Edit tour

Windows Analysis Report
https://transportationjjxztpro.top/i/

Overview

General Information

Sample URL:	https://transportationjjxztpro.top/i/
Analysis ID:	1487414
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

HTML page contains obfuscated javascript

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6112 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 --field-trial-handle=2368,i,9255005853206975490,462870916386519080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://transportationjjxztpro.top/i/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 216.58.212.168 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:52:58.662193+0200
SID:	2012510
Source Port:	443
Destination Port:	50046
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 216.58.212.168 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:53:02.835828+0200
SID:	2012510
Source Port:	443
Destination Port:	50100
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 47.89.150.26 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:52:33.281819+0200
SID:	2012510
Source Port:	443
Destination Port:	49730
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 192.229.221.165 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:53:34.171922+0200
SID:	2012510
Source Port:	443
Destination Port:	50318
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 192.229.221.165 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:53:34.171686+0200
SID:	2012510
Source Port:	443
Destination Port:	50318
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 47.89.150.26 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:52:28.802224+0200
SID:	2012510
Source Port:	443
Destination Port:	49709
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 192.229.221.165 - Destination IP: 192.168.2.5

Timestamp:	2024-08-04T00:53:34.175165+0200
SID:	2012510
Source Port:	443
Destination Port:	50318
Protocol:	TCP
Classtype:	Potentially Bad Traffic

HTTP traffic detected: POST /api/MC4wNzAxMjk1MDE3MzM2NjA1 HTTP/1.1Host: transportationjjxztpro.topConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://transportationjjxztpro.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://transportationjjxztpro.top/i/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://transportationjjxztpro.top/i/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://transportationjjxztpro.top/i/	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSg58&sid=zH3Klqve3upAeZoCAenO	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMl&sid=O9q6tNIRUArBK3PlAemw	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/986ebc6cTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/a66896d0TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSa_m	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=websocket&sid=fH-aUTLA_M0JaCunAenF	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXfg&sid=MplM459k1jMubZLBAem5	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/09bf01f8KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSkRG&sid=sSnKh6KlIuXWH-X4Aenf	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/layout/images/63.png	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/index-4b020bd6.js	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMi&sid=O9q6tNIRUArBK3PlAemw	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/f2e2ef63TeKnX.woff	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/layout/images/23.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QShM6	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/893b5448TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSfYi&sid=zH3Klqve3upAeZoCAenO	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVge&sid=O9q6tNIRUArBK3PlAemw	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXLa	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoG&sid=s_NtJkFidN5QjYhPAenT	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSW85&sid=2XSmFe-ajKk0ZmoDAemz	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/c97621ecTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/i/assets/8c84efd0TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoC&sid=s_NtJkFidN5QjYhPAenT	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSYhx&sid=SGW9dVtsT8KzFfA-Aem8	Avira URL Cloud: Label: phishing
Source: https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSlZ5&sid=CU-HjLowu9K5SvEYAeni	Avira URL Cloud: Label: phishing

Source: https://transportationjjxztpro.top/i/	HTTP Parser: No favicon
Source: https://transportationjjxztpro.top/i/	HTTP Parser: No favicon
Source: https://transportationjjxztpro.top/i/	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://www.usps.com/help/contact-us.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49725 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: transportationjjxztpro.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tools.usps.com
Source: global traffic	DNS traffic detected: DNS query: js.arcgis.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: informeddelivery.usps.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 22:52:34 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 22:52:41 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 --field-trial-handle=2368,i,9255005853206975490,462870916386519080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://transportationjjxztpro.top/i/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2444 --field-trial-handle=2368,i,9255005853206975490,462870916386519080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_424.2.dr	String found in binary or memory: <a href="https://www.facebook.com/USPS?rf=108501355848630" target="_blank" tabindex="0"> equals www.facebook.com (Facebook)
Source: chromecache_424.2.dr	String found in binary or memory: <a href="https://www.youtube.com/usps" target="_blank" tabindex="0" class="social-youtube"> equals www.youtube.com (Youtube)
Source: chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_307.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.com (Facebook)
Source: chromecache_307.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.com (Twitter)
Source: chromecache_307.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.com (Youtube)
Source: chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_245.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.c
Source: chromecache_245.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.co
Source: chromecache_245.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.co
Source: chromecache_463.2.dr, chromecache_629.2.dr, chromecache_343.2.dr, chromecache_520.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},fk:function(){e=Cb()},pd:function(){d()}}};var lc=ja(["data-gtm-yt-inspected-"]),oC=["www.youtube.com","www.youtube-nocookie.com"],pC,qC=!1; equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr, chromecache_629.2.dr, chromecache_343.2.dr, chromecache_520.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Zg:e,Xg:f,Yg:g,Oh:k,Ph:m,Ce:n,Bb:b},q=H.YT;if(q)return q.ready&&q.ready(d),b;var r=H.onYouTubeIframeAPIReady;H.onYouTubeIframeAPIReady=function(){r&&r();d()};J(function(){for(var t=I.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(zC(w,"iframe_api")\|\|zC(w,"player_api"))return b}for(var x=I.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!qC&&xC(x[B],p.Ce))return Dc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_384.2.dr, chromecache_531.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src="https://www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_284.2.dr, chromecache_359.2.dr, chromecache_627.2.dr, chromecache_492.2.dr, chromecache_338.2.dr, chromecache_647.2.dr, chromecache_304.2.dr, chromecache_537.2.dr	String found in binary or memory: return b}mC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),oC=["www.youtube.com","www.youtube-nocookie.com"],pC,qC=!1; equals www.youtube.com (Youtube)
Source: chromecache_627.2.dr, chromecache_338.2.dr	String found in binary or memory: var BB=function(a,b,c,d,e){var f=wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?wz("fsl","nv.ids",[]):wz("fsl","ids",[]);if(!g.length)return!0;var k=Bz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if(m==="https://www.facebook.com/tr/")return P(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ky(k,ly(b, equals www.facebook.com (Facebook)

Source: chromecache_381.2.dr, chromecache_456.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/.
Source: chromecache_597.2.dr, chromecache_673.2.dr, chromecache_536.2.dr, chromecache_339.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_445.2.dr, chromecache_481.2.dr	String found in binary or memory: http://malsup.com/jquery/block/
Source: chromecache_389.2.dr	String found in binary or memory: http://maps.apple.com/?q=
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_471.2.dr, chromecache_618.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_245.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con
Source: chromecache_439.2.dr, chromecache_578.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_445.2.dr, chromecache_481.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_445.2.dr, chromecache_481.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: http://www.pinterest.com/uspsstamps/
Source: chromecache_265.2.dr, chromecache_497.2.dr, chromecache_424.2.dr, chromecache_470.2.dr, chromecache_244.2.dr, chromecache_670.2.dr, chromecache_271.2.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/careers/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/newsroom/
Source: chromecache_307.2.dr	String found in binary or memory: https://about.usps.com/newsroom/events/
Source: chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/resources/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/what/government-services/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/accessibility-statement/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/fair-chance-act/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/foia/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/no-fear-act/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/privacy-policy/
Source: chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	String found in binary or memory: https://about.usps.com/who/legal/terms-of-use.htm
Source: chromecache_520.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_444.2.dr, chromecache_652.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://arcg.is/1OzLe50
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:ChartedTerritory:Base
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:ColoredPencil
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Community
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:DarkGray:Base
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:DarkGray:Labels
Source: chromecache_686.2.dr, chromecache_457.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeography:Base

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://transportationjjxztpro.top/i/	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/i/	17%	Virustotal		Browse
https://transportationjjxztpro.top/i/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/zone/	0%	URL Reputation	safe
http://malsup.com/jquery/block/	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/min-max/	0%	URL Reputation	safe
https://www.youtube.com/usps	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSg58&sid=zH3Klqve3upAeZoCAenO	100%	Avira URL Cloud	phishing
https://www.usps.com/test/nav/images/business.svg	0%	Avira URL Cloud	safe
https://www.usps.com/international/go-now.png	0%	Avira URL Cloud	safe
https://cns.usps.com/?_gl=1	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMl&sid=O9q6tNIRUArBK3PlAemw	100%	Avira URL Cloud	phishing
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	0%	Avira URL Cloud	safe
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/change_address.svg	0%	Avira URL Cloud	safe
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/assets/986ebc6cTeKnX.svg	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/i/assets/a66896d0TeKnX.svg	100%	Avira URL Cloud	phishing
https://store.usps.com/store	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/printcustomsforms.svg	0%	Avira URL Cloud	safe
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	0%	Avira URL Cloud	safe
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSa_m	100%	Avira URL Cloud	phishing
http://github.com/jrburke/requirejs	0%	Avira URL Cloud	safe
https://reg.usps.com/entreg/assets/css/vendor/bootstrap/3.4.1/theme.css	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=websocket&sid=fH-aUTLA_M0JaCunAenF	100%	Avira URL Cloud	phishing
https://faq.usps.com/s/article/Find-USPS-Locations	0%	Avira URL Cloud	safe
https://tools.usps.com/locations/styles/po-locator.css	0%	Avira URL Cloud	safe
https://www.usps.com/business/manage-mail.htm	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXfg&sid=MplM459k1jMubZLBAem5	100%	Avira URL Cloud	phishing
https://www.usps.com/international/	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/assets/09bf01f8KXMp5.js	100%	Avira URL Cloud	phishing
https://postalpro.usps.com	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/script/	0%	Avira URL Cloud	safe
https://informeddelivery.usps.com/box/pages/intro/start.action	0%	Avira URL Cloud	safe
https://emailus.usps.com/s/	0%	Avira URL Cloud	safe
https://tools.usps.com/rcas.htm?locationId=	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSkRG&sid=sSnKh6KlIuXWH-X4Aenf	100%	Avira URL Cloud	phishing
https://www.usps.com/ship/insurance-extra-services.htm	0%	Avira URL Cloud	safe
https://reg.usps.com/preferences	0%	Avira URL Cloud	safe
https://www.usps.com/shop/money-orders.htm	0%	Avira URL Cloud	safe
https://www.usps.com/business/verify-postage.htm	0%	Avira URL Cloud	safe
http://creativecommons.org/licenses/by/3.0/.	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/layout/images/63.png	100%	Avira URL Cloud	phishing
https://basemaps3d.arcgis.com/arcgis/rest/services/OpenStreetMap3D_DarkLabels_v1/SceneServer	0%	Avira URL Cloud	safe
https://tools.usps.com/global-elements/header/script/header-init-search.js	0%	Avira URL Cloud	safe
https://about.usps.com/what/government-services/	0%	Avira URL Cloud	safe
https://www.usps.com/assets/css/bootstrap-custom.css	0%	Avira URL Cloud	safe
https://www.arcgis.com/sharing/rest/content/items/1e7d1784d1ef4b79ba6764d0bd6c3150/resources/styles/	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/assets/index-4b020bd6.js	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMi&sid=O9q6tNIRUArBK3PlAemw	100%	Avira URL Cloud	phishing
https://www.usps.com/assets/images/home/free_boxes.svg	0%	Avira URL Cloud	safe
https://www.usps.com/favicon.ico	0%	Avira URL Cloud	safe
https://store.usps.com/store/cards-envelopes	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	0%	Avira URL Cloud	safe
https://utility.arcgis.com/sharing/rss	0%	Avira URL Cloud	safe
https://www.usps.com/manage/go-now.png	0%	Avira URL Cloud	safe
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	0%	Avira URL Cloud	safe
https://about.usps.com/who/legal/terms-of-use.htm	0%	Avira URL Cloud	safe
https://www.usps.com/assets/script/home/megamenu-additions.js	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png	0%	Avira URL Cloud	safe
https://retail-pi.usps.com/retailpi/actions/index.action	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/holdmail.svg	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/assets/f2e2ef63TeKnX.woff	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/i/layout/images/23.svg	100%	Avira URL Cloud	phishing
https://store.usps.com/store/stamps	0%	Avira URL Cloud	safe
https://postcalc.usps.com/?country=10440	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QShM6	100%	Avira URL Cloud	phishing
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	0%	Avira URL Cloud	safe
https://www.usps.com/business/label-broker.htm	0%	Avira URL Cloud	safe
https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Nova	0%	Avira URL Cloud	safe
https://www.usps.com/international/letters.htm	0%	Avira URL Cloud	safe
https://ibasemaps-api.arcgis.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer	0%	Avira URL Cloud	safe
https://www.usps.com/international/first-class-package-international-service.htm	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/i/assets/893b5448TeKnX.svg	100%	Avira URL Cloud	phishing
https://reg.usps.com/entreg/assets/images/footer/footer-logo.png	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSfYi&sid=zH3Klqve3upAeZoCAenO	100%	Avira URL Cloud	phishing
https://cfo.usps.com/cfo-web/labelInformation.html	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVge&sid=O9q6tNIRUArBK3PlAemw	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXLa	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoG&sid=s_NtJkFidN5QjYhPAenT	100%	Avira URL Cloud	phishing
https://informeddelivery.usps.com/	0%	Avira URL Cloud	safe
https://www.usps.com/	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSW85&sid=2XSmFe-ajKk0ZmoDAemz	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/i/assets/c97621ecTeKnX.svg	100%	Avira URL Cloud	phishing
https://transportationjjxztpro.top/i/assets/8c84efd0TeKnX.svg	100%	Avira URL Cloud	phishing
https://gateway.usps.com/	0%	Avira URL Cloud	safe
https://tools.usps.com/locations/scripts/po-locator.js	0%	Avira URL Cloud	safe
https://cdn.arcgis.com/sharing/rest/content/items/220936cc6ed342c9937abd8f180e7d1e/resources/styles/	0%	Avira URL Cloud	safe
https://www.uspsoig.gov	0%	Avira URL Cloud	safe
https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoC&sid=s_NtJkFidN5QjYhPAenT	100%	Avira URL Cloud	phishing
https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js	0%	Avira URL Cloud	safe
https://tools.usps.com/locations/images/prepare-mail-icon.svg	0%	Avira URL Cloud	safe
https://postcalc.usps.com/business	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSYhx&sid=SGW9dVtsT8KzFfA-Aem8	100%	Avira URL Cloud	phishing
https://www.usps.com/assets/images/home/utility_customer_service.png	0%	Avira URL Cloud	safe
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSlZ5&sid=CU-HjLowu9K5SvEYAeni	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
cs1799.wpc.upsiloncdn.net	192.229.221.165	true	false	unknown
transportationjjxztpro.top	47.89.150.26	true	false	unknown
fast.fonts.net	104.16.40.28	true	false	unknown
js.arcgis.com	18.66.218.27	true	false	unknown
d27f3qgc9anoq2.cloudfront.net	13.32.27.113	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	unknown
stats.g.doubleclick.net	173.194.76.154	true	false	unknown
www.googleoptimize.com	142.250.184.238	true	false	unknown
informeddelivery.usps.com	152.195.33.23	true	false	unknown
reg.usps.com	unknown	unknown	false	unknown
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	unknown
dap.digitalgov.gov	unknown	unknown	false	unknown
www.usps.com	unknown	unknown	false	unknown
tools.usps.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSg58&sid=zH3Klqve3upAeZoCAenO	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/test/nav/images/business.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/go-now.png	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMl&sid=O9q6tNIRUArBK3PlAemw	false	Avira URL Cloud: phishing	unknown
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/i/assets/a66896d0TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/change_address.svg	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/i/assets/986ebc6cTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/printcustomsforms.svg	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSa_m	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	false	Avira URL Cloud: safe	unknown
https://reg.usps.com/entreg/assets/css/vendor/bootstrap/3.4.1/theme.css	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=websocket&sid=fH-aUTLA_M0JaCunAenF	false	Avira URL Cloud: phishing	unknown
https://tools.usps.com/locations/styles/po-locator.css	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXfg&sid=MplM459k1jMubZLBAem5	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/i/assets/09bf01f8KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informeddelivery.usps.com/box/pages/intro/start.action	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSkRG&sid=sSnKh6KlIuXWH-X4Aenf	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/i/layout/images/63.png	true	Avira URL Cloud: phishing	unknown
https://tools.usps.com/global-elements/header/script/header-init-search.js	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/css/bootstrap-custom.css	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/i/assets/index-4b020bd6.js	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/free_boxes.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVMi&sid=O9q6tNIRUArBK3PlAemw	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/go-now.png	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png	false	Avira URL Cloud: safe	unknown
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/i/assets/f2e2ef63TeKnX.woff	true	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/i/layout/images/23.svg	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QShM6	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	false	Avira URL Cloud: safe	unknown
https://reg.usps.com/entreg/assets/images/footer/footer-logo.png	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/i/assets/893b5448TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSfYi&sid=zH3Klqve3upAeZoCAenO	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSXLa	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSVge&sid=O9q6tNIRUArBK3PlAemw	false	Avira URL Cloud: phishing	unknown
https://informeddelivery.usps.com/	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoG&sid=s_NtJkFidN5QjYhPAenT	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/i/assets/c97621ecTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSW85&sid=2XSmFe-ajKk0ZmoDAemz	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/i/assets/8c84efd0TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://tools.usps.com/locations/scripts/po-locator.js	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSgoC&sid=s_NtJkFidN5QjYhPAenT	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/locations/images/prepare-mail-icon.svg	false	Avira URL Cloud: safe	unknown
https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=https://www.usps.com/	false		unknown
https://www.usps.com/assets/images/home/utility_customer_service.png	false	Avira URL Cloud: safe	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSYhx&sid=SGW9dVtsT8KzFfA-Aem8	false	Avira URL Cloud: phishing	unknown
https://transportationjjxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QSlZ5&sid=CU-HjLowu9K5SvEYAeni	false	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://cns.usps.com/?_gl=1	chromecache_240.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	chromecache_439.2.dr, chromecache_578.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_444.2.dr, chromecache_652.2.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/jrburke/requirejs	chromecache_597.2.dr, chromecache_673.2.dr, chromecache_536.2.dr, chromecache_339.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_445.2.dr, chromecache_481.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_575.2.dr, chromecache_290.2.dr, chromecache_264.2.dr, chromecache_460.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	chromecache_686.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://faq.usps.com/s/article/Find-USPS-Locations	chromecache_240.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/manage-mail.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://postalpro.usps.com	chromecache_424.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/	chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/script/	chromecache_259.2.dr, chromecache_649.2.dr, chromecache_486.2.dr, chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/rcas.htm?locationId=	chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://emailus.usps.com/s/	chromecache_307.2.dr	false	Avira URL Cloud: safe	unknown
https://reg.usps.com/preferences	chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/shop/money-orders.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/verify-postage.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/licenses/by/3.0/.	chromecache_381.2.dr, chromecache_456.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_439.2.dr, chromecache_578.2.dr	false	URL Reputation: safe	unknown
https://basemaps3d.arcgis.com/arcgis/rest/services/OpenStreetMap3D_DarkLabels_v1/SceneServer	chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/what/government-services/	chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/cards-envelopes	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.arcgis.com/sharing/rest/content/items/1e7d1784d1ef4b79ba6764d0bd6c3150/resources/styles/	chromecache_686.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://utility.arcgis.com/sharing/rss	chromecache_686.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_240.2.dr, chromecache_424.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
http://malsup.com/jquery/block/	chromecache_445.2.dr, chromecache_481.2.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store/stamps	chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://postcalc.usps.com/?country=10440	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Nova	chromecache_686.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://ibasemaps-api.arcgis.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer	chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/label-broker.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/letters.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_578.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/	chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://gateway.usps.com/	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.arcgis.com/sharing/rest/content/items/220936cc6ed342c9937abd8f180e7d1e/resources/styles/	chromecache_686.2.dr, chromecache_457.2.dr	false	Avira URL Cloud: safe	unknown
https://www.uspsoig.gov	chromecache_424.2.dr	false	Avira URL Cloud: safe	unknown
https://postcalc.usps.com/business	chromecache_240.2.dr, chromecache_307.2.dr, chromecache_245.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.76.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.138.26.18	unknown	United States	16509	AMAZON-02US	false
18.66.218.27	js.arcgis.com	United States	3	MIT-GATEWAYSUS	false
152.195.33.23	informeddelivery.usps.com	United States	15133	EDGECASTUS	false
47.89.150.26	transportationjjxztpro.top	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
3.162.38.80	unknown	United States	16509	AMAZON-02US	false
13.32.27.113	d27f3qgc9anoq2.cloudfront.net	United States	7018	ATT-INTERNET4US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
142.250.184.238	www.googleoptimize.com	United States	15169	GOOGLEUS	false
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487414
Start date and time:	2024-08-04 00:51:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://transportationjjxztpro.top/i/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@20/748@45/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://tools.usps.com/find-location.htm Browse: https://www.usps.com/help/contact-us.htm Browse: https://informeddelivery.usps.com/ Browse: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=https://www.usps.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:52:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981726540763866
Encrypted:	false
SSDEEP:	48:8ZFdxT5hRHiidAKZdA19ehwiZUklqehZy+3:8ZZr+Oy
MD5:	F3E12F540F9F24D1C79D99F4C0CE7864
SHA1:	D4A33458A74AC8303D1776E5697F8A61AB7C45B3
SHA-256:	604973BBE369BBB273E1EDFA4B8A386C858F1D1E122675E7F79915AC74F2AEAB
SHA-512:	E5B7537355EDAC68E4C5CEA075E570FFD9521E38DFAC1547AE8DDC03EFE426585C7D1FA78C949F38CB6E88AD026967C1E4C56C0C39B6516B55D34F95F04B7C96
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....gW......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............A.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-04T00:52:58.662193+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50046	216.58.212.168	192.168.2.5
2024-08-04T00:53:02.835828+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50100	216.58.212.168	192.168.2.5
2024-08-04T00:52:33.281819+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49730	47.89.150.26	192.168.2.5
2024-08-04T00:53:34.171922+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50318	192.229.221.165	192.168.2.5
2024-08-04T00:53:34.171686+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50318	192.229.221.165	192.168.2.5
2024-08-04T00:52:28.802224+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49709	47.89.150.26	192.168.2.5
2024-08-04T00:53:34.175165+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50318	192.229.221.165	192.168.2.5

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://transportationjjxztpro.top/i/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Windows Analysis Report
https://transportationjjxztpro.top/i/

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 4, 2024 00:52:26.463517904 CEST	192.168.2.5	1.1.1.1	0x677c	Standard query (0)	transportationjjxztpro.top	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:26.464850903 CEST	192.168.2.5	1.1.1.1	0xb3f4	Standard query (0)	transportationjjxztpro.top	65	IN (0x0001)	false
Aug 4, 2024 00:52:29.541323900 CEST	192.168.2.5	1.1.1.1	0xfe8d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:29.541474104 CEST	192.168.2.5	1.1.1.1	0xd32e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:31.852813005 CEST	192.168.2.5	1.1.1.1	0x5bdf	Standard query (0)	transportationjjxztpro.top	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:31.853249073 CEST	192.168.2.5	1.1.1.1	0x3cba	Standard query (0)	transportationjjxztpro.top	65	IN (0x0001)	false
Aug 4, 2024 00:52:47.412014008 CEST	192.168.2.5	1.1.1.1	0x857b	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:47.412451029 CEST	192.168.2.5	1.1.1.1	0x2d6e	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:49.598671913 CEST	192.168.2.5	1.1.1.1	0xfaae	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.598814964 CEST	192.168.2.5	1.1.1.1	0x5c99	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:49.600406885 CEST	192.168.2.5	1.1.1.1	0xbbb3	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.600545883 CEST	192.168.2.5	1.1.1.1	0xda8e	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:51.031848907 CEST	192.168.2.5	1.1.1.1	0x1911	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:51.031987906 CEST	192.168.2.5	1.1.1.1	0x1547	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:51.096045017 CEST	192.168.2.5	1.1.1.1	0x1ec4	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:51.096177101 CEST	192.168.2.5	1.1.1.1	0x7ef1	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:53.080513954 CEST	192.168.2.5	1.1.1.1	0x446d	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:53.080513954 CEST	192.168.2.5	1.1.1.1	0x6968	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Aug 4, 2024 00:52:56.738639116 CEST	192.168.2.5	1.1.1.1	0xeff4	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:56.741509914 CEST	192.168.2.5	1.1.1.1	0x8378	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Aug 4, 2024 00:52:58.137367010 CEST	192.168.2.5	1.1.1.1	0x4794	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:58.137532949 CEST	192.168.2.5	1.1.1.1	0x3589	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Aug 4, 2024 00:53:00.057291985 CEST	192.168.2.5	1.1.1.1	0x15ec	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.057619095 CEST	192.168.2.5	1.1.1.1	0x44a4	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Aug 4, 2024 00:53:00.058042049 CEST	192.168.2.5	1.1.1.1	0x8a0e	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.058710098 CEST	192.168.2.5	1.1.1.1	0x3749	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:01.278000116 CEST	192.168.2.5	1.1.1.1	0x4a79	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.278351068 CEST	192.168.2.5	1.1.1.1	0xeb13	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 4, 2024 00:53:01.467730999 CEST	192.168.2.5	1.1.1.1	0xe4f1	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.469033003 CEST	192.168.2.5	1.1.1.1	0x41aa	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Aug 4, 2024 00:53:03.833046913 CEST	192.168.2.5	1.1.1.1	0xcfd	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:03.833211899 CEST	192.168.2.5	1.1.1.1	0x4e91	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:03.851413965 CEST	192.168.2.5	1.1.1.1	0xac38	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:03.851557970 CEST	192.168.2.5	1.1.1.1	0x79c8	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 4, 2024 00:53:07.044131041 CEST	192.168.2.5	1.1.1.1	0x337f	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:07.044487000 CEST	192.168.2.5	1.1.1.1	0x1dee	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:08.335084915 CEST	192.168.2.5	1.1.1.1	0xa517	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:08.335084915 CEST	192.168.2.5	1.1.1.1	0xeccc	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:19.400285959 CEST	192.168.2.5	1.1.1.1	0x379d	Standard query (0)	informeddelivery.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:19.400445938 CEST	192.168.2.5	1.1.1.1	0x4220	Standard query (0)	informeddelivery.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:31.401245117 CEST	192.168.2.5	1.1.1.1	0xf132	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:31.401487112 CEST	192.168.2.5	1.1.1.1	0x100a	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Aug 4, 2024 00:53:32.423474073 CEST	192.168.2.5	1.1.1.1	0x3212	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:37.278445005 CEST	192.168.2.5	1.1.1.1	0x27eb	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:37.278564930 CEST	192.168.2.5	1.1.1.1	0xd4cf	Standard query (0)	reg.usps.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 4, 2024 00:52:27.379880905 CEST	1.1.1.1	192.168.2.5	0x677c	No error (0)	transportationjjxztpro.top		47.89.150.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:29.547933102 CEST	1.1.1.1	192.168.2.5	0xfe8d	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:29.548383951 CEST	1.1.1.1	192.168.2.5	0xd32e	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 4, 2024 00:52:32.297620058 CEST	1.1.1.1	192.168.2.5	0x5bdf	No error (0)	transportationjjxztpro.top		47.89.150.26	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:40.614787102 CEST	1.1.1.1	192.168.2.5	0xc633	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:42.116012096 CEST	1.1.1.1	192.168.2.5	0xe310	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:42.116012096 CEST	1.1.1.1	192.168.2.5	0xe310	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:47.537229061 CEST	1.1.1.1	192.168.2.5	0x857b	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:47.537229061 CEST	1.1.1.1	192.168.2.5	0x857b	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:47.582078934 CEST	1.1.1.1	192.168.2.5	0x2d6e	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:49.612036943 CEST	1.1.1.1	192.168.2.5	0xfaae	No error (0)	js.arcgis.com		18.66.218.27	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.612036943 CEST	1.1.1.1	192.168.2.5	0xfaae	No error (0)	js.arcgis.com		18.66.218.74	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.612036943 CEST	1.1.1.1	192.168.2.5	0xfaae	No error (0)	js.arcgis.com		18.66.218.47	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.612036943 CEST	1.1.1.1	192.168.2.5	0xfaae	No error (0)	js.arcgis.com		18.66.218.37	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.732502937 CEST	1.1.1.1	192.168.2.5	0xbbb3	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:49.732502937 CEST	1.1.1.1	192.168.2.5	0xbbb3	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:49.782916069 CEST	1.1.1.1	192.168.2.5	0xda8e	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:51.040297031 CEST	1.1.1.1	192.168.2.5	0x1911	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:51.040297031 CEST	1.1.1.1	192.168.2.5	0x1911	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:51.206856012 CEST	1.1.1.1	192.168.2.5	0x1547	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:51.226632118 CEST	1.1.1.1	192.168.2.5	0x1ec4	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:51.226632118 CEST	1.1.1.1	192.168.2.5	0x1ec4	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:51.227348089 CEST	1.1.1.1	192.168.2.5	0x7ef1	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:53.087893963 CEST	1.1.1.1	192.168.2.5	0x446d	No error (0)	js.arcgis.com		108.138.26.18	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:53.087893963 CEST	1.1.1.1	192.168.2.5	0x446d	No error (0)	js.arcgis.com		108.138.26.90	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:53.087893963 CEST	1.1.1.1	192.168.2.5	0x446d	No error (0)	js.arcgis.com		108.138.26.93	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:53.087893963 CEST	1.1.1.1	192.168.2.5	0x446d	No error (0)	js.arcgis.com		108.138.26.119	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:56.556349039 CEST	1.1.1.1	192.168.2.5	0x19d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:52:56.556349039 CEST	1.1.1.1	192.168.2.5	0x19d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:56.745925903 CEST	1.1.1.1	192.168.2.5	0xeff4	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:56.745925903 CEST	1.1.1.1	192.168.2.5	0xeff4	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:56.749459028 CEST	1.1.1.1	192.168.2.5	0x8378	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Aug 4, 2024 00:52:58.145256042 CEST	1.1.1.1	192.168.2.5	0x3589	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Aug 4, 2024 00:52:58.145279884 CEST	1.1.1.1	192.168.2.5	0x4794	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:52:58.145279884 CEST	1.1.1.1	192.168.2.5	0x4794	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.065932035 CEST	1.1.1.1	192.168.2.5	0x44a4	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:00.082545042 CEST	1.1.1.1	192.168.2.5	0x8a0e	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:00.089951992 CEST	1.1.1.1	192.168.2.5	0x3749	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:00.109028101 CEST	1.1.1.1	192.168.2.5	0x15ec	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:00.109028101 CEST	1.1.1.1	192.168.2.5	0x15ec	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.113	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.109028101 CEST	1.1.1.1	192.168.2.5	0x15ec	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.21	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.109028101 CEST	1.1.1.1	192.168.2.5	0x15ec	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.50	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:00.109028101 CEST	1.1.1.1	192.168.2.5	0x15ec	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.91	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.285325050 CEST	1.1.1.1	192.168.2.5	0x4a79	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.285325050 CEST	1.1.1.1	192.168.2.5	0x4a79	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.285325050 CEST	1.1.1.1	192.168.2.5	0x4a79	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.285325050 CEST	1.1.1.1	192.168.2.5	0x4a79	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.477704048 CEST	1.1.1.1	192.168.2.5	0xe4f1	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:01.477704048 CEST	1.1.1.1	192.168.2.5	0xe4f1	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.162.38.80	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.477704048 CEST	1.1.1.1	192.168.2.5	0xe4f1	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.162.38.40	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.477704048 CEST	1.1.1.1	192.168.2.5	0xe4f1	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.162.38.67	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.477704048 CEST	1.1.1.1	192.168.2.5	0xe4f1	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.162.38.31	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:01.479309082 CEST	1.1.1.1	192.168.2.5	0x41aa	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:03.853740931 CEST	1.1.1.1	192.168.2.5	0x4e91	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:03.857352972 CEST	1.1.1.1	192.168.2.5	0xcfd	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:03.858131886 CEST	1.1.1.1	192.168.2.5	0xac38	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:03.858131886 CEST	1.1.1.1	192.168.2.5	0xac38	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:03.858131886 CEST	1.1.1.1	192.168.2.5	0xac38	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:03.858131886 CEST	1.1.1.1	192.168.2.5	0xac38	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:07.051477909 CEST	1.1.1.1	192.168.2.5	0x337f	No error (0)	www.googleoptimize.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:08.342472076 CEST	1.1.1.1	192.168.2.5	0xeccc	No error (0)	www.googleoptimize.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:17.336556911 CEST	1.1.1.1	192.168.2.5	0x531b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:17.336556911 CEST	1.1.1.1	192.168.2.5	0x531b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:19.412384987 CEST	1.1.1.1	192.168.2.5	0x379d	No error (0)	informeddelivery.usps.com		152.195.33.23	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:31.570743084 CEST	1.1.1.1	192.168.2.5	0x100a	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:32.555258989 CEST	1.1.1.1	192.168.2.5	0x3212	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:32.555258989 CEST	1.1.1.1	192.168.2.5	0x3212	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:33.028649092 CEST	1.1.1.1	192.168.2.5	0xf132	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:33.028649092 CEST	1.1.1.1	192.168.2.5	0xf132	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:37.403517008 CEST	1.1.1.1	192.168.2.5	0x27eb	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:37.403517008 CEST	1.1.1.1	192.168.2.5	0x27eb	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:53:37.449470043 CEST	1.1.1.1	192.168.2.5	0xd4cf	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:38.952661991 CEST	1.1.1.1	192.168.2.5	0xa62e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:53:38.952661991 CEST	1.1.1.1	192.168.2.5	0xa62e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:27 UTC	671	OUT	GET /i/ HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:28 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"666-190b57e26f0"
2024-08-03 22:52:28 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:28 UTC	606	OUT	GET /i/assets/index-4b020bd6.js HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationjjxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://transportationjjxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:28 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:28 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-08-03 22:52:28 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-08-03 22:52:28 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:28 UTC	579	OUT	GET /i/assets/f6170fbbTeKnX.css HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transportationjjxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:28 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:28 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0"
2024-08-03 22:52:28 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:30 UTC	557	OUT	GET /i/assets/143268e9KXMp5.js HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationjjxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:30 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:30 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-08-03 22:52:30 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:30 UTC	557	OUT	GET /i/assets/f0ee2557KXMp5.js HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationjjxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:30 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:30 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-08-03 22:52:30 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-08-03 22:52:30 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-08-03 22:52:30 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-08-03 22:52:30 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:30 UTC	610	OUT	GET /favicon.ico HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transportationjjxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:30 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:30 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-08-03 22:52:30 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-08-03 22:52:30 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-03 22:52:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=29462 Date: Sat, 03 Aug 2024 22:52:31 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:52:31 UTC	579	OUT	GET /i/assets/667bf194TeKnX.css HTTP/1.1 Host: transportationjjxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transportationjjxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:52:31 UTC	349	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 22:52:31 GMT Content-Type: text/css; charset=utf-8 Content-Length: 68953 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"10d59-190b57e26f0"
2024-08-03 22:52:31 UTC	16035	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-08-03 22:52:31 UTC	16384	IN	Data Raw: 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 7b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 38 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 69 6e 70 75 74 2d 2d 73 65 61 72 63 68 2e 73 65 61 72 63 68 2d 2d 73 75 62 6d 69 74 7b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 65 33 39 34 65 64 39 37 54 65 4b 6e 58 2e 73 76 67 29 6e 6f 2d 72 65 Data Ascii: vigation input.global-header--search-track{border:0;width:80%;display:inline-block;vertical-align:bottom;height:25px;padding-left:18px;background:#fff}.global--navigation input.input--search.search--submit{border:0;background:url(./e394ed97TeKnX.svg)no-re
2024-08-03 22:52:31 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 38 37 66 32 36 62 35 39 54 65 4b 6e 58 2e 73 76 67 29 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 Data Ascii: :before,.global--navigation nav .tool-informed a:focus:before,.global--navigation nav .tool-informed a:hover:before{background:url(./87f26b59TeKnX.svg)}.global--navigation nav .tool-intercept a:before,.global--navigation nav .tool-intercept a:focus:before
2024-08-03 22:52:31 UTC	16384	IN	Data Raw: 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 7b 77 69 64 74 68 3a 31 35 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 Data Ascii: on nav li.menuheader:nth-of-type(1){width:15%}.global--navigation nav li.menuheader:nth-of-type(2){width:12%}.global--navigation nav li.menuheader:nth-of-type(3){width:12%}.global--navigation nav li.menuheader:nth-of-type(4){width:12%}.global--navigation
2024-08-03 22:52:31 UTC	3766	IN	Data Raw: 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 3b 73 72 63 3a 75 72 6c 28 2e 2f 63 63 34 36 39 34 30 36 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 32 65 32 65 66 36 33 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 66 64 37 61 66 36 31 54 65 4b 6e 58 2e 77 6f 66 66 29 Data Ascii: nt-face{font-family:HelveticaNeueW02-65Medi;src:url(./cc469406TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-55Roma;src:url(./f2e2ef63TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-75Bold;src:url(./ffd7af61TeKnX.woff)