Edit tour

Windows Analysis Report
https://us-usps-vpoktn.xyz/update/

Overview

General Information

Sample URL:	https://us-usps-vpoktn.xyz/update/
Analysis ID:	1527001
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML page contains obfuscated javascript

Performs DNS queries to domains with low reputation

Detected non-DNS traffic on DNS port

Found iframes

HTML body with high number of embedded images detected

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5528 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-vpoktn.xyz/update/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/MC43ODAwMTY2NjU2ODY1MDEz HTTP/1.1Host: us-usps-vpoktn.xyzConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://us-usps-vpoktn.xyzSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://us-usps-vpoktn.xyz/update/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://3976941.fls.doubleclick.net/activityi;src=3976941;type=fy18r0;cat=click0;ord=3830112541823;npa=0;auiddc=677869510.1728234630;ps=1;pcor=365396918;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a20v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101747727;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=click0;ord=3830112541823;npa=0;auiddc=677869510.1728234630;ps=1;pcor=365396918;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a20v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101747727;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://3976941.fls.doubleclick.net/activityi;src=3976941;type=fy18r0;cat=click0;ord=3830112541823;npa=0;auiddc=677869510.1728234630;ps=1;pcor=365396918;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a20v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101747727;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=click0;ord=3830112541823;npa=0;auiddc=677869510.1728234630;ps=1;pcor=365396918;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4a20v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101533421~101671035~101747727;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?

Source: https://us-usps-vpoktn.xyz/update/	HTTP Parser: No favicon
Source: https://us-usps-vpoktn.xyz/update/	HTTP Parser: No favicon
Source: https://us-usps-vpoktn.xyz/update/	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon

Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:57776 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-vpoktn.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-vpoktn.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-vpoktn.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-vpoktn.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.128
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.128
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.128
Source: unknown	TCP traffic detected without corresponding DNS query: 178.79.238.128
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_668.2.dr	String found in binary or memory: <a href="https://www.facebook.com/USPS?rf=108501355848630" target="_blank" tabindex="0"> equals www.facebook.com (Facebook)
Source: chromecache_668.2.dr	String found in binary or memory: <a href="https://www.youtube.com/usps" target="_blank" tabindex="0" class="social-youtube"> equals www.youtube.com (Youtube)
Source: chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_686.2.dr, chromecache_437.2.dr, chromecache_801.2.dr, chromecache_672.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_801.2.dr, chromecache_672.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_703.2.dr, chromecache_493.2.dr	String found in binary or memory: e.page_referrer=C(document.referrer):document.referrer,e=z(F(e),"default");e=N(e);e=O(e);E("config",c.GWT_GA4ID[a],e)}y?H({search_term:y}):""})();var S=1;if(c.YOUTUBE){G=document.createElement("script");G.src="https://www.youtube.com/iframe_api";A=document.getElementsByTagName("script")[0];A.parentNode.insertBefore(G,A);var D=[],p=[],v=[],B=c.YT_MILESTONE,L=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<D.length;a++)p[a]=new YT.Player(D[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_686.2.dr, chromecache_437.2.dr, chromecache_801.2.dr, chromecache_672.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_347.2.dr, chromecache_957.2.dr, chromecache_875.2.dr, chromecache_848.2.dr, chromecache_829.2.dr, chromecache_880.2.dr, chromecache_332.2.dr, chromecache_620.2.dr, chromecache_430.2.dr, chromecache_460.2.dr, chromecache_344.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_848.2.dr, chromecache_430.2.dr, chromecache_801.2.dr, chromecache_672.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: us-usps-vpoktn.xyz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: moversguide.usps.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: api.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: store.usps.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: content.usps.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: 3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: cns.usps.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com
Source: global traffic	DNS traffic detected: DNS query: 3976941.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 17:09:24 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 17:09:26 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 17:09:35 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-vpoktn.xyz/update/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5528 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5528 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5512 --field-trial-handle=2288,i,15085751874770609727,13658458680032902198,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://git.io/fjule	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
13.32.27.50	d27f3qgc9anoq2.cloudfront.net	United States	7018	ATT-INTERNET4US	false
64.233.167.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.133.154	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
104.16.41.28	unknown	United States	13335	CLOUDFLARENETUS	false
54.83.47.158	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands	30286	THMUS	false
91.235.134.131	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.83	unknown	United States	16509	AMAZON-02US	false
142.250.185.66	adservice.google.com	United States	15169	GOOGLEUS	false
142.250.186.38	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
91.235.133.188	h-usps.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.17	dbixd6p3vn7bv.cloudfront.net	United States	16509	AMAZON-02US	false
52.12.47.65	unknown	United States	16509	AMAZON-02US	false
54.69.251.6	api.segment.io	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
108.156.60.13	unknown	United States	16509	AMAZON-02US	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
54.210.62.10	unknown	United States	14618	AMAZON-AESUS	false
47.252.21.175	us-usps-vpoktn.xyz	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	true
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false
172.217.16.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.98	td.doubleclick.net	United States	15169	GOOGLEUS	false

IP
192.168.2.4
192.168.2.5

Name	Malicious	Reputation
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypp08	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/request.js	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9YpmBD&sid=NESnpDf25MNFVNu-AGd6	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/touch.js	false	unknown
https://store.usps.com/media/psm/css/ps.css	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=websocket&sid=MV7c4VwpPHfn7GUTAGeb	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=websocket&sid=lIGnq2pb5LxeneJYAGeA	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/declare.js	false	unknown
https://us-usps-vpoktn.xyz/update/assets/e394ed97TeKnX.svg	true	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9YpqDy&sid=HkQQcqGnujF5pMI8AGeD	false	unknown
https://moversguide.usps.com/js/address~bootstrap~contact~desktop~mobile.00054ee3.js	false	unknown
https://moversguide.usps.com/js/rts.4a36fbde.js	false	unknown
https://moversguide.usps.com/css/address~bootstrap~contact~desktop~mobile.9a89caf3.css	false	unknown
https://moversguide.usps.com/mgo-api/api/v2/coa/ac8621d2-0593-4d56-953b-dd33784f3ef5/persons	false	unknown
https://us-usps-vpoktn.xyz/update/assets/8cf6cd52TeKnX.svg	true	unknown
https://cns.usps.com/global-elements/footer/css/footer-sb.css	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/config.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/browser.js	false	unknown
https://moversguide.usps.com/js/simulator.521279c0.js	false	unknown
https://moversguide.usps.com/mgo-api/api/v1/coa/ac8621d2-0593-4d56-953b-dd33784f3ef5/addresses	false	unknown
https://content.usps.com/28ncjakzwv3co89e.js?95qq729eg69sk9uf=3fym673k&72i2mgbygvxshwku=ac8621d2-0593-4d56-953b-dd33784f3ef5	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypjd5	false	unknown
https://www.usps.com/store/images/ps-subicon-business.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-attr.js	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9YpjvY&sid=xqPiIxNGDscoMWeHAGd0	false	unknown
https://www.usps.com/ecp/asset/images/EP14PE-T0.jpg	false	unknown
https://store.usps.com/media/psm/script/popper.min.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-form.js	false	unknown
https://moversguide.usps.com/js/dcoa.52ad1015.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/lang.js	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypt2J&sid=s85oxva4sUWemiryAGeM	false	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	unknown
https://us-usps-vpoktn.xyz/update/assets/f4397cedTeKnX.css	true	unknown
https://moversguide.usps.com/js/desktop~mobile~rts~smsRts.e7345641.js	false	unknown
https://us-usps-vpoktn.xyz/favicon.ico	false	unknown
https://us-usps-vpoktn.xyz/update/layout/images/47.png	true	unknown
https://store.usps.com/external/scripts/dijit-1.9.7/_Container.js	false	unknown
https://reg.usps.com/entreg/assets/images/footer/footer-logo.png	false	unknown
https://cns.usps.com/global-elements/footer/script/jquery-3.7.1.js	false	unknown
https://www.usps.com/ecp/asset/images/843063-T0.jpg	false	unknown
https://h64.online-metrix.net/MoI8NeJygfe1R52C?4745cee93cb27cb0=AHDve2QdX7bGgNHE3KeOtVDbnMVISnhcJTohslown_Z6loDq7vtEXgVV6ldXYc8jsOW-STFMscxjxyT9MHfo5qI1NmXiPILwf-5TFpUCCmoLxK5AyEdJFzr6ntnB11ZgG3BN2vhCv9RQobstUuZOfjARv6CGWfYO	false	unknown
https://moversguide.usps.com/img/_icon-chevron.edfd0894.svg	false	unknown
https://www.usps.com/assets/images/default/info-icon.svg	false	unknown
https://moversguide.usps.com/js/bootstrap.22cb200a.js	false	unknown
https://us-usps-vpoktn.xyz/api/MC43NTQwNTY2NTU2OTU4MDc1	false	unknown
https://us-usps-vpoktn.xyz/update/assets/62ff200fKXMp5.js	true	unknown
https://us-usps-vpoktn.xyz/update/layout/images/48.png	true	unknown
https://us-usps-vpoktn.xyz/update/assets/a187320bTeKnX.svg	true	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypwd0&sid=o5tdpRQGRjvW5rHGAGeV	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypf_t	false	unknown
https://www.usps.com/assets/images/home/utility_customer_service.png	false	unknown
https://cns.usps.com/go/cnsrest/config/lookupCodes	false	unknown
https://www.usps.com/global-elements/lib/script/resize-manager.js	false	unknown
https://moversguide.usps.com/__imp_apg__/api/dip/v1/dip	false	unknown
https://www.usps.com/ecp/asset/images/EP_14_B-T0.jpg	false	unknown
https://moversguide.usps.com/js/address.7923b332.js	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=websocket&sid=pxs9Lh63circ-4fBAGeP	false	unknown
https://moversguide.usps.com/js/app.04a19da2.js	false	unknown
https://us-usps-vpoktn.xyz/update/layout/images/23.svg	true	unknown
https://cns.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	false	unknown
https://moversguide.usps.com/js/chunk-54fc5984.3675a12b.js	false	unknown
https://store.usps.com/media/psm/script/ps.js	false	unknown
https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	false	unknown
https://cns.usps.com/static/js/main.9aba9a36.js	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=websocket&sid=rh2jzk1ObQezEGfAAGdu	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9Ypu0m&sid=pxs9Lh63circ-4fBAGeP	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/io-query.js	false	unknown
https://moversguide.usps.com/js/desktop.d1470f52.js	false	unknown
https://www.usps.com/test/application-style-guide/css/jquery-ui.min.css	false	unknown
https://www.usps.com/global-elements/footer/images/instagram_logo.png	false	unknown
https://us-usps-vpoktn.xyz/socket.io/?EIO=4&transport=polling&t=P9YpgUT&sid=rh2jzk1ObQezEGfAAGdu	false	unknown
https://moversguide.usps.com/mgo-api/api/v1/coa	false	unknown
https://us-usps-vpoktn.xyz/update/assets/dc6d90ceKXMp5.js	true	unknown
https://www.usps.com/ecp/asset/images/PPEP14F-T0.jpg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_668.2.dr, chromecache_342.2.dr	false		unknown
https://www.usps.com/assets/images/default/right-arrow-inactive.png);	chromecache_677.2.dr, chromecache_465.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_887.2.dr, chromecache_569.2.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://www.usps.com/business/manage-mail.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://www.usps.com/ecpext/asset/images/oct24-supplies-d.jpg);	chromecache_342.2.dr	false		unknown
https://www.usps.com/store/images/info-icon.png	chromecache_572.2.dr	false		unknown
https://managemymove.usps.com	chromecache_769.2.dr	false		unknown
https://www.usps.com/shop/money-orders.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://www.usps.com/business/verify-postage.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://git.io/fjule	chromecache_279.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/store/images/usps_l_nav_red_arrow.svg	chromecache_572.2.dr	false		unknown
https://www.usps.com/store/images/new-icon.png)	chromecache_677.2.dr	false		unknown
https://www.usps.com/business/label-broker.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://informeddelivery.usps.com/	chromecache_342.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/EP_13_F-T0.jpg	chromecache_342.2.dr	false		unknown
https://gateway.usps.com/	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://postcalc.usps.com/business	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://usps.force.com/faq/servlet/fileField?entityId=ka3t0000000CediAAC&field=Related_Information__	chromecache_351.2.dr	false		unknown
http://www.linotype.com/licensePart	chromecache_509.2.dr, chromecache_317.2.dr, chromecache_851.2.dr	false		unknown
https://www.usps.com/manage/mail-for-deceased.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_383.2.dr, chromecache_357.2.dr, chromecache_502.2.dr, chromecache_533.2.dr, chromecache_532.2.dr, chromecache_881.2.dr, chromecache_571.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/mobile/info.htm	chromecache_668.2.dr, chromecache_769.2.dr	false		unknown
https://www.usps.com/ship/online-shipping.htm	chromecache_351.2.dr, chromecache_803.2.dr, chromecache_342.2.dr	false		unknown
https://postalpro.usps.com/NCOALink_Service_Providers	chromecache_752.2.dr	false		unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527001
Start date and time:	2024-10-06 19:08:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-usps-vpoktn.xyz/update/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.troj.win@27/1052@98/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://moversguide.usps.com/?referral=MG80 Browse: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v Browse: https://cns.usps.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 19:09:16.948769093 CEST	192.168.2.4	1.1.1.1	0x6779	Standard query (0)	us-usps-vpoktn.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:16.949040890 CEST	192.168.2.4	1.1.1.1	0x784a	Standard query (0)	us-usps-vpoktn.xyz	65	IN (0x0001)	false
Oct 6, 2024 19:09:18.795703888 CEST	192.168.2.4	1.1.1.1	0x644	Standard query (0)	us-usps-vpoktn.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:18.796071053 CEST	192.168.2.4	1.1.1.1	0x9ddf	Standard query (0)	us-usps-vpoktn.xyz	65	IN (0x0001)	false
Oct 6, 2024 19:09:20.492760897 CEST	192.168.2.4	1.1.1.1	0xd44f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:20.493586063 CEST	192.168.2.4	1.1.1.1	0xfbf0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:36.167892933 CEST	192.168.2.4	1.1.1.1	0xe9de	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:36.168275118 CEST	192.168.2.4	1.1.1.1	0x62d8	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:38.733612061 CEST	192.168.2.4	1.1.1.1	0xc52b	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.733853102 CEST	192.168.2.4	1.1.1.1	0x76f4	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:39.866487026 CEST	192.168.2.4	1.1.1.1	0xa771	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:39.866609097 CEST	192.168.2.4	1.1.1.1	0xfc21	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:40.542345047 CEST	192.168.2.4	1.1.1.1	0xa6a5	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:40.542478085 CEST	192.168.2.4	1.1.1.1	0xb14c	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:40.601453066 CEST	192.168.2.4	1.1.1.1	0x1301	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:40.601598024 CEST	192.168.2.4	1.1.1.1	0x498c	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:42.389725924 CEST	192.168.2.4	1.1.1.1	0x2f43	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:42.389725924 CEST	192.168.2.4	1.1.1.1	0x7f9c	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:45.894002914 CEST	192.168.2.4	1.1.1.1	0x1566	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:45.894305944 CEST	192.168.2.4	1.1.1.1	0x3138	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:47.756844044 CEST	192.168.2.4	1.1.1.1	0xf238	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:47.760878086 CEST	192.168.2.4	1.1.1.1	0xfdae	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:48.228423119 CEST	192.168.2.4	1.1.1.1	0x18d4	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:48.228754044 CEST	192.168.2.4	1.1.1.1	0x83c5	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:49.077358007 CEST	192.168.2.4	1.1.1.1	0xdd56	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.077929974 CEST	192.168.2.4	1.1.1.1	0x1fa8	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:49.733688116 CEST	192.168.2.4	1.1.1.1	0xeabc	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.734098911 CEST	192.168.2.4	1.1.1.1	0xf21b	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 19:09:50.320851088 CEST	192.168.2.4	1.1.1.1	0x7c2a	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:50.321055889 CEST	192.168.2.4	1.1.1.1	0xfbbe	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:51.772885084 CEST	192.168.2.4	1.1.1.1	0xc24d	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:51.773746014 CEST	192.168.2.4	1.1.1.1	0x5c4b	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:09:51.786669970 CEST	192.168.2.4	1.1.1.1	0xc4	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:09:51.859702110 CEST	192.168.2.4	1.1.1.1	0xd40	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:09:51.862505913 CEST	192.168.2.4	1.1.1.1	0x3483	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:51.962044001 CEST	192.168.2.4	1.1.1.1	0x86d4	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:51.962373018 CEST	192.168.2.4	1.1.1.1	0xbb	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:52.064657927 CEST	192.168.2.4	1.1.1.1	0x5dff	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:52.064982891 CEST	192.168.2.4	1.1.1.1	0x2bd	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:52.518186092 CEST	192.168.2.4	1.1.1.1	0xa87b	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:52.518606901 CEST	192.168.2.4	1.1.1.1	0xaa73	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:55.873008013 CEST	192.168.2.4	1.1.1.1	0xb1a8	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:55.873696089 CEST	192.168.2.4	1.1.1.1	0x58dc	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 6, 2024 19:09:56.984055996 CEST	192.168.2.4	1.1.1.1	0x326e	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:56.984342098 CEST	192.168.2.4	1.1.1.1	0xdd70	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:09:57.052031994 CEST	192.168.2.4	1.1.1.1	0x56cb	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:57.052300930 CEST	192.168.2.4	1.1.1.1	0x3a6a	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 6, 2024 19:09:58.450299025 CEST	192.168.2.4	1.1.1.1	0xb919	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:58.450681925 CEST	192.168.2.4	1.1.1.1	0xc6d4	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:09:58.550784111 CEST	192.168.2.4	1.1.1.1	0xdcc	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:58.551090956 CEST	192.168.2.4	1.1.1.1	0x357d	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:09:59.273273945 CEST	192.168.2.4	1.1.1.1	0x664d	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:59.273580074 CEST	192.168.2.4	1.1.1.1	0x80e8	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:09:59.309417963 CEST	192.168.2.4	1.1.1.1	0xe998	Standard query (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:59.309725046 CEST	192.168.2.4	1.1.1.1	0x988f	Standard query (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:00.046621084 CEST	192.168.2.4	1.1.1.1	0x7002	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.046950102 CEST	192.168.2.4	1.1.1.1	0x5767	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:10:00.055053949 CEST	192.168.2.4	1.1.1.1	0xfa3a	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:10:00.115921021 CEST	192.168.2.4	1.1.1.1	0x1311	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 19:10:00.117588997 CEST	192.168.2.4	1.1.1.1	0xebb0	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.264336109 CEST	192.168.2.4	1.1.1.1	0xfa1	Standard query (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.264492035 CEST	192.168.2.4	1.1.1.1	0x1489	Standard query (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:00.265202999 CEST	192.168.2.4	1.1.1.1	0x6367	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.265330076 CEST	192.168.2.4	1.1.1.1	0x46c4	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:00.614362955 CEST	192.168.2.4	1.1.1.1	0xe01c	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.614502907 CEST	192.168.2.4	1.1.1.1	0xb204	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:15.309457064 CEST	192.168.2.4	1.1.1.1	0x6308	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:15.309662104 CEST	192.168.2.4	1.1.1.1	0x1b7d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:16.333121061 CEST	192.168.2.4	1.1.1.1	0x9d64	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.333295107 CEST	192.168.2.4	1.1.1.1	0x685b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:16.617188931 CEST	192.168.2.4	1.1.1.1	0xce1f	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.617321014 CEST	192.168.2.4	1.1.1.1	0x90d3	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 6, 2024 19:10:16.724504948 CEST	192.168.2.4	1.1.1.1	0x9473	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.724881887 CEST	192.168.2.4	1.1.1.1	0x82a9	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:17.743362904 CEST	192.168.2.4	1.1.1.1	0x2920	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:17.743697882 CEST	192.168.2.4	1.1.1.1	0x5df2	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 6, 2024 19:10:18.117795944 CEST	192.168.2.4	1.1.1.1	0x8cca	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:18.118196011 CEST	192.168.2.4	1.1.1.1	0xc909	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:18.338391066 CEST	192.168.2.4	1.1.1.1	0x1f87	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:18.338535070 CEST	192.168.2.4	1.1.1.1	0xfd83	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:25.224463940 CEST	192.168.2.4	1.1.1.1	0xd4cf	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:25.225136042 CEST	192.168.2.4	1.1.1.1	0xe615	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:29.625356913 CEST	192.168.2.4	1.1.1.1	0x6cdc	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:29.625536919 CEST	192.168.2.4	1.1.1.1	0xc57	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:33.700057983 CEST	192.168.2.4	1.1.1.1	0xc0c7	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:33.700196028 CEST	192.168.2.4	1.1.1.1	0x4d46	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:37.126955986 CEST	192.168.2.4	1.1.1.1	0x9f53	Standard query (0)	3976941.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:37.127250910 CEST	192.168.2.4	1.1.1.1	0xd134	Standard query (0)	3976941.fls.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:37.139507055 CEST	192.168.2.4	1.1.1.1	0x420a	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:37.139653921 CEST	192.168.2.4	1.1.1.1	0x2f47	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:37.140369892 CEST	192.168.2.4	1.1.1.1	0x9dbc	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:37.140495062 CEST	192.168.2.4	1.1.1.1	0xe2ef	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:38.114304066 CEST	192.168.2.4	1.1.1.1	0xf4be	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:38.114456892 CEST	192.168.2.4	1.1.1.1	0x7e98	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:10:39.377206087 CEST	192.168.2.4	1.1.1.1	0xf922	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:39.377206087 CEST	192.168.2.4	1.1.1.1	0xf22a	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:10:40.342077971 CEST	192.168.2.4	1.1.1.1	0x7b73	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:40.342376947 CEST	192.168.2.4	1.1.1.1	0x7dd8	Standard query (0)	adservice.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 19:09:17.407788038 CEST	1.1.1.1	192.168.2.4	0x6779	No error (0)	us-usps-vpoktn.xyz		47.252.21.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:19.246016026 CEST	1.1.1.1	192.168.2.4	0x644	No error (0)	us-usps-vpoktn.xyz		47.252.21.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:20.500355005 CEST	1.1.1.1	192.168.2.4	0xd44f	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:20.501777887 CEST	1.1.1.1	192.168.2.4	0xfbf0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 19:09:36.294734001 CEST	1.1.1.1	192.168.2.4	0x62d8	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:36.299437046 CEST	1.1.1.1	192.168.2.4	0xe9de	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:36.299437046 CEST	1.1.1.1	192.168.2.4	0xe9de	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.770860910 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:38.770860910 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.770860910 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.83	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.770860910 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.47	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.770860910 CEST	1.1.1.1	192.168.2.4	0xc52b	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.53	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:38.776036024 CEST	1.1.1.1	192.168.2.4	0x76f4	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:39.911493063 CEST	1.1.1.1	192.168.2.4	0xa771	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:39.911493063 CEST	1.1.1.1	192.168.2.4	0xa771	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.83	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:39.911493063 CEST	1.1.1.1	192.168.2.4	0xa771	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.53	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:39.911493063 CEST	1.1.1.1	192.168.2.4	0xa771	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:39.911493063 CEST	1.1.1.1	192.168.2.4	0xa771	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.47	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:39.934376001 CEST	1.1.1.1	192.168.2.4	0xfc21	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:40.608577967 CEST	1.1.1.1	192.168.2.4	0x1301	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:40.608577967 CEST	1.1.1.1	192.168.2.4	0x1301	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:40.609720945 CEST	1.1.1.1	192.168.2.4	0x498c	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:40.673388958 CEST	1.1.1.1	192.168.2.4	0xa6a5	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:40.673388958 CEST	1.1.1.1	192.168.2.4	0xa6a5	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:42.186115026 CEST	1.1.1.1	192.168.2.4	0xb14c	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:42.397730112 CEST	1.1.1.1	192.168.2.4	0x7f9c	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:42.397787094 CEST	1.1.1.1	192.168.2.4	0x2f43	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:42.397787094 CEST	1.1.1.1	192.168.2.4	0x2f43	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:45.926780939 CEST	1.1.1.1	192.168.2.4	0x3138	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:45.932594061 CEST	1.1.1.1	192.168.2.4	0x1566	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:45.932594061 CEST	1.1.1.1	192.168.2.4	0x1566	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.83.47.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:45.932594061 CEST	1.1.1.1	192.168.2.4	0x1566	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		52.21.60.247	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:45.932594061 CEST	1.1.1.1	192.168.2.4	0x1566	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		34.203.32.92	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:45.932594061 CEST	1.1.1.1	192.168.2.4	0x1566	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.210.62.10	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:47.763993979 CEST	1.1.1.1	192.168.2.4	0xf238	No error (0)	api.segment.io		54.69.251.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:47.763993979 CEST	1.1.1.1	192.168.2.4	0xf238	No error (0)	api.segment.io		35.160.151.220	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:47.763993979 CEST	1.1.1.1	192.168.2.4	0xf238	No error (0)	api.segment.io		35.166.226.67	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:48.360601902 CEST	1.1.1.1	192.168.2.4	0x18d4	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:48.360601902 CEST	1.1.1.1	192.168.2.4	0x18d4	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:48.403454065 CEST	1.1.1.1	192.168.2.4	0x83c5	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:49.085033894 CEST	1.1.1.1	192.168.2.4	0xdd56	No error (0)	api.segment.io		52.12.47.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.085033894 CEST	1.1.1.1	192.168.2.4	0xdd56	No error (0)	api.segment.io		54.203.25.147	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.085033894 CEST	1.1.1.1	192.168.2.4	0xdd56	No error (0)	api.segment.io		35.163.144.222	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.770519972 CEST	1.1.1.1	192.168.2.4	0xeabc	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:49.770519972 CEST	1.1.1.1	192.168.2.4	0xeabc	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.210.62.10	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.770519972 CEST	1.1.1.1	192.168.2.4	0xeabc	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		34.203.32.92	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.770519972 CEST	1.1.1.1	192.168.2.4	0xeabc	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.83.47.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.770519972 CEST	1.1.1.1	192.168.2.4	0xeabc	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		52.21.60.247	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:49.775801897 CEST	1.1.1.1	192.168.2.4	0xf21b	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:50.500571966 CEST	1.1.1.1	192.168.2.4	0xfbbe	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:50.503710985 CEST	1.1.1.1	192.168.2.4	0x7c2a	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:50.503710985 CEST	1.1.1.1	192.168.2.4	0x7c2a	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:51.780632019 CEST	1.1.1.1	192.168.2.4	0xc24d	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:51.869803905 CEST	1.1.1.1	192.168.2.4	0x3483	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:52.093770981 CEST	1.1.1.1	192.168.2.4	0x86d4	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.093770981 CEST	1.1.1.1	192.168.2.4	0x86d4	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:52.138616085 CEST	1.1.1.1	192.168.2.4	0xbb	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.237313032 CEST	1.1.1.1	192.168.2.4	0x2bd	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.237519979 CEST	1.1.1.1	192.168.2.4	0x5dff	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.237519979 CEST	1.1.1.1	192.168.2.4	0x5dff	No error (0)	h-usps.online-metrix.net		91.235.133.188	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:52.650477886 CEST	1.1.1.1	192.168.2.4	0xaa73	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.689317942 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:52.689317942 CEST	1.1.1.1	192.168.2.4	0xa87b	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:55.880259991 CEST	1.1.1.1	192.168.2.4	0xb1a8	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:55.880259991 CEST	1.1.1.1	192.168.2.4	0xb1a8	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:55.880717993 CEST	1.1.1.1	192.168.2.4	0x58dc	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Oct 6, 2024 19:09:57.059740067 CEST	1.1.1.1	192.168.2.4	0x56cb	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:57.059740067 CEST	1.1.1.1	192.168.2.4	0x56cb	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:57.061634064 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Oct 6, 2024 19:09:57.114466906 CEST	1.1.1.1	192.168.2.4	0x326e	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:57.114466906 CEST	1.1.1.1	192.168.2.4	0x326e	No error (0)	h-usps.online-metrix.net		91.235.133.188	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:57.158392906 CEST	1.1.1.1	192.168.2.4	0xdd70	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:09:58.460062027 CEST	1.1.1.1	192.168.2.4	0xb919	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:58.558130980 CEST	1.1.1.1	192.168.2.4	0xdcc	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:59.280600071 CEST	1.1.1.1	192.168.2.4	0x664d	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:09:59.326180935 CEST	1.1.1.1	192.168.2.4	0xe998	No error (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.054382086 CEST	1.1.1.1	192.168.2.4	0x7002	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.124238014 CEST	1.1.1.1	192.168.2.4	0xebb0	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.272159100 CEST	1.1.1.1	192.168.2.4	0x6367	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.282697916 CEST	1.1.1.1	192.168.2.4	0xfa1	No error (0)	3fym673klkvgqff2zf7dmif2ez2sqa2ae2pxbetg40c79079c9acec83am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:00.625732899 CEST	1.1.1.1	192.168.2.4	0xe01c	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:11.856897116 CEST	1.1.1.1	192.168.2.4	0x987c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:11.856897116 CEST	1.1.1.1	192.168.2.4	0x987c	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:15.317487001 CEST	1.1.1.1	192.168.2.4	0x6308	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:15.317487001 CEST	1.1.1.1	192.168.2.4	0x6308	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:15.317487001 CEST	1.1.1.1	192.168.2.4	0x6308	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:15.317487001 CEST	1.1.1.1	192.168.2.4	0x6308	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.341087103 CEST	1.1.1.1	192.168.2.4	0x9d64	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.341087103 CEST	1.1.1.1	192.168.2.4	0x9d64	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.341087103 CEST	1.1.1.1	192.168.2.4	0x9d64	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.341087103 CEST	1.1.1.1	192.168.2.4	0x9d64	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.629714966 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:16.629714966 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.50	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.629714966 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.91	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.629714966 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.21	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.629714966 CEST	1.1.1.1	192.168.2.4	0xce1f	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.113	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:16.631256104 CEST	1.1.1.1	192.168.2.4	0x90d3	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:16.732799053 CEST	1.1.1.1	192.168.2.4	0x82a9	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:16.746593952 CEST	1.1.1.1	192.168.2.4	0x9473	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751192093 CEST	1.1.1.1	192.168.2.4	0x5df2	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751625061 CEST	1.1.1.1	192.168.2.4	0x2920	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751625061 CEST	1.1.1.1	192.168.2.4	0x2920	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.13	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751625061 CEST	1.1.1.1	192.168.2.4	0x2920	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.24	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751625061 CEST	1.1.1.1	192.168.2.4	0x2920	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.60	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:17.751625061 CEST	1.1.1.1	192.168.2.4	0x2920	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.15	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:18.251410007 CEST	1.1.1.1	192.168.2.4	0x8cca	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:18.251410007 CEST	1.1.1.1	192.168.2.4	0x8cca	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:18.294908047 CEST	1.1.1.1	192.168.2.4	0xc909	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:18.348495960 CEST	1.1.1.1	192.168.2.4	0x1f87	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:18.368279934 CEST	1.1.1.1	192.168.2.4	0xfd83	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:25.353060961 CEST	1.1.1.1	192.168.2.4	0xe615	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:25.399122953 CEST	1.1.1.1	192.168.2.4	0xd4cf	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:25.399122953 CEST	1.1.1.1	192.168.2.4	0xd4cf	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:28.664113045 CEST	1.1.1.1	192.168.2.4	0xca95	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:28.664113045 CEST	1.1.1.1	192.168.2.4	0xca95	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:29.750689030 CEST	1.1.1.1	192.168.2.4	0x6cdc	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:29.750689030 CEST	1.1.1.1	192.168.2.4	0x6cdc	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:29.756196022 CEST	1.1.1.1	192.168.2.4	0xc57	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:33.828160048 CEST	1.1.1.1	192.168.2.4	0xc0c7	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:33.828160048 CEST	1.1.1.1	192.168.2.4	0xc0c7	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:33.879658937 CEST	1.1.1.1	192.168.2.4	0x4d46	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:37.140860081 CEST	1.1.1.1	192.168.2.4	0x9f53	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:37.140860081 CEST	1.1.1.1	192.168.2.4	0x9f53	No error (0)	dart.l.doubleclick.net		142.250.186.38	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:37.146435976 CEST	1.1.1.1	192.168.2.4	0x420a	No error (0)	td.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:37.147559881 CEST	1.1.1.1	192.168.2.4	0xe2ef	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 6, 2024 19:10:37.150459051 CEST	1.1.1.1	192.168.2.4	0xd134	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 19:10:37.150969982 CEST	1.1.1.1	192.168.2.4	0x9dbc	No error (0)	ad.doubleclick.net		172.217.16.198	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:38.121933937 CEST	1.1.1.1	192.168.2.4	0xf4be	No error (0)	ad.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:38.121973038 CEST	1.1.1.1	192.168.2.4	0x7e98	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 6, 2024 19:10:39.384018898 CEST	1.1.1.1	192.168.2.4	0xf922	No error (0)	adservice.google.com		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:39.384201050 CEST	1.1.1.1	192.168.2.4	0xf22a	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 6, 2024 19:10:40.348867893 CEST	1.1.1.1	192.168.2.4	0x7b73	No error (0)	adservice.google.com		142.250.185.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:10:40.349523067 CEST	1.1.1.1	192.168.2.4	0x7dd8	No error (0)	adservice.google.com			65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:17 UTC	668	OUT	GET /update/ HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:18 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"666-190b57e26f0"
2024-10-06 17:09:18 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:18 UTC	592	OUT	GET /update/assets/index-4b020bd6.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://us-usps-vpoktn.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:18 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:18 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-10-06 17:09:18 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-10-06 17:09:18 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:18 UTC	573	OUT	GET /update/assets/f6170fbbTeKnX.css HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-vpoktn.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:18 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:18 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0"
2024-10-06 17:09:18 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:19 UTC	546	OUT	GET /update/assets/143268e9KXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:19 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-10-06 17:09:19 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us-usps-vpoktn.xyz/update/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Windows Analysis Report
https://us-usps-vpoktn.xyz/update/

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:19 UTC	546	OUT	GET /update/assets/f0ee2557KXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:19 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:19 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-10-06 17:09:19 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-10-06 17:09:19 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-10-06 17:09:19 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-10-06 17:09:19 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:19 UTC	599	OUT	GET /favicon.ico HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-usps-vpoktn.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:19 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:19 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-10-06 17:09:19 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-10-06 17:09:19 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	573	OUT	GET /update/assets/667bf194TeKnX.css HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-vpoktn.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	349	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: text/css; charset=utf-8 Content-Length: 68953 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"10d59-190b57e26f0"
2024-10-06 17:09:20 UTC	16035	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 7b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 38 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 69 6e 70 75 74 2d 2d 73 65 61 72 63 68 2e 73 65 61 72 63 68 2d 2d 73 75 62 6d 69 74 7b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 65 33 39 34 65 64 39 37 54 65 4b 6e 58 2e 73 76 67 29 6e 6f 2d 72 65 Data Ascii: vigation input.global-header--search-track{border:0;width:80%;display:inline-block;vertical-align:bottom;height:25px;padding-left:18px;background:#fff}.global--navigation input.input--search.search--submit{border:0;background:url(./e394ed97TeKnX.svg)no-re
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 38 37 66 32 36 62 35 39 54 65 4b 6e 58 2e 73 76 67 29 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 Data Ascii: :before,.global--navigation nav .tool-informed a:focus:before,.global--navigation nav .tool-informed a:hover:before{background:url(./87f26b59TeKnX.svg)}.global--navigation nav .tool-intercept a:before,.global--navigation nav .tool-intercept a:focus:before
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 7b 77 69 64 74 68 3a 31 35 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 Data Ascii: on nav li.menuheader:nth-of-type(1){width:15%}.global--navigation nav li.menuheader:nth-of-type(2){width:12%}.global--navigation nav li.menuheader:nth-of-type(3){width:12%}.global--navigation nav li.menuheader:nth-of-type(4){width:12%}.global--navigation
2024-10-06 17:09:20 UTC	3766	IN	Data Raw: 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 3b 73 72 63 3a 75 72 6c 28 2e 2f 63 63 34 36 39 34 30 36 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 32 65 32 65 66 36 33 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 66 64 37 61 66 36 31 54 65 4b 6e 58 2e 77 6f 66 66 29 Data Ascii: nt-face{font-family:HelveticaNeueW02-65Medi;src:url(./cc469406TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-55Roma;src:url(./f2e2ef63TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-75Bold;src:url(./ffd7af61TeKnX.woff)

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	573	OUT	GET /update/assets/4cd1ec68TeKnX.css HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-vpoktn.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: text/css; charset=utf-8 Content-Length: 323 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"143-190b57e26f0"
2024-10-06 17:09:20 UTC	323	IN	Data Raw: 68 31 2e 74 69 74 6c 65 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 63 6f 6c 6f 72 3a 23 32 34 35 34 39 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 64 69 76 2e 63 6f 6e 74 65 6e 74 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 75 6c 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 75 6c 5b 64 61 74 61 2d 76 Data Ascii: h1.title[data-v-fe5ae731]{color:#24549d;font-size:2rem;text-align:center}div.content[data-v-fe5ae731]{padding:10px;background-color:#f2f2f2;border-radius:3px}ul[data-v-fe5ae731]{list-style:disc outside none!important;list-style:initial!important}ul[data-v

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/78d59236KXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35025 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"88d1-190b57e2ec0"
2024-10-06 17:09:20 UTC	16022	IN	Data Raw: 76 61 72 20 61 31 39 5f 30 78 65 64 64 35 37 36 3d 61 31 39 5f 30 78 31 36 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 66 30 63 61 2c 5f 30 78 35 32 30 36 64 33 29 7b 76 61 72 20 5f 30 78 33 37 34 38 61 39 3d 61 31 39 5f 30 78 31 36 61 35 2c 5f 30 78 32 34 63 32 61 35 3d 5f 30 78 32 35 66 30 63 61 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 34 65 34 30 63 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 65 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 34 34 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 62 35 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 61 Data Ascii: var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2*(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1a
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 37 31 28 30 78 31 64 62 29 2c 5f 30 78 35 39 39 39 37 31 28 30 78 31 62 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 37 26 26 21 70 28 5b 27 69 6e 74 65 72 6e 65 74 5f 65 27 2b 27 78 70 6c 6f 72 65 72 27 5d 2c 5f 30 78 35 31 36 35 64 35 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 31 26 26 21 70 28 5b 5f 30 78 35 39 39 39 37 31 28 30 78 31 36 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 5f 30 78 34 32 62 37 34 38 29 7b 76 61 72 20 5f 30 78 33 63 35 61 62 64 3d 61 31 39 5f 30 78 65 64 64 35 37 36 2c 5f 30 78 34 62 32 36 64 38 3d 5f 30 78 34 32 62 37 34 38 5b 5f 30 78 33 63 35 61 62 64 28 30 78 31 35 38 29 2b 27 6e 64 27 5d 3b 69 66 28 5f 30 78 34 62 32 36 64 38 Data Ascii: 71(0x1db),_0x599971(0x1b4)],_0x1a263a)\|\|_0xce2023===0x27&&!p(['internet_e'+'xplorer'],_0x5165d5)\|\|_0xce2023===0x21&&!p([_0x599971(0x164)],_0x1a263a);}}function F(_0x42b748){var _0x3c5abd=a19_0xedd576,_0x4b26d8=_0x42b748[_0x3c5abd(0x158)+'nd'];if(_0x4b26d8
2024-10-06 17:09:20 UTC	2619	IN	Data Raw: 74 61 74 65 27 3a 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 61 32 29 5d 2c 27 65 72 72 6f 72 27 3a 27 27 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 29 5d 2c 27 3a 5c 78 32 30 27 29 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 30 62 29 5d 29 7d 3a 5f 30 78 35 36 65 32 33 35 5b 5f 30 78 31 63 34 66 30 37 5d 3d 7b 27 73 74 61 74 65 27 3a 2d 30 78 33 2c 27 65 72 72 6f 72 27 3a 5f 30 78 33 64 38 61 61 38 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 27 27 5b 27 63 6f 6e 63 61 74 27 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 Data Ascii: tate':_0x3d8aa8[_0x24dfef(0xa2)],'error':''[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x172)],':\x20')[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x10b)])}:_0x56e235[_0x1c4f07]={'state':-0x3,'error':_0x3d8aa8 instanceof Error?''['concat'](_0x3d8aa8[_0x24dfef(0x172

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/09bf01f8KXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2039 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"7f7-190b57e26f0"
2024-10-06 17:09:20 UTC	2039	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 39 30 61 32 30 34 2c 5f 30 78 33 61 31 32 32 34 29 7b 63 6f 6e 73 74 20 5f 30 78 35 61 32 62 35 66 3d 61 30 5f 30 78 31 35 66 35 2c 5f 30 78 32 32 39 38 36 65 3d 5f 30 78 39 30 61 32 30 34 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 31 30 37 61 36 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 64 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 32 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 63 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 Data Ascii: (function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3*(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/7357514cKXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2613 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"a35-190b57e2ec0"
2024-10-06 17:09:20 UTC	2613	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 34 32 66 62 2c 5f 30 78 32 66 30 63 63 30 29 7b 63 6f 6e 73 74 20 5f 30 78 33 34 32 37 61 32 3d 61 31 38 5f 30 78 35 63 38 63 2c 5f 30 78 35 35 35 62 30 36 3d 5f 30 78 31 38 34 32 66 62 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 31 38 62 61 62 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 38 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 62 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 65 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 33 29 29 2f 30 78 34 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 Data Ascii: (function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1*(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/62ff200fKXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 70095 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"111cf-190b57e2ec0"
2024-10-06 17:09:20 UTC	16021	IN	Data Raw: 63 6f 6e 73 74 20 61 31 34 5f 30 78 35 61 39 34 39 36 3d 61 31 34 5f 30 78 66 34 37 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 62 64 30 33 2c 5f 30 78 34 64 64 33 33 35 29 7b 63 6f 6e 73 74 20 5f 30 78 31 30 39 36 66 39 3d 61 31 34 5f 30 78 66 34 37 31 2c 5f 30 78 31 61 33 62 36 34 3d 5f 30 78 31 33 62 64 30 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 65 30 66 65 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 37 37 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 33 30 61 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 34 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 Data Ascii: const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3*(parseInt(_0x1096
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 73 3a 2f 2f 77 77 27 2b 27 77 2e 75 73 70 73 2e 63 6f 6d 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 30 34 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 37 64 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 63 29 29 5d 29 5d 29 2c 65 28 27 75 6c 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 27 2c 27 61 72 69 61 2d 68 69 64 64 65 6e 27 3a 27 74 72 75 65 27 7d 2c 5b 65 28 27 68 33 27 2c 7b 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 63 64 29 2b 27 6c 79 27 7d 2c 27 5c 75 30 30 61 30 27 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d Data Ascii: s://ww'+'w.usps.com'+a14_0x5a9496(0x231)+a14_0x5a9496(0x404)},a14_0x5a9496(0x37d)+a14_0x5a9496(0x26c))])]),e('ul',{'role':'menu','aria-hidden':'true'},[e('h3',{'class':a14_0x5a9496(0x3cd)+'ly'},'\u00a0'),e('li',null,[e('a',{'role':'menuitem','tabindex':'-
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 5f 30 78 35 61 39 34 39 36 28 30 78 34 61 33 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 32 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 64 65 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 33 37 29 2b 27 69 6c 27 29 5d 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d 31 27 2c 27 68 72 65 66 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 35 38 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 64 39 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 Data Ascii: _0x5a9496(0x4a3)+a14_0x5a9496(0x262)},a14_0x5a9496(0x3de)+a14_0x5a9496(0x337)+'il')]),e('li',null,[e('a',{'role':'menuitem','tabindex':'-1','href':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x231)+a14_0x5a9496(0x258)+a14_0x5a9496(0x4d9)},a14_0x5a9496(0
2024-10-06 17:09:20 UTC	16384	IN	Data Raw: 30 78 35 61 39 34 39 36 28 30 78 32 32 38 29 7d 29 2c 65 28 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 65 64 29 2c 7b 27 72 6f 6c 65 27 3a 27 73 65 61 72 63 68 27 2c 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 36 61 29 2b 27 62 61 6c 2d 68 65 61 64 65 72 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 39 31 29 2c 27 61 63 74 69 6f 6e 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 36 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 32 30 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 31 61 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 63 35 29 7d 2c 5b 65 28 27 73 70 61 6e 27 2c 7b 27 61 72 Data Ascii: 0x5a9496(0x228)}),e(a14_0x5a9496(0x3ed),{'role':'search','class':a14_0x5a9496(0x46a)+'bal-header'+a14_0x5a9496(0x491),'action':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x36c)+a14_0x5a9496(0x420)+a14_0x5a9496(0x1ac)+a14_0x5a9496(0x2c5)},[e('span',{'ar
2024-10-06 17:09:20 UTC	4922	IN	Data Raw: 27 2c 27 6f 6d 2d 6d 61 69 6c 2e 68 74 27 2c 27 69 6e 70 75 74 27 2c 27 73 74 63 61 6c 63 2e 75 73 70 27 2c 27 73 69 6e 65 73 73 27 2c 27 65 6c 69 76 65 72 79 27 2c 27 6e 61 76 2d 66 75 6c 6c 27 2c 27 61 62 65 6c 49 6e 66 6f 72 6d 27 2c 27 53 6b 69 70 5c 78 32 30 48 65 6c 70 5c 78 32 30 27 2c 27 4d 69 6c 69 74 61 72 79 5c 78 32 30 26 27 2c 27 76 69 63 65 73 2e 68 74 6d 27 2c 27 2f 69 6e 74 65 72 6e 61 74 69 27 2c 27 72 6e 61 74 69 6f 6e 61 6c 2d 27 2c 27 74 6f 6f 6c 2d 69 6e 74 65 72 27 2c 27 68 2d 74 72 61 63 6b 2d 69 6e 27 2c 27 5c 78 32 32 68 74 74 70 73 3a 2f 2f 66 27 2c 27 69 6d 61 67 65 73 2f 34 38 2e 27 2c 27 61 74 69 6f 6e 2e 68 74 6d 6c 27 2c 27 65 72 2e 68 74 6d 27 2c 27 72 63 65 70 74 2e 68 74 6d 27 2c 27 2d 66 6f 6f 74 65 72 2d 2d 6e 27 2c 27 Data Ascii: ','om-mail.ht','input','stcalc.usp','siness','elivery','nav-full','abelInform','Skip\x20Help\x20','Military\x20&','vices.htm','/internati','rnational-','tool-inter','h-track-in','\x22https://f','images/48.','ation.html','er.htm','rcept.htm','-footer--n','

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/c27b6911KXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1898 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"76a-190b57e2ec0"
2024-10-06 17:09:20 UTC	1898	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 34 39 62 32 66 35 3d 61 32 38 5f 30 78 32 62 38 37 28 29 3b 72 65 74 75 72 6e 20 61 32 38 5f 30 78 35 62 63 66 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 63 66 35 33 32 2c 5f 30 78 35 62 38 37 38 34 29 7b 5f 30 78 31 63 66 35 33 32 3d 5f 30 78 31 63 66 35 33 32 2d 30 78 37 62 3b 6c 65 74 20 5f 30 78 32 62 38 37 31 30 3d 5f 30 78 34 39 62 32 66 35 5b 5f 30 78 31 63 66 35 33 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 31 30 3b 7d 2c 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 31 66 35 39 2c 5f 30 78 31 64 Data Ascii: function a28_0x5bcf(_0x462472,_0x4cee4f){const _0x49b2f5=a28_0x2b87();return a28_0x5bcf=function(_0x1cf532,_0x5b8784){_0x1cf532=_0x1cf532-0x7b;let _0x2b8710=_0x49b2f5[_0x1cf532];return _0x2b8710;},a28_0x5bcf(_0x462472,_0x4cee4f);}(function(_0x2e1f59,_0x1d

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:09:20 UTC	546	OUT	GET /update/assets/dc6d90ceKXMp5.js HTTP/1.1 Host: us-usps-vpoktn.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-vpoktn.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:09:20 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 17:09:20 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6351 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"18cf-190b57e3690"
2024-10-06 17:09:20 UTC	6351	IN	Data Raw: 63 6f 6e 73 74 20 61 33 31 5f 30 78 35 35 36 62 32 39 3d 61 33 31 5f 30 78 32 32 64 31 3b 66 75 6e 63 74 69 6f 6e 20 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 66 64 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 33 32 34 37 65 3d 61 33 31 5f 30 78 35 36 63 36 28 29 3b 72 65 74 75 72 6e 20 61 33 31 5f 30 78 32 32 64 31 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 39 36 34 66 32 2c 5f 30 78 33 39 66 38 30 66 29 7b 5f 30 78 33 39 36 34 66 32 3d 5f 30 78 33 39 36 34 66 32 2d 30 78 31 65 34 3b 6c 65 74 20 5f 30 78 35 36 63 36 31 61 3d 5f 30 78 31 33 32 34 37 65 5b 5f 30 78 33 39 36 34 66 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 63 36 31 61 3b 7d 2c 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 Data Ascii: const a31_0x556b29=a31_0x22d1;function a31_0x22d1(_0x16cae8,_0x5e0fd0){const _0x13247e=a31_0x56c6();return a31_0x22d1=function(_0x3964f2,_0x39f80f){_0x3964f2=_0x3964f2-0x1e4;let _0x56c61a=_0x13247e[_0x3964f2];return _0x56c61a;},a31_0x22d1(_0x16cae8,_0x5e0