Edit tour

Windows Analysis Report
https://transportationzhxztpro.top/i/

Overview

General Information

Sample URL:	https://transportationzhxztpro.top/i/
Analysis ID:	1487422
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

HTML page contains obfuscated javascript

HTML page contains hidden javascript code

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,10418683229276616350,7261189052428955125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://transportationzhxztpro.top/i/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Suricata Signatures

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.136 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:01:04.665573+0200
SID:	2012510
Source Port:	443
Destination Port:	50039
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 192.229.221.165 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:01:41.232622+0200
SID:	2012510
Source Port:	443
Destination Port:	50314
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 216.58.206.40 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:01:09.480601+0200
SID:	2012510
Source Port:	443
Destination Port:	50096
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 47.90.158.104 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:00:36.415424+0200
SID:	2012510
Source Port:	443
Destination Port:	49726
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 47.90.158.104 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:00:34.227487+0200
SID:	2012510
Source Port:	443
Destination Port:	49716
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 192.229.221.165 - Destination IP: 192.168.2.6

Timestamp:	2024-08-04T01:01:41.226075+0200
SID:	2012510
Source Port:	443
Destination Port:	50314
Protocol:	TCP
Classtype:	Potentially Bad Traffic

HTTP traffic detected: POST /api/MC42NTk3NDgyODIyMDY5MzEy HTTP/1.1Host: transportationzhxztpro.topConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://transportationzhxztpro.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://transportationzhxztpro.top/i/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://transportationzhxztpro.top/i/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://transportationzhxztpro.top/i/	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social usering

Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNXr	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/b198e353TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrr&sid=q3lArmxh6rTT69eGAXX0	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZpu	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjT&sid=yiZiV6Yi1aVjqHkWAXX8	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/667bf194TeKnX.css	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=EFXzVJ1BJAJtjZ8hAXXu	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjW&sid=yiZiV6Yi1aVjqHkWAXX8	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=IYYMZhexj6lG-c0NAXXx	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=oAaaNtPwjxZAJFP9AXYU	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/api/MC42MTcwNDcyNzQ4NDIyODk5	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUTYC&sid=7inJmleeH2zizS8aAXX_	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/f2e2ef63TeKnX.woff	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNzW&sid=EFXzVJ1BJAJtjZ8hAXXu	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYps	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUUhx&sid=S1w-BYWkFZY0XxnyAXYC	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/api/MC4zNzkxMzg4ODUzNzk5NjEz	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/layout/images/63.png	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/ae1f038aTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZy3&sid=DiaeWgUbrtAk9AaKAXYO	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPeV&sid=q3lArmxh6rTT69eGAXX0	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/layout/images/10.svg	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUP4G&sid=IYYMZhexj6lG-c0NAXXx	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QURbk&sid=6XgcSRSPHOnpcZMRAXX5	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrx&sid=q3lArmxh6rTT69eGAXX0	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYGk&sid=dbUAyq63IC0veJ55AXYL	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUaOm&sid=oAaaNtPwjxZAJFP9AXYU	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUXQ2	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=q3lArmxh6rTT69eGAXX0	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/6cf75c4aTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNIS&sid=Lv5RqpOcneXjFX9BAXXr	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUMgY&sid=Lv5RqpOcneXjFX9BAXXr	Avira URL Cloud: Label: phishing
Source: https://transportationzhxztpro.top/i/assets/0cabecd3KXMp5.js	Avira URL Cloud: Label: phishing

Source: https://transportationzhxztpro.top/i/	HTTP Parser: No favicon
Source: https://transportationzhxztpro.top/i/	HTTP Parser: No favicon
Source: https://transportationzhxztpro.top/i/	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/locations/home.htm	HTTP Parser: No favicon
Source: https://www.usps.com/help/contact-us.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://transportationzhxztpro.top/i/#endnav	HTTP Parser: No favicon
Source: https://transportationzhxztpro.top/i/#endnav	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49939 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:50230 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	DNS traffic detected: DNS query: transportationzhxztpro.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tools.usps.com
Source: global traffic	DNS traffic detected: DNS query: js.arcgis.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: informeddelivery.usps.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 23:00:42 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 23:00:53 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 23:01:46 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sat, 03 Aug 2024 23:01:49 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,10418683229276616350,7261189052428955125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://transportationzhxztpro.top/i/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2028,i,10418683229276616350,7261189052428955125,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://transportationzhxztpro.top/i/	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/i/	17%	Virustotal		Browse
https://transportationzhxztpro.top/i/	100%	SlashNext	Fraudulent Website type: Phishing & Social usering

Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_282.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.com (Facebook)
Source: chromecache_282.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.com (Twitter)
Source: chromecache_282.2.dr	String found in binary or memory: <!--ls:end[stylesheet]--><!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.com (Youtube)
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_214.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.c
Source: chromecache_214.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.co
Source: chromecache_214.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.co
Source: chromecache_463.2.dr, chromecache_409.2.dr, chromecache_316.2.dr, chromecache_577.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},fk:function(){e=Cb()},pd:function(){d()}}};var lc=ja(["data-gtm-yt-inspected-"]),oC=["www.youtube.com","www.youtube-nocookie.com"],pC,qC=!1; equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr, chromecache_409.2.dr, chromecache_316.2.dr, chromecache_577.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Zg:e,Xg:f,Yg:g,Oh:k,Ph:m,Ce:n,Bb:b},q=H.YT;if(q)return q.ready&&q.ready(d),b;var r=H.onYouTubeIframeAPIReady;H.onYouTubeIframeAPIReady=function(){r&&r();d()};J(function(){for(var t=I.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(zC(w,"iframe_api")\|\|zC(w,"player_api"))return b}for(var x=I.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!qC&&xC(x[B],p.Ce))return Dc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_474.2.dr, chromecache_346.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src="https://www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_257.2.dr, chromecache_595.2.dr, chromecache_480.2.dr, chromecache_326.2.dr, chromecache_576.2.dr, chromecache_440.2.dr, chromecache_279.2.dr, chromecache_312.2.dr	String found in binary or memory: return b}mC.J="internal.enableAutoEventOnTimer";var lc=ja(["data-gtm-yt-inspected-"]),oC=["www.youtube.com","www.youtube-nocookie.com"],pC,qC=!1; equals www.youtube.com (Youtube)
Source: chromecache_576.2.dr, chromecache_312.2.dr	String found in binary or memory: var BB=function(a,b,c,d,e){var f=wz("fsl",c?"nv.mwt":"mwt",0),g;g=c?wz("fsl","nv.ids",[]):wz("fsl","ids",[]);if(!g.length)return!0;var k=Bz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if(m==="https://www.facebook.com/tr/")return P(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ky(k,ly(b, equals www.facebook.com (Facebook)

Source: chromecache_313.2.dr, chromecache_617.2.dr, chromecache_479.2.dr, chromecache_548.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_598.2.dr	String found in binary or memory: http://maps.apple.com/?q=
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_417.2.dr, chromecache_568.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con
Source: chromecache_386.2.dr, chromecache_530.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: http://www.pinterest.com/uspsstamps/
Source: chromecache_243.2.dr, chromecache_213.2.dr, chromecache_416.2.dr, chromecache_446.2.dr, chromecache_235.2.dr, chromecache_615.2.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/careers/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/newsroom/
Source: chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/newsroom/events/
Source: chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/resources/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/what/government-services/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/accessibility-statement/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/fair-chance-act/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/foia/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/no-fear-act/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/privacy-policy/
Source: chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	String found in binary or memory: https://about.usps.com/who/legal/terms-of-use.htm
Source: chromecache_577.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_390.2.dr, chromecache_599.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://arcg.is/1OzLe50
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:ChartedTerritory:Base
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:ColoredPencil
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Community
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:DarkGray:Base
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:DarkGray:Labels
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeography:Base
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeography:Detail
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeography:Label
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeographyDark:Base
Source: chromecache_631.2.dr, chromecache_401.2.dr	String found in binary or memory: https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:HumanGeographyDark:Detail

Source	Detection	Scanner	Link
transportationzhxztpro.top	4%	Virustotal	Browse
cs1799.wpc.upsiloncdn.net	0%	Virustotal	Browse
js.arcgis.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
fast.fonts.net	0%	Virustotal	Browse
d27f3qgc9anoq2.cloudfront.net	0%	Virustotal	Browse
stats.g.doubleclick.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
www.googleoptimize.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
windowsupdatebg.s.llnwi.net	0%	Virustotal	Browse
www.usps.com	0%	Virustotal	Browse
informeddelivery.usps.com	0%	Virustotal	Browse
reg.usps.com	0%	Virustotal	Browse
dap.digitalgov.gov	0%	Virustotal	Browse
tools.usps.com	0%	Virustotal	Browse
resources.digital-cloud-gov.medallia.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/zone/	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/min-max/	0%	URL Reputation	safe
https://www.youtube.com/usps	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNXr	100%	Avira URL Cloud	phishing
https://www.usps.com/international/go-now.png	0%	Avira URL Cloud	safe
https://www.usps.com/test/nav/images/business.svg	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/i/assets/b198e353TeKnX.svg	100%	Avira URL Cloud	phishing
https://cns.usps.com/?_gl=1	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrr&sid=q3lArmxh6rTT69eGAXX0	100%	Avira URL Cloud	phishing
https://www.usps.com/international/go-now.png	0%	Virustotal		Browse
https://www.youtube.com/usps	0%	Virustotal		Browse
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZpu	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjT&sid=yiZiV6Yi1aVjqHkWAXX8	100%	Avira URL Cloud	phishing
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/i/assets/667bf194TeKnX.css	100%	Avira URL Cloud	phishing
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	0%	Avira URL Cloud	safe
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	0%	Avira URL Cloud	safe
https://store.usps.com/store	0%	Avira URL Cloud	safe
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/change_address.svg	0%	Avira URL Cloud	safe
https://www.usps.com/test/nav/images/business.svg	0%	Virustotal		Browse
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/printcustomsforms.svg	0%	Avira URL Cloud	safe
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=EFXzVJ1BJAJtjZ8hAXXu	100%	Avira URL Cloud	phishing
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/change_address.svg	0%	Virustotal		Browse
https://www.usps.com/assets/images/home/printcustomsforms.svg	0%	Virustotal		Browse
https://store.usps.com/store	0%	Virustotal		Browse
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjW&sid=yiZiV6Yi1aVjqHkWAXX8	100%	Avira URL Cloud	phishing
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	0%	Avira URL Cloud	safe
http://github.com/jrburke/requirejs	0%	Avira URL Cloud	safe
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Avira URL Cloud	safe
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	0%	Avira URL Cloud	safe
https://faq.usps.com/s/article/Find-USPS-Locations	0%	Avira URL Cloud	safe
http://github.com/jrburke/requirejs	0%	Virustotal		Browse
https://reg.usps.com/entreg/assets/css/vendor/bootstrap/3.4.1/theme.css	0%	Avira URL Cloud	safe
https://tools.usps.com/locations/styles/po-locator.css	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	0%	Virustotal		Browse
https://www.usps.com/business/manage-mail.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=IYYMZhexj6lG-c0NAXXx	100%	Avira URL Cloud	phishing
https://www.usps.com/global-elements/header/script/	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=oAaaNtPwjxZAJFP9AXYU	100%	Avira URL Cloud	phishing
https://tools.usps.com/rcas.htm?locationId=	0%	Avira URL Cloud	safe
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	0%	Virustotal		Browse
https://transportationzhxztpro.top/api/MC42MTcwNDcyNzQ4NDIyODk5	100%	Avira URL Cloud	phishing
https://emailus.usps.com/s/	0%	Avira URL Cloud	safe
https://informeddelivery.usps.com/box/pages/intro/start.action	0%	Avira URL Cloud	safe
https://reg.usps.com/preferences	0%	Avira URL Cloud	safe
https://www.usps.com/shop/money-orders.htm	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUTYC&sid=7inJmleeH2zizS8aAXX_	100%	Avira URL Cloud	phishing
https://www.usps.com/business/verify-postage.htm	0%	Avira URL Cloud	safe
https://www.usps.com/ship/insurance-extra-services.htm	0%	Avira URL Cloud	safe
https://basemaps3d.arcgis.com/arcgis/rest/services/OpenStreetMap3D_DarkLabels_v1/SceneServer	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/i/assets/f2e2ef63TeKnX.woff	100%	Avira URL Cloud	phishing
https://tools.usps.com/global-elements/header/script/header-init-search.js	0%	Avira URL Cloud	safe
https://about.usps.com/what/government-services/	0%	Avira URL Cloud	safe
https://store.usps.com/store/cards-envelopes	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNzW&sid=EFXzVJ1BJAJtjZ8hAXXu	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYps	100%	Avira URL Cloud	phishing
https://www.usps.com/assets/css/bootstrap-custom.css	0%	Avira URL Cloud	safe
https://www.arcgis.com/sharing/rest/content/items/1e7d1784d1ef4b79ba6764d0bd6c3150/resources/styles/	0%	Avira URL Cloud	safe
https://www.usps.com/assets/images/home/free_boxes.svg	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUUhx&sid=S1w-BYWkFZY0XxnyAXYC	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/api/MC4zNzkxMzg4ODUzNzk5NjEz	100%	Avira URL Cloud	phishing
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=45242680.1722726066&jid=1881821231&gjid=939668272&_gid=954190501.1722726066&_u=YGBAiEABBAAAAGAEq~&z=536464047	0%	Avira URL Cloud	safe
https://www.usps.com/favicon.ico	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/i/layout/images/63.png	100%	Avira URL Cloud	phishing
https://utility.arcgis.com/sharing/rss	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/i/assets/ae1f038aTeKnX.svg	100%	Avira URL Cloud	phishing
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	0%	Avira URL Cloud	safe
https://www.usps.com/assets/script/home/megamenu-additions.js	0%	Avira URL Cloud	safe
https://www.usps.com/manage/go-now.png	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZy3&sid=DiaeWgUbrtAk9AaKAXYO	100%	Avira URL Cloud	phishing
https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png	0%	Avira URL Cloud	safe
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	0%	Avira URL Cloud	safe
https://about.usps.com/who/legal/terms-of-use.htm	0%	Avira URL Cloud	safe
https://retail-pi.usps.com/retailpi/actions/index.action	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPeV&sid=q3lArmxh6rTT69eGAXX0	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/i/layout/images/10.svg	100%	Avira URL Cloud	phishing
https://www.usps.com/assets/images/home/holdmail.svg	0%	Avira URL Cloud	safe
https://store.usps.com/store/stamps	0%	Avira URL Cloud	safe
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	0%	Avira URL Cloud	safe
https://postcalc.usps.com/?country=10440	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUP4G&sid=IYYMZhexj6lG-c0NAXXx	100%	Avira URL Cloud	phishing
https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Nova	0%	Avira URL Cloud	safe
https://ibasemaps-api.arcgis.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QURbk&sid=6XgcSRSPHOnpcZMRAXX5	100%	Avira URL Cloud	phishing
https://www.usps.com/business/label-broker.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/letters.htm	0%	Avira URL Cloud	safe
https://www.usps.com/international/first-class-package-international-service.htm	0%	Avira URL Cloud	safe
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrx&sid=q3lArmxh6rTT69eGAXX0	100%	Avira URL Cloud	phishing
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYGk&sid=dbUAyq63IC0veJ55AXYL	100%	Avira URL Cloud	phishing
https://reg.usps.com/entreg/assets/images/footer/footer-logo.png	0%	Avira URL Cloud	safe
https://cfo.usps.com/cfo-web/labelInformation.html	0%	Avira URL Cloud	safe
https://informeddelivery.usps.com/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
cs1799.wpc.upsiloncdn.net	192.229.221.165	true	false	0%, Virustotal, Browse	unknown
fast.fonts.net	104.16.40.28	true	false	0%, Virustotal, Browse	unknown
js.arcgis.com	3.165.136.25	true	false	0%, Virustotal, Browse	unknown
transportationzhxztpro.top	47.90.158.104	true	false	4%, Virustotal, Browse	unknown
d27f3qgc9anoq2.cloudfront.net	13.32.27.113	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	74.125.133.157	true	false	0%, Virustotal, Browse	unknown
www.googleoptimize.com	216.58.212.174	true	false	0%, Virustotal, Browse	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	0%, Virustotal, Browse	unknown
informeddelivery.usps.com	152.195.33.23	true	false	0%, Virustotal, Browse	unknown
reg.usps.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
dap.digitalgov.gov	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.usps.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
tools.usps.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNXr	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/test/nav/images/business.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/international/go-now.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/i/assets/b198e353TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrr&sid=q3lArmxh6rTT69eGAXX0	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZpu	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjT&sid=yiZiV6Yi1aVjqHkWAXX8	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/assets/667bf194TeKnX.css	true	Avira URL Cloud: phishing	unknown
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/change_address.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/printcustomsforms.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=EFXzVJ1BJAJtjZ8hAXXu	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUSjW&sid=yiZiV6Yi1aVjqHkWAXX8	false	Avira URL Cloud: phishing	unknown
https://reg.usps.com/entreg/assets/css/vendor/bootstrap/3.4.1/theme.css	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/locations/styles/po-locator.css	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=IYYMZhexj6lG-c0NAXXx	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=oAaaNtPwjxZAJFP9AXYU	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/api/MC42MTcwNDcyNzQ4NDIyODk5	false	Avira URL Cloud: phishing	unknown
https://informeddelivery.usps.com/box/pages/intro/start.action	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUTYC&sid=7inJmleeH2zizS8aAXX_	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/assets/f2e2ef63TeKnX.woff	true	Avira URL Cloud: phishing	unknown
https://tools.usps.com/global-elements/header/script/header-init-search.js	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNzW&sid=EFXzVJ1BJAJtjZ8hAXXu	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYps	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/css/bootstrap-custom.css	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/images/home/free_boxes.svg	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUUhx&sid=S1w-BYWkFZY0XxnyAXYC	false	Avira URL Cloud: phishing	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=45242680.1722726066&jid=1881821231&gjid=939668272&_gid=954190501.1722726066&_u=YGBAiEABBAAAAGAEq~&z=536464047	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/api/MC4zNzkxMzg4ODUzNzk5NjEz	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/i/layout/images/63.png	true	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/assets/ae1f038aTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/manage/go-now.png	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUZy3&sid=DiaeWgUbrtAk9AaKAXYO	false	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png	false	Avira URL Cloud: safe	unknown
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPeV&sid=q3lArmxh6rTT69eGAXX0	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/layout/images/10.svg	true	Avira URL Cloud: phishing	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUP4G&sid=IYYMZhexj6lG-c0NAXXx	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QURbk&sid=6XgcSRSPHOnpcZMRAXX5	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUPrx&sid=q3lArmxh6rTT69eGAXX0	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUYGk&sid=dbUAyq63IC0veJ55AXYL	false	Avira URL Cloud: phishing	unknown
https://reg.usps.com/entreg/assets/images/footer/footer-logo.png	false	Avira URL Cloud: safe	unknown
https://informeddelivery.usps.com/	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUaOm&sid=oAaaNtPwjxZAJFP9AXYU	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUXQ2	false	Avira URL Cloud: phishing	unknown
https://tools.usps.com/locations/scripts/po-locator.js	false	Avira URL Cloud: safe	unknown
https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/locations/images/prepare-mail-icon.svg	false	Avira URL Cloud: safe	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=websocket&sid=q3lArmxh6rTT69eGAXX0	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/assets/6cf75c4aTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUMgY&sid=Lv5RqpOcneXjFX9BAXXr	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/socket.io/?EIO=4&transport=polling&t=P4QUNIS&sid=Lv5RqpOcneXjFX9BAXXr	false	Avira URL Cloud: phishing	unknown
https://transportationzhxztpro.top/i/assets/0cabecd3KXMp5.js	true	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cns.usps.com/?_gl=1	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/questions/181348/instantiating-a-javascript-object-by-calling-prototype-con	chromecache_386.2.dr, chromecache_530.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_390.2.dr, chromecache_599.2.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_282.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://github.com/jrburke/requirejs	chromecache_313.2.dr, chromecache_617.2.dr, chromecache_479.2.dr, chromecache_548.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_265.2.dr, chromecache_234.2.dr, chromecache_408.2.dr, chromecache_525.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	chromecache_631.2.dr, chromecache_401.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://faq.usps.com/s/article/Find-USPS-Locations	chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/manage-mail.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/header/script/	chromecache_227.2.dr, chromecache_596.2.dr, chromecache_435.2.dr, chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://tools.usps.com/rcas.htm?locationId=	chromecache_598.2.dr	false	Avira URL Cloud: safe	unknown
https://emailus.usps.com/s/	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://reg.usps.com/preferences	chromecache_214.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/shop/money-orders.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/verify-postage.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_386.2.dr, chromecache_530.2.dr	false	URL Reputation: safe	unknown
https://basemaps3d.arcgis.com/arcgis/rest/services/OpenStreetMap3D_DarkLabels_v1/SceneServer	chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/what/government-services/	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/cards-envelopes	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.arcgis.com/sharing/rest/content/items/1e7d1784d1ef4b79ba6764d0bd6c3150/resources/styles/	chromecache_631.2.dr, chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://utility.arcgis.com/sharing/rss	chromecache_631.2.dr, chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://store.usps.com/store/stamps	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://postcalc.usps.com/?country=10440	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Nova	chromecache_631.2.dr, chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://ibasemaps-api.arcgis.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer	chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/business/label-broker.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/letters.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_530.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/	chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://gateway.usps.com/	chromecache_210.2.dr, chromecache_214.2.dr, chromecache_282.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.arcgis.com/sharing/rest/content/items/220936cc6ed342c9937abd8f180e7d1e/resources/styles/	chromecache_631.2.dr, chromecache_401.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.133.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.218.27	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
3.165.136.25	js.arcgis.com	United States	16509	AMAZON-02US	false
152.195.33.23	informeddelivery.usps.com	United States	15133	EDGECASTUS	false
104.16.41.28	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.212.174	www.googleoptimize.com	United States	15169	GOOGLEUS	false
142.251.173.156	unknown	United States	15169	GOOGLEUS	false
13.32.27.113	d27f3qgc9anoq2.cloudfront.net	United States	7018	ATT-INTERNET4US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
47.90.158.104	transportationzhxztpro.top	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
13.32.27.91	unknown	United States	7018	ATT-INTERNET4US	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487422
Start date and time:	2024-08-04 00:59:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://transportationzhxztpro.top/i/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@21/706@46/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://tools.usps.com/find-location.htm Browse: https://www.usps.com/help/contact-us.htm Browse: https://informeddelivery.usps.com/ Browse: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=https://www.usps.com/ Browse: https://transportationzhxztpro.top/i/#endnav

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-04T01:01:04.665573+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50039	142.250.186.136	192.168.2.6
2024-08-04T01:01:41.232622+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50314	192.229.221.165	192.168.2.6
2024-08-04T01:01:09.480601+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50096	216.58.206.40	192.168.2.6
2024-08-04T01:00:36.415424+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49726	47.90.158.104	192.168.2.6
2024-08-04T01:00:34.227487+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49716	47.90.158.104	192.168.2.6
2024-08-04T01:01:41.226075+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	50314	192.229.221.165	192.168.2.6

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 4, 2024 01:00:32.644160986 CEST	192.168.2.6	1.1.1.1	0xd8a5	Standard query (0)	transportationzhxztpro.top	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:32.644232988 CEST	192.168.2.6	1.1.1.1	0x3d2f	Standard query (0)	transportationzhxztpro.top	65	IN (0x0001)	false
Aug 4, 2024 01:00:34.690131903 CEST	192.168.2.6	1.1.1.1	0x4171	Standard query (0)	transportationzhxztpro.top	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:34.690454006 CEST	192.168.2.6	1.1.1.1	0xae1f	Standard query (0)	transportationzhxztpro.top	65	IN (0x0001)	false
Aug 4, 2024 01:00:35.367923975 CEST	192.168.2.6	1.1.1.1	0x822c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:35.368118048 CEST	192.168.2.6	1.1.1.1	0x5b08	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:53.398261070 CEST	192.168.2.6	1.1.1.1	0x8a4a	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:53.398838997 CEST	192.168.2.6	1.1.1.1	0xa3d8	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:55.318823099 CEST	192.168.2.6	1.1.1.1	0x11a4	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.318984032 CEST	192.168.2.6	1.1.1.1	0x8c91	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:55.320142984 CEST	192.168.2.6	1.1.1.1	0xd53	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.320302963 CEST	192.168.2.6	1.1.1.1	0x1ef	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:56.702794075 CEST	192.168.2.6	1.1.1.1	0x3c3f	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:56.702881098 CEST	192.168.2.6	1.1.1.1	0x913	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:56.787800074 CEST	192.168.2.6	1.1.1.1	0x7281	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:56.788002968 CEST	192.168.2.6	1.1.1.1	0x1365	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:00:58.836574078 CEST	192.168.2.6	1.1.1.1	0x5d1d	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:58.836819887 CEST	192.168.2.6	1.1.1.1	0xe3ff	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:03.207788944 CEST	192.168.2.6	1.1.1.1	0xc8c7	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.208060026 CEST	192.168.2.6	1.1.1.1	0xbee7	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Aug 4, 2024 01:01:03.984715939 CEST	192.168.2.6	1.1.1.1	0xc6f2	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.984941006 CEST	192.168.2.6	1.1.1.1	0xdf4b	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Aug 4, 2024 01:01:06.247922897 CEST	192.168.2.6	1.1.1.1	0xcabe	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.248545885 CEST	192.168.2.6	1.1.1.1	0x1b30	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Aug 4, 2024 01:01:06.250453949 CEST	192.168.2.6	1.1.1.1	0x36c5	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.250825882 CEST	192.168.2.6	1.1.1.1	0xe583	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:07.678431034 CEST	192.168.2.6	1.1.1.1	0x8ac5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:07.678905010 CEST	192.168.2.6	1.1.1.1	0x31d9	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 4, 2024 01:01:08.097462893 CEST	192.168.2.6	1.1.1.1	0xf147	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.097722054 CEST	192.168.2.6	1.1.1.1	0x20ad	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Aug 4, 2024 01:01:08.100092888 CEST	192.168.2.6	1.1.1.1	0xd951	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.100563049 CEST	192.168.2.6	1.1.1.1	0x8182	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:10.015256882 CEST	192.168.2.6	1.1.1.1	0xa140	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:10.015640020 CEST	192.168.2.6	1.1.1.1	0xc15e	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Aug 4, 2024 01:01:15.087184906 CEST	192.168.2.6	1.1.1.1	0xebbc	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:15.087352991 CEST	192.168.2.6	1.1.1.1	0x35ca	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:16.357969046 CEST	192.168.2.6	1.1.1.1	0x2464	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:16.358127117 CEST	192.168.2.6	1.1.1.1	0xd73	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:27.383095980 CEST	192.168.2.6	1.1.1.1	0x4b2b	Standard query (0)	informeddelivery.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:27.383635998 CEST	192.168.2.6	1.1.1.1	0xb9db	Standard query (0)	informeddelivery.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:37.706348896 CEST	192.168.2.6	1.1.1.1	0x5c76	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:37.706883907 CEST	192.168.2.6	1.1.1.1	0x5a60	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:38.717124939 CEST	192.168.2.6	1.1.1.1	0x25b2	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:38.721390009 CEST	192.168.2.6	1.1.1.1	0x4875	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Aug 4, 2024 01:01:44.814544916 CEST	192.168.2.6	1.1.1.1	0x521e	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:44.814696074 CEST	192.168.2.6	1.1.1.1	0xba66	Standard query (0)	reg.usps.com	65	IN (0x0001)	false

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://transportationzhxztpro.top/i/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Windows Analysis Report
https://transportationzhxztpro.top/i/

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 4, 2024 01:00:33.109277964 CEST	1.1.1.1	192.168.2.6	0xd8a5	No error (0)	transportationzhxztpro.top		47.90.158.104	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:35.374737978 CEST	1.1.1.1	192.168.2.6	0x822c	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:35.374933004 CEST	1.1.1.1	192.168.2.6	0x5b08	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 4, 2024 01:00:35.510500908 CEST	1.1.1.1	192.168.2.6	0x4171	No error (0)	transportationzhxztpro.top		47.90.158.104	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:45.365497112 CEST	1.1.1.1	192.168.2.6	0xb8ae	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:45.365497112 CEST	1.1.1.1	192.168.2.6	0xb8ae	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:53.576658964 CEST	1.1.1.1	192.168.2.6	0x8a4a	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:53.576658964 CEST	1.1.1.1	192.168.2.6	0x8a4a	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:53.643728971 CEST	1.1.1.1	192.168.2.6	0xa3d8	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:55.336826086 CEST	1.1.1.1	192.168.2.6	0x11a4	No error (0)	js.arcgis.com		3.165.136.25	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.336826086 CEST	1.1.1.1	192.168.2.6	0x11a4	No error (0)	js.arcgis.com		3.165.136.38	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.336826086 CEST	1.1.1.1	192.168.2.6	0x11a4	No error (0)	js.arcgis.com		3.165.136.60	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.336826086 CEST	1.1.1.1	192.168.2.6	0x11a4	No error (0)	js.arcgis.com		3.165.136.100	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:55.445950985 CEST	1.1.1.1	192.168.2.6	0x1ef	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:55.456224918 CEST	1.1.1.1	192.168.2.6	0xd53	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:55.456224918 CEST	1.1.1.1	192.168.2.6	0xd53	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:56.828425884 CEST	1.1.1.1	192.168.2.6	0x3c3f	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:56.828425884 CEST	1.1.1.1	192.168.2.6	0x3c3f	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:56.843377113 CEST	1.1.1.1	192.168.2.6	0x913	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:56.913126945 CEST	1.1.1.1	192.168.2.6	0x1365	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:56.959067106 CEST	1.1.1.1	192.168.2.6	0x7281	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:00:56.959067106 CEST	1.1.1.1	192.168.2.6	0x7281	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:58.854305029 CEST	1.1.1.1	192.168.2.6	0x5d1d	No error (0)	js.arcgis.com		18.66.218.27	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:58.854305029 CEST	1.1.1.1	192.168.2.6	0x5d1d	No error (0)	js.arcgis.com		18.66.218.37	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:58.854305029 CEST	1.1.1.1	192.168.2.6	0x5d1d	No error (0)	js.arcgis.com		18.66.218.47	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:00:58.854305029 CEST	1.1.1.1	192.168.2.6	0x5d1d	No error (0)	js.arcgis.com		18.66.218.74	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.214906931 CEST	1.1.1.1	192.168.2.6	0xc8c7	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.214906931 CEST	1.1.1.1	192.168.2.6	0xc8c7	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.215504885 CEST	1.1.1.1	192.168.2.6	0xbee7	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Aug 4, 2024 01:01:03.992810965 CEST	1.1.1.1	192.168.2.6	0xc6f2	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.992810965 CEST	1.1.1.1	192.168.2.6	0xc6f2	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:03.992824078 CEST	1.1.1.1	192.168.2.6	0xdf4b	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Aug 4, 2024 01:01:06.256297112 CEST	1.1.1.1	192.168.2.6	0x1b30	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:06.267793894 CEST	1.1.1.1	192.168.2.6	0xcabe	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:06.267793894 CEST	1.1.1.1	192.168.2.6	0xcabe	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.113	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.267793894 CEST	1.1.1.1	192.168.2.6	0xcabe	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.91	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.267793894 CEST	1.1.1.1	192.168.2.6	0xcabe	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.50	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.267793894 CEST	1.1.1.1	192.168.2.6	0xcabe	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.21	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.281167030 CEST	1.1.1.1	192.168.2.6	0x36c5	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:06.362992048 CEST	1.1.1.1	192.168.2.6	0xe583	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:06.378312111 CEST	1.1.1.1	192.168.2.6	0x1a12	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:06.378312111 CEST	1.1.1.1	192.168.2.6	0x1a12	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:07.685348988 CEST	1.1.1.1	192.168.2.6	0x8ac5	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:07.685348988 CEST	1.1.1.1	192.168.2.6	0x8ac5	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:07.685348988 CEST	1.1.1.1	192.168.2.6	0x8ac5	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:07.685348988 CEST	1.1.1.1	192.168.2.6	0x8ac5	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.107635975 CEST	1.1.1.1	192.168.2.6	0x20ad	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:08.108730078 CEST	1.1.1.1	192.168.2.6	0xd951	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:08.110248089 CEST	1.1.1.1	192.168.2.6	0xf147	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:08.110248089 CEST	1.1.1.1	192.168.2.6	0xf147	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.91	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.110248089 CEST	1.1.1.1	192.168.2.6	0xf147	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.21	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.110248089 CEST	1.1.1.1	192.168.2.6	0xf147	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.113	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.110248089 CEST	1.1.1.1	192.168.2.6	0xf147	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.50	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:08.132899046 CEST	1.1.1.1	192.168.2.6	0x8182	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:10.022023916 CEST	1.1.1.1	192.168.2.6	0xa140	No error (0)	stats.g.doubleclick.net		142.251.173.156	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:10.022023916 CEST	1.1.1.1	192.168.2.6	0xa140	No error (0)	stats.g.doubleclick.net		142.251.173.157	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:10.022023916 CEST	1.1.1.1	192.168.2.6	0xa140	No error (0)	stats.g.doubleclick.net		142.251.173.155	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:10.022023916 CEST	1.1.1.1	192.168.2.6	0xa140	No error (0)	stats.g.doubleclick.net		142.251.173.154	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:15.094084024 CEST	1.1.1.1	192.168.2.6	0xebbc	No error (0)	www.googleoptimize.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:16.365955114 CEST	1.1.1.1	192.168.2.6	0x2464	No error (0)	www.googleoptimize.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:25.234817028 CEST	1.1.1.1	192.168.2.6	0x2130	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:27.390459061 CEST	1.1.1.1	192.168.2.6	0x4b2b	No error (0)	informeddelivery.usps.com		152.195.33.23	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:38.843025923 CEST	1.1.1.1	192.168.2.6	0x25b2	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:38.843025923 CEST	1.1.1.1	192.168.2.6	0x25b2	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:38.882661104 CEST	1.1.1.1	192.168.2.6	0x5a60	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:41.215301037 CEST	1.1.1.1	192.168.2.6	0x5c76	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:41.215301037 CEST	1.1.1.1	192.168.2.6	0x5c76	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:41.215317965 CEST	1.1.1.1	192.168.2.6	0x4875	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:44.940139055 CEST	1.1.1.1	192.168.2.6	0x521e	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:44.940139055 CEST	1.1.1.1	192.168.2.6	0x521e	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:44.984452009 CEST	1.1.1.1	192.168.2.6	0xba66	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 01:01:45.474864006 CEST	1.1.1.1	192.168.2.6	0x38ca	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 4, 2024 01:01:45.474864006 CEST	1.1.1.1	192.168.2.6	0x38ca	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 30 6e 64 4a 61 5a 34 5a 71 45 4f 53 35 6c 7a 37 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 62 63 38 62 35 66 63 63 37 61 63 34 65 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 0ndJaZ4ZqEOS5lz7.1Context: c6bc8b5fcc7ac4e5
2024-08-03 23:00:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 23:00:30 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 30 6e 64 4a 61 5a 34 5a 71 45 4f 53 35 6c 7a 37 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 62 63 38 62 35 66 63 63 37 61 63 34 65 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: 0ndJaZ4ZqEOS5lz7.2Context: c6bc8b5fcc7ac4e5<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-08-03 23:00:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 30 6e 64 4a 61 5a 34 5a 71 45 4f 53 35 6c 7a 37 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 36 62 63 38 62 35 66 63 63 37 61 63 34 65 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 0ndJaZ4ZqEOS5lz7.3Context: c6bc8b5fcc7ac4e5<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-03 23:00:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 23:00:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 39 30 38 71 30 32 4a 53 33 6b 43 4d 73 55 57 75 58 62 73 57 4a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 908q02JS3kCMsUWuXbsWJA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 67 35 6d 69 45 36 36 67 55 36 49 62 75 6b 35 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 37 31 63 30 32 33 64 31 35 30 63 34 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2g5miE66gU6Ibuk5.1Context: c3671c023d150c49
2024-08-03 23:00:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-08-03 23:00:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 67 35 6d 69 45 36 36 67 55 36 49 62 75 6b 35 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 37 31 63 30 32 33 64 31 35 30 63 34 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 36 4f 66 64 4b 6c 4a 6f 44 4d 4e 38 57 64 48 73 30 62 43 70 65 5a 44 64 44 41 54 66 6d 57 4f 73 63 38 71 56 43 65 72 6b 43 6d 48 70 4e 42 73 78 65 39 69 31 55 73 54 71 44 43 6c 6b 75 35 51 4d 73 4a 53 78 58 44 30 52 74 62 7a 75 59 45 4d 56 6e 4d 66 2f 75 41 39 4e 41 4f 47 73 6e 41 31 33 2b 48 55 55 38 67 4e 36 48 78 78 54 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2g5miE66gU6Ibuk5.2Context: c3671c023d150c49<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAV6OfdKlJoDMN8WdHs0bCpeZDdDATfmWOsc8qVCerkCmHpNBsxe9i1UsTqDClku5QMsJSxXD0RtbzuYEMVnMf/uA9NAOGsnA13+HUU8gN6HxxT
2024-08-03 23:00:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 67 35 6d 69 45 36 36 67 55 36 49 62 75 6b 35 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 33 36 37 31 63 30 32 33 64 31 35 30 63 34 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2g5miE66gU6Ibuk5.3Context: c3671c023d150c49<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-08-03 23:00:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-08-03 23:00:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 69 49 42 4b 48 4c 4b 58 30 53 7a 75 69 4e 51 47 51 4a 64 71 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xiIBKHLKX0SzuiNQGQJdqQ.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:33 UTC	671	OUT	GET /i/ HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:33 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:33 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"666-190b57e26f0"
2024-08-03 23:00:33 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:33 UTC	606	OUT	GET /i/assets/index-4b020bd6.js HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationzhxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://transportationzhxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:33 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:33 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-08-03 23:00:33 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-08-03 23:00:34 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:34 UTC	579	OUT	GET /i/assets/f6170fbbTeKnX.css HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transportationzhxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:34 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:34 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0"
2024-08-03 23:00:34 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:35 UTC	557	OUT	GET /i/assets/143268e9KXMp5.js HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationzhxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:35 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:35 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-08-03 23:00:35 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:35 UTC	557	OUT	GET /i/assets/f0ee2557KXMp5.js HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://transportationzhxztpro.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:35 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:35 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-08-03 23:00:35 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-08-03 23:00:35 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-08-03 23:00:35 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-08-03 23:00:35 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:35 UTC	610	OUT	GET /favicon.ico HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transportationzhxztpro.top/i/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:35 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:35 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-08-03 23:00:35 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-08-03 23:00:35 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Timestamp	Bytes transferred	Direction	Data
2024-08-03 23:00:36 UTC	376	OUT	GET /i/assets/index-4b020bd6.js HTTP/1.1 Host: transportationzhxztpro.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 23:00:36 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sat, 03 Aug 2024 23:00:36 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-08-03 23:00:36 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-08-03 23:00:36 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x