Edit tour

Windows Analysis Report
http://email.shr.descartes.com/c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32Szpm6LOevj2RQOH9fPy95Ydm5fPCocnnrLI6-X_edc5M9Mh3LDIcv3VXK5v5-bcq-RAKwLFgJ4Cz1GH3xELWmpOReT15GlKYJtPA1

Overview

General Information

Sample URL:	http://email.shr.descartes.com/c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32S
Analysis ID:	1526109
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body with high number of embedded images detected

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5688 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3996 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://email.shr.descartes.com/c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32Szpm6LOevj2RQOH9fPy95Ydm5fPCocnnrLI6-X_edc5M9Mh3LDIcv3VXK5v5-bcq-RAKwLFgJ4Cz1GH3xELWmpOReT15GlKYJtPA1Pp_5N-B8AAP__c9xNiA" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=1379288430.1728061777&jid=219169261&gjid=880208880&_gid=1286053574.1728061777&_u=YGBAiEALBAAAAGAEq~&z=703450145 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://tools.usps.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H

Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No favicon
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No favicon
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No favicon
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon

Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="author".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="author".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="author".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="author".. found

Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="copyright".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="copyright".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="copyright".. found
Source: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.5:49982 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_331.2.dr, chromecache_708.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_331.2.dr, chromecache_708.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_331.2.dr, chromecache_708.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_331.2.dr, chromecache_708.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_416.2.dr, chromecache_547.2.dr, chromecache_616.2.dr, chromecache_747.2.dr, chromecache_706.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_706.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_632.2.dr, chromecache_466.2.dr	String found in binary or memory: e.page_referrer=C(document.referrer):document.referrer,e=z(F(e),"default");e=N(e);e=O(e);E("config",c.GWT_GA4ID[a],e)}y?H({search_term:y}):""})();var S=1;if(c.YOUTUBE){G=document.createElement("script");G.src="https://www.youtube.com/iframe_api";A=document.getElementsByTagName("script")[0];A.parentNode.insertBefore(G,A);var D=[],p=[],v=[],B=c.YT_MILESTONE,L=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<D.length;a++)p[a]=new YT.Player(D[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_416.2.dr, chromecache_547.2.dr, chromecache_616.2.dr, chromecache_747.2.dr, chromecache_706.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_768.2.dr, chromecache_641.2.dr, chromecache_831.2.dr, chromecache_765.2.dr, chromecache_335.2.dr, chromecache_745.2.dr, chromecache_435.2.dr, chromecache_363.2.dr, chromecache_407.2.dr, chromecache_585.2.dr, chromecache_563.2.dr, chromecache_728.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_745.2.dr, chromecache_407.2.dr, chromecache_706.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: email.shr.descartes.com
Source: global traffic	DNS traffic detected: DNS query: trkcnfrm1.smi.usps.com
Source: global traffic	DNS traffic detected: DNS query: tools.usps.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: js.arcgis.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: moversguide.usps.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: api.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: store.usps.com
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: content.usps.com
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: 3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://email.shr.descartes.com/c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32Szpm6LOevj2RQOH9fPy95Ydm5fPCocnnrLI6-X_edc5M9Mh3LDIcv3VXK5v5-bcq-RAKwLFgJ4Cz1GH3xELWmpOReT15GlKYJtPA1Pp_5N-B8AAP__c9xNiA"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5688 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3996 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5688 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3996 --field-trial-handle=1880,i,16007341943051326357,11980754842655174403,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://git.io/fjule	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	www.googleoptimize.com	United States	15169	GOOGLEUS	false
108.138.26.18	js.arcgis.com	United States	16509	AMAZON-02US	false
74.125.133.154	unknown	United States	15169	GOOGLEUS	false
35.160.35.184	unknown	United States	16509	AMAZON-02US	false
104.16.41.28	unknown	United States	13335	CLOUDFLARENETUS	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands	30286	THMUS	false
91.235.134.131	3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.83	dbixd6p3vn7bv.cloudfront.net	United States	16509	AMAZON-02US	false
93.184.221.92	cs1792.wpc.upsiloncdn.net	European Union	15133	EDGECASTUS	false
13.32.27.113	d27f3qgc9anoq2.cloudfront.net	United States	7018	ATT-INTERNET4US	false
52.21.60.247	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
91.235.133.188	h-usps.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.17	unknown	United States	16509	AMAZON-02US	false
54.69.251.6	api.segment.io	United States	16509	AMAZON-02US	false
64.233.166.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
108.138.26.119	unknown	United States	16509	AMAZON-02US	false
34.102.239.211	mailgun.org	United States	15169	GOOGLEUS	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
54.210.62.10	unknown	United States	14618	AMAZON-AESUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
13.32.27.91	unknown	United States	7018	ATT-INTERNET4US	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526109
Start date and time:	2024-10-04 19:08:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://email.shr.descartes.com/c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32Szpm6LOevj2RQOH9fPy95Ydm5fPCocnnrLI6-X_edc5M9Mh3LDIcv3VXK5v5-bcq-RAKwLFgJ4Cz1GH3xELWmpOReT15GlKYJtPA1Pp_5N-B8AAP__c9xNiA
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@24/888@92/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://moversguide.usps.com/?referral=MG80 Browse: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
h-usps.online-metrix.net	91.235.133.188	true	false	unknown
d27f3qgc9anoq2.cloudfront.net	13.32.27.113	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.37	true	false	unknown
eu-aa.online-metrix.net	91.235.132.129	true	false	unknown
mailgun.org	34.102.239.211	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
dbixd6p3vn7bv.cloudfront.net	13.35.58.83	true	false	unknown
www.googleoptimize.com	142.250.185.206	true	false	unknown
stats.g.doubleclick.net	64.233.166.155	true	false	unknown
amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	52.21.60.247	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
cs1799.wpc.upsiloncdn.net	192.229.221.165	true	false	unknown
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	unknown
fast.fonts.net	104.16.40.28	true	false	unknown
js.arcgis.com	108.138.26.18	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
api.segment.io	54.69.251.6	true	false	unknown
h64.online-metrix.net	192.225.158.1	true	false	unknown
cs1792.wpc.upsiloncdn.net	93.184.221.92	true	false	unknown
h.online-metrix.net	91.235.132.130	true	false	unknown
aa.online-metrix.net	91.235.132.129	true	false	unknown
3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	91.235.134.131	true	false	unknown
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	unknown
dap.digitalgov.gov	unknown	unknown	false	unknown
store.usps.com	unknown	unknown	false	unknown
content.usps.com	unknown	unknown	false	unknown
trkcnfrm1.smi.usps.com	unknown	unknown	false	unknown
api.ampersend.io	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
email.shr.descartes.com	unknown	unknown	false	unknown
cdn.ampersend.io	unknown	unknown	false	unknown
www.usps.com	unknown	unknown	false	unknown
tools.usps.com	unknown	unknown	false	unknown
moversguide.usps.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://www.usps.com/ecp/asset/images/843070-T0.jpg	false	unknown
https://www.usps.com/test/nav/images/business.svg	false	unknown
https://www.usps.com/international/go-now.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/request.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/touch.js	false	unknown
https://store.usps.com/media/psm/css/ps.css	false	unknown
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	false	unknown
https://www.usps.com/store/images/ps-subicon-supplies.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/declare.js	false	unknown
https://tools.usps.com/media/rcas/white-spinner-processing-step-01.svg	false	unknown
https://www.usps.com/assets/images/home/change_address.svg	false	unknown
https://www.usps.com/assets/images/home/printcustomsforms.svg	false	unknown
https://moversguide.usps.com/js/chunk-vendors.19f78359.js	false	unknown
https://cdn.segment.com/v1/projects/UqpcmQEi1Z4oO1btpi5fjHrxJ7AIwGOu/settings	false	unknown
https://moversguide.usps.com/js/address~bootstrap~contact~desktop~mobile.00054ee3.js	false	unknown
https://moversguide.usps.com/js/rts.4a36fbde.js	false	unknown
https://tools.usps.com/UspsToolsRestServices/rest/idCrossSell/getIDStatus?_=1728061762167	false	unknown
https://moversguide.usps.com/css/address~bootstrap~contact~desktop~mobile.9a89caf3.css	false	unknown
https://www.usps.com/store/images/ps-subicon-cards.png	false	unknown
https://tools.usps.com/go/images/informed-delivery-icon.svg	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/config.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/browser.js	false	unknown
https://moversguide.usps.com/js/simulator.521279c0.js	false	unknown
https://moversguide.usps.com/mgo-api/api/v1/coa/43c31553-d8e2-4825-9655-b26329e37fd4/addresses	false	unknown
https://www.usps.com/store/images/ps-subicon-business.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-attr.js	false	unknown
https://tools.usps.com/UspsToolsRestServices/rest/security/loginCheck?_=1728061762166	false	unknown
https://www.usps.com/ecp/asset/images/EP14PE-T0.jpg	false	unknown
https://store.usps.com/media/psm/script/popper.min.js	false	unknown
https://moversguide.usps.com/mgo-api/api/v2/coa/43c31553-d8e2-4825-9655-b26329e37fd4/persons	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/topic.js	false	unknown
https://www.usps.com/store/images/br_down.png	false	unknown
https://content.usps.com/_6E_1llMLEFmGyiT?7266e3c8c1e78f89=9ncE0oN5VC9dPWPE4dJbAv_IVDx7fNJj_Ca8mB9yBSflK0yNKQHrQfMAj-NyXmJ8KpAGIfruGjnaVHOQSvUg8RZ0q7_WUUB9W-3HpJF9jen1xwb7lpjEjFTK_ngF5-HyAiyhAyI25Uy76gsJN68bWwauyC4HC6IysABv9T6Z9l3QpjNbnWwkw2klWpIO3Hh5zjUnyoLOjG9IwG8A&jb=353b24246a736f773557616e6667777b246a7b673f576966666d7571273a303332246a7362773f4168726f6f6d26627360354360706f656d273230393335	false	unknown
https://store.usps.com/media/endeca/store/script/store-init.js	false	unknown
https://www.usps.com/assets/images/home/free_boxes.svg	false	unknown
https://tools.usps.com/go/data/data.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-form.js	false	unknown
https://moversguide.usps.com/js/dcoa.52ad1015.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/lang.js	false	unknown
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false	unknown
https://www.usps.com/manage/go-now.png	false	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	unknown
https://tools.usps.com/media/rcas/white-spinner-processing-step-09.svg	false	unknown
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	unknown
https://tools.usps.com/go/css/redelivery-reskin/schedule-redelivery.css	false	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false	unknown
https://h64.online-metrix.net/N4JLq69P7O5-EEDv?676ed5e95213aed5=g_EDD6dumfc36vtpHuq8yJBSYaSSb4yjqDak9958ot2_-fvk918tDE6Y4CM7U84FW8PDP7uGmK7di0QjyJvR9zi6rW-iVi_KBr2TBemp3wbl3iihCdl9njFHSlyrvkmxMDNEMzKu8RsKAw6AdYHisdQNYYxDmbOW	false	unknown
https://moversguide.usps.com/mgo-api/api/v1/coa/43c31553-d8e2-4825-9655-b26329e37fd4	false	unknown
https://moversguide.usps.com/js/desktop~mobile~rts~smsRts.e7345641.js	false	unknown
https://moversguide.usps.com/js/email.ed5298ec.js	false	unknown
https://store.usps.com/external/scripts/dijit-1.9.7/_Container.js	false	unknown
https://www.usps.com/ecp/asset/images/843067-T0.jpg	false	unknown
https://tools.usps.com/go/scripts/libs/jquery.min.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/errors/create.js	false	unknown
https://www.usps.com/ecp/asset/images/843063-T0.jpg	false	unknown
https://moversguide.usps.com/img/_icon-chevron.edfd0894.svg	false	unknown
https://www.usps.com/assets/images/default/info-icon.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/assets/images/default/right-arrow-inactive.png);	chromecache_606.2.dr, chromecache_438.2.dr	false		unknown
https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm	chromecache_280.2.dr, chromecache_634.2.dr, chromecache_819.2.dr, chromecache_562.2.dr, chromecache_371.2.dr	false		unknown
https://www.usps.com/store/images/ps-plus.png);	chromecache_525.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_772.2.dr, chromecache_523.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery-color	chromecache_340.2.dr, chromecache_408.2.dr	false		unknown
https://store.usps.com/store	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_708.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_524.2.dr, chromecache_365.2.dr	false		unknown
https://cdn.arcgis.com/sharing/rest/content/items/1768e8369a214dfab4e2167d5c5f2454/resources/styles/	chromecache_735.2.dr, chromecache_542.2.dr	false		unknown
http://getbootstrap.com)	chromecache_496.2.dr, chromecache_296.2.dr, chromecache_758.2.dr	false		unknown
https://www.usps.com/business/manage-mail.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/ecpext/asset/images/oct24-supplies-d.jpg);	chromecache_331.2.dr	false		unknown
https://www.usps.com/international/	chromecache_708.2.dr	false		unknown
https://www.usps.com/store/images/info-icon.png	chromecache_525.2.dr	false		unknown
https://www.usps.com/global-elements/header/script/	chromecache_677.2.dr, chromecache_556.2.dr, chromecache_627.2.dr, chromecache_379.2.dr	false		unknown
https://managemymove.usps.com	chromecache_674.2.dr	false		unknown
https://informeddelivery.usps.com/box/pages/intro/start.action	chromecache_823.2.dr	false		unknown
https://www.usps.com/shop/money-orders.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/business/verify-postage.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/O_FRB2-T0.jpg	chromecache_331.2.dr	false		unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://git.io/fjule	chromecache_271.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/store/images/ps-carticon.png	chromecache_525.2.dr	false		unknown
https://about.usps.com/what/government-services/	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://store.usps.com/store/cards-envelopes	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/store/images/usps_l_nav_red_arrow.svg	chromecache_525.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/O_1092-T0.jpg	chromecache_331.2.dr	false		unknown
https://utility.arcgis.com/sharing/rss	chromecache_735.2.dr, chromecache_542.2.dr	false		unknown
https://www.usps.com/store/images/new-icon.png)	chromecache_606.2.dr	false		unknown
https://github.com/eternicode/bootstrap-datepicker)	chromecache_806.2.dr, chromecache_492.2.dr, chromecache_763.2.dr, chromecache_670.2.dr	false		unknown
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://store.usps.com/store/stamps	chromecache_708.2.dr	false		unknown
https://postcalc.usps.com/?country=10440	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://basemaps-api.arcgis.com/arcgis/rest/services/styles/ArcGIS:Nova	chromecache_735.2.dr, chromecache_542.2.dr	false		unknown
https://ibasemaps-api.arcgis.com/arcgis/rest/services/Elevation/World_Hillshade/MapServer	chromecache_542.2.dr	false		unknown
https://www.usps.com/business/label-broker.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/international/letters.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_331.2.dr, chromecache_708.2.dr	false		unknown
https://www.usps.com/	chromecache_708.2.dr, chromecache_674.2.dr, chromecache_371.2.dr	false		unknown
https://informeddelivery.usps.com/	chromecache_708.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 16:09:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974917934612535
Encrypted:	false
SSDEEP:	48:8UAd2sT7LUHRidAKZdA19ehwiZUklqehNy+3:8Ujs7yKy
MD5:	248D6448D6B7FEA01359EB622AC1BB1F
SHA1:	71BECB1B9D972CD31265AEE5B3B6290AF1CCC94A
SHA-256:	101C9D10C662E580E81836DED5ED27A759FB0DC14AC1968E5647F502A8356DEB
SHA-512:	41C996DF29DCD91EF247FD19AF86C37F68EB096D9A0554D82CB7510096D83248373F9D1B5D870098D113BF52C5B1A9BD1CFFBC904095FE6F55275CEBB2C242A7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY .....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY .....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY .....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY#............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............6S......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 19:09:05.176968098 CEST	192.168.2.5	1.1.1.1	0x8850	Standard query (0)	email.shr.descartes.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:05.179490089 CEST	192.168.2.5	1.1.1.1	0x2950	Standard query (0)	email.shr.descartes.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:05.841501951 CEST	192.168.2.5	1.1.1.1	0xa424	Standard query (0)	trkcnfrm1.smi.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:05.841837883 CEST	192.168.2.5	1.1.1.1	0x691f	Standard query (0)	trkcnfrm1.smi.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:07.482719898 CEST	192.168.2.5	1.1.1.1	0xe564	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:07.483272076 CEST	192.168.2.5	1.1.1.1	0xa924	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:07.922122002 CEST	192.168.2.5	1.1.1.1	0x24ee	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:07.922987938 CEST	192.168.2.5	1.1.1.1	0xa187	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:10.410959005 CEST	192.168.2.5	1.1.1.1	0x4b36	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:10.411540985 CEST	192.168.2.5	1.1.1.1	0xa12	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:10.418978930 CEST	192.168.2.5	1.1.1.1	0xff05	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:10.419477940 CEST	192.168.2.5	1.1.1.1	0x8ed0	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:10.420559883 CEST	192.168.2.5	1.1.1.1	0x83d3	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:10.421088934 CEST	192.168.2.5	1.1.1.1	0xff3d	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:12.083411932 CEST	192.168.2.5	1.1.1.1	0x1fe5	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:12.083764076 CEST	192.168.2.5	1.1.1.1	0xcf1	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:12.103626013 CEST	192.168.2.5	1.1.1.1	0x2f97	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:12.103929043 CEST	192.168.2.5	1.1.1.1	0xf4b5	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:13.191749096 CEST	192.168.2.5	1.1.1.1	0xc2e5	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:13.192209005 CEST	192.168.2.5	1.1.1.1	0x527e	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:13.214099884 CEST	192.168.2.5	1.1.1.1	0x3d29	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:13.214220047 CEST	192.168.2.5	1.1.1.1	0x74d6	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 4, 2024 19:09:24.577100992 CEST	192.168.2.5	1.1.1.1	0x614f	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:24.577296972 CEST	192.168.2.5	1.1.1.1	0xb8c1	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:31.123169899 CEST	192.168.2.5	1.1.1.1	0x344e	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:31.123615026 CEST	192.168.2.5	1.1.1.1	0x5318	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 4, 2024 19:09:36.790683985 CEST	192.168.2.5	1.1.1.1	0xff31	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:36.791234970 CEST	192.168.2.5	1.1.1.1	0xc1c8	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 4, 2024 19:09:37.264045954 CEST	192.168.2.5	1.1.1.1	0x951f	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:37.264270067 CEST	192.168.2.5	1.1.1.1	0x69e8	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:38.038835049 CEST	192.168.2.5	1.1.1.1	0x6810	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:38.039000988 CEST	192.168.2.5	1.1.1.1	0xf350	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 19:09:38.352482080 CEST	192.168.2.5	1.1.1.1	0x8788	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:38.352933884 CEST	192.168.2.5	1.1.1.1	0x2b3e	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 4, 2024 19:09:38.996644020 CEST	192.168.2.5	1.1.1.1	0x835f	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:38.996778965 CEST	192.168.2.5	1.1.1.1	0xec16	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:39.006740093 CEST	192.168.2.5	1.1.1.1	0x179c	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:39.007006884 CEST	192.168.2.5	1.1.1.1	0x1ed	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 4, 2024 19:09:46.275333881 CEST	192.168.2.5	1.1.1.1	0x4812	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:46.275684118 CEST	192.168.2.5	1.1.1.1	0x69b8	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:50.131644011 CEST	192.168.2.5	1.1.1.1	0x62a3	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:50.131772995 CEST	192.168.2.5	1.1.1.1	0xa78d	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 4, 2024 19:09:51.526093960 CEST	192.168.2.5	1.1.1.1	0xd4e9	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:51.526285887 CEST	192.168.2.5	1.1.1.1	0x8d02	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 4, 2024 19:09:52.032219887 CEST	192.168.2.5	1.1.1.1	0xa358	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:52.033015013 CEST	192.168.2.5	1.1.1.1	0x91ca	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:52.369216919 CEST	192.168.2.5	1.1.1.1	0xf168	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:52.369282961 CEST	192.168.2.5	1.1.1.1	0xb15f	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:54.234682083 CEST	192.168.2.5	1.1.1.1	0x373b	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:54.234843016 CEST	192.168.2.5	1.1.1.1	0xa60a	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 4, 2024 19:09:57.718133926 CEST	192.168.2.5	1.1.1.1	0x5064	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:57.718564987 CEST	192.168.2.5	1.1.1.1	0xea82	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 4, 2024 19:09:59.858726025 CEST	192.168.2.5	1.1.1.1	0x7dde	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:59.859006882 CEST	192.168.2.5	1.1.1.1	0x736c	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 4, 2024 19:09:59.897933006 CEST	192.168.2.5	1.1.1.1	0x760d	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:09:59.898159981 CEST	192.168.2.5	1.1.1.1	0x44c9	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:10:01.654052019 CEST	192.168.2.5	1.1.1.1	0xd303	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:01.654320002 CEST	192.168.2.5	1.1.1.1	0xc76e	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 4, 2024 19:10:01.656439066 CEST	192.168.2.5	1.1.1.1	0x16b2	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:01.656922102 CEST	192.168.2.5	1.1.1.1	0xde6a	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 4, 2024 19:10:02.592055082 CEST	192.168.2.5	1.1.1.1	0x88b7	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:02.592055082 CEST	192.168.2.5	1.1.1.1	0x89f2	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:02.606379032 CEST	192.168.2.5	1.1.1.1	0x1f3b	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:02.723921061 CEST	192.168.2.5	1.1.1.1	0xe316	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:02.724364996 CEST	192.168.2.5	1.1.1.1	0xde95	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:05.530977011 CEST	192.168.2.5	1.1.1.1	0xa61a	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:05.531420946 CEST	192.168.2.5	1.1.1.1	0x6e31	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:10:05.612853050 CEST	192.168.2.5	1.1.1.1	0x1641	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:05.613176107 CEST	192.168.2.5	1.1.1.1	0x4cb0	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:10:06.816808939 CEST	192.168.2.5	1.1.1.1	0x8035	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:06.816967964 CEST	192.168.2.5	1.1.1.1	0xf7ec	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:10:08.872564077 CEST	192.168.2.5	1.1.1.1	0x2f44	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:08.872951031 CEST	192.168.2.5	1.1.1.1	0x2f6	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:08.904243946 CEST	192.168.2.5	1.1.1.1	0xe0dd	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:08.904385090 CEST	192.168.2.5	1.1.1.1	0x177c	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:09.742239952 CEST	192.168.2.5	1.1.1.1	0x9f3e	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:09.742759943 CEST	192.168.2.5	1.1.1.1	0x9f6d	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:09.780917883 CEST	192.168.2.5	1.1.1.1	0x1b41	Standard query (0)	3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:09.781056881 CEST	192.168.2.5	1.1.1.1	0x22c8	Standard query (0)	3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:10.668143988 CEST	192.168.2.5	1.1.1.1	0x2bb4	Standard query (0)	3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:10.668282032 CEST	192.168.2.5	1.1.1.1	0x192f	Standard query (0)	3fym673kbuhtydykcfaj5v4x5pwj7hyxrnhkhs6b9229a7728f637b92am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:10.703994036 CEST	192.168.2.5	1.1.1.1	0xf6ea	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:10.704195023 CEST	192.168.2.5	1.1.1.1	0x9be0	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:11.332161903 CEST	192.168.2.5	1.1.1.1	0x3281	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:11.334358931 CEST	192.168.2.5	1.1.1.1	0x1028	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:11.342340946 CEST	192.168.2.5	1.1.1.1	0x2e	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:11.448076010 CEST	192.168.2.5	1.1.1.1	0x180d	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:11.448220015 CEST	192.168.2.5	1.1.1.1	0x750f	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 4, 2024 19:10:11.520087957 CEST	192.168.2.5	1.1.1.1	0xc474	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 19:10:11.520227909 CEST	192.168.2.5	1.1.1.1	0x2443	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 4, 2024 19:10:12.223416090 CEST	192.168.2.5	1.1.1.1	0x8cc8	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 4, 2024 19:10:12.393296003 CEST	192.168.2.5	1.1.1.1	0xa70b	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 19:09:05.244977951 CEST	726	OUT	GET /c/eJwcys1qxCAQAOCn0aOM42jiwUOhBBZKKXShZ2Nmm7D52Y6m0Lcv7PGDb0q9HyNQpznZDnvwIUCv51SihRCZGLobZA-UI3XMiByoAyC9JAQkC0DWk8PesGVGcGFihsjkFUGdxUxcS5bG1ZRj02uaW3tU5V4UDgqHJvey32Szpm6LOevj2RQOH9fPy95Ydm5fPCocnnrLI6-X_edc5M9Mh3LDIcv3VXK5v5-bcq-RAKwLFgJ4Cz1GH3xELWmpOReT15GlKYJtPA1Pp_5N-B8AAP__c9xNiA HTTP/1.1 Host: email.shr.descartes.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 19:09:05.838249922 CEST	926	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-store Content-Length: 554 Content-Type: text/html Date: Fri, 04 Oct 2024 17:09:05 GMT Location: https://trkcnfrm1.smi.usps.com/PTSInternetWeb/InterLabelInquiry.do?origTrackNum=9400136106051082956592 X-Robots-Tag: noindex X-Xss-Protection: 1; mode=block Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 61 72 67 65 74 20 55 52 4c 3a 20 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 6b 63 6e 66 72 6d 31 2e 73 6d 69 2e 75 73 70 73 2e 63 6f 6d 2f 50 54 53 49 [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta name="robots" content="noindex"><meta charset="utf-8"></head><body><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to target URL: <a href="https://trkcnfrm1.smi.usps.com/PTSInternetWeb/InterLabelInquiry.do?origTrackNum=9400136106051082956592">https://trkcnfrm1.smi.usps.com/PTSInternetWeb/InterLabelInquiry.do?origTrackNum=9400136106051082956592</a>. If not click the link.</body></html>
Oct 4, 2024 19:09:50.846421003 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 4, 2024 19:10:35.861161947 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:07 UTC	736	OUT	GET /PTSInternetWeb/InterLabelInquiry.do?origTrackNum=9400136106051082956592 HTTP/1.1 Host: trkcnfrm1.smi.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 17:09:07 UTC	322	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 17:09:07 GMT Location: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Server: ECAcc (lhc/795E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains x-vdms-ruleset: 1.0 Content-Length: 0 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:08 UTC	723	OUT	GET /go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 HTTP/1.1 Host: tools.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 17:09:09 UTC	1661	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Language: en-US Content-Type: text/html; charset=UTF-8 Date: Fri, 04 Oct 2024 17:09:09 GMT Expires: 0 Pragma: no-cache Server: ECAcc (dce/26C0) Set-Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4; Expires=Fri, 04-Oct-24 17:09:38 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 04-Oct-24 17:09:38 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 04-Oct-24 17:09:38 GMT; Path=/; Secure Set-Cookie: JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; Path=/; Secure; HttpOnly Set-Cookie: ADRUM_BT1=R:0\|i:118232; Expires=Fri, 04-Oct-24 17:09:38 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:118232\|e:87; Expires=Fri, 04-Oct-24 17:09:38 GMT; Path=/; Secure Set-Cookie: TLTSID=ed497870d8591663890100e0ed96a2ca; path=/; domain=.USPS.com; Secure; Set-Cookie: NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3;path=/;secure;httponly Set-Cookie: o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; Path=/; Max-Age=1577847600; Domain=usps.com Set-Cookie: TLTSID=2982f1d6d85a1663810700e0ed96a2ca; path=/; domain=.USPS.com; Secure; Set-Cookie: NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b;path=/;secure;httponly Strict-Transport-Security: max-age=31536000 ; includeSubDomains Via: 1.1 google X-Frame-Options: SAMEORIGIN X-Ion-Hop: 2 X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-10-04 17:09:09 UTC	6	IN	Data Raw: 31 61 37 33 0d 0a Data Ascii: 1a73
2024-10-04 17:09:09 UTC	6771	IN	Data Raw: 0a 0a 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 0a 3c 73 63 72 69 70 74 20 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><script
2024-10-04 17:09:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 17:09:09 UTC	6	IN	Data Raw: 32 30 30 30 0d 0a Data Ascii: 2000
2024-10-04 17:09:09 UTC	8192	IN	Data Raw: 32 67 59 54 52 47 30 41 22 2c 22 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2c 22 55 77 4d 47 56 4b 61 37 44 34 31 46 74 48 4d 6e 31 4f 31 77 42 6a 73 74 70 71 32 66 6a 4f 67 22 2c 22 64 62 7a 70 36 56 31 77 73 69 76 6e 64 76 62 45 4c 57 62 6d 67 49 32 45 45 67 6f 6d 65 67 22 2c 22 63 6c 6f 73 65 22 2c 22 34 37 62 36 74 46 74 78 6a 7a 47 35 58 66 69 7a 48 41 22 2c 22 76 42 38 46 62 70 61 68 42 50 42 36 30 56 46 6e 31 62 4d 34 55 55 4e 43 77 4a 54 4f 76 4b 50 65 67 5a 44 43 2d 61 79 6f 50 6a 6e 6c 74 34 6a 4c 66 4a 69 46 6b 51 77 4a 50 44 61 35 33 2d 67 6d 42 66 44 30 6f 32 44 34 35 54 34 52 47 49 79 6d 31 4e 54 36 6b 70 45 55 42 52 51 53 65 54 7a 7a 30 4c 69 72 62 56 56 4e 69 66 33 4f 6d 50 58 6c 55 70 72 6e 6f 67 56 52 6a 5f 41 70 75 65 47 47 76 4a 70 41 75 Data Ascii: 2gYTRG0A","Float64Array","UwMGVKa7D41FtHMn1O1wBjstpq2fjOg","dbzp6V1wsivndvbELWbmgI2EEgomeg","close","47b6tFtxjzG5XfizHA","vB8FbpahBPB60VFn1bM4UUNCwJTOvKPegZDC-ayoPjnlt4jLfJiFkQwJPDa53-gmBfD0o2D45T4RGIym1NT6kpEUBRQSeTzz0LirbVVNif3OmPXlUprnogVRj_ApueGGvJpAu
2024-10-04 17:09:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-10-04 17:09:09 UTC	6	IN	Data Raw: 38 30 30 30 0d 0a Data Ascii: 8000
2024-10-04 17:09:09 UTC	1404	IN	Data Raw: 78 30 42 5c 5c 66 5c 5c 78 30 45 2d 5c 5c 75 32 30 32 37 5c 5c 75 32 30 32 41 2d 5c 5c 75 44 37 46 46 5c 5c 75 45 30 30 30 2d 5c 5c 75 46 46 46 46 5d 7c 5b 5c 5c 75 44 38 30 30 2d 5c 5c 75 44 42 46 46 5d 5b 5c 5c 75 44 43 30 30 2d 5c 5c 75 44 46 46 46 5d 7c 5b 5c 5c 75 44 38 30 30 2d 5c 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 5c 75 44 43 30 30 2d 5c 5c 75 44 46 46 46 5d 29 7c 28 3f 3a 5b 5e 5c 5c 75 44 38 30 30 2d 5c 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 5c 75 44 43 30 30 2d 5c 5c 75 44 46 46 46 5d 29 24 22 2c 22 4c 61 72 55 2d 52 46 4c 71 58 47 32 4e 63 79 6f 59 58 2d 6b 6e 67 22 2c 22 66 79 4a 4c 5a 70 33 46 4e 73 51 34 22 2c 22 69 6b 4e 53 4c 64 37 67 53 62 45 77 69 54 56 71 67 71 31 61 48 52 30 43 6d 51 22 2c 22 73 69 6e 22 2c 22 52 57 42 79 51 39 44 4b 4c Data Ascii: x0B\\f\\x0E-\\u2027\\u202A-\\uD7FF\\uE000-\\uFFFF]\|[\\uD800-\\uDBFF][\\uDC00-\\uDFFF]\|[\\uD800-\\uDBFF](?![\\uDC00-\\uDFFF])\|(?:[^\\uD800-\\uDBFF]\|^)[\\uDC00-\\uDFFF])$","LarU-RFLqXG2NcyoYX-kng","fyJLZp3FNsQ4","ikNSLd7gSbEwiTVqgq1aHR0CmQ","sin","RWByQ9DKL
2024-10-04 17:09:09 UTC	16383	IN	Data Raw: 44 43 6b 38 73 73 71 4a 22 2c 22 6b 33 67 62 64 5a 37 75 49 71 38 22 2c 22 4e 4a 77 22 2c 22 6e 51 6b 63 42 62 4b 6d 4c 49 5a 4d 34 6d 70 46 39 4b 74 49 64 6d 64 71 71 2d 37 37 6b 6f 33 36 76 36 69 79 79 5a 4f 4f 41 45 5f 43 6b 71 62 35 47 65 4c 37 2d 44 59 5f 42 68 6a 41 22 2c 22 63 6c 61 73 73 4e 61 6d 65 22 2c 22 70 44 6c 6b 47 75 6d 47 4e 41 22 2c 22 63 72 5f 58 36 45 64 41 6d 67 22 2c 22 46 6c 77 68 46 4b 75 6c 49 4c 73 67 36 43 77 79 5f 66 35 67 52 45 68 5a 69 4c 43 38 71 71 54 55 39 4a 57 68 6a 50 72 49 64 41 22 2c 22 5c 75 44 38 33 45 5c 75 44 44 41 41 22 2c 22 6c 2d 6a 37 78 6e 41 52 31 67 2d 30 57 74 57 74 48 77 22 2c 22 54 48 6f 46 4d 4c 65 32 22 2c 22 50 32 73 53 59 4b 69 75 66 39 6f 73 72 33 51 58 73 62 6b 22 2c 22 78 4c 6d 76 78 6a 77 69 33 Data Ascii: DCk8ssqJ","k3gbdZ7uIq8","NJw","nQkcBbKmLIZM4mpF9KtIdmdqq-77ko36v6iyyZOOAE_Ckqb5GeL7-DY_BhjA","className","pDlkGumGNA","cr_X6EdAmg","FlwhFKulILsg6Cwy_f5gREhZiLC8qqTU9JWhjPrIdA","\uD83E\uDDAA","l-j7xnAR1g-0WtWtHw","THoFMLe2","P2sSYKiuf9osr3QXsbk","xLmvxjwi3
2024-10-04 17:09:09 UTC	14981	IN	Data Raw: 22 68 57 41 75 49 39 4c 44 49 74 64 4c 37 32 34 30 69 50 6b 22 2c 22 28 5b 30 2d 39 5d 7b 31 2c 33 7d 28 5c 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 29 7b 33 7d 7c 5b 61 2d 66 30 2d 39 5d 7b 31 2c 34 7d 28 3a 5b 61 2d 66 30 2d 39 5d 7b 31 2c 34 7d 29 7b 37 7d 29 22 2c 22 6c 55 51 4c 4a 4e 47 36 57 64 55 73 69 30 51 2d 75 65 63 75 47 67 22 2c 22 70 6f 70 22 2c 22 51 57 39 4d 66 4e 75 73 66 4b 45 4a 38 41 22 2c 22 4d 61 74 68 22 2c 22 52 65 66 6c 65 63 74 22 2c 22 57 42 6c 55 57 4c 32 50 51 70 42 30 75 79 5a 6c 5f 6f 30 52 59 69 35 73 22 2c 22 48 48 39 70 4a 73 33 70 4f 61 56 72 35 77 22 2c 22 5a 55 6f 58 62 59 75 31 64 76 63 22 2c 22 4b 53 34 6f 52 6f 47 38 57 50 70 52 72 51 68 74 35 70 41 56 61 57 6c 33 72 76 62 31 22 2c 22 6a 76 57 35 6d 44 63 49 77 48 58 6e Data Ascii: "hWAuI9LDItdL7240iPk","([0-9]{1,3}(\\.[0-9]{1,3}){3}\|[a-f0-9]{1,4}(:[a-f0-9]{1,4}){7})","lUQLJNG6WdUsi0Q-uecuGg","pop","QW9MfNusfKEJ8A","Math","Reflect","WBlUWL2PQpB0uyZl_o0RYi5s","HH9pJs3pOaVr5w","ZUoXbYu1dvc","KS4oRoG8WPpRrQht5pAVaWl3rvb1","jvW5mDcIwHXn

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 17:09:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=171364 Date: Fri, 04 Oct 2024 17:09:09 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:10 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 17:09:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=171438 Date: Fri, 04 Oct 2024 17:09:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 17:09:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	546	OUT	GET /optimize.js?id=GTM-T35N9RL HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 17:09:11 UTC	1049	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Fri, 04 Oct 2024 17:09:11 GMT Expires: Fri, 04 Oct 2024 17:09:11 GMT Cache-Control: private, max-age=900 Last-Modified: Fri, 04 Oct 2024 15:00:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0"}],} Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-10-04 17:09:11 UTC	341	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 34 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"49", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 72 6f 22 2c 30 5d 2c 22 61 72 67 31 22 3a 5b 22 6d 61 63 72 6f 22 2c 31 5d 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 65 71 22 2c 22 61 72 67 30 22 3a 5b 22 6d 61 63 72 6f 22 2c 30 5d 2c 22 61 72 67 31 22 3a 22 6f 70 74 69 6d 69 7a 65 2e 63 61 6c 6c 62 61 63 6b 22 7d 5d 2c 0a 20 20 22 72 75 6c 65 73 22 3a 5b 5b 5b 22 69 66 22 2c 30 5d 2c 5b 22 61 64 64 22 2c 30 5d 5d 2c 5b 5b 22 69 66 22 2c 31 5d 2c 5b 22 61 64 64 22 2c 31 5d 5d 5d 0a 7d 2c 0a 22 72 75 6e 74 69 6d 65 22 3a 5b 20 5b 35 30 2c 22 5f 5f 65 22 2c 5b 34 36 2c 22 61 22 5d 2c 5b 33 36 2c 5b 31 33 2c 5b 34 31 2c 22 24 30 22 5d 2c 5b 33 2c 22 24 30 22 2c 5b 22 72 65 71 75 69 72 65 22 2c 22 69 6e 74 65 72 6e 61 6c Data Ascii: unction":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}], "rules":[[["if",0],["add",0]],[["if",1],["add",1]]]},"runtime":[ [50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6a 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: })};b.prototype.toString=function(){return this.j};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});var la=function(
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 76 61 29 76 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 50 6e 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 Data Ascii: ype);a.prototype.constructor=a;if(va)va(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Pn=b.prototype},ya=function(){for(var a=Number(this)
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 61 72 65 6e 74 2e 67 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 3b 0a 44 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 7c 7c 21 28 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 21 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 29 7d 3b 76 61 72 20 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 44 61 28 61 2e 50 2c 61 29 3b 61 2e 43 26 26 28 62 2e 43 3d 61 2e 43 29 3b 62 2e 48 3d 61 2e 48 3b 62 2e 6a 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 62 7d 3b 44 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 7d 3b 44 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 61 3d Data Ascii: arent.get(a):void 0};Da.prototype.has=function(a){return!!this.values.has(a)\|\|!(!this.parent\|\|!this.parent.has(a))};var Ga=function(a){var b=new Da(a.P,a);a.C&&(b.C=a.C);b.H=a.H;b.j=a.j;return b};Da.prototype.rd=function(){return this.P};Da.prototype.La=
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 20 63 7d 3b 62 61 3d 4b 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 61 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6a 7c 7c 42 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 29 7d 3b 62 61 2e 58 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6a 7c 7c 42 61 2e 70 72 6f 74 6f 74 79 70 65 2e 58 68 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 29 7d 3b 62 61 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 7c 7c 42 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 62 61 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 61 28 74 68 69 73 2c 31 29 7d 3b 0a 62 61 2e 4c 61 3d 66 75 6e 63 74 69 Data Ascii: c};ba=Ka.prototype;ba.set=function(a,b){this.j\|\|Ba.prototype.set.call(this,a,b)};ba.Xh=function(a,b){this.j\|\|Ba.prototype.Xh.call(this,a,b)};ba.remove=function(a){this.j\|\|Ba.prototype.remove.call(this,a)};ba.Ja=function(){return La(this,1)};ba.La=functi
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 5b 5d 3a 61 3b 4b 61 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 26 26 28 55 61 28 62 29 3f 74 68 69 73 2e 76 61 6c 75 65 73 5b 4e 75 6d 62 65 72 28 62 29 5d 3d 61 5b 4e 75 6d 62 65 72 28 62 29 5d 3a 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 62 2c 61 5b 62 5d 29 29 7d 3b 77 61 28 56 61 2c 4b 61 29 3b 62 61 3d 56 61 2e 70 72 6f 74 6f 74 79 70 65 3b 62 61 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 26 26 61 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 29 3e 3d 30 29 72 65 74 75 72 6e 22 Data Ascii: nction(a){a=a===void 0?[]:a;Ka.call(this);this.values=[];for(var b in a)a.hasOwnProperty(b)&&(Ua(b)?this.values[Number(b)]=a[Number(b)]:Ka.prototype.set.call(this,b,a[b]))};wa(Va,Ka);ba=Va.prototype;ba.toString=function(a){if(a&&a.indexOf(this)>=0)return"
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 75 65 73 2e 75 6e 73 68 69 66 74 2e 61 70 70 6c 79 28 74 68 69 73 2e 76 61 6c 75 65 73 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 62 61 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 55 61 28 61 29 26 26 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 7c 7c 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 3b 62 61 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 61 2e 63 61 6c 6c 28 74 68 69 73 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 74 68 69 73 2e 76 61 6c 75 65 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 66 6f 72 Data Ascii: ues.unshift.apply(this.values,Array.prototype.slice.call(arguments))};ba.has=function(a){return Ua(a)&&this.values.hasOwnProperty(a)\|\|Ka.prototype.has.call(this,a)};ba.La=function(){Ka.prototype.La.call(this);Object.freeze(this.values)};function Wa(a){for
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 68 3b 65 2b 2b 29 65 25 38 3d 3d 3d 30 26 26 65 3e 30 26 26 28 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 2c 64 3d 30 29 2c 62 5b 65 5d 26 26 28 64 7c 3d 31 3c 3c 65 25 38 29 3b 64 3e 30 26 26 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 3b 72 65 74 75 72 6e 20 63 62 28 63 2e 6a 6f 69 6e 28 22 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2b 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 62 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 62 3d 65 62 2e 66 64 72 7c 7c 5b 5d 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 5d 26 26 61 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3e 30 3f 61 3a 76 6f 69 64 20 30 7d 3b Data Ascii: h;e++)e%8===0&&e>0&&(c.push(String.fromCharCode(d)),d=0),b[e]&&(d\|=1<<e%8);d>0&&c.push(String.fromCharCode(d));return cb(c.join("")).replace(/\.+$/,"")}function hb(){for(var a=[],b=eb.fdr\|\|[],c=0;c<b.length;c++)b[c]&&a.push(c);return a.length>0?a:void 0};
2024-10-04 17:09:11 UTC	1390	IN	Data Raw: 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 76 61 72 20 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 67 74 6d 2e 22 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 7b 7d 7d 3b 73 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 3d 62 7d 3b 73 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 7d 3b 73 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 61 29 21 3d 3d 76 6f 69 64 20 30 7d 3b 0a Data Ascii: ().getTime()}var sb=function(){this.prefix="gtm.";this.values={}};sb.prototype.set=function(a,b){this.values[this.prefix+a]=b};sb.prototype.get=function(a){return this.values[this.prefix+a]};sb.prototype.contains=function(a){return this.get(a)!==void 0};

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1124	OUT	GET /go/css/footer.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	409	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 15227 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "b75-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/26BE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 2933 Connection: close
2024-10-04 17:09:11 UTC	2933	IN	Data Raw: 68 74 6d 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 32 2e 35 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 36 32 2e 35 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 36 32 2e 35 25 7d 2e 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 32 30 70 78 20 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 35 30 6d 73 20 65 61 73 65 20 30 73 7d 2e Data Ascii: html{font-size:62.5%;-ms-text-size-adjust:62.5%;-webkit-text-size-adjust:62.5%}.global-footer--wrap{background-color:#f7f7f7;border-top:1px solid #dadada;box-sizing:border-box;left:0;padding:30px 20px 35px;position:relative;transition:left 250ms ease 0s}.

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1136	OUT	GET /go/css/libs/bootstrap.min.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	412	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6151 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "1d903-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/26B4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 121091 Connection: close
2024-10-04 17:09:11 UTC	15990	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-f
2024-10-04 17:09:11 UTC	393	IN	Data Raw: 2e 69 74 65 6d 3e 69 6d 67 2c 2e 69 6d 67 2d 72 65 73 70 6f 6e 73 69 76 65 2c 2e 74 68 75 6d 62 6e 61 69 6c 20 61 3e 69 6d 67 2c 2e 74 68 75 6d 62 6e 61 69 6c 3e 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 31 34 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 Data Ascii: .item>img,.img-responsive,.thumbnail a>img,.thumbnail>img{display:block;max-width:100%;height:auto}.img-rounded{border-radius:6px}.img-thumbnail{display:inline-block;max-width:100%;height:auto;padding:4px;line-height:1.42857143;background-color:#fff;borde
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 7d 2e 69 6d 67 2d 63 69 72 63 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 68 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 2e 73 72 2d 6f 6e 6c 79 2d 66 6f Data Ascii: }.img-circle{border-radius:50%}hr{margin-top:20px;margin-bottom:20px;border:0;border-top:1px solid #eee}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-only-focusable:active,.sr-only-fo
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 65 72 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 69 6e 66 6f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 34 65 33 66 33 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 2e 77 61 72 6e 69 6e 67 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 2e 77 61 72 6e 69 6e 67 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 Data Ascii: er>tbody>tr>th.info:hover{background-color:#c4e3f3}.table>tbody>tr.warning>td,.table>tbody>tr.warning>th,.table>tbody>tr>td.warning,.table>tbody>tr>th.warning,.table>tfoot>tr.warning>td,.table>tfoot>tr.warning>th,.table>tfoot>tr>td.warning,.table>tfoot>tr
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 66 6f 63 75 73 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 2e 6f 70 65 6e 3e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 38 34 33 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 35 36 32 35 7d 2e 62 74 6e 2d 73 75 63 63 65 73 73 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 73 75 63 63 65 73 73 3a 61 63 74 69 76 65 2c 2e 6f 70 Data Ascii: focus,.btn-success:active:hover,.open>.dropdown-toggle.btn-success.focus,.open>.dropdown-toggle.btn-success:focus,.open>.dropdown-toggle.btn-success:hover{color:#fff;background-color:#398439;border-color:#255625}.btn-success.active,.btn-success:active,.op
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 76 65 3e 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 35 35 35 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 6c 69 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 7d 2e 6e 61 76 2d 74 61 62 73 2e 6e 61 76 2d 6a 75 73 74 69 66 69 65 64 3e 6c 69 3e 61 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 74 65 78 74 2d 61 Data Ascii: ve>a:hover{color:#555;cursor:default;background-color:#fff;border:1px solid #ddd;border-bottom-color:transparent}.nav-tabs.nav-justified{width:100%;border-bottom:0}.nav-tabs.nav-justified>li{float:none}.nav-tabs.nav-justified>li>a{margin-bottom:5px;text-a
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 62 74 6e 2d 78 73 20 2e 62 61 64 67 65 7b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 35 70 78 7d 61 2e 62 61 64 67 65 3a 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 3e 2e 62 61 64 67 65 2c 2e 6e 61 76 2d 70 69 6c 6c 73 3e 2e 61 63 74 69 76 65 3e 61 3e 2e 62 61 64 67 65 7b 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3e 2e 62 61 64 67 65 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 Data Ascii: btn-xs .badge{top:0;padding:1px 5px}a.badge:focus,a.badge:hover{color:#fff;text-decoration:none;cursor:pointer}.list-group-item.active>.badge,.nav-pills>.active>a>.badge{color:#337ab7;background-color:#fff}.list-group-item>.badge{float:right}.list-group-i
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 62 6f 64 79 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 70 61 6e 65 6c 3e 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 2e 74 61 62 6c 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 66 6f 6f 74 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 20 74 64 3a Data Ascii: ld>.table:last-child>tbody:last-child>tr:last-child td:first-child,.panel>.table-responsive:last-child>.table:last-child>tbody:last-child>tr:last-child th:first-child,.panel>.table-responsive:last-child>.table:last-child>tfoot:last-child>tr:last-child td:
2024-10-04 17:09:11 UTC	6410	IN	Data Raw: 72 6f 6c 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 39 30 29 3b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 6e 65 78 74 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 20 2e 69 63 6f 6e 2d 70 72 65 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 Data Ascii: rol:hover{color:#fff;text-decoration:none;filter:alpha(opacity=90);outline:0;opacity:.9}.carousel-control .glyphicon-chevron-left,.carousel-control .glyphicon-chevron-right,.carousel-control .icon-next,.carousel-control .icon-prev{position:absolute;top:50

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1144	OUT	GET /go/css/redelivery-reskin/calendar.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	411	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 74416 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "38fd-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/268E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 14589 Connection: close
2024-10-04 17:09:11 UTC	14589	IN	Data Raw: 73 70 61 6e 2e 63 61 6c 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 36 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 64 65 64 65 64 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 30 34 64 37 34 7d 2e 75 69 2d 64 61 74 65 Data Ascii: span.cal-info:before{content:"";display:inline-block;width:20px;height:20px;border:1px solid #000;margin-bottom:-6px;margin-left:10px;margin-right:6px}.btn-primary:hover{color:#336!important;background-color:#ededed!important;border-color:#204d74}.ui-date

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1134	OUT	GET /go/css/libs/datepicker3.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	411	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 74416 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "527d-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/26DE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 21117 Connection: close
2024-10-04 17:09:11 UTC	15991	IN	Data Raw: 2f 2a 21 0a 20 2a 20 44 61 74 65 70 69 63 6b 65 72 20 66 6f 72 20 42 6f 6f 74 73 74 72 61 70 20 76 31 2e 36 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 65 74 65 72 6e 69 63 6f 64 65 2f 62 6f 6f 74 73 74 72 61 70 2d 64 61 74 65 70 69 63 6b 65 72 29 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 53 74 65 66 61 6e 20 50 65 74 72 65 0a 20 2a 20 49 6d 70 72 6f 76 65 6d 65 6e 74 73 20 62 79 20 41 6e 64 72 65 77 20 52 6f 77 6c 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 20 28 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 29 0a 20 2a 2f 2e 64 61 74 65 70 69 Data Ascii: /! Datepicker for Bootstrap v1.6.1 (https://github.com/eternicode/bootstrap-datepicker) * * Copyright 2012 Stefan Petre * Improvements by Andrew Rowls * Licensed under the Apache License v2.0 (http://www.apache.org/licenses/LICENSE-2.0) */.datepi
2024-10-04 17:09:11 UTC	5126	IN	Data Raw: 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 36 30 39 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 30 34 64 37 34 7d 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 61 63 74 69 76 65 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 2e 64 61 Data Ascii: .datepicker table tr td span.active:hover:hover{color:#fff;background-color:#286090;border-color:#204d74}.datepicker table tr td span.active.active,.datepicker table tr td span.active.disabled.active,.datepicker table tr td span.active.disabled:active,.da

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1122	OUT	GET /go/css/main.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	412	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 74416 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "1487d-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/26E1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 84093 Connection: close
2024-10-04 17:09:11 UTC	15990	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 61 73 74 2e 66 6f 6e 74 73 2e 6e 65 74 2f 74 2f 31 2e 63 73 73 3f 61 70 69 54 79 70 65 3d 63 73 73 26 70 72 6f 6a 65 63 74 69 64 3d 65 65 33 38 39 30 30 63 2d 36 34 35 39 2d 34 65 30 63 2d 39 35 64 36 2d 38 39 36 63 30 32 30 38 64 33 64 30 22 29 3b 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 31 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 61 65 31 36 35 36 61 61 2d 35 66 38 66 2d 34 39 30 35 2d 61 65 64 30 2d 39 33 65 36 36 37 62 64 36 65 34 61 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b Data Ascii: @import url("https://fast.fonts.net/t/1.css?apiType=css&projectid=ee38900c-6459-4e0c-95d6-896c0208d3d0");html{-webkit-font-smoothing:antialiased}@font-face{font-family:"HelveticaNeueW01";src:url("../fonts/ae1656aa-5f8f-4905-aed0-93e667bd6e4a.eot?#iefix");
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 61 74 5f 64 6f 77 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 69 63 6f 6e 2d 63 61 72 61 74 5f 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 64 6f 77 6e 2d 61 72 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 63 6f 6c 6c 61 70 73 65 64 20 2e 75 70 2d 61 72 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 69 6e 69 5f 66 61 71 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 31 30 70 78 7d 2e 6d 69 6e 69 5f 66 61 71 20 64 69 76 5b 63 6c 61 73 73 2a 3d 22 63 6f 6c 22 5d 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6d 69 6e 69 5f 66 61 71 20 68 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 6d 69 6e 69 5f 66 Data Ascii: at_down{font-size:15px}.icon-carat_up{font-size:15px}.collapsed .down-arr{display:inline-block}.collapsed .up-arr{display:none}.mini_faq{padding:0 20px 10px}.mini_faq div[class*="col"]{padding-left:0}.mini_faq h5{margin-top:30px;margin-bottom:20px}.mini_f
2024-10-04 17:09:11 UTC	393	IN	Data Raw: 74 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 61 6c 65 72 74 20 2e 74 65 78 74 5f 65 78 70 6c 61 6e 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 65 37 31 39 32 31 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 61 72 63 68 69 76 65 64 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 61 72 63 68 69 76 65 64 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 2e 70 72 6f Data Ascii: t .delivery_status h2 strong{font-size:22px}.product_summary.delivery_alert .text_explanation{color:#e71921}.product_summary.delivery_archived .delivery_status h2{color:#336}.product_summary.delivery_archived .delivery_status h2 strong{font-size:22px}.pro
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 64 75 70 6c 69 63 61 74 65 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 64 75 70 6c 69 63 61 74 65 20 2e 74 65 78 74 5f 65 78 70 6c 61 6e 61 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 73 65 69 7a 65 64 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 70 72 6f 64 75 63 74 5f 73 75 6d 6d 61 72 79 2e 64 65 6c 69 76 65 72 79 5f 73 65 69 7a 65 64 20 2e 64 65 6c 69 76 65 72 79 5f 73 74 61 74 75 73 20 68 32 20 73 74 72 6f 6e 67 Data Ascii: mmary.delivery_duplicate .delivery_status h2 strong{font-size:22px}.product_summary.delivery_duplicate .text_explanation{color:#336}.product_summary.delivery_seized .delivery_status h2{color:#336}.product_summary.delivery_seized .delivery_status h2 strong
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 6e 65 7d 2e 72 65 61 64 4d 6f 72 65 2e 63 6c 6f 73 65 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 31 27 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 66 6f 6e 74 65 6c 6c 6f 27 3b 77 69 64 74 68 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 2e 72 65 61 64 4d 6f 72 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 65 38 30 33 27 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 66 6f 6e 74 65 6c 6c 6f 27 3b 77 69 64 74 68 3a 31 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 70 2e 6c 65 67 61 6c 7b 66 6f 6e Data Ascii: ne}.readMore.closed:after{content:'\e801';font-family:'fontello';width:1em;margin-right:.2em;text-align:center;margin-left:5px}.readMore:after{content:'\e803';font-family:'fontello';width:1em;margin-right:.2em;text-align:center;margin-left:5px}p.legal{fon
2024-10-04 17:09:11 UTC	16383	IN	Data Raw: 30 7d 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 3a 68 6f 76 65 72 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 74 72 20 74 64 20 73 70 61 6e 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 38 36 30 39 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 30 34 64 37 Data Ascii: 0}.datepicker table tr td span.active.disabled:hover,.datepicker table tr td span.active.disabled:hover:hover,.datepicker table tr td span.active:hover,.datepicker table tr td span.active:hover:hover{color:#fff;background-color:#286090;border-color:#204d7
2024-10-04 17:09:11 UTC	2178	IN	Data Raw: 2d 63 61 72 74 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 30 70 78 7d 2e 69 6e 2d 63 61 72 74 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 30 70 78 20 31 30 70 78 20 31 30 70 78 7d 2e 69 6e 2d 63 61 72 74 2d 62 75 74 74 6f 6e 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 30 70 78 7d 2e 69 6e 2d 63 61 72 74 2d 62 75 74 74 6f 6e 2d 73 69 6e 67 6c 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 74 6f 6f 6c 74 69 70 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 70 78 7d 2e 64 69 2d 74 6f 6f 6c 74 69 70 2d 6d 6f 64 61 6c 7b 77 69 64 74 68 3a 37 30 25 7d 2e Data Ascii: -cart-content{margin-left:-10px}.in-cart-text{padding:10px 10px 10px 10px}.in-cart-buttons{margin-bottom:-30px}.in-cart-button-single{margin-right:20px}.tooltip-modal-container{display:block;position:absolute;margin-left:50px}.di-tooltip-modal{width:70%}.

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	1137	OUT	GET /go/css/tracking-cross-sell.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/go/TrackConfirmAction_input?strOrigTrackNum=9400136106051082956592 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADRUM_BTa=R:0\|g:64af6fbf-d586-466f-a58b-79bc710759c4\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; SameSite=None; JSESSIONID=0000ko6eUDSSr1ZvH2GQs9JsGut:1bbcn1u8c; ADRUM_BT1=R:0\|i:118232\|e:87; NSC_uppmt-usvf-ofx=ffffffff3b22378b45525d5f4f58455e445a4a4212d3; o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca; NSC_u.tt1_443=ffffffff2188acde45525d5f4f58455e445a4a42378b
2024-10-04 17:09:11 UTC	409	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 78305 Content-Type: text/css Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "c03-6234b37537680" Last-Modified: Mon, 30 Sep 2024 00:23:38 GMT Server: ECAcc (dce/26B1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 3075 Connection: close
2024-10-04 17:09:11 UTC	3075	IN	Data Raw: 2e 69 6e 66 6f 72 6d 65 64 5f 64 65 6c 69 76 65 72 79 5f 63 6f 6e 74 61 69 6e 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 62 61 6e 6e 65 72 2d 62 6c 75 65 2d 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 36 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 77 69 64 74 68 3a 32 33 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 62 61 6e 6e 65 72 2d 67 72 61 79 2d 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 Data Ascii: .informed_delivery_container{text-align:right;margin-bottom:50px}.banner-blue-section{background-color:#336;padding-top:7px;padding-bottom:8px;width:235px;display:inline-block;text-align:left;padding-left:10px;vertical-align:top}.banner-gray-section{backg

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	556	OUT	GET /4.24/esri/themes/light/main.css HTTP/1.1 Host: js.arcgis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 17:09:11 UTC	780	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 337089 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 3000 Last-Modified: Tue, 12 Jul 2022 01:02:03 GMT x-amz-version-id: tK.CG0RlgblPuBTtUh5zUWYGu1rMuQVO Server: AmazonS3 Date: Fri, 04 Oct 2024 14:17:42 GMT Cache-Control: max-age=86400 ETag: "c93bce512c22f9c415ff67819efbf883" X-Cache: Hit from cloudfront Via: 1.1 56317bf75183e752b06c880e8a1e502a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: dHj6cs-NjoObcKv3XvhgTUE2OdkZL8nJAr0fELMNs02qKF_9Jj5r1A== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-10-04 17:09:11 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 62 6f 64 79 7b 2d 2d 65 73 72 69 2d 63 61 6c 63 69 74 65 2d 74 68 65 6d 65 2d 6e 61 6d 65 3a 20 22 6c 69 67 68 74 22 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 41 76 65 6e 69 72 20 4e 65 78 74 22 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 62 61 73 65 2f 66 6f 6e 74 73 2f 66 6f 6e 74 73 2f 37 37 31 35 36 37 31 30 2d 36 61 35 38 2d 34 36 30 36 2d 62 31 38 39 2d 62 34 31 38 35 65 37 35 39 36 37 62 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2e 2e 2f 62 61 73 65 2f 66 6f 6e 74 73 2f 66 6f 6e 74 73 2f 33 64 35 32 36 30 61 31 2d 65 34 63 64 2d 34 35 36 37 2d 38 30 65 64 2d 36 39 64 32 33 63 34 30 33 35 35 66 2e 77 6f 66 66 22 29 20 66 6f Data Ascii: @charset "utf-8";body{--esri-calcite-theme-name: "light"}@font-face{font-family:"Avenir Next";src:url("../base/fonts/fonts/77156710-6a58-4606-b189-b4185e75967b.woff2") format("woff2"),url("../base/fonts/fonts/3d5260a1-e4cd-4567-80ed-69d23c40355f.woff") fo
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 ee 98 af 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 6c 6f 63 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 b0 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 b1 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 63 6f 6c 6c 61 70 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 b2 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 6c 61 79 65 72 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ee 98 b3 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e Data Ascii: ontent:"";color:inherit}.esri-icon-locate:before{content:"";color:inherit}.esri-icon-expand:before{content:"";color:inherit}.esri-icon-collapse:before{content:"";color:inherit}.esri-icon-layer-list:before{content:"";color:inherit}.esri-icon
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 65 73 72 69 2d 76 69 65 77 20 2e 65 73 72 69 2d 76 69 65 77 2d 73 75 72 66 61 63 65 2d 2d 74 6f 75 63 68 2d 6e 6f 6e 65 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 65 73 72 69 2d 76 69 65 77 20 2e 65 73 72 69 2d 76 69 65 77 2d 73 75 72 66 61 63 65 2d 2d 74 6f 75 63 68 2d 70 61 6e 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 78 20 70 61 6e 2d 79 7d 2e 65 73 72 69 2d 76 69 65 77 20 2e 65 73 72 69 2d 76 69 65 77 2d 73 75 72 66 61 63 65 2d 2d 69 6e 73 65 74 2d 6f 75 74 6c 69 6e 65 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 65 73 72 69 2d 76 69 65 77 20 2e 65 Data Ascii: dden;-webkit-user-select:none;user-select:none;direction:ltr}.esri-view .esri-view-surface--touch-none{touch-action:none}.esri-view .esri-view-surface--touch-pan{touch-action:pan-x pan-y}.esri-view .esri-view-surface--inset-outline{outline:0}.esri-view .e
2024-10-04 17:09:12 UTC	14808	IN	Data Raw: 69 2d 77 69 64 67 65 74 2d 2d 70 61 6e 65 6c 2c 2e 65 73 72 69 2d 76 69 65 77 2d 68 65 69 67 68 74 2d 67 72 65 61 74 65 72 2d 74 68 61 6e 2d 6d 65 64 69 75 6d 20 2e 65 73 72 69 2d 65 78 70 61 6e 64 20 2e 65 73 72 69 2d 77 69 64 67 65 74 2d 2d 70 61 6e 65 6c 2d 68 65 69 67 68 74 2d 6f 6e 6c 79 2c 2e 65 73 72 69 2d 76 69 65 77 2d 68 65 69 67 68 74 2d 67 72 65 61 74 65 72 2d 74 68 61 6e 2d 6d 65 64 69 75 6d 20 2e 65 73 72 69 2d 75 69 2d 63 6f 72 6e 65 72 20 2e 65 73 72 69 2d 63 6f 6d 70 6f 6e 65 6e 74 2e 65 73 72 69 2d 77 69 64 67 65 74 2d 2d 70 61 6e 65 6c 2c 2e 65 73 72 69 2d 76 69 65 77 2d 68 65 69 67 68 74 2d 67 72 65 61 74 65 72 2d 74 68 61 6e 2d 6d 65 64 69 75 6d 20 2e 65 73 72 69 2d 75 69 2d 63 6f 72 6e 65 72 20 2e 65 73 72 69 2d 63 6f 6d 70 6f 6e 65 Data Ascii: i-widget--panel,.esri-view-height-greater-than-medium .esri-expand .esri-widget--panel-height-only,.esri-view-height-greater-than-medium .esri-ui-corner .esri-component.esri-widget--panel,.esri-view-height-greater-than-medium .esri-ui-corner .esri-compone
2024-10-04 17:09:12 UTC	377	IN	Data Raw: 30 25 3b 61 6e 69 6d 61 74 69 6f 6e 3a 65 73 72 69 2d 66 61 64 65 2d 69 6e 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 6f 61 64 65 72 3a 62 65 66 6f 72 65 2c 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 6f 61 64 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 68 65 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 67 61 6c 6c 65 72 79 5f 5f 6c 6f 61 64 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 Data Ascii: 0%;animation:esri-fade-in 500ms ease-in-out}.esri-basemap-gallery__loader:before,.esri-basemap-gallery__loader:after{content:"";opacity:1;position:absolute;height:1px;top:0;transition:opacity 500ms ease-in-out}.esri-basemap-gallery__loader:before{backgrou
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 7a 2d 69 6e 64 65 78 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 6f 70 69 6e 67 2d 70 72 6f 67 72 65 73 73 73 2d 62 61 72 2d 61 6e 69 20 31 35 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 67 61 6c 6c 65 72 79 5f 5f 69 74 65 6d 2d 2d 65 72 72 6f 72 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 2e 34 7d 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 67 61 6c 6c 65 72 79 5f 5f 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 31 31 30 2c 31 31 30 2c 31 31 30 2c 2e 33 29 7d 40 73 75 70 70 6f 72 74 73 28 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 Data Ascii: z-index:0;animation:looping-progresss-bar-ani 1500ms linear infinite}.esri-basemap-gallery__item--error{cursor:auto;opacity:.4}.esri-basemap-gallery__item-thumbnail{height:64px;width:auto;box-shadow:0 0 0 1px rgba(110,110,110,.3)}@supports(object-fit: cov
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 69 72 3d 72 74 6c 5d 20 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 6c 61 79 65 72 2d 6c 69 73 74 20 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 6c 61 79 65 72 2d 6c 69 73 74 5f 5f 69 74 65 6d 3a 61 66 74 65 72 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 6f 70 69 6e 67 2d 70 72 6f 67 72 65 73 73 73 2d 62 61 72 2d 61 6e 69 20 31 35 30 30 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 72 65 76 65 72 73 65 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 6c 61 79 65 72 2d 6c 69 73 74 20 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d 6c 61 79 65 72 2d 6c 69 73 74 5f 5f 69 74 65 6d 2d 6d 65 73 73 61 67 65 20 5b 63 6c 61 73 73 5e 3d 65 73 72 69 2d 69 63 6f 6e 2d 5d 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 65 73 72 69 2d 62 61 73 65 6d 61 70 2d Data Ascii: ir=rtl] .esri-basemap-layer-list .esri-basemap-layer-list__item:after{animation:looping-progresss-bar-ani 1500ms linear infinite reverse}[dir=rtl] .esri-basemap-layer-list .esri-basemap-layer-list__item-message [class^=esri-icon-],[dir=rtl] .esri-basemap-
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 20 62 75 74 74 6f 6e 2c 2e 65 73 72 69 2d 65 6c 65 76 61 74 69 6f 6e 2d 70 72 6f 66 69 6c 65 5f 5f 68 65 61 64 65 72 20 2e 65 73 72 69 2d 62 6f 6f 6b 6d 61 72 6b 73 5f 5f 61 75 74 68 6f 72 69 6e 67 2d 61 63 74 69 6f 6e 73 20 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 33 33 25 7d 2e 65 73 72 69 2d 62 6f 6f 6b 6d 61 72 6b 73 5f 5f 61 75 74 68 6f 72 69 6e 67 2d 61 63 74 69 6f 6e 73 20 2e 65 73 72 69 2d 62 6f 6f 6b 6d 61 72 6b 73 5f 5f 61 75 74 68 6f 72 69 6e 67 2d 64 65 6c 65 74 65 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 38 63 32 39 30 37 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 Data Ascii: button,.esri-elevation-profile__header .esri-bookmarks__authoring-actions button{font-size:12px;min-height:16px;width:33%}.esri-bookmarks__authoring-actions .esri-bookmarks__authoring-delete-button{color:#8c2907;margin-right:auto;padding-left:0;padding-r
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 32 35 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 63 6c 61 73 73 65 64 2d 63 6f 6c 6f 72 2d 73 6c 69 64 65 72 20 2e 65 73 72 69 2d 73 6c 69 64 65 72 20 2e 65 73 72 69 2d 73 6c 69 64 65 72 5f 5f 74 68 75 6d 62 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 36 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 36 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 36 70 78 20 73 6f 6c 69 64 20 23 36 65 36 65 36 65 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 36 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 68 65 69 67 68 74 3a 30 3b 77 Data Ascii: kground-color 125ms ease-in-out}.esri-classed-color-slider .esri-slider .esri-slider__thumb:after{position:absolute;top:0;left:6px;content:"";border-bottom:6px solid rgba(0,0,0,0);border-left:6px solid #6e6e6e;border-top:6px solid rgba(0,0,0,0);height:0;w
2024-10-04 17:09:12 UTC	16384	IN	Data Raw: 70 78 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 7d 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 73 69 7a 65 2d 73 6c 69 64 65 72 20 2e 65 73 72 69 2d 73 6c 69 64 65 72 20 2e 7a 6f 6f 6d 2d 63 61 70 20 2e 7a 6f 6f 6d 2d 63 61 70 2d 2d 6d 61 73 6b 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 73 69 7a 65 2d 73 6c 69 64 65 72 20 2e 65 73 72 69 2d 73 6c 69 64 65 72 20 2e 7a 6f 6f 6d 2d 63 61 70 20 2e 7a 6f 6f 6d 2d 63 61 70 2d 2d 6c 69 6e 65 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 73 69 7a 65 2d 73 6c 69 64 65 72 20 2e 65 73 72 69 2d 73 6c 69 64 65 72 20 2e 7a 6f 6f 6d 2d 63 61 70 20 2e 7a 6f 6f 6d 2d 63 61 70 2d 2d 75 6e 64 65 72 6c 69 6e 65 7b 66 69 6c 6c 3a 23 33 32 33 32 33 32 7d 2e 65 73 72 69 2d 63 6f 6c 6f Data Ascii: px;stroke-width:0}.esri-color-size-slider .esri-slider .zoom-cap .zoom-cap--mask{fill:#fff}.esri-color-size-slider .esri-slider .zoom-cap .zoom-cap--line{fill:#fff}.esri-color-size-slider .esri-slider .zoom-cap .zoom-cap--underline{fill:#323232}.esri-colo

Timestamp	Bytes transferred	Direction	Data
2024-10-04 17:09:11 UTC	817	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: o59a9A4Gx=A2W2gViSAQAAOD73DtBJBYnwHqpjuNKZqSC9YCNoOD2GKN7jYGIpsVS0lWbfAQgueyGucgHcwH8AAEB3AAAAAA\|1\|0\|3d6724c48755cd5c0ea80ea419428d6f852876ca; TLTSID=2982f1d6d85a1663810700e0ed96a2ca
2024-10-04 17:09:12 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 31654 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 04 Oct 2024 17:09:11 GMT Etag: "de5-549b1263b1ac0" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (dce/26C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-10-04 17:09:12 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y