 b7 21 55 b4 5d 9f 87 dd da e2 cd c4 81 77 19 28 5b 6f 21 71 1f 70 1e f6 94 87 db 04 ad a5 25 c4 a5 42 fa 93 d4 9f 3a 71 53 99 b6 2b 93 ca 62 5e 38 66 de 64 cc da e5 2b 82 32 4a ac e9 79 b5 ca 5a 75 db fb 5a 1b 84 db b7 12 7a 7e 65 41 6a 42 fb 9c 49 d7 e2 e9 bc 8b c4 b6 09 56 41 35 cc aa 6d 62 dd 39 44 9a d6 62 77 be dd 58 9c 0c 2a fb 77 de 51 2e 47 65 44 16 d5 b8 1d c4 6a bb 9b b9 47 d4 bd 4d d6 29 cb 15 56 19 67 1c 71 8d 75 84 9c ab 3c b7 89 51 01 db 79 ad 65 d5 b4 b0 d3 73 09 ba a8 31 96 98 b1 df f2 10 12 12 df 7a 9c 56 da c4 71 0e 3d cc 5a 73 16 91 1a ba 35 d6 23 6f 89 bf 5c 9c 81 a7 03 73 b1 6a 69 ef 34 5c 9d f7 6b 77 4c 32 dd 8c 55 14 ad b6 d4 02 c8 d8 ea f7 3a ce b3 ec 4f 88 20 e3 35 19 95 f6 5f Data Ascii: 'M_q7px!U]w([o!qp%B:qS+b^8fd+2JyZuZz~eAjBIVA5mb9DbwX*wQ.GeDjGM)Vgqu<Qyes1zVq=Zs5#o\sji4\kwL2U:O 5_
2024-07-13 16:49:30 UTC	10903	IN	Data Raw: d2 a2 a3 e6 2a f1 6a 9b 9c 48 0f 9f f2 fb 19 5c 95 bb 70 88 ca 75 4a 3d c4 a8 f9 6d 7d 04 e9 73 e4 7a 47 cf dc 89 58 87 15 4f 4c d6 51 83 fc ba 66 49 4f da 4a 4a 15 90 a1 25 d4 78 77 1d 80 03 dd 1d 74 97 13 e8 cb 90 e7 58 bc fb 71 eb 61 3d 95 f1 d0 66 b9 f9 2f a5 0e 59 cc 79 79 1f 63 2d 34 8f b4 5a 86 ea 01 3d bb 6f a8 f8 8e 2d e9 0f 91 2d ab a9 b1 58 d5 31 25 31 92 e0 6c a6 ce d2 53 c2 5d fc f7 dc 7b 20 42 90 b9 b6 1b f8 81 bb 09 4e a0 c7 85 e8 87 92 9d 9b 11 d9 7b 42 19 67 1c a3 a7 69 0d 28 29 79 30 6c 21 67 c3 ae db 9d ce 9c 31 3f 77 df 2c 77 a5 6b 42 4b 99 bf 16 84 38 97 17 be e9 ef cb 7a 21 3f 4f 8e df 9f 53 68 2d bf 77 a7 28 b0 89 56 2e b8 d7 9b 9a f1 7c 8f 96 90 86 fb 98 9a da d3 96 17 1b 8e 16 36 00 1e 9b f8 68 c6 b5 f4 13 cc 71 8a 08 02 44 4e 41 Data Ascii: *jH\puJ=m}szGXOLQfIOJJ%xwtXqa=f/Yyyc-4Z=o--X1%1lS]{ BN{Bgi()y0l!g1?w,wkBK8z!?OSh-w(V.\|6hqDNA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.22	49259	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:29 UTC	616	OUT	GET /assets/images/welcome/carousel/jul24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:30 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16659 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:29 GMT Etag: "16d53-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26E1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93523 Connection: close
2024-07-13 16:49:30 UTC	15278	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: e4 50 4d 57 52 e9 89 a1 27 9f 33 77 46 96 86 93 65 7f 94 61 1a 66 b7 db 52 8a ff 00 a9 16 76 03 0a ec 24 e3 40 e2 3c 2b 80 0e 26 e9 02 f1 37 cd 84 0c f1 bf a2 61 ea 6f 04 47 a1 d5 80 0b 76 4a c2 fd b7 76 86 d7 2b 91 7b 7a e7 c8 00 c4 da 3d 7b 7c fb 61 75 5e cd 5d 80 71 1e d8 8e 5f 5d 77 2b 17 e3 8c a9 9a a4 ad f5 63 35 22 27 c5 e8 8a 77 5f 9f 8a 4f e6 29 4c a8 b2 59 74 db 36 32 e2 99 81 73 0b e4 ce a9 4f 12 f4 55 8e 8a 49 12 56 90 03 5c 6a a6 2a 48 ec 09 5b 95 ac fb 11 76 71 4c 56 6e 01 d0 3d da d0 23 f6 17 0c fc a5 5d c0 a6 55 be e0 e1 ca 50 72 8b c9 d9 31 1d c2 ae fe a1 87 51 7a 86 45 8e 75 4a 56 95 44 ba df 5c b5 a7 c0 d0 a0 e5 e7 1d ce 4a d4 87 ff 00 d7 07 f4 00 f4 e7 cf c2 f8 7a 8c 26 be 93 21 d4 f3 4c 6f ad 67 ce 0f 6b cd 61 f7 83 67 13 34 fe d8 d9 Data Ascii: PMWR'3wFeafRv$@<+&7aoGvJv+{z={\|au^]q_]w+c5"'w_O)LYt62sOUIV\j*H[vqLVn=#]UPr1QzEuJVD\Jz&!Logkag4
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 00 6b 95 33 e9 53 4f b8 5f 36 20 1a 50 21 73 8f f0 b0 78 9c 7b 3b 69 cc fc 55 cc 10 39 a7 4e 03 51 0a 8a e0 0e ad 3d 0e 3d 2a 5d be d3 77 82 4b c6 b8 04 01 cd 2d c3 32 0f 1e 89 53 b5 97 65 c6 60 47 8b 23 d8 42 f7 2a 54 11 b9 cd 70 6b 00 28 c4 44 cb a9 ed af 32 62 88 a4 93 ac 00 79 27 5c bb 6a 5b a7 59 b7 c9 5c 31 07 b8 94 c3 9a 9c 2a de 29 e7 8e de 67 91 a5 84 a1 fe 32 e5 21 3a 60 7a 53 e4 6d f0 36 e7 22 d2 1d a8 71 c0 65 df 56 bb 79 71 2f 73 30 21 10 00 38 f1 f6 53 50 a8 3f 28 4f 0a c9 42 1f 9b 1a b6 d9 76 b7 b9 d2 bd f8 bc 0c 1a d0 a0 ea c8 80 39 f3 ad 93 60 b1 94 79 30 86 b1 e0 60 1e e4 f1 3c 81 86 a3 99 27 15 e3 56 d6 f0 37 5c d2 0c b3 53 c8 0e b4 f8 83 f5 4a d7 22 72 71 e0 7b 2b 75 b4 8e 5d 72 c3 18 71 78 e0 84 9c 4f ba 9b 15 db b4 ea c5 b8 7c 4d 27 Data Ascii: k3SO_6 P!sx{;iU9NQ==]wK-2Se`G#BTpk(D2by'\j[Y\1*)g2!:`zSm6"qeVyq/s0!8SP?(OBv9`y0`<'V7\SJ"rq{+u]rqxO\|M'
2024-07-13 16:49:30 UTC	1105	IN	Data Raw: 69 f9 d5 0d 48 e2 fc 1c 9f a2 56 15 8f cd f2 2f 71 cc 8a 9a ee dc 46 e9 2d e6 d0 85 41 c5 ba bc 2e c8 1f 7d 7e 2f 74 dc 0c 6e 8e 37 2b 5e 09 90 84 c1 9a b9 2e 47 b0 55 d5 d9 88 b3 5e ad 2b f1 04 e7 db c2 a4 ba b6 93 cc 91 31 0e e0 9c 07 75 4e c9 a3 2c 89 d2 62 3a 73 ee e3 52 11 21 10 30 60 10 92 bd 00 cd 39 54 b7 18 b6 30 a4 ea c0 e0 73 43 cf 85 4f b4 59 30 ac 64 23 d7 e2 2a a8 9f 67 a5 3d ef 71 2e 24 92 7b 71 c3 a0 a1 c3 1a ba db ee 51 b7 f0 b8 bb 51 c9 c0 e4 5a 06 3d d9 8a 75 98 f8 94 e3 8f c2 39 13 82 3b a6 3c e9 d7 13 5e c6 cb 1f 2c 03 0b f1 0f 7a 1c c6 65 a7 eb 01 81 e3 57 82 d8 25 ac 72 1d 3c c2 e2 83 82 0c 87 14 4e 35 78 d9 24 6b 2d a3 3a cc 8f 50 51 32 07 98 f6 01 8d 4c d8 66 0f d5 23 88 03 33 89 2a b9 7e bc e8 32 66 a2 0c 31 5f d1 3f 30 39 e5 fa Data Ascii: iHV/qF-A.}~/tn7+^.GU^+1uN,b:sR!0`9T0sCOY0d#g=q.${qQQZ=u9;<^,zeW%r<N5x$k-:PQ2Lf#3~2f1_?09
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 2f 34 c0 34 b5 a2 32 41 4d 21 02 21 42 bc 15 a2 8d d5 ae c5 75 26 de 31 2e 6c 6a 10 62 a0 02 55 3a 25 5e 1b 1b 69 62 b8 63 f3 7c 6e 88 92 06 23 49 c5 38 aa 25 5e d9 ef bb 23 ee 41 6e 81 21 7b 5c 8a 73 89 98 10 47 da 6d 49 7d 65 a2 4b 6f 0f 80 92 1c d0 99 02 0a 83 56 b2 99 ad ad 26 8c 78 63 8c 80 1d ec 29 a8 f1 e2 4e 78 d6 87 62 78 fe 43 52 a1 c5 29 e3 37 53 9c 51 06 38 aa 77 a6 3d b5 1e f7 bf db 87 18 cf 98 c2 d7 14 70 77 c2 d2 09 f1 0e 4b f0 e6 a6 8d 80 02 1d b8 0f 0b 5b 9e 9e 0d 2e 4c 40 cd 73 ad 7a 7c 47 3e 2b ed a7 69 88 61 8a 80 87 db 9d 35 97 2f 1e 4a a1 d4 14 01 cc e5 87 3c 69 cd b1 de 2c b4 e7 a4 9f 2c 77 10 a5 7b ea e2 0d eb 69 6d cc 52 44 44 4e 63 b5 06 39 a0 9d 51 86 b8 6a 27 eb 6a 5c 2b 70 f5 0c b6 05 f0 b6 73 e2 4c 19 d5 c7 52 0c 38 9a 6f 98 Data Ascii: /442AM!!Bu&1.ljbU:%^ibc\|n#I8%^#An!{\sGmI}eKoV&xc)NxbxCR)7SQ8w=pwK[.L@sz\|G>+ia5/J<i,,w{imRDDNc9Qj'j\+psLR8o
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 55 50 be fa 5b 29 43 f5 d0 36 7a b9 0d b1 ea e3 f8 b2 eb e4 ad 49 f4 d5 f0 41 f2 19 00 e2 5d 04 63 19 76 3b 37 17 f1 34 c5 36 e2 8a 1e 43 2c d8 ee ad 21 11 bc 4a 8a 9f 92 e2 48 4e 41 48 00 93 d7 b8 0e 26 a7 b3 a7 de aa b8 a6 ce c3 8d b9 52 05 bb 68 7f 54 ba 4f a0 d2 ad 69 c3 ae 2f 16 d4 a9 92 83 15 d9 4c 84 86 66 32 a2 85 65 b0 7a 7f 6c 15 0b d7 d1 23 8e 38 ca 23 14 6e c9 4c d5 d5 32 ec 4b a9 c9 88 25 a4 a8 4a 68 36 ea 14 87 33 f5 a0 a4 91 9f f2 55 a0 e7 0b 4a 92 71 f1 c2 81 07 1f 9f 7e 90 d4 88 c6 5c 76 52 a6 82 d8 56 64 b5 e9 2c b6 1a 53 4a fa 16 12 12 3e 07 3d 6f 3e 82 c3 81 1c 9f c4 65 c6 d4 30 e3 6a fe f6 c5 23 d6 65 7d d2 32 93 db bf 90 04 7c 3a 41 2d 34 10 12 0a 3f 86 08 c2 b0 48 03 1f 33 fb 3a 4a 84 54 a1 a0 33 e6 5b 48 c8 ff 00 98 08 1d cf 4d 84 Data Ascii: UP[)C6zIA]cv;746C,!JHNAH&RhTOi/Lf2ezl#8#nL2K%Jh63UJq~\vRVd,SJ>=o>e0j#e}2\|:A-4?H3:JT3[HM
2024-07-13 16:49:30 UTC	11608	IN	Data Raw: b3 6e a2 23 b0 a0 af 9c 39 21 d6 e3 bd 25 d9 6b 6c ad ea dc a0 49 79 28 79 d4 27 c7 09 52 c0 59 1f bc 01 cf f8 a7 00 8f a8 8c f8 f6 f2 27 1d bf e5 0e a2 f0 4e a2 b8 d2 e9 34 d9 0c 58 ef 73 3c 9c 53 33 36 ef 12 e4 0a 44 a1 a5 7a 6f 8d 75 85 fa d2 10 ac 04 c8 75 20 8c a3 a4 95 d8 33 04 03 f4 b7 0d af 47 3f 20 09 01 45 44 8f 97 4d 44 b7 bf 2c 32 94 48 53 4e cc 69 c9 08 4b a8 6c b8 d4 70 c8 5b 41 02 5b a0 20 ad 47 09 ce 4f 6e 8b f6 68 11 e3 38 85 23 d3 6c b7 f7 0e b8 85 14 95 a7 01 6d a5 92 47 d2 a0 4e 47 41 f8 8d be 1f 4f 6f 55 d9 0a 52 c9 c6 33 e2 90 96 d3 9f e7 ea 5e 56 b5 23 ec 93 e2 12 f2 da 52 f1 27 c9 49 f8 a5 45 2b 4a 08 07 38 3d 10 85 48 4b b8 52 d1 fc 57 d0 1b 75 c4 10 d8 51 0e 79 65 a0 9c 8c f6 39 e8 36 ec 87 5e 0d 65 28 53 a8 71 27 2b f1 53 8e a7 Data Ascii: n#9!%klIy(y'RY'N4Xs<S36Dzouu 3G? EDMD,2HSNiKlp[A[ GOnh8#lmGNGAOoUR3^V#R'IE+J8=HKRWuQye96^e(Sq'+S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.22	49260	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:29 UTC	390	OUT	GET /assets/images/welcome/featured/passport-holding-up.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:29 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16779 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:29 GMT Etag: "1b73a-61c36b8880e80" Last-Modified: Mon, 01 Jul 2024 22:00:10 GMT Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 112442 Connection: close
2024-07-13 16:49:29 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:29 UTC	16383	IN	Data Raw: 60 db b1 08 fa c7 e1 5f c9 ab 3d 81 e3 74 e1 7b fe 56 ab 70 3b 89 97 e9 2e 8a ba f0 fa 4d 25 f5 b9 af 64 ac f8 65 21 74 bb 5d 76 db a0 32 a1 69 f8 07 cf 85 12 2b 16 2c 53 83 31 3e 02 19 ab 31 e8 b2 99 da 45 a5 5d 94 c7 39 d6 33 8e d9 1c aa bd 95 2d 0a f3 5e 88 1d e5 fd 42 e4 75 26 0f 67 3a 32 b6 e6 05 a8 b5 8a 41 46 e2 68 44 02 0c 0a 13 56 c7 95 16 6a 65 3d b7 9e ce e5 ac b5 0e 61 01 e7 f4 84 bd d1 9e 96 da dd d6 e3 72 b5 5b ab 65 56 88 4c c3 ac c2 81 d9 c2 96 6a 98 de c8 26 34 24 32 9d f5 2c ba 65 67 76 71 2d c3 20 b3 2d de 71 6e f9 71 27 a6 c8 e8 06 77 a3 af 8b 20 56 5b 5c b6 a3 a7 fe 25 4e 77 11 91 63 1a 92 d5 c4 37 3a 92 d5 e0 e9 f3 99 9f 37 d2 31 fa 7a ca 14 8c 4b 3d 6d 2a ca b2 52 a3 13 3f 8f ef f9 ab ec be 8d df a6 ff 00 34 4f 82 6d d8 d7 72 e8 20 Data Ascii: `_=t{Vp;.M%de!t]v2i+,S1>1E]93-^Bu&g:2AFhDVje=ar[eVLj&4$2,egvq- -qnq'w V[\%Nwc7:71zK=m*R?4Omr
2024-07-13 16:49:29 UTC	1106	IN	Data Raw: 27 bc 00 d0 64 75 68 13 5b e9 c4 e7 ed b4 e1 84 f2 9c 49 21 cb bc 26 96 87 f2 39 a3 6d 55 94 0a 90 16 b8 10 e1 fd 19 c2 d5 d8 f9 23 69 4c 29 ae 44 77 22 32 a5 80 b5 ce 84 e5 91 38 16 f7 a6 12 ae 5c 65 58 ad dc 7d a9 5e a5 1d 78 dd 5e f9 39 13 5b fa 92 9e e5 68 01 2f b3 a8 10 54 6c 05 32 20 0b d8 1c 06 ac 09 88 e9 b0 74 91 cd ae 90 98 f6 97 7e 06 eb b6 3f 32 0c ca fc 42 2c 05 61 34 27 22 81 56 f5 ec 99 4d a7 7e 75 95 0d 68 f2 ab 3d 6d 22 ee 6c 0f c8 c2 01 47 11 71 30 60 48 08 51 94 c6 e5 7c 6a 28 82 11 84 e6 27 33 0a c8 c2 c8 53 cc a4 72 2d 29 d1 92 2b d7 c0 6b 40 f5 d5 ca 61 b3 38 ea f0 9c c5 85 1b 80 4e 6e 46 fa 7e f7 8f 43 d1 38 77 06 92 c3 fd 82 28 22 ab ce 61 7d 79 43 9a d7 26 bb a9 7e 0b c2 ef 0e 4e 8d 85 18 da d4 e7 00 a5 bd 1c 4b 69 68 cc 32 32 e4 Data Ascii: 'duh[I!&9mU#iL)Dw"28\eX}^x^9[h/Tl2 t~?2B,a4'"VM~uh=m"lGq0`HQ\|j('3Sr-)+k@a8NnF~C8w("a}yC&~NKih22
2024-07-13 16:49:29 UTC	16383	IN	Data Raw: bf 8c 67 b5 d0 bf a6 da cf c6 99 b7 68 11 6c 7e 57 5d d8 8f 81 ac 21 68 72 c6 c5 36 5a e9 13 dd d1 e7 ac ee e9 31 ee 3f 1e 07 c7 93 03 13 5b 8f 58 06 49 5a 56 f7 5a b3 ed de 02 74 88 1e 87 a2 db 8c 9f 64 d7 65 38 64 10 87 a3 bd 3d d4 52 18 eb 97 80 f4 d6 17 11 42 50 29 c9 24 25 9d ca 3c 94 1c b2 ad bf b5 8f 97 25 ce 24 41 68 4a b1 d7 19 57 f5 f1 dc 85 b0 ba bb b1 d8 ed 51 f9 75 b3 7b d7 e8 fa 63 a3 ab f7 08 ea 76 ab f1 bc 33 51 39 28 ce 00 8a cb 5e 8a ed 5d a0 23 d4 5c ac f8 a5 d5 97 19 94 b6 5e 64 6e c4 b1 e1 dd c1 ad 5d 0a 21 63 d0 33 b5 d5 ee 10 5b 2b 9c 1a 5c 5e c9 bb 1b b6 98 48 c8 34 4f 95 4f a3 70 54 b4 72 87 fc 6e 0a 8f 47 43 21 00 bb 2a 49 02 96 55 34 98 00 f7 12 d1 86 81 98 bd fd 60 1d 0a e3 b1 f7 58 9c f4 71 ea 0a 6a 77 b6 c1 b9 25 bd 1a 9a 72 Data Ascii: ghl~W]!hr6Z1?[XIZVZtde8d=RBP)$%<%$AhJWQu{cv3Q9(^]#\^dn]!c3[+\^H4OOpTrnGC!*IU4`Xqjw%r
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 2f c7 3b e3 d1 09 f6 1c 2f 8c 38 c7 a3 d3 98 59 c1 b8 e0 6b 38 de 95 ac 66 b6 af c6 ca 8c 00 44 10 1d 79 15 af d3 d1 71 29 b3 5e f6 c0 c5 06 ca 5b 16 24 e4 95 24 2d e5 7a e8 8b be a3 6b e0 7f 37 a9 60 91 14 bd cb 73 50 4b 1d 39 7e 39 2b c9 dc 39 75 79 67 d7 eb 2d c9 3c 2c 26 48 ee d2 6c cd e6 db 83 53 55 c2 b8 fc 72 39 b0 12 26 89 a1 d6 b5 f0 da af c9 b8 05 8f 1f 73 6a 55 2b fc 47 43 35 0a c6 11 29 b7 5b be 1f 25 68 a5 97 55 f5 ab 86 8e 3b e3 3a 95 e3 ac fa c1 cd 11 ec 67 80 79 a3 eb 9f 09 f3 46 bb ed 17 1b e5 1a 5d 9f 23 d2 ed ad 45 c6 78 b3 b9 1e c3 c9 7b ed 7f 2b fa 9c 2f fe b7 20 e1 9c 7a 7d b4 de 2e e1 18 d4 f3 58 b7 1a 65 e3 7e 53 b4 a7 b2 d8 79 2a 4d 66 b7 c6 fc fa a6 f1 af 96 39 e1 ff 00 15 56 69 a4 d4 d7 35 fe d0 78 29 de 40 d4 7d 61 f1 0f 20 e0 Data Ascii: /;/8Yk8fDyq)^[$$-zk7`sPK9~9+9uyg-<,&HlSUr9&sjU+GC5)[%hU;:gyF]#Ex{+/ z}.Xe~Sy*Mf9Vi5x)@}a
2024-07-13 16:49:30 UTC	3	IN	Data Raw: fe 57 35 Data Ascii: W5
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 1c 79 4c 2e 0f dc 69 b7 47 70 64 63 f6 12 4d 29 58 ad 6e bf 1a 2b b3 a1 d0 1a b5 bb de 9c db cc dd e9 c6 d3 d2 c0 52 3e d3 6b 80 2b 1e eb 66 40 2e 69 47 c2 a4 f1 a6 62 09 d6 f5 15 c7 6d 68 e9 51 1b 1d 4d ed 4a 36 e8 28 69 62 68 7c f5 a5 36 d3 c6 ad 7d 2a 56 2e 14 2a 93 7a 9b 03 0f 28 19 88 65 da a7 52 7a 54 b9 39 12 97 91 89 b9 27 45 1e 02 82 47 ad fa 91 52 45 8d 03 48 ce db 43 01 d0 7c eb 1e 5c 98 3d 49 45 8b c8 dd 01 3d 97 fd 75 0e c8 42 a1 00 e8 2a 19 11 2c aa 83 cd 4a 3c 05 0f d9 4d 59 a4 ff 00 71 b4 fb 2b 9a 6f 1c 93 44 f5 b6 bf 0a 23 76 db d0 2b dc f4 a5 00 6e 62 74 03 af 5a 7c bf 49 94 4b 22 6d 6e c0 2f 72 6a 07 c8 07 2a 67 0a 4a f5 15 1d f6 c2 a9 20 64 45 f8 78 d2 ba 8b 90 97 27 bd 61 71 ab 21 79 72 25 da a0 1e d7 ac 17 79 35 92 20 48 07 b9 ae 46 Data Ascii: yL.iGpdcM)Xn+R>k+f@.iGbmhQMJ6(ibh\|6}V.z(eRzT9'EGREHC\|\=IE=uB,J<MYq+oD#v+nbtZ\|IK"mn/rjgJ dEx'aq!yr%y5 HF
2024-07-13 16:49:30 UTC	16383	IN	Data Raw: 83 7b 5e f4 c1 62 97 d2 1a 33 c6 e0 96 f0 d7 c3 e0 6b 5f 4b c8 3a b5 c9 23 b6 d0 3c 3c 6b 45 4b 2e 8d b5 88 36 bd c0 3d ab 89 e2 32 24 8e 1c 4f cc 3e 07 91 e0 5d 5b 42 d9 58 e0 72 38 97 f8 93 0c a0 7c e8 53 f7 ac 8b 1f 01 7a 52 0d 80 f0 f0 a4 d7 cd 6f 31 15 f8 84 3e 9c 8e c2 28 24 b5 f6 c8 fa 29 3f eb ae 6f 91 c8 9c cf c9 f3 19 b3 e6 72 19 06 e5 de 59 4d 94 12 75 36 00 0b d4 7c fe 20 68 7f a6 b1 fc 33 0d 02 a9 61 b8 93 df 7e b5 ec 0e 56 67 de 8c 67 86 66 3e 19 10 3b a2 db b1 01 2b 3f 36 49 4f a3 c6 a6 51 c8 9c 5e e5 56 34 54 0a 3e 1b b4 b5 71 61 ed 09 94 ca ce 9b b7 30 dc ec e1 4f 7b b1 90 93 58 08 d2 81 07 1a 25 cf cf c7 20 16 79 76 94 80 20 3a 1d ac eb 7f 0a fc 6e a2 12 16 3c 7f 02 88 08 24 5b c4 92 6a c3 f5 f8 51 6b 0b 93 a5 1b b0 db fd bd 28 19 a6 58 Data Ascii: {^b3k_K:#<<kEK.6=2$O>][BXr8\|SzRo1>($)?orYMu6\| h3a~Vggf>;+?6IOQ^V4T>qa0O{X% yv :n<$[jQk(X
2024-07-13 16:49:30 UTC	14141	IN	Data Raw: 29 2d 44 8d a9 f8 cd 59 7a 6e 70 28 c7 72 b6 3e 5a 0c 1b 7e c3 67 43 d0 8a cc e5 b1 b1 21 e1 7d ee 70 a7 c7 c0 f7 04 51 80 e1 a6 8c a7 f1 94 5b d4 02 fa 5f a5 70 9c 74 fc 56 4c 6d c6 63 e0 e3 c1 c8 6c bc 73 4d 8d 88 8b 74 63 61 75 2a 6f 5e e5 30 f1 73 c7 8f 94 b0 7b a3 8c 8b 68 b6 d6 27 1f 39 7a f5 8c b9 b8 f8 56 57 37 ee 24 c9 e2 b8 1f 68 03 27 3b 95 19 41 93 ca 61 c7 8f ea c9 c7 e1 ef 3e 6c 94 8b 71 77 d4 47 0f 9d bc c1 03 7e 5e fe 6e 72 18 b8 71 e1 7b 13 1b 03 96 e5 f8 38 0f e2 8b 42 8b f8 6c 4e 3d 5e 42 d7 dc 7d 30 e5 ee 34 76 3a 8a 3c 5b 48 73 47 a9 91 8f 91 91 34 61 23 69 33 7c f2 ca b1 ea 5d a4 72 ac 5d ce b6 16 50 2c 29 9e 76 6c 8c 89 e4 06 79 a4 25 99 9b a5 c9 35 7d b6 28 00 06 da e8 29 c0 c7 69 60 67 50 5d 7c 0e 95 95 03 17 45 12 2e c2 d7 b6 d3 Data Ascii: )-DYznp(r>Z~gC!}pQ[_ptVLmclsMtcau*o^0s{h'9zVW7$h';Aa>lqwG~^nrq{8BlN=^B}04v:<[HsG4a#i3\|]r]P,)vly%5}()i`gP]\|E.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.22	49262	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:31 UTC	385	OUT	GET /assets/images/welcome/carousel/jul24-military.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:31 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16781 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:31 GMT Etag: "17c92-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26C9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 97426 Connection: close
2024-07-13 16:49:31 UTC	15278	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: b6 69 4a 71 b3 9b 16 ea 9d 67 8c e6 f2 97 ca 59 4d d5 2b 7a de eb d2 b3 33 6b d2 9e e2 d5 f1 1b 80 e3 26 c5 63 91 f3 fa 60 96 79 fa 38 e6 ba 0f 56 08 09 b1 07 dc 60 fb d3 52 ed 8b 10 9b 23 a4 f1 a2 5d dd c2 31 34 6e e3 6b 34 a7 5d ca 72 8f 4b de e2 f9 fd c9 9e 6f 86 c8 3b 07 7b 91 b3 6e c5 e6 cf ec 4b f2 bc cc 19 7a 4c e9 e5 5c aa 4a 0c d1 96 51 12 67 0c c6 4a 2e 78 ce 49 d1 76 17 3c 26 24 d8 ec f9 44 d9 4c fd 45 d9 ad 80 e4 36 73 3f f1 fd d0 6c 01 40 9b 53 b0 49 89 76 cb 3f 85 06 dd e7 f2 8e 41 c8 17 5e 4c b8 bc eb 9f 0e 3c 38 ae 2b 8f e1 90 40 0e 86 2a bd 1c b6 fd a6 bd 12 90 73 86 af 86 91 0b e2 19 76 4d ee bc 7d 3f 64 bc e3 cb 8e 3e ac 76 e1 40 c8 9b 3a f5 38 cc f7 18 ca e5 7c cf f1 17 07 30 71 30 32 4d 26 a2 20 e3 93 78 44 ce 89 52 6d d3 8c c0 3f 69 Data Ascii: iJqgYM+z3k&c`y8V`R#]14nk4]rKo;{nKzL\JQgJ.xIv<&$DLE6s?l@SIv?A^L<8+@*svM}?d>v@:8\|0q02M& xDRm?i
2024-07-13 16:49:31 UTC	1106	IN	Data Raw: 33 96 01 18 d3 20 15 75 12 a4 eb 62 2a 0d 0d 30 9d d0 7a 21 53 9b 4b db d4 48 61 9f a3 a3 27 24 1e d0 20 28 19 e2 f1 ad a2 0f 45 5e e7 51 93 51 24 f6 fb c1 50 01 51 45 55 19 7d d5 4e 22 21 f5 20 65 35 a5 3a 41 39 78 31 24 9f 84 4f c2 71 6e fb 3c 88 b3 2c a1 98 37 07 4d 2c 34 1c 89 00 92 0d 45 0d 54 0a d0 9c 6c c2 4b b4 7b 78 a1 d3 31 24 06 95 d8 50 be 4b 4e c1 01 80 1a 6b ad 87 40 c5 a0 bd 98 49 0f ab e9 72 1b 84 a1 98 ea 0b a4 56 a0 81 50 45 29 c3 19 60 53 1d aa 81 8d 23 14 19 8c 4d 77 7b 32 c5 69 1a 96 77 35 a2 a8 e2 4d 2a 68 3c 03 06 bc c5 11 f1 2c 87 f4 31 d9 dd 99 bc 50 cb fa b8 3f b4 dc b5 3a a1 7f 96 98 ec a5 eb 78 a1 03 ce f8 fa 3d ba f8 ff 00 16 31 e7 7c 51 36 4b b2 7c 26 21 fa 67 1d 9e 5d 9c f8 e5 8c 7c 87 1f 47 cb b4 f1 dc 0f 91 0e 29 16 c5 6e Data Ascii: 3 ub0z!SKHa'$ (E^QQ$PQEU}N"! e5:A9x1$Oqn<,7M,4ETlK{x1$PKNk@IrVPE)`S#Mw{2iw5Mh<,1P?:x=1\|Q6K\|&!g]\|G)n
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: ad 2b e8 91 c4 61 a9 74 75 e7 4e 39 f5 7d cf 4e 23 10 da 77 91 15 a9 39 d4 1c f2 a0 e2 29 81 df 5a 84 5a 75 9a 8f 21 1d 39 53 cb 5c 2f 75 23 21 24 0a a9 a1 a1 22 a2 be 1c 22 fa e4 94 d3 5c c2 37 49 1d 2a 7a b1 c9 ae c0 6a 37 57 20 d0 01 c6 d8 f4 0a 01 c3 a2 98 3f 6c 41 63 08 4d 44 3b 9d 65 82 95 8d 0b b0 25 41 60 4a a9 a5 01 35 a6 2d e4 b7 49 20 b7 68 2a 56 47 2c 5a 4a b6 6a 74 83 a3 20 28 68 7a f0 a7 bc 8b 49 19 8a 48 7f 81 1d 04 57 2c 8f 5e 23 f5 22 ba 00 ed 00 ac a2 a7 f1 a9 5f 27 0e bc 5d 4a b3 48 d0 31 7d 28 b2 69 60 0b d5 42 92 40 06 83 8f 45 69 5a 60 fa cd d3 f7 c1 f2 61 21 a6 96 60 58 50 9a 66 b5 02 be 8f dc d0 50 60 28 26 80 53 3e 3e 5f 0f bc b0 b1 5f 4a 69 91 3c 8c c2 bf 15 71 67 79 b0 dc 4b 13 3c c5 1b 5d d4 a8 34 d3 26 55 0d da ed 64 40 56 39 Data Ascii: +atuN9}N#w9)ZZu!9S\/u#!$""\7Izj7W ?lAcMD;e%A`J5-I hVG,ZJjt (hzIHW,^#"_']JH1}(i`B@EiZ`a!`XPfP`(&S>>__Ji<qgyK<]4&Ud@V9
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 45 4d 68 07 40 1d 03 ab dd 18 bf bd 6e 11 40 ef e0 aa a9 23 e3 a6 2f 6c f7 ab 48 e4 54 8b 5a 69 b6 89 f3 a8 1a 59 8a 50 10 2a 75 12 a3 2e 8c 6c e9 b6 14 7d dd 6e 04 92 2c 6c 1d 42 44 ae c7 5d 0b 26 a2 c1 54 08 ce 44 66 7a e5 6b 8e 6c b3 ee 9e 66 60 9a 25 a8 77 d0 59 18 e8 a1 d0 51 02 91 45 cb 32 6b 85 49 79 c2 d1 a7 2b 37 d2 34 72 e6 4c 42 36 70 74 50 08 c6 a6 24 1a 02 dc 72 18 17 6f cc 76 46 28 d5 3f a9 cc 28 7b bd 0a a5 b4 ea d2 ea fa a8 bd a7 24 67 c3 11 c0 dc d9 64 24 48 c4 55 31 4c 3d 06 2e 01 60 80 9d 24 ad 4d 73 d0 a1 cd 49 a9 63 cc 76 47 5a 38 65 29 30 ab 4e da 83 f6 12 b5 a1 55 14 cc 01 50 40 24 62 de 3b 6b f8 ee 51 50 29 74 56 45 a8 c8 f6 4a ae 7d 3d 91 a7 3c 8e 36 cd c6 64 2d 05 ad fd b4 ec a0 02 59 61 92 39 19 40 6e c9 25 54 80 1b b2 49 cf 2a Data Ascii: EMh@n@#/lHTZiYPu.l}n,lBD]&TDfzklf`%wYQE2kIy+74rLB6ptP$rovF(?({$gd$HU1L=.`$MsIcvGZ8e)0NUP@$b;kQP)tVEJ}=<6d-Ya9@n%TI
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: d0 7b 3f 68 bc 8e b1 37 66 66 e2 69 6a c8 85 ef 77 27 65 38 86 85 8a 66 f2 cc 63 70 b3 66 dd c2 b6 db ab 5d ca 6e 8c a8 0b b5 40 fc dc 1d db 9d c8 88 7b bf 7b 2f 60 6e d6 e7 32 38 c4 b5 b5 a7 76 db 6b 77 42 e5 b2 26 15 b4 a4 2c 96 6d 9f 59 12 96 6d b6 cc 91 d3 ac 16 ee 54 5e 04 09 22 91 5d ab de 9f 16 25 a5 67 44 31 65 77 ef 05 f3 6a 3d 72 e1 fd ee e7 77 ae 05 e6 36 ee 49 b1 2d 4b 73 6f da 4a db 11 51 de 2f 97 ad 90 45 b4 24 f5 e7 2a 49 0b 7a 1a 29 ca 72 8c 14 09 97 c9 09 53 12 1c 8a 17 bc 5f ef 93 29 ca 9a a2 04 30 19 64 ca a8 99 52 a6 a1 bd e2 81 bd e0 01 cf 3c 07 90 3f b2 01 82 fd 3f 77 f5 6f 30 7b 70 3e 4f ab 0a 0f d2 b9 53 d0 38 d9 2d e8 bf 23 e6 26 2e 7d 8b f9 bb ab 12 21 19 75 e3 ed 55 65 64 8c fd 34 e5 ee b8 b6 80 9a b7 42 d0 a5 90 5c 58 b5 72 a8 Data Ascii: {?h7ffijw'e8fcpf]n@{{/`n28vkwB&,mYmT^"]%gD1ewj=rw6I-KsoJQ/E$*Iz)rS_)0dR<??wo0{p>OS8-#&.}!uUed4B\Xr
2024-07-13 16:49:31 UTC	15510	IN	Data Raw: bf 1b eb 89 ec bb b5 0c 22 61 50 35 53 0b ef 26 d4 de bb b3 3d 78 8d 87 73 6d fc 59 6f 47 56 b2 b1 36 f3 0b b0 ac c9 29 37 0c d2 16 16 3c e9 cd a4 93 12 11 1d 66 32 24 28 98 04 a3 5c 47 c4 5a f2 97 4d 9c c5 ce d9 a7 b4 3b 90 78 4f 93 b8 93 de 5b 19 2b 8e 26 f1 2b 4b c6 62 65 94 8b f8 29 15 ae 78 54 55 70 b4 39 9a a6 b3 03 ab 1e 54 93 6e a5 4a ce d4 71 7c de a3 12 cf f1 f1 49 16 8b 2b 5d 0b 41 36 5b 97 79 44 df 77 65 b1 19 60 7c b5 4b 5e 07 6e 9d 4d 41 b5 22 76 e3 52 16 34 8d 4a a2 40 1a 15 39 71 78 6d 50 6e 0d f3 23 69 de b7 15 bf 73 c8 b8 95 65 68 ba b9 e3 64 2d e8 fb 6e 31 ba b0 17 19 61 52 79 17 20 44 ad 08 d5 63 e4 0a 1e 3a 11 cb 42 28 c5 44 87 16 f0 4a cd 5e 37 92 56 b5 c9 70 5d 11 cd ae 77 51 8e 10 94 91 bb 2e 23 dc d7 68 de 68 b6 60 83 7b c8 f7 4b Data Ascii: "aP5S&=xsmYoGV6)7<f2$(\GZM;xO[+&+Kbe)xTUp9TnJq\|I+]A6[yDwe`\|K^nMA"vR4J@9qxmPn#isehd-n1aRy Dc:B(DJ^7Vp]wQ.#hh`{K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.22	49261	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:31 UTC	618	OUT	GET /assets/images/welcome/carousel/jun24-gifts-2.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Not_A Brand";v="99", "Google Chrome";v="109", "Chromium";v="109" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:31 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 17301 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:31 GMT Etag: "1c3ee-61bcaff30dcc0" Last-Modified: Wed, 26 Jun 2024 13:28:59 GMT Server: ECAcc (dce/26C7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 115694 Connection: close
2024-07-13 16:49:31 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: d9 96 b6 c2 dd 6b 3d a5 8d 35 dc 76 0d f9 af 73 e4 16 a5 81 a9 ec 6f 6e 7a ed b0 55 f5 93 51 4d b6 0c 0c 17 2e a9 ac 19 9e fe 06 2c e3 01 cf 30 21 87 00 c8 b0 61 83 21 61 26 a1 50 57 06 11 00 5f 25 26 72 2c 08 02 ce 7c 67 99 2f dd 0a bc 67 d2 af 19 4e 8c 9c 7a 72 2c f8 e2 ef 39 4e fe 26 a4 12 89 32 85 2b 58 2b 05 3e f3 21 19 f0 7f dc 31 8c e7 84 80 81 e5 ba 03 3a 70 68 ae 68 6b 16 7a 85 f9 cf 5e a8 c3 ec 3d 8f b2 27 b3 95 0b 23 f9 e4 43 6f a6 10 d6 c6 1d bc 94 b4 35 8f 66 26 2a 91 bc 6d 7d 8f 26 25 c7 72 a6 cc 49 8c df 49 b0 22 d7 b5 ee f7 7e cc 63 53 29 a3 11 d1 cb 8c e1 33 a6 62 8f 3e 36 3b 2b 51 1b 0e 57 84 92 82 1c 19 9f 38 f8 c1 e3 d6 78 c0 42 75 5f e2 04 51 d8 31 c7 bd e2 61 68 9b 40 34 84 84 a0 bc a2 e9 d0 32 6d 1e a5 56 d2 db 26 eb a2 24 41 97 6c Data Ascii: k=5vsonzUQM.,0!a!a&PW_%&r,\|g/gNzr,9N&2+X+>!1:phhkz^='#Co5f&*m}&%rII"~cS)3b>6;+QW8xBu_Q1ah@42mV&$Al
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 12 33 af 56 18 8d de b0 4f 4e 40 40 36 d1 c8 83 30 c2 37 a3 16 03 cb 4a 25 af 6c 8b 9d a3 64 12 2b bc 09 39 9d e6 70 aa 19 a5 9e 54 07 cf a4 55 63 44 55 5f 22 00 2a 4e df b5 6e 9b 35 a2 d9 db 26 9a c4 86 39 25 35 a9 7b 89 75 16 95 cf 00 7c a1 57 ca a0 0c 47 da d1 68 8f b7 16 43 27 c3 a4 71 a2 17 65 d2 59 d9 14 49 21 d3 e5 1a dd 82 8c 94 0c 7f 4c b4 99 e2 db 2a 09 85 19 92 12 57 dd 2d 12 90 8c 57 f0 96 52 47 2a 61 03 20 21 78 0a 0a 0f 50 e5 ec c6 67 0d 38 85 cd b8 20 17 0a c5 01 39 00 58 0d 20 93 90 04 8c f1 19 7b c9 5f 78 63 5f 86 58 18 bf 4e a4 6b 59 35 68 6a 9d 34 e5 e6 20 90 57 3b dd ef 78 ba 83 69 8a 24 60 64 bc 96 05 8a 09 00 a2 34 b2 3b 08 68 49 04 c7 aa ac 2b 44 a8 c5 aa 4d be ed d3 19 ad 63 78 e3 86 48 9d e6 63 ef 5c 46 57 cc d0 48 33 89 23 d4 84 Data Ascii: 3VON@@607J%ld+9pTUcDU_"Nn5&9%5{u\|WGhC'qeYI!LW-WRG*a !xPg8 9X {_xc_XNkY5hj4 W;xi$`d4;hI+DMcxHc\FWH3#
2024-07-13 16:49:31 UTC	1109	IN	Data Raw: 24 2f 3d c3 54 d0 2c 63 aa e0 54 54 80 95 15 ae 37 14 da e6 79 36 b5 b8 95 60 77 1a 5e 48 16 46 58 64 65 fc 2d 24 61 5c af 15 2c 54 f0 fe ce b7 56 8d ac ad 29 e0 2b 5a fd 98 d6 6e 56 95 23 81 e2 0d 0d 72 c1 2b 30 a0 15 39 1f 67 d6 78 63 53 20 2e 09 e3 53 e1 41 96 5f bf 19 20 d6 00 a8 3e 9a 73 ae 74 f4 7f 1c 41 19 4a 44 48 cb db 4e 67 3f ae 98 2c 2d 14 81 f4 fb 69 c7 d7 e3 80 56 dd 75 92 39 57 89 35 a7 2e 79 f8 50 78 62 65 0a 00 0c 45 07 e9 44 74 d7 31 97 b7 87 b7 01 04 2c ac 9e f0 06 94 cb 8f a7 ee c0 2b 29 64 5c 8a fb b4 35 ad 0b 71 39 7a c8 e5 89 99 29 a4 29 a0 1f 67 1a 1f 46 5e bc 7c d3 33 a1 17 3f f6 40 9a 72 a3 d4 fa 3f c3 1f 32 59 59 9a 08 ae c2 ad 4f 05 54 03 4f a8 10 48 f5 e3 e6 3f 7c 3d c1 16 97 37 11 db 11 5c c7 c3 af 54 96 f5 ea 23 d4 31 dc 96 Data Ascii: $/=T,cTT7y6`w^HFXde-$a\,TV)+ZnV#r+09gxcS .SA_ >stAJDHNg?,-iVu9W5.yPxbeEDt1,+)d\5q9z))gF^\|3?@r?2YYOTOH?\|=7\T#1
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 88 f4 dc 2a 5d 69 c8 73 23 99 3e 8a f8 d7 d5 88 ac 66 5a 5f 48 ea b1 80 40 0f a8 80 3c c7 21 4a e7 aa 9e 8a e3 b5 a3 ef 68 ed e2 97 77 b2 37 10 ac 52 6b 2a 9c 0a cc 29 e4 71 51 42 09 56 cf 4b 12 08 1f 30 a5 0e 35 99 ed 56 a7 c4 06 e2 7c 31 f3 12 ea 22 cc a7 74 98 57 33 c2 46 07 d9 5e 1e 8c 77 2e fd de 9b e4 16 b3 ef 57 37 8f 61 14 8d 49 6e 64 6b 73 02 2c 71 0f 3d 04 82 85 c8 08 b9 12 d9 e2 1d c2 fa 49 1f b4 2f d0 45 b9 2e 92 ec 91 16 25 65 40 7d e9 20 27 58 55 20 3d 48 62 72 a5 ef 70 59 a0 1b 0d 9a 7c 25 9f 90 06 36 e8 49 13 48 68 19 9a 66 25 82 12 5a 25 3a 0d 00 c5 af 61 fc c9 d9 ef 77 0b 2b 1a 25 ad cd a1 56 90 c7 5a 8b 79 91 ca 21 54 fc 0c 18 1d 39 1f 1c 5d 45 1f ca ad da 4d b5 43 8b 77 92 ee 15 76 3a 0d 03 c6 ba 82 ab 35 06 4f 55 19 e6 71 b9 fc ee ed Data Ascii: ]is#>fZ_H@<!Jhw7Rk)qQBVK05V\|1"tW3F^w.W7aIndks,q=I/E.%e@} 'XU =HbrpY\|%6IHhf%Z%:aw+%VZy!T9]EMCwv:5OUq
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 36 3f fd 60 3f 40 7c 51 7e e9 66 60 e9 96 ac 63 be 6d b0 57 a2 b1 bc b9 cf f1 8f 95 59 69 f4 3d 22 d8 3f 26 62 d7 0f a9 df d2 91 e3 74 2d 88 5c f8 98 63 2e 36 d5 86 5d 79 07 2d 38 11 35 61 84 da dc 3c 13 3a 47 cc a4 fb 2a 3b 68 06 23 c7 df 1c 39 9e cc eb cb 8a ae 3f a6 bc e7 f8 7d 65 56 47 92 59 98 24 d7 1a 0e 9b 96 6b 20 13 ac f9 12 48 43 ff 00 fa 4b 59 1d 4e 1e 8e 75 64 f2 0e 7b a1 f7 97 ab e4 38 c7 41 cd f1 7a 1d 77 28 ad e5 1c 5a 98 5d 6d 26 9a e3 87 ba 37 34 8d 9f 6c 3a bd 94 59 e1 3b 27 91 5b 42 98 e5 1a c6 54 a3 a6 cd 45 f0 60 a2 14 d6 bd 66 6e a0 3e 89 43 86 59 f9 6e 73 96 13 a3 bb ae b5 db 0d 97 d1 87 5e da cb 9f 35 35 ec b0 9e b1 9d 0f c8 cc 9d 1c e4 da 06 54 c3 c3 9f af 7c 08 8c a7 29 ed 64 9e b8 ad c0 1a 5e c7 b5 a2 fe 57 65 76 5f 6d e4 41 e4 Data Ascii: 6?`?@\|Q~f`cmWYi="?&bt-\c.6]y-85a<:G*;h#9?}eVGY$k HCKYNud{8Azw(Z]m&74l:Y;'[BTE`fn>CYns^55T\|)d^Wev_mA
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 58 1b b6 da 59 4a dd 08 3c 2b 02 23 5a ae 30 51 6e ac 1a fd 09 8c 6f d9 92 68 52 06 aa 32 29 9f ea 2e 51 76 d6 bf 7b 61 d5 f9 2e 97 a3 14 29 2b 35 51 bb 9d 96 9c eb 5b d1 01 45 62 3a 50 73 c2 84 3d 74 72 a2 ab 65 70 ce 7b 7f 85 c9 ef e5 7f 53 90 d8 41 27 15 ab eb 56 b5 6e 92 65 63 a5 b4 97 9e d3 53 d7 44 3c 28 9e d3 4c b6 67 40 ad fa a2 a3 bd bd 76 0e 99 5d 0c 67 51 f0 fa bc 1d b7 45 59 be 52 15 20 7d 0f 45 3e 73 f7 18 13 fc 2e 8a b2 c9 3e f1 7f 2f af d9 97 e5 fd 8b eb 89 78 fa 76 b4 a9 32 dc 3b 98 9d 9d ab d0 10 22 91 55 cc b9 c5 6a 92 57 ee 66 8c 8f 63 2e b5 9a 8b 6f c4 aa 1a 59 5c 93 91 1b 62 89 15 23 81 51 7c 75 b0 26 37 88 87 74 d3 39 5e 8a 07 c8 b0 b6 31 b5 f1 5a 63 ec c6 9e 65 fa 23 22 b2 fb 4e 54 5f d5 58 9e bb 57 3c e6 57 0e a5 e9 da df 23 76 f9 Data Ascii: XYJ<+#Z0QnohR2).Qv{a.)+5Q[Eb:Ps=trep{SA'VnecSD<(Lg@v]gQEYR }E>s.>/xv2;"UjWfc.oY\b#Q\|u&7t9^1Zce#"NT_XW<W#v
2024-07-13 16:49:31 UTC	3	IN	Data Raw: c2 77 b4 Data Ascii: w
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: ad 30 a4 74 6d f7 93 e3 ee be fe b0 31 5e e2 06 e5 b9 96 73 d1 2a 24 c6 d3 68 8d b7 d4 69 69 a0 bd 29 e2 01 b5 d0 ba 1a fa ea 7a e4 9d cf 73 c1 07 dd 93 b9 7f ce 96 46 a7 b7 ad b6 fb 5f ad f1 c3 41 54 56 17 c8 1e 60 44 1c 7f 9f e8 79 cf 90 56 34 d4 19 d9 ff 00 79 06 b7 3a 44 83 50 eb 43 a6 cd fd b9 da 61 50 bc 63 91 a8 e1 a5 7a b9 53 d6 76 ab 29 d9 77 db 60 2b eb b5 56 f9 7c 6e fb 02 ec d5 ba 59 c7 97 1e 91 2e a6 b2 14 c2 ab 87 20 2c b8 4d 81 f1 a2 35 5d 1b 51 ad 44 fd 57 c6 88 97 ed fb ff 00 a7 22 4b ed 17 b7 db 46 13 67 66 43 51 9f 15 54 f6 6b 65 4f ed f7 ff 00 6f a6 bb 44 25 74 7a 4a 1b fb b8 68 05 75 e5 7d bd 8c 78 00 1a 2b 69 ed ea 05 8d e1 ca 25 51 21 22 48 78 51 c4 aa 39 ca ae 26 59 24 fb 4a 91 48 e4 8c c6 91 0b 65 64 ae 59 23 90 88 fe 6e 6b 67 82 Data Ascii: 0tm1^s*$hii)zsF_ATV`DyV4y:DPCaPczSv)w`+V\|nY. ,M5]QDW"KFgfCQTkeOoD%tzJhu}x+i%Q!"HxQ9&Y$JHedY#nkg
2024-07-13 16:49:31 UTC	1007	IN	Data Raw: 2c cc fb 50 7c a4 73 7b 57 3d ba 27 71 af e3 7d 83 69 bf dd 73 1d 46 bf 9a f6 c0 36 31 f6 62 8e 0e e2 af 9b e4 48 d1 38 aa 7e 69 85 15 d3 d8 40 50 e7 47 0d 29 af 81 ae 16 78 9a ff 00 83 cc 2a 6a c2 c6 d0 d1 f3 bc b5 71 15 f2 a2 36 47 d7 58 40 e2 97 e3 14 89 f6 e6 9e 0f 77 3a 37 22 ab 5c d7 2a 22 af f6 8f 5b 44 2b 9d 04 6f 7c 45 5b cb 3b c7 10 11 d5 cd 49 21 94 87 fb 44 f7 37 e2 8a 8c 85 15 e9 ec a9 f4 f7 f4 3d 91 0c 4d 1d fa cc d9 92 ce d0 76 ca 28 32 2b be 68 ca a0 26 f9 b2 14 6b dd f2 fb 92 7c a4 57 7d 7f 5f 50 3d d3 4a e7 39 58 aa aa f7 2a a2 a2 7f 6f ba fd 7e 89 ea 1f 69 5d f4 46 af b2 aa af ba a7 ea 9e de ff 00 a2 ff 00 6f a6 b9 cb fc 5e cd 55 fa 7b 27 d1 57 e9 ff 00 b7 d2 7f c9 3f f7 7f b2 a8 e6 a2 fb ff 00 7a 27 a5 55 8d a8 ab f4 fd 3d 2f ca 36 fd Data Ascii: ,P\|s{W='q}isF61bH8~i@PG)xjq6GX@w:7"\"[D+o\|E[;I!D7=Mv(2+h&k\|W}_P=J9X*o~i]Fo^U{'W?z'U=/6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.22	49263	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:31 UTC	382	OUT	GET /assets/images/welcome/carousel/jul24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:31 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 16661 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:31 GMT Etag: "16d53-61c36b42e2a40" Last-Modified: Mon, 01 Jul 2024 21:58:57 GMT Server: ECAcc (dce/26E1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93523 Connection: close
2024-07-13 16:49:31 UTC	15278	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: e4 50 4d 57 52 e9 89 a1 27 9f 33 77 46 96 86 93 65 7f 94 61 1a 66 b7 db 52 8a ff 00 a9 16 76 03 0a ec 24 e3 40 e2 3c 2b 80 0e 26 e9 02 f1 37 cd 84 0c f1 bf a2 61 ea 6f 04 47 a1 d5 80 0b 76 4a c2 fd b7 76 86 d7 2b 91 7b 7a e7 c8 00 c4 da 3d 7b 7c fb 61 75 5e cd 5d 80 71 1e d8 8e 5f 5d 77 2b 17 e3 8c a9 9a a4 ad f5 63 35 22 27 c5 e8 8a 77 5f 9f 8a 4f e6 29 4c a8 b2 59 74 db 36 32 e2 99 81 73 0b e4 ce a9 4f 12 f4 55 8e 8a 49 12 56 90 03 5c 6a a6 2a 48 ec 09 5b 95 ac fb 11 76 71 4c 56 6e 01 d0 3d da d0 23 f6 17 0c fc a5 5d c0 a6 55 be e0 e1 ca 50 72 8b c9 d9 31 1d c2 ae fe a1 87 51 7a 86 45 8e 75 4a 56 95 44 ba df 5c b5 a7 c0 d0 a0 e5 e7 1d ce 4a d4 87 ff 00 d7 07 f4 00 f4 e7 cf c2 f8 7a 8c 26 be 93 21 d4 f3 4c 6f ad 67 ce 0f 6b cd 61 f7 83 67 13 34 fe d8 d9 Data Ascii: PMWR'3wFeafRv$@<+&7aoGvJv+{z={\|au^]q_]w+c5"'w_O)LYt62sOUIV\j*H[vqLVn=#]UPr1QzEuJVD\Jz&!Logkag4
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 00 6b 95 33 e9 53 4f b8 5f 36 20 1a 50 21 73 8f f0 b0 78 9c 7b 3b 69 cc fc 55 cc 10 39 a7 4e 03 51 0a 8a e0 0e ad 3d 0e 3d 2a 5d be d3 77 82 4b c6 b8 04 01 cd 2d c3 32 0f 1e 89 53 b5 97 65 c6 60 47 8b 23 d8 42 f7 2a 54 11 b9 cd 70 6b 00 28 c4 44 cb a9 ed af 32 62 88 a4 93 ac 00 79 27 5c bb 6a 5b a7 59 b7 c9 5c 31 07 b8 94 c3 9a 9c 2a de 29 e7 8e de 67 91 a5 84 a1 fe 32 e5 21 3a 60 7a 53 e4 6d f0 36 e7 22 d2 1d a8 71 c0 65 df 56 bb 79 71 2f 73 30 21 10 00 38 f1 f6 53 50 a8 3f 28 4f 0a c9 42 1f 9b 1a b6 d9 76 b7 b9 d2 bd f8 bc 0c 1a d0 a0 ea c8 80 39 f3 ad 93 60 b1 94 79 30 86 b1 e0 60 1e e4 f1 3c 81 86 a3 99 27 15 e3 56 d6 f0 37 5c d2 0c b3 53 c8 0e b4 f8 83 f5 4a d7 22 72 71 e0 7b 2b 75 b4 8e 5d 72 c3 18 71 78 e0 84 9c 4f ba 9b 15 db b4 ea c5 b8 7c 4d 27 Data Ascii: k3SO_6 P!sx{;iU9NQ==]wK-2Se`G#BTpk(D2by'\j[Y\1*)g2!:`zSm6"qeVyq/s0!8SP?(OBv9`y0`<'V7\SJ"rq{+u]rqxO\|M'
2024-07-13 16:49:31 UTC	1105	IN	Data Raw: 69 f9 d5 0d 48 e2 fc 1c 9f a2 56 15 8f cd f2 2f 71 cc 8a 9a ee dc 46 e9 2d e6 d0 85 41 c5 ba bc 2e c8 1f 7d 7e 2f 74 dc 0c 6e 8e 37 2b 5e 09 90 84 c1 9a b9 2e 47 b0 55 d5 d9 88 b3 5e ad 2b f1 04 e7 db c2 a4 ba b6 93 cc 91 31 0e e0 9c 07 75 4e c9 a3 2c 89 d2 62 3a 73 ee e3 52 11 21 10 30 60 10 92 bd 00 cd 39 54 b7 18 b6 30 a4 ea c0 e0 73 43 cf 85 4f b4 59 30 ac 64 23 d7 e2 2a a8 9f 67 a5 3d ef 71 2e 24 92 7b 71 c3 a0 a1 c3 1a ba db ee 51 b7 f0 b8 bb 51 c9 c0 e4 5a 06 3d d9 8a 75 98 f8 94 e3 8f c2 39 13 82 3b a6 3c e9 d7 13 5e c6 cb 1f 2c 03 0b f1 0f 7a 1c c6 65 a7 eb 01 81 e3 57 82 d8 25 ac 72 1d 3c c2 e2 83 82 0c 87 14 4e 35 78 d9 24 6b 2d a3 3a cc 8f 50 51 32 07 98 f6 01 8d 4c d8 66 0f d5 23 88 03 33 89 2a b9 7e bc e8 32 66 a2 0c 31 5f d1 3f 30 39 e5 fa Data Ascii: iHV/qF-A.}~/tn7+^.GU^+1uN,b:sR!0`9T0sCOY0d#g=q.${qQQZ=u9;<^,zeW%r<N5x$k-:PQ2Lf#3~2f1_?09
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 2f 34 c0 34 b5 a2 32 41 4d 21 02 21 42 bc 15 a2 8d d5 ae c5 75 26 de 31 2e 6c 6a 10 62 a0 02 55 3a 25 5e 1b 1b 69 62 b8 63 f3 7c 6e 88 92 06 23 49 c5 38 aa 25 5e d9 ef bb 23 ee 41 6e 81 21 7b 5c 8a 73 89 98 10 47 da 6d 49 7d 65 a2 4b 6f 0f 80 92 1c d0 99 02 0a 83 56 b2 99 ad ad 26 8c 78 63 8c 80 1d ec 29 a8 f1 e2 4e 78 d6 87 62 78 fe 43 52 a1 c5 29 e3 37 53 9c 51 06 38 aa 77 a6 3d b5 1e f7 bf db 87 18 cf 98 c2 d7 14 70 77 c2 d2 09 f1 0e 4b f0 e6 a6 8d 80 02 1d b8 0f 0b 5b 9e 9e 0d 2e 4c 40 cd 73 ad 7a 7c 47 3e 2b ed a7 69 88 61 8a 80 87 db 9d 35 97 2f 1e 4a a1 d4 14 01 cc e5 87 3c 69 cd b1 de 2c b4 e7 a4 9f 2c 77 10 a5 7b ea e2 0d eb 69 6d cc 52 44 44 4e 63 b5 06 39 a0 9d 51 86 b8 6a 27 eb 6a 5c 2b 70 f5 0c b6 05 f0 b6 73 e2 4c 19 d5 c7 52 0c 38 9a 6f 98 Data Ascii: /442AM!!Bu&1.ljbU:%^ibc\|n#I8%^#An!{\sGmI}eKoV&xc)NxbxCR)7SQ8w=pwK[.L@sz\|G>+ia5/J<i,,w{imRDDNc9Qj'j\+psLR8o
2024-07-13 16:49:31 UTC	16383	IN	Data Raw: 55 50 be fa 5b 29 43 f5 d0 36 7a b9 0d b1 ea e3 f8 b2 eb e4 ad 49 f4 d5 f0 41 f2 19 00 e2 5d 04 63 19 76 3b 37 17 f1 34 c5 36 e2 8a 1e 43 2c d8 ee ad 21 11 bc 4a 8a 9f 92 e2 48 4e 41 48 00 93 d7 b8 0e 26 a7 b3 a7 de aa b8 a6 ce c3 8d b9 52 05 bb 68 7f 54 ba 4f a0 d2 ad 69 c3 ae 2f 16 d4 a9 92 83 15 d9 4c 84 86 66 32 a2 85 65 b0 7a 7f 6c 15 0b d7 d1 23 8e 38 ca 23 14 6e c9 4c d5 d5 32 ec 4b a9 c9 88 25 a4 a8 4a 68 36 ea 14 87 33 f5 a0 a4 91 9f f2 55 a0 e7 0b 4a 92 71 f1 c2 81 07 1f 9f 7e 90 d4 88 c6 5c 76 52 a6 82 d8 56 64 b5 e9 2c b6 1a 53 4a fa 16 12 12 3e 07 3d 6f 3e 82 c3 81 1c 9f c4 65 c6 d4 30 e3 6a fe f6 c5 23 d6 65 7d d2 32 93 db bf 90 04 7c 3a 41 2d 34 10 12 0a 3f 86 08 c2 b0 48 03 1f 33 fb 3a 4a 84 54 a1 a0 33 e6 5b 48 c8 ff 00 98 08 1d cf 4d 84 Data Ascii: UP[)C6zIA]cv;746C,!JHNAH&RhTOi/Lf2ezl#8#nL2K%Jh63UJq~\vRVd,SJ>=o>e0j#e}2\|:A-4?H3:JT3[HM
2024-07-13 16:49:31 UTC	11608	IN	Data Raw: b3 6e a2 23 b0 a0 af 9c 39 21 d6 e3 bd 25 d9 6b 6c ad ea dc a0 49 79 28 79 d4 27 c7 09 52 c0 59 1f bc 01 cf f8 a7 00 8f a8 8c f8 f6 f2 27 1d bf e5 0e a2 f0 4e a2 b8 d2 e9 34 d9 0c 58 ef 73 3c 9c 53 33 36 ef 12 e4 0a 44 a1 a5 7a 6f 8d 75 85 fa d2 10 ac 04 c8 75 20 8c a3 a4 95 d8 33 04 03 f4 b7 0d af 47 3f 20 09 01 45 44 8f 97 4d 44 b7 bf 2c 32 94 48 53 4e cc 69 c9 08 4b a8 6c b8 d4 70 c8 5b 41 02 5b a0 20 ad 47 09 ce 4f 6e 8b f6 68 11 e3 38 85 23 d3 6c b7 f7 0e b8 85 14 95 a7 01 6d a5 92 47 d2 a0 4e 47 41 f8 8d be 1f 4f 6f 55 d9 0a 52 c9 c6 33 e2 90 96 d3 9f e7 ea 5e 56 b5 23 ec 93 e2 12 f2 da 52 f1 27 c9 49 f8 a5 45 2b 4a 08 07 38 3d 10 85 48 4b b8 52 d1 fc 57 d0 1b 75 c4 10 d8 51 0e 79 65 a0 9c 8c f6 39 e8 36 ec 87 5e 0d 65 28 53 a8 71 27 2b f1 53 8e a7 Data Ascii: n#9!%klIy(y'RY'N4Xs<S36Dzouu 3G? EDMD,2HSNiKlp[A[ GOnh8#lmGNGAOoUR3^V#R'IE+J8=HKRWuQye96^e(Sq'+S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.22	49264	192.229.221.165	443	772	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-13 16:49:32 UTC	384	OUT	GET /assets/images/welcome/carousel/jun24-gifts-2.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-13 16:49:33 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 17303 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Sat, 13 Jul 2024 16:49:33 GMT Etag: "1c3ee-61bcaff30dcc0" Last-Modified: Wed, 26 Jun 2024 13:28:59 GMT Server: ECAcc (dce/26C7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 115694 Connection: close
2024-07-13 16:49:33 UTC	15277	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: d9 96 b6 c2 dd 6b 3d a5 8d 35 dc 76 0d f9 af 73 e4 16 a5 81 a9 ec 6f 6e 7a ed b0 55 f5 93 51 4d b6 0c 0c 17 2e a9 ac 19 9e fe 06 2c e3 01 cf 30 21 87 00 c8 b0 61 83 21 61 26 a1 50 57 06 11 00 5f 25 26 72 2c 08 02 ce 7c 67 99 2f dd 0a bc 67 d2 af 19 4e 8c 9c 7a 72 2c f8 e2 ef 39 4e fe 26 a4 12 89 32 85 2b 58 2b 05 3e f3 21 19 f0 7f dc 31 8c e7 84 80 81 e5 ba 03 3a 70 68 ae 68 6b 16 7a 85 f9 cf 5e a8 c3 ec 3d 8f b2 27 b3 95 0b 23 f9 e4 43 6f a6 10 d6 c6 1d bc 94 b4 35 8f 66 26 2a 91 bc 6d 7d 8f 26 25 c7 72 a6 cc 49 8c df 49 b0 22 d7 b5 ee f7 7e cc 63 53 29 a3 11 d1 cb 8c e1 33 a6 62 8f 3e 36 3b 2b 51 1b 0e 57 84 92 82 1c 19 9f 38 f8 c1 e3 d6 78 c0 42 75 5f e2 04 51 d8 31 c7 bd e2 61 68 9b 40 34 84 84 a0 bc a2 e9 d0 32 6d 1e a5 56 d2 db 26 eb a2 24 41 97 6c Data Ascii: k=5vsonzUQM.,0!a!a&PW_%&r,\|g/gNzr,9N&2+X+>!1:phhkz^='#Co5f&*m}&%rII"~cS)3b>6;+QW8xBu_Q1ah@42mV&$Al
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: 12 33 af 56 18 8d de b0 4f 4e 40 40 36 d1 c8 83 30 c2 37 a3 16 03 cb 4a 25 af 6c 8b 9d a3 64 12 2b bc 09 39 9d e6 70 aa 19 a5 9e 54 07 cf a4 55 63 44 55 5f 22 00 2a 4e df b5 6e 9b 35 a2 d9 db 26 9a c4 86 39 25 35 a9 7b 89 75 16 95 cf 00 7c a1 57 ca a0 0c 47 da d1 68 8f b7 16 43 27 c3 a4 71 a2 17 65 d2 59 d9 14 49 21 d3 e5 1a dd 82 8c 94 0c 7f 4c b4 99 e2 db 2a 09 85 19 92 12 57 dd 2d 12 90 8c 57 f0 96 52 47 2a 61 03 20 21 78 0a 0a 0f 50 e5 ec c6 67 0d 38 85 cd b8 20 17 0a c5 01 39 00 58 0d 20 93 90 04 8c f1 19 7b c9 5f 78 63 5f 86 58 18 bf 4e a4 6b 59 35 68 6a 9d 34 e5 e6 20 90 57 3b dd ef 78 ba 83 69 8a 24 60 64 bc 96 05 8a 09 00 a2 34 b2 3b 08 68 49 04 c7 aa ac 2b 44 a8 c5 aa 4d be ed d3 19 ad 63 78 e3 86 48 9d e6 63 ef 5c 46 57 cc d0 48 33 89 23 d4 84 Data Ascii: 3VON@@607J%ld+9pTUcDU_"Nn5&9%5{u\|WGhC'qeYI!LW-WRG*a !xPg8 9X {_xc_XNkY5hj4 W;xi$`d4;hI+DMcxHc\FWH3#
2024-07-13 16:49:33 UTC	1109	IN	Data Raw: 24 2f 3d c3 54 d0 2c 63 aa e0 54 54 80 95 15 ae 37 14 da e6 79 36 b5 b8 95 60 77 1a 5e 48 16 46 58 64 65 fc 2d 24 61 5c af 15 2c 54 f0 fe ce b7 56 8d ac ad 29 e0 2b 5a fd 98 d6 6e 56 95 23 81 e2 0d 0d 72 c1 2b 30 a0 15 39 1f 67 d6 78 63 53 20 2e 09 e3 53 e1 41 96 5f bf 19 20 d6 00 a8 3e 9a 73 ae 74 f4 7f 1c 41 19 4a 44 48 cb db 4e 67 3f ae 98 2c 2d 14 81 f4 fb 69 c7 d7 e3 80 56 dd 75 92 39 57 89 35 a7 2e 79 f8 50 78 62 65 0a 00 0c 45 07 e9 44 74 d7 31 97 b7 87 b7 01 04 2c ac 9e f0 06 94 cb 8f a7 ee c0 2b 29 64 5c 8a fb b4 35 ad 0b 71 39 7a c8 e5 89 99 29 a4 29 a0 1f 67 1a 1f 46 5e bc 7c d3 33 a1 17 3f f6 40 9a 72 a3 d4 fa 3f c3 1f 32 59 59 9a 08 ae c2 ad 4f 05 54 03 4f a8 10 48 f5 e3 e6 3f 7c 3d c1 16 97 37 11 db 11 5c c7 c3 af 54 96 f5 ea 23 d4 31 dc 96 Data Ascii: $/=T,cTT7y6`w^HFXde-$a\,TV)+ZnV#r+09gxcS .SA_ >stAJDHNg?,-iVu9W5.yPxbeEDt1,+)d\5q9z))gF^\|3?@r?2YYOTOH?\|=7\T#1
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: 88 f4 dc 2a 5d 69 c8 73 23 99 3e 8a f8 d7 d5 88 ac 66 5a 5f 48 ea b1 80 40 0f a8 80 3c c7 21 4a e7 aa 9e 8a e3 b5 a3 ef 68 ed e2 97 77 b2 37 10 ac 52 6b 2a 9c 0a cc 29 e4 71 51 42 09 56 cf 4b 12 08 1f 30 a5 0e 35 99 ed 56 a7 c4 06 e2 7c 31 f3 12 ea 22 cc a7 74 98 57 33 c2 46 07 d9 5e 1e 8c 77 2e fd de 9b e4 16 b3 ef 57 37 8f 61 14 8d 49 6e 64 6b 73 02 2c 71 0f 3d 04 82 85 c8 08 b9 12 d9 e2 1d c2 fa 49 1f b4 2f d0 45 b9 2e 92 ec 91 16 25 65 40 7d e9 20 27 58 55 20 3d 48 62 72 a5 ef 70 59 a0 1b 0d 9a 7c 25 9f 90 06 36 e8 49 13 48 68 19 9a 66 25 82 12 5a 25 3a 0d 00 c5 af 61 fc c9 d9 ef 77 0b 2b 1a 25 ad cd a1 56 90 c7 5a 8b 79 91 ca 21 54 fc 0c 18 1d 39 1f 1c 5d 45 1f ca ad da 4d b5 43 8b 77 92 ee 15 76 3a 0d 03 c6 ba 82 ab 35 06 4f 55 19 e6 71 b9 fc ee ed Data Ascii: ]is#>fZ_H@<!Jhw7Rk)qQBVK05V\|1"tW3F^w.W7aIndks,q=I/E.%e@} 'XU =HbrpY\|%6IHhf%Z%:aw+%VZy!T9]EMCwv:5OUq
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: 36 3f fd 60 3f 40 7c 51 7e e9 66 60 e9 96 ac 63 be 6d b0 57 a2 b1 bc b9 cf f1 8f 95 59 69 f4 3d 22 d8 3f 26 62 d7 0f a9 df d2 91 e3 74 2d 88 5c f8 98 63 2e 36 d5 86 5d 79 07 2d 38 11 35 61 84 da dc 3c 13 3a 47 cc a4 fb 2a 3b 68 06 23 c7 df 1c 39 9e cc eb cb 8a ae 3f a6 bc e7 f8 7d 65 56 47 92 59 98 24 d7 1a 0e 9b 96 6b 20 13 ac f9 12 48 43 ff 00 fa 4b 59 1d 4e 1e 8e 75 64 f2 0e 7b a1 f7 97 ab e4 38 c7 41 cd f1 7a 1d 77 28 ad e5 1c 5a 98 5d 6d 26 9a e3 87 ba 37 34 8d 9f 6c 3a bd 94 59 e1 3b 27 91 5b 42 98 e5 1a c6 54 a3 a6 cd 45 f0 60 a2 14 d6 bd 66 6e a0 3e 89 43 86 59 f9 6e 73 96 13 a3 bb ae b5 db 0d 97 d1 87 5e da cb 9f 35 35 ec b0 9e b1 9d 0f c8 cc 9d 1c e4 da 06 54 c3 c3 9f af 7c 08 8c a7 29 ed 64 9e b8 ad c0 1a 5e c7 b5 a2 fe 57 65 76 5f 6d e4 41 e4 Data Ascii: 6?`?@\|Q~f`cmWYi="?&bt-\c.6]y-85a<:G*;h#9?}eVGY$k HCKYNud{8Azw(Z]m&74l:Y;'[BTE`fn>CYns^55T\|)d^Wev_mA
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: 58 1b b6 da 59 4a dd 08 3c 2b 02 23 5a ae 30 51 6e ac 1a fd 09 8c 6f d9 92 68 52 06 aa 32 29 9f ea 2e 51 76 d6 bf 7b 61 d5 f9 2e 97 a3 14 29 2b 35 51 bb 9d 96 9c eb 5b d1 01 45 62 3a 50 73 c2 84 3d 74 72 a2 ab 65 70 ce 7b 7f 85 c9 ef e5 7f 53 90 d8 41 27 15 ab eb 56 b5 6e 92 65 63 a5 b4 97 9e d3 53 d7 44 3c 28 9e d3 4c b6 67 40 ad fa a2 a3 bd bd 76 0e 99 5d 0c 67 51 f0 fa bc 1d b7 45 59 be 52 15 20 7d 0f 45 3e 73 f7 18 13 fc 2e 8a b2 c9 3e f1 7f 2f af d9 97 e5 fd 8b eb 89 78 fa 76 b4 a9 32 dc 3b 98 9d 9d ab d0 10 22 91 55 cc b9 c5 6a 92 57 ee 66 8c 8f 63 2e b5 9a 8b 6f c4 aa 1a 59 5c 93 91 1b 62 89 15 23 81 51 7c 75 b0 26 37 88 87 74 d3 39 5e 8a 07 c8 b0 b6 31 b5 f1 5a 63 ec c6 9e 65 fa 23 22 b2 fb 4e 54 5f d5 58 9e bb 57 3c e6 57 0e a5 e9 da df 23 76 f9 Data Ascii: XYJ<+#Z0QnohR2).Qv{a.)+5Q[Eb:Ps=trep{SA'VnecSD<(Lg@v]gQEYR }E>s.>/xv2;"UjWfc.oY\b#Q\|u&7t9^1Zce#"NT_XW<W#v
2024-07-13 16:49:33 UTC	16383	IN	Data Raw: c2 77 b4 ad 30 a4 74 6d f7 93 e3 ee be fe b0 31 5e e2 06 e5 b9 96 73 d1 2a 24 c6 d3 68 8d b7 d4 69 69 a0 bd 29 e2 01 b5 d0 ba 1a fa ea 7a e4 9d cf 73 c1 07 dd 93 b9 7f ce 96 46 a7 b7 ad b6 fb 5f ad f1 c3 41 54 56 17 c8 1e 60 44 1c 7f 9f e8 79 cf 90 56 34 d4 19 d9 ff 00 79 06 b7 3a 44 83 50 eb 43 a6 cd fd b9 da 61 50 bc 63 91 a8 e1 a5 7a b9 53 d6 76 ab 29 d9 77 db 60 2b eb b5 56 f9 7c 6e fb 02 ec d5 ba 59 c7 97 1e 91 2e a6 b2 14 c2 ab 87 20 2c b8 4d 81 f1 a2 35 5d 1b 51 ad 44 fd 57 c6 88 97 ed fb ff 00 a7 22 4b ed 17 b7 db 46 13 67 66 43 51 9f 15 54 f6 6b 65 4f ed f7 ff 00 6f a6 bb 44 25 74 7a 4a 1b fb b8 68 05 75 e5 7d bd 8c 78 00 1a 2b 69 ed ea 05 8d e1 ca 25 51 21 22 48 78 51 c4 aa 39 ca ae 26 59 24 fb 4a 91 48 e4 8c c6 91 0b 65 64 ae 59 23 90 88 fe 6e Data Ascii: w0tm1^s*$hii)zsF_ATV`DyV4y:DPCaPczSv)w`+V\|nY. ,M5]QDW"KFgfCQTkeOoD%tzJhu}x+i%Q!"HxQ9&Y$JHedY#n
2024-07-13 16:49:33 UTC	1010	IN	Data Raw: b3 fb 44 2c cc fb 50 7c a4 73 7b 57 3d ba 27 71 af e3 7d 83 69 bf dd 73 1d 46 bf 9a f6 c0 36 31 f6 62 8e 0e e2 af 9b e4 48 d1 38 aa 7e 69 85 15 d3 d8 40 50 e7 47 0d 29 af 81 ae 16 78 9a ff 00 83 cc 2a 6a c2 c6 d0 d1 f3 bc b5 71 15 f2 a2 36 47 d7 58 40 e2 97 e3 14 89 f6 e6 9e 0f 77 3a 37 22 ab 5c d7 2a 22 af f6 8f 5b 44 2b 9d 04 6f 7c 45 5b cb 3b c7 10 11 d5 cd 49 21 94 87 fb 44 f7 37 e2 8a 8c 85 15 e9 ec a9 f4 f7 f4 3d 91 0c 4d 1d fa cc d9 92 ce d0 76 ca 28 32 2b be 68 ca a0 26 f9 b2 14 6b dd f2 fb 92 7c a4 57 7d 7f 5f 50 3d d3 4a e7 39 58 aa aa f7 2a a2 a2 7f 6f ba fd 7e 89 ea 1f 69 5d f4 46 af b2 aa af ba a7 ea 9e de ff 00 a2 ff 00 6f a6 b9 cb fc 5e cd 55 fa 7b 27 d1 57 e9 ff 00 b7 d2 7f c9 3f f7 7f b2 a8 e6 a2 fb ff 00 7a 27 a5 55 8d a8 ab f4 fd 3d 2f Data Ascii: D,P\|s{W='q}isF61bH8~i@PG)xjq6GX@w:7"\"[D+o\|E[;I!D7=Mv(2+h&k\|W}_P=J9X*o~i]Fo^U{'W?z'U=/

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2092, Parent PID: 1996

General

Target ID:	0
Start time:	12:48:44
Start date:	13/07/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 772, Parent PID: 2092

General

Target ID:	1
Start time:	12:48:44
Start date:	13/07/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1284,i,10142771693170950199,13626922270362870422,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1276, Parent PID: 1996

General

Target ID:	4
Start time:	12:48:49
Start date:	13/07/2024
Path:	C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" "https://uspsdirect.one?t=guoi"
Imagebase:	0x13f6d0000
File size:	3'151'128 bytes
MD5 hash:	FFA2B8E17F645BCC20F0E0201FEF83ED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://uspsdirect.one?t=guoi

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Windows Analysis Report
https://uspsdirect.one?t=guoi