Edit tour

Windows Analysis Report
https://usps-ny.com

Overview

General Information

Sample URL:	https://usps-ny.com
Analysis ID:	1586902
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

AI detected suspicious URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1956,i,3063441335937202057,9881994057553729332,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps-ny.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T18:38:35.493723+0100	2057273	1	Successful Credential Theft Detected	185.31.200.249	443	192.168.2.16	49708	TCP

ET PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-09T18:38:35.493723+0100	2057274	1	Successful Credential Theft Detected	185.31.200.249	443	192.168.2.16	49708	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa

Joe Sandbox AI: Score: 9 Reasons: The legitimate domain for USPS is usps.com., The URL usps-ny.com contains a hyphen and an additional geographic identifier 'ny', which is not typical for the official USPS domain., USPS is a well-known brand, and any deviation from its official domain is suspicious., The presence of input fields for personal information like 'Full name' and 'ZIP Code' on a non-official domain increases the risk of phishing. DOM: 2.10.pages.csv

AI detected suspicious URL

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://usps-ny.com
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://usps-ny.com

Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon
Source: https://usps-ny.com/	HTTP Parser: No favicon

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057273 - Severity 1 - ET PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17 : 185.31.200.249:443 -> 192.168.2.16:49708
Source: Network traffic	Suricata IDS: 2057274 - Severity 1 - ET PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17 : 185.31.200.249:443 -> 192.168.2.16:49708

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.64
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hwAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usps-ny.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /valider.php HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa HTTP/1.1Host: usps-ny.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /index.php HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/usps-fonts.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap-icons.min.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/bootstrap.min.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/sticky-footer.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/usps-theme.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/jquery-ui.min.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /connexion.php?sslchannel=true&sessionid=xfyjQHgdpt23YVLyBzgV6YdHEbgPHoR8GI69kEcYdykCBgdwi9Fb5hVfxQHvV03qfOrGxvZ1GsBTlznEpaKvv8Dz7ZmnaJbzeo4ke6wsKDl6rJuUyHOZHrEWjoiEs7BR1n HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/megamenu-v2.css HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/logo-sb.svg HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/hamburger.svg HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/logo_mobile.svg HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/search.svg HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/footer-logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/threads_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/instagram_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/logo-sb.svg HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/hamburger.svg HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/youtube_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/x_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/pinterest_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/logo_mobile.svg HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/search.svg HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/footer-logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13SaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/threads_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/instagram_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/youtube_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/x_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usps-ny.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://usps-ny.com/assets/usps-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usps-ny.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://usps-ny.com/assets/usps-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1Host: usps-ny.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usps-ny.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://usps-ny.com/assets/usps-fonts.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/pinterest_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /assets/facebook_logo.png HTTP/1.1Host: usps-ny.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
Source: global traffic	HTTP traffic detected: GET /entreg/favicon.ico HTTP/1.1Host: reg.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usps-ny.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /entreg/favicon.ico HTTP/1.1Host: reg.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: usps-ny.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7787sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: text/htmlcache-control: private, no-cache, max-age=0pragma: no-cachecontent-length: 1249date: Thu, 09 Jan 2025 17:38:42 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"connection: close

Source: chromecache_103.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_103.1.dr	String found in binary or memory: http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_106.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_106.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_98.1.dr	String found in binary or memory: https://github.com/twbs/icons/blob/main/LICENSE)
Source: chromecache_98.1.dr	String found in binary or memory: https://icons.getbootstrap.com/)
Source: chromecache_91.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_121.1.dr, chromecache_115.1.dr, chromecache_100.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__.
Source: chromecache_127.1.dr, chromecache_105.1.dr, chromecache_115.1.dr, chromecache_100.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal60.phis.win@17/106@16/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1956,i,3063441335937202057,9881994057553729332,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps-ny.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1956,i,3063441335937202057,9881994057553729332,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://usps-ny.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://usps-ny.com/assets/usps-theme.css	0%	Avira URL Cloud	safe
https://usps-ny.com/favicon.ico	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/x_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/connexion.php?sslchannel=true&sessionid=xfyjQHgdpt23YVLyBzgV6YdHEbgPHoR8GI69kEcYdykCBgdwi9Fb5hVfxQHvV03qfOrGxvZ1GsBTlznEpaKvv8Dz7ZmnaJbzeo4ke6wsKDl6rJuUyHOZHrEWjoiEs7BR1n	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/pinterest_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/usps-fonts.css	0%	Avira URL Cloud	safe
https://usps-ny.com/valider.php	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/search.svg	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/logo_mobile.svg	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/5b4a262e-3342-44e2-8ad7-719998a68134.woff	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/facebook_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/threads_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/footer-logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/bootstrap.min.css	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/youtube_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/megamenu-v2.css	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/hamburger.svg	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/jquery-ui.min.css	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/sticky-footer.css	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/logo-sb.svg	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/bootstrap-icons.min.css	0%	Avira URL Cloud	safe
https://usps-ny.com/assets/instagram_logo.png	0%	Avira URL Cloud	safe
https://usps-ny.com/index.php	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
usps-ny.com	185.31.200.249	true	false	high
cs1799.wpc.upsiloncdn.net	192.229.221.165	true	false	high
www.google.com	142.250.186.100	true	false	high
reg.usps.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://usps-ny.com/assets/usps-fonts.css	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/connexion.php?sslchannel=true&sessionid=xfyjQHgdpt23YVLyBzgV6YdHEbgPHoR8GI69kEcYdykCBgdwi9Fb5hVfxQHvV03qfOrGxvZ1GsBTlznEpaKvv8Dz7ZmnaJbzeo4ke6wsKDl6rJuUyHOZHrEWjoiEs7BR1n	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8	false		high
https://www.google.com/js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js	false		high
https://usps-ny.com/assets/usps-theme.css	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/pinterest_logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/x_logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js	false		high
https://usps-ny.com/assets/logo_mobile.svg	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/valider.php	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/search.svg	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/footer-logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/5b4a262e-3342-44e2-8ad7-719998a68134.woff	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS	false		high
https://www.google.com/recaptcha/api2/reload?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8	false		high
https://usps-ny.com/assets/facebook_logo.png	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8	false		high
https://usps-ny.com/	false		unknown
https://usps-ny.com/assets/threads_logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/youtube_logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/bootstrap.min.css	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/userverify?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8	false		high
https://usps-ny.com/assets/megamenu-v2.css	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hw	false		high
https://usps-ny.com/assets/jquery-ui.min.css	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/hamburger.svg	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/sticky-footer.css	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/assets/logo-sb.svg	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa	true		unknown
https://usps-ny.com/assets/bootstrap-icons.min.css	true	Avira URL Cloud: safe	unknown
https://reg.usps.com/entreg/favicon.ico	false		high
https://usps-ny.com/assets/instagram_logo.png	true	Avira URL Cloud: safe	unknown
https://usps-ny.com/index.php	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://support.google.com/recaptcha#6262736	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
http://jqueryui.com	chromecache_103.1.dr	false	high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://cloud.google.com/contact	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://icons.getbootstrap.com/)	chromecache_98.1.dr	false	high
https://www.google.com/recaptcha/api2/	chromecache_121.1.dr, chromecache_115.1.dr, chromecache_100.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://support.google.com/recaptcha	chromecache_91.1.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_106.1.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://github.com/twbs/icons/blob/main/LICENSE)	chromecache_98.1.dr	false	high
http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&	chromecache_103.1.dr	false	high
https://getbootstrap.com/)	chromecache_106.1.dr	false	high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://play.google.com/log?format=json&hasfast=true	chromecache_91.1.dr	false	high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high
https://www.gstatic.c..?/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__.	chromecache_121.1.dr, chromecache_86.1.dr, chromecache_91.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.31.200.249	usps-ny.com	Netherlands	28685	ASN-ROUTITNL	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1586902
Start date and time:	2025-01-09 18:38:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://usps-ny.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@17/106@16/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.185.142, 108.177.15.84, 142.250.186.46, 142.250.184.202, 216.58.206.67, 142.250.185.110, 172.217.18.99, 216.58.212.138, 172.217.18.10, 142.250.185.74, 216.58.212.170, 216.58.206.74, 142.250.186.106, 142.250.185.106, 142.250.186.170, 142.250.181.234, 216.58.206.42, 142.250.184.234, 142.250.185.170, 172.217.16.202, 172.217.18.106, 172.217.16.138, 142.250.185.67, 172.217.16.195, 142.250.186.142, 172.217.16.206, 142.250.185.206, 142.250.185.78, 142.250.184.206, 142.250.186.174, 142.250.185.99, 142.250.181.238, 216.58.212.142, 142.250.186.78, 4.175.87.197, 23.56.254.164
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://usps-ny.com

Input	Output
URL: https://usps-ny.com Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://usps-ny.com
URL: https://usps-ny.com/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script exhibits moderate-risk behaviors, including external data transmission and potential redirects to unknown domains. However, the script appears to be part of a legitimate functionality, such as form validation or authentication, and the data transmission is limited to a specific endpoint. Further review may be needed to ensure the script's intent and implementation are secure." }
var onReturnCallback = function (response) { var url = 'valider.php'; $.ajax({ url: url, type: 'post', dataType: 'json', data: { response: response }, success: function (data) { var res = data.success.toString(); var red = data.redirect.toString(); if (res == 'true') { window.location.reload(); }else{ window.location.replace(red); } }, }); };
URL: https://www.gstatic.com/recaptcha/releases/RTbEo8_... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a two-factor authentication (2FA) flow. It includes code comments indicating it is part of the Closure Library, which is a well-known and trusted JavaScript library. The code does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script is primarily focused on rendering a 2FA UI and handling user input, which is a common and expected functionality. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely a benign implementation of a security-related feature." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+ ('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==="phone"?(T="<p>To make sure this is really you, we sent a verification code to your phone at "+F[44](11,R)+".</p><p>Enter the code below. It will expire in "+F[44](14,O)+" minutes.</p>",L+=T):(I="<p>To make sure this is really you, we sent a verification code to "+F[44](10,R)+".</p><p>Enter the code below. It will expire in "+F[44](8,O)+" minutes.</p>",F[44](11,R),F[44](8,O),L+=I), L+='</div><div class="'+l[g[0]](32,"rc-2fa-response-field")+Y[2]+l[g[0]](35,"rc-2fa-response-field-override")+Y[2]+(m?l[g[0]](33,"rc-2fa-response-field-error")+Y[2]+l[g[0]](2,"rc-2fa-response-field-error-override"):"")+'"></div><div class="'+l[g[0]](32,"rc-2fa-error-message")+Y[2]+l[g[0]](32,"rc-2fa-error-message-override")+'">',m&&(L+="Incorrect code."),L+='</div><div class="'+l[g[0]](2,"rc-2fa-submit-button-holder")+Y[2]+l[g[0]](33,"rc-2fa-submit-button-holder-override")+'"></div><div class="'+ l[g[0]](2,"rc-2fa-cancel-button-holder")+Y[2]+l[g[0]](2,"rc-2fa-cancel-button-holder-override")+'"></div></div></div>',V=vJ(L)),g[1])){for(m=[].concat(l[D=J[R=(O===void 0?0:O)%ZY.length,L=ZY.slice(),37](10),25](8,Y)),Z=x;Z<m.length;Z++)L[R]=((L[R]<<I^Math.pow(D.call(m[Z],x)-ZY[R],T))+(L[R]>>T))/ZY[R]\|x,R=(R+v)%ZY.length;V=Jm(L.reduce(function(S,e){return S^e},x))}return((p^22)&7)<4&&p-5>=-69&&(V=T<v?-1:T>v?1:0),V},function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g,S,e,Q,y){return((p^((((p^63)>>(y=[0,5,3],y[2])>= 1&&(p\|6)<10&&(V={timeout:1E4},m=V.document\|\|document,S=[0,"style",null],R=F[22](63,O).toString(),D=(new Ko(m)).createElement(v),Z={Yz:D,Oz:void 0},e=new g5(Z),Y=V.timeout!=S[2]?V.timeout:5E3,g=S[2],Y>S[y[0]]&&(g=window.setTimeout(function(A,U){K[F[U=[6,41,11],43](5,0,!0,D),A=new S0(1,"Timeout reached for loading script "+R),14](U[0],T,e),J[U[1]](U[2],!0,T,e,A)},Y),Z.Oz=g),D.onload=D.onreadystatechange=function(A){(A=["readyState",null,"complete"],D[A[0]]&&D[A[0]]!="loaded"&&D[A[0]]!=A[2])\|\|(F[43](21, 0,V.u_\|\|T,D,g),e.V3(A[1]))},D.onerror=function(A,U){A=new (F[43](13,(U=["Error while loading script ",!0,10],0),U[1],D,g),S0)(0,U[0]+R),K[14](7,T,e),J[41](U[2],U[1],T,e,A)},L=V.attributes\|\|{},a0(L,{type:"text/javascript",charset:"UTF-8"}),J[40](32,S[1],x,D,L),J[44](4,I,"",S[2],"nonce",O,D),F[25](16,"HEAD",S[y[0]],m).appendChild(D),Q=e),p)&90)==p&&(O=[12,8855,8067],m=new e0,L=a[7](4,4874)(27,7,O[y[0]],37,1),R=B[y[1]](64,Am.get(),NN,9),J[41](4,function(A,U,f,N,t,G,H,k,n,W,w){return a[7](3,8846)(A.name+ A.id+((f=(w=[8192,"lastChild",2],[1,null,2]),A).getAttribute(L[4]())\|\|""),L[0](),"i")&&(H=a[7](1,7853)(a[7](1,4728)(A).replace(/\s/g,"")),H()&&H().length>4)?(W=H().length,B[16](57,w[0],f[w[2]],m,P[22].bind(null,1),W,F[30].bind(null,20)),R&&P[8](54,R,f[w[2]])&&(G=P[8](30,R,f[w[2]]),t=H().substr(0,HJ[f[0]])+H().substr(H().length-HJ[0]),U=F[10](49).call(parseFloat(G+t)+G,30),F[40](6,m,U,5),n=((k=A.parentElement)==f[1]?0:(N=k[w[1]])==f[1]?0:N.src)?A.parentElement[w[1]].className:"",F[40](22,m,n,7)),!0): !1},K[12](16,"INPUT")),Y=a[7](4,5833)(x(a[47](1),44).slice(y[0],5E4)),I=a[7](2,1933)(a[7](2,O[1
URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "I'm not a robot", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "VERIFY", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://usps-ny.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Find", "text_input_field_labels": [ "Full name", "Enter ZIP Code" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Model: Joe Sandbox AI	{ "brands": [ "USPS" ] }
	{ "brands": [ "USPS" ] }
URL: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Model: Joe Sandbox AI	```json{ "legit_domain": "usps.com", "classification": "wellknown", "reasons": [ "The legitimate domain for USPS is usps.com.", "The URL usps-ny.com contains a hyphen and an additional geographic identifier 'ny', which is not typical for the official USPS domain.", "USPS is a well-known brand, and any deviation from its official domain is suspicious.", "The presence of input fields for personal information like 'Full name' and 'ZIP Code' on a non-official domain increases the risk of phishing." ], "riskscore": 9} Google indexed: False
URL: usps-ny.com Brands: USPS Input Fields: Full name, Enter ZIP Code

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 16:38:35 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9907430015760514
Encrypted:	false
SSDEEP:	48:8QdyTeOeH1idAKZdA1FehwiZUklqehgy+3:8Brw3y
MD5:	5649D1AD5E8FD6235E4FC1841FED3639
SHA1:	1D84DC6943E9BDE8C9A9B66E1CEE77B438BAF054
SHA-256:	D7DFA4556861B9087C09756EA5257F880C3E47429D0099984436CD4ABA61E649
SHA-512:	6FA0F1360EFF19EA576552AE7F5E7EE41A54627EF0F7944BA5A3B0643631C417EA1D14581CE04B33B695E601DDF6BE75349EBC5964C524B19A21B2C4287F708B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....@.N.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 16:38:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.007670191950076
Encrypted:	false
SSDEEP:	48:80dyTeOeH1idAKZdA1seh/iZUkAQkqehny+2:8trm9QKy
MD5:	A15FF419D1F741C9FC8F69425BD58F0B
SHA1:	DBAF361EDBF008C574C62F1DFF0CDDA069A58F09
SHA-256:	0279DA7CCF2DF35600FAF077C804822022692B1CCA71AE992CEE739C32CB511D
SHA-512:	16FA8DE88A703E0E4AD8032057D4551D64E129275D691EE6AAAAEA1F2CD0681E6BC761B546E45D1AC48D7BA01E760482D5BCBCBDBB0EDA61C85C3D515838AF5A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....X!.N.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.014405881758555
Encrypted:	false
SSDEEP:	48:80dyTeOAH1idAKZdA14meh7sFiZUkmgqeh7sBy+BX:8trgnzy
MD5:	C031FBD8C6710745FBE04EE8712FA864
SHA1:	C9F51F1A2C7CF30729F96507E4E91EC19B56D5BA
SHA-256:	029FDBA9C2D02BC36918EEC18139EC9FB35C364479C276C52718B06AB17E6334
SHA-512:	86F04C4E5989B761D1B549DBC634A0AA5D27FA6F382F1D1F53E9A3EBAAE6D2B0D1C066E8565A7D3595649D5955E2A370512964E3AA5186CEEC4591C7D22DE7AB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 16:38:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.0061926263395895
Encrypted:	false
SSDEEP:	48:8WdyTeOeH1idAKZdA1TehDiZUkwqehby+R:87r9py
MD5:	395FCCA00336BD0B0B7AC69362CE4040
SHA1:	DA6051AD597BBBD27C851208F3AD318FD7E2CF1A
SHA-256:	092C5E8487CA31780A7464986BEEF87B3C4CE62C78F6239CA532DF5CFA8EA0C6
SHA-512:	FA72C9CCB1514E97D4793C9120B6A8A1FF8315179B5516D4227B9F1CD1F39F4D6204DD42AB38CA8E80C6260D2D8363AA977D78ED33473FDA61296BD2F142F141
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......N.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 16:38:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9922914668813414
Encrypted:	false
SSDEEP:	48:8AdyTeOeH1idAKZdA1dehBiZUk1W1qehty+C:8xr99Ny
MD5:	838FC1072830236BE25B2115252362AF
SHA1:	1D06395EEA10481D7A157F8DEB8DEA67D8DD295C
SHA-256:	88F82F3EBB5764B6662262BE1CCE222207AD768BC38FDB1C3B82672D4E60B775
SHA-512:	06C4EC57C0194A0DDA9FBD0EF7CB14600D19C928CC835FA2649AE95BF3001081D830F62A13283DD752AD920447E106D36785A9C224A278A6E9FA3CC3257F27C9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....-M.N.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 16:38:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003784182993267
Encrypted:	false
SSDEEP:	48:8RdyTeOeH1idAKZdA1duTeehOuTbbiZUk5OjqehOuTbzy+yT+:8erFTfTbxWOvTbzy7T
MD5:	F729370AF60A48A9F7F21319577235E0
SHA1:	08C506B793BD09CF91ECBE81C2A4934BC72CFBCD
SHA-256:	A34DB200DC02CDBA5847444D4B7E46E28225A11FCFD6E931A015BD090562AA09
SHA-512:	405E67BEFD2BC61E126671C8D549F181A4E31D16855D0BC5DA00E96AB60C73872F360C3F538581775FDB8109DAECB5C9EF65DA577FA4F4A6FD9D0D985EDB39E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....K.N.b..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I)Z.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V)Z.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V)Z............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V)Z............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.775292972832054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtz1M+sLqo40Y:VKEctKo7LmvtUjPKtX7F1M/LrwUnG
MD5:	60395C591801D7108CD6127480F5A542
SHA1:	397E30BE079D07A8BB3EAD98FD5B7C5B8E1A8134
SHA-256:	32F3AC435D293515FF99B9B4E3E952E470868F70478E76815FCFE202F606ED3F
SHA-512:	219771A3E0FC39247886EE821AB804E913B02C68FEB79F94EE5EC024C02A1E0AD51394E2D89DDFB2BE8F701D4FD7D6F7B0522ED70916C3793D30AEFC5F30548A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15425)
Category:	downloaded
Size (bytes):	16804
Entropy (8bit):	5.010731722499777
Encrypted:	false
SSDEEP:	192:EfaiY7nfVGIzlzymAW+fGfYpQz6G3PRBGWLi3xBm9v5B6xBpYPzFhCNBjVs5y6sw:EC9fkMzymAz8YC6G/zDMSc7nfZBhVrQ
MD5:	D17B484AC7B439F36849D8D291C508BE
SHA1:	1D4CDDCB868B274731138643EBCE32CAEE7322B0
SHA-256:	8E5270C6931940B281F3C377E40EFDF312F8F9E96A94E9CC3A36792C42A81D2B
SHA-512:	A1CC3B18234269BDBB10FD6C03D15589570A47C5FAC0A38586F4E1B2BA1BC52E165BF43264EC3C4E1C2ADEF0DEACB88812AC7883BBAC3EDA8FA045DF40491A56
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/jquery-ui.min.css
Preview:	/! jQuery UI - v1.13.2 - 2024-02-02. http://jqueryui.com.* Includes: core.css, autocomplete.css, menu.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0px&offsetTopShadow=0px&thicknessShadow=5px&opacityShadow=30&bgImgOpacityShadow=0&bgTextureShadow=flat&bgColorShadow=666666&opacityOverlay=30&bgImgOpacityOverlay=0&bgTextureOverlay=flat&bgColorOverlay=aaaaaa&iconColorError=cc0000&fcError=5f3f3f&borderColorError=f1a899&bgTextureError=flat&bgColorError=fddfdf&iconColorHighlight=777620&fcHighlight=777620&borderColorHighlight=dad55e&bgTextureHighlight=flat&bgColorHighlight=fffa90&iconColorActive=ffffff&fcActive=ffffff&borderColorActive=003eff&bgTextureActive=flat&bgColorActive=007fff&iconColorHover=555555&fcHover=2b2b2b&borderColorHover=cccccc&bgTextureHover=flat&bgColorHover=ededed&iconColorDefault=777777&fcDefault=454545&borderColorDefault=c5c5c5&bgTextureDefault=flat&bgColorDefault=f6f6f

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.876439652186414
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKScf2aN8gWaee:PLKdXNQKsgL
MD5:	E1F0304F3E42C4B0F7F60C916163C085
SHA1:	40FC34522551F03676BA142C98A9982963811BC6
SHA-256:	ADB33A5A589E5C3A8399B879A2233CEDFC18025BCC70BDDA61D230F668300153
SHA-512:	6C115EEDB3562FA734D81DB534185D970D7F0C1C274F1DF3DE148B13C07A7889D961115974D6903C1A6F531BB2C7E636A3918507A0B56F95E729622888C7ECF4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js');

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65305)
Category:	downloaded
Size (bytes):	194901
Entropy (8bit):	5.014294143940012
Encrypted:	false
SSDEEP:	1536:ZtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4lp:ZtGg9JfWD9kVkpz600I4lp
MD5:	3F30C2C47D7D23C7A994DB0C862D45A5
SHA1:	7791DD1F3173A0D62CC39C21D2AD71FC8DAD0E72
SHA-256:	C0BCF7898FDC3B87BABCA678CD19A8E3EF570E931C80A3AFBFFCC453738C951A
SHA-512:	49B891FDEBACA612A8315557CAC4CA1BFED5B1E5A28BE63715D1EBB741292A0A53A1979E9A1A8779978B58B849BADCFFDAEB76570D6E4048F631B445F9354150
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.2.3 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44725), with no line terminators
Category:	downloaded
Size (bytes):	44725
Entropy (8bit):	4.985043266605775
Encrypted:	false
SSDEEP:	768:cvO/oXg+FkjBp+PAJXYlwCOmkfGU8HTpFBb8e3MNLLCIHltMG2zCo/SvkiRkkDDR:YO0ApATpFBb8e3MpLC+2zL/Svkiyr1un
MD5:	E91CA0335745F99E25CBBF36FCFDE992
SHA1:	993E87CEDB80BBFE5A847FE9F4D957BFE8795549
SHA-256:	8853E074638A2A37E8A4AFE149F17DD1CE9C4D76D5C9E1614F59507C359F3927
SHA-512:	3EF8C95CB5E043383FCBCA8DC73A7898550E7875691A4A1FBEA02E41F00C2C4A567A7B6FB3613EF3B791A5C587687602C6E33959087066C495B7CEB347127FFF
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/megamenu-v2.css
Preview:	html .global--navigation,body .global--navigation,.global--navigation div,div .global--navigation,.global--navigation span,.global--navigation applet,.global--navigation object,.global--navigation iframe,.global--navigation h1,.global--navigation h2,.global--navigation h3,.global--navigation h4,.global--navigation h5,.global--navigation h6,.global--navigation p,.global--navigation blockquote,.global--navigation pre,.global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation big,.global--navigation cite,.global--navigation code,.global--navigation del,.global--navigation dfn,.global--navigation em,.global--navigation img,.global--navigation ins,.global--navigation kbd,.global--navigation q,.global--navigation s,.global--navigation samp,.global--navigation small,.global--navigation strike,.global--navigation strong,.global--navigation sub,.global--navigation sup,.global--navigation tt,.global--navigation var,.global--navigati

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/pinterest_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/hamburger.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78622
Entropy (8bit):	6.020823361943302
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobBehXwW5vxM:mGRFauOxLA/+IcTOjGXK
MD5:	7E7B2671930BAE36E474E4997359D7D1
SHA1:	4D16812D704CF5657D46ED5C547826BBD87D4188
SHA-256:	08D8D393E17AE7EDE3842AE8856D6F350E58FD29F726A44FFA31458E4A2D15E5
SHA-512:	20C5C1FE84434D4E450C31C746ACB43D2C432B789D953AF0E83E1889CA403CD4CD72B9FE2BCE20932EC264E328541389139667A1F3FDEFC429D42C8740F00F4E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/x_logo.png
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.775292972832054
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtz1M+sLqo40Y:VKEctKo7LmvtUjPKtX7F1M/LrwUnG
MD5:	60395C591801D7108CD6127480F5A542
SHA1:	397E30BE079D07A8BB3EAD98FD5B7C5B8E1A8134
SHA-256:	32F3AC435D293515FF99B9B4E3E952E470868F70478E76815FCFE202F606ED3F
SHA-512:	219771A3E0FC39247886EE821AB804E913B02C68FEB79F94EE5EC024C02A1E0AD51394E2D89DDFB2BE8F701D4FD7D6F7B0522ED70916C3793D30AEFC5F30548A
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	downloaded
Size (bytes):	559653
Entropy (8bit):	5.705680793726412
Encrypted:	false
SSDEEP:	6144:e+5F5hBntAbdgXNGiFqXD3amOJp/syNILr5caQN+cMc0G:bcb+NGiFO3jGa57QP
MD5:	EB1594CE51B7609363C639ED8D50541A
SHA1:	41248D9D099A67E03C0F123439CA906E7CCCE22C
SHA-256:	FBA14002D8020B52EE5DF50C15A9E3ABEA5A03ACBB5FBAAD2596811F1128F471
SHA-512:	5D18DF2BCBDEE51C7F75AD10EBB3535787C8919E5029874AD8883980588318DA7812041331551B8B0910D5D3DEA2A9324DD33C5146000B8E9A808B4376B724B3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+.('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	CSV text
Category:	downloaded
Size (bytes):	2517
Entropy (8bit):	5.1584835928206765
Encrypted:	false
SSDEEP:	48:sCOhaOhagxhuXedrgXdrgsfz9FzONTN6nahR4ElTTT2rFEQx0N0N:ehlhafXeuXuEPaNTN6nU44TTTwEQ+6N
MD5:	B60A0AAF7850102970BBA6D2B5C1EE79
SHA1:	3763BA1A9C371F38E534C30AC33FAFC6408B711A
SHA-256:	9B8E23028AF1530E972F1BB37325ED8E92BA68A877B955FEB5E45B682C960F39
SHA-512:	597B0DA556AC3332009935B33245B1DA95F465F88D8D700CB1B1A1C86B8FF48E11881DD5D2224B891CF5A357A591064CD20D14CAA20BF41B8A2FF5BAACA06869
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/usps-fonts.css
Preview:	@font-face{font-family:"HelveticaNeueW02-65Medi";src:url("55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb335665f88") format("svg"),url("5b4a262e-3342-44e2-8ad7-719998a68134.woff") format("woff"),url("4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf") format("truetype")}.@font-face{font-family:"HelveticaNeueW01-77BdCn 692722";src:url("83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix");src:url("83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix") format("eot"),url("d90b3358-e1e2-4abb-ba96-356983a54c22.svg#d90b3358-e1e2-4abb-ba96-356983a54c22") format("svg"),url("102ab74c-0e84-4fe5-a17a-b20fb643591a.woff") format("woff"),url("1d146b29-55e2-485b-96aa-5cb628e7e9eb.ttf") format("truetype")}.@font-face{font-family:"HelveticaNeueW02-77BdCn 694069";src:url("b140bbd0-c46d-44cc-9624-d6771c7ef867.eot?#iefix");src:url("b140bbd0-c46d-44cc-9624-d6771c7ef867.eot?#ief

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/footer-logo.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
URL:	https://reg.usps.com/entreg/favicon.ico
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.876439652186414
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKScf2aN8gWaee:PLKdXNQKsgL
MD5:	E1F0304F3E42C4B0F7F60C916163C085
SHA1:	40FC34522551F03676BA142C98A9982963811BC6
SHA-256:	ADB33A5A589E5C3A8399B879A2233CEDFC18025BCC70BDDA61D230F668300153
SHA-512:	6C115EEDB3562FA734D81DB534185D970D7F0C1C274F1DF3DE148B13C07A7889D961115974D6903C1A6F531BB2C7E636A3918507A0B56F95E729622888C7ECF4
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js');

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.208966082694623
Encrypted:	false
SSDEEP:	3:SPiCVfI:V4fI
MD5:	3085D44383F5C2BA0096ECF58F7C993F
SHA1:	7B3738B5004C0092E95885320200C9517A7903AD
SHA-256:	8366E06CE87303B5A4988F3D1E8FA56815C7AB8BC37F7E43407364AAE09C017D
SHA-512:	86BB164FF3D0EDA873F0668551C4BD556B417ED571DC31BCC97F37CA20A9DE66D7AAABB4461A339514987463701B73E60BE9107C837843910ED21F5BA048B881
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkuyabTVWgJbBIFDXr2AKoSBQ2lEJzU?alt=proto
Preview:	ChIKBw169gCqGgAKBw2lEJzUGgA=

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	49370
Entropy (8bit):	7.97565028645074
Encrypted:	false
SSDEEP:	1536:aH0EhVxnE/x9+VC3Z9Oc0IJIaqBLtLYkD:43mX+wXOcpJTqckD
MD5:	96DBA76E0823F1A7F3902903E93FFE31
SHA1:	4E80BD3AC9825C98AF132B1AA4F373B3DB0031EB
SHA-256:	3AAF2226DF0970D2424F7E8D3BBE8E91505DDF0767F073D1D8846DA313BA0CCC
SHA-512:	637FD5348D36DEEFB2590DE141B12E7293092E7C2B5A51985B6F265A1B7F733E9CB8B5DC21BA3AECE07D6CCB3B939B58BCB90EAD980E250A489A4CE01658EEDD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4m...N......,....$...4..lBN..v......,.7/.M.x.(`..Y..n..L...........!....e.I..N{k.KT.#.e......O..$...$$m..q..m..b.).<:..O.@.Ze..x.eE.sK....$.f.Ca/..H...\|.Ngs&vz~...N.D..ab$V.[.c....(.ck.........n...x.P..t..m*...5.G...K...tu;..G....V.I......kU...x.yJ.1.)..8..L.?9....i....O..\|n..fFM..U.8.E..R.0.d.^....^....BL..._.h7.../kt...2i.p._.H...(..kc;.....<Q..<=

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (664)
Category:	downloaded
Size (bytes):	11589
Entropy (8bit):	5.054310959682817
Encrypted:	false
SSDEEP:	192:1I+bTqQ5mITnlQyh1pciJuD1IrLTsD97ricV+mhijSdVT0fSNrC/b3Nj9L1T:1INQ5mIB9pciJuD1IrLTsD97ricV+mhI
MD5:	AD784858D5386EF1E2BB3DBC85CECAEC
SHA1:	0506CF3E04277E3E764E122934F77F74DA6AFE60
SHA-256:	6604D16CE2F079D61D121AE3CE280C518EBDE1926D21707CC153B918D807C709
SHA-512:	583CDDE47D8436A06F4232CA668AF0FD3B499DD38E87680CFD5B19F0504EB00A949FDEE45A25C5021D1DAA53D72C48FD9EB57817314EB89F3CCDF0CA9CBF93D4
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/usps-theme.css
Preview:	:root{--bs-light:#f7f7f7;--bs-light-rgb:247,247,247;--bs-font-usps:"HelveticaNeueW02-55Roma","Helvetica Neue",Helvetica,Arial,sans-serif;--bs-body-font-family:var(--bs-font-usps);--bs-header-white:#fff;--bs-header-white-rgb:255,255,255;--bs-header-dark:#d8d8d8;--bs-header-dark-rgb:216,216,216;--bs-header-light:#f7f7f7;--bs-header-light-rgb:247,247,247;--bs-link-color:#336;--bs-link-hover-color:#336;--bd-callout-link:10,88,202;--bd-callout-code-color:#ab296a;--bs-success-text-emphasis:#040404;--bs-success-bg-subtle:#ecf3ec;--bs-success-border-subtle:#198845;--bs-warning-text-emphasis:#040404;--bs-warning-bg-subtle:#f7e6de;--bs-warning-border-subtle:#e71921}..navbar{--bs-navbar-color:rgba(0,0,0,1);--bs-navbar-hover-color:rgba(47,111,169,1);--bs-navbar-brand-font-size:.75rem;--bs-navbar-brand-color:rgba(0,0,0,1);--bs-navbar-brand-hover-color:rgba(47,111,169,1)}.dropdown-menu{--bs-dropdown-font-size:.75rem}header{margin-bottom:20px}.bg-header-white{--bs-bg-opacity:1;background-color:rgba(v

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 46657, version 1.0
Category:	downloaded
Size (bytes):	46657
Entropy (8bit):	7.988657559309873
Encrypted:	false
SSDEEP:	768:rLCl6g82cavjKflqsY7nrNNkc2tFgPZfVv79dfpaweqfbIT8N3JADxAOW3zITqjG:n3acyKflqVrNqltFgRtv5dxawrcTSADt
MD5:	3BEB1CF49DC702CD4DE8618EEB344DD4
SHA1:	080E1B4DC8B43DDB06961A3490857CDB936A8C2A
SHA-256:	FFD7AF6177837790E2620C429DCE0DA6DC7D18BBDCF87A7ED2C033A03513E947
SHA-512:	008EE624857F9F7DA939719B44E9146177471A9861BEA10C1065C134A2AF888C5D2E151E04EA0A8949738E2F0901EAB33AA5746207F52E6399119E69F4744D63
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
Preview:	wOFF.......A...............@...............OS/2...X...V...`..-.cmap...........t.8..cvt .......@...@....fpgm.......8........gasp...0............glyf...@......Ih.{4.head.......6...6.\2.hhea.......!...$.o..hmtx...(........I.-.kern...........L....loca...,......... ..maxp...H... ... ....name...h...%...r..j-post........... ...2prep................x.c`f.d.........................9X.@....a}.......x...)..LL...3.`..p..g..1.2.bP.B..L.....x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....k.u.H.A.P.4.....Z...4.k.....J.......S....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....*o..

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/facebook_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/youtube_logo.png
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58690, version 1.0
Category:	downloaded
Size (bytes):	58690
Entropy (8bit):	7.990300789788035
Encrypted:	true
SSDEEP:	1536:ZiIC2RdNz6MiM5bTOdkI7HhsTTVjh1nbAzjKf5pmnuU888888888888888Uv2:1N5POdkIThsTT9h903I5pmnX2
MD5:	A6E2D3921C9EA0FD81897D9AE7A33BA4
SHA1:	BC31969F2FB1926A15CD678B3E573C37A44E5421
SHA-256:	F2E2EF638DD9AAC863F0F6027CEB784CD4C5A14A676BED909C8F2AC4B088D510
SHA-512:	3F8D647F4F157FE0A3D6BDCC4CB8330BB9A8559DD927C073E9C55C36A7F8847B57DCDAB80A310B1A3ADBD07A70FEBB478868E4D5B59EEF1EC192A05269EF94C1
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
Preview:	wOFF.......B...............@.......+........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.C..fpgm.......8........gasp...8............glyf...H........}..nhead.......6...6.Z1yhhea...0...!...$.^..hmtx...T........ .8.kern...,............loca...,............maxp...,... ... ....name...L...)...~\|hN.post...x....... ...2prep............I..x.c`f.c..........................X.@....a}.......x...)..LL_..0.`>.p..g..1.2.bP.B..@..`..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....K.2.7.o.X...D.h.U.7.o...D.2.Z.K.....:.......J....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18300)
Category:	downloaded
Size (bytes):	18920
Entropy (8bit):	5.648118877162723
Encrypted:	false
SSDEEP:	384:byXIWN4tQu5vxh+g+k4Q/NOLxMgTy3e9naesPB8wEy1tj1GKxR:by4ft1N+u/NOOupaeEHPGW
MD5:	46074F20715B2E1D71813FE06D27F940
SHA1:	0A1F5FA5E8EE3161EE0A7FCF754FEA35A4D6C3F5
SHA-256:	19A614A48DD333665E26B26E63AB2174D2C904455065DF375EA23564AA3D6526
SHA-512:	0A3A595CFD90F343A04FAC3F108CF283F935F8C8FE6C0FF6DBCD581F24F8CD20792EA4097865E69427B95C2DF3060D7CE8E4B9373BD31D787F2CEB8D47E1C02A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(c){u.console&&u.console.error(c.message)}return H};(0,eval)(function(H,r){return(r=x())&&H.eval(r.createScript("1"))===1?function(c){return r.createScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message),r.stack&&(H+=":"+r.stack)),r=k(c,218),r[0]>3)){c.i=(r=(H=(r[0]-=(H=H.slice(0,(r[0]\|0)-3),(H.length\|0)+3),i6(H)),c).i,c);try{c.hL?(D=(D=k(c,2))&&D[D.length-1]\|\|95,(G=k

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/instagram_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	dropped
Size (bytes):	559653
Entropy (8bit):	5.705680793726412
Encrypted:	false
SSDEEP:	6144:e+5F5hBntAbdgXNGiFqXD3amOJp/syNILr5caQN+cMc0G:bcb+NGiFO3jGa57QP
MD5:	EB1594CE51B7609363C639ED8D50541A
SHA1:	41248D9D099A67E03C0F123439CA906E7CCCE22C
SHA-256:	FBA14002D8020B52EE5DF50C15A9E3ABEA5A03ACBB5FBAAD2596811F1128F471
SHA-512:	5D18DF2BCBDEE51C7F75AD10EBB3535787C8919E5029874AD8883980588318DA7812041331551B8B0910D5D3DEA2A9324DD33C5146000B8E9A808B4376B724B3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+.('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/logo_mobile.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/threads_logo.png
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/logo-sb.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (615)
Category:	downloaded
Size (bytes):	559653
Entropy (8bit):	5.705680793726412
Encrypted:	false
SSDEEP:	6144:e+5F5hBntAbdgXNGiFqXD3amOJp/syNILr5caQN+cMc0G:bcb+NGiFO3jGa57QP
MD5:	EB1594CE51B7609363C639ED8D50541A
SHA1:	41248D9D099A67E03C0F123439CA906E7CCCE22C
SHA-256:	FBA14002D8020B52EE5DF50C15A9E3ABEA5A03ACBB5FBAAD2596811F1128F471
SHA-512:	5D18DF2BCBDEE51C7F75AD10EBB3535787C8919E5029874AD8883980588318DA7812041331551B8B0910D5D3DEA2A9324DD33C5146000B8E9A808B4376B724B3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var K=function(){return[function(p,v,T,x,I,O,Y,m,R,L,D,Z,V,g){if((p-2&7)==(g=[6,1,34],p<<g[1]&4\|\|(O=v.vD,x=v.k_,m=v.ZW,Y=["Verify your email",'<div class="'," "],R=v.identifier,L=Y[g[1]]+l[g[0]](g[1],"rc-2fa-background")+Y[2]+l[g[0]](g[2],"rc-2fa-background-override")+'"><div class="'+l[g[0]](g[1],"rc-2fa-container")+Y[2]+l[g[0]](35,"rc-2fa-container-override")+'"><div class="'+l[g[0]](g[2],"rc-2fa-header")+Y[2]+l[g[0]](32,"rc-2fa-header-override")+'">',L=(x==="phone"?L+"Verify your phone":L+Y[0])+.('</div><div class="'+l[g[0]](g[2],"rc-2fa-instructions")+Y[2]+l[g[0]](g[2],"rc-2fa-instructions-override")+'">'),x==

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlAO8CRbcVUcBIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	49370
Entropy (8bit):	7.97565028645074
Encrypted:	false
SSDEEP:	1536:aH0EhVxnE/x9+VC3Z9Oc0IJIaqBLtLYkD:43mX+wXOcpJTqckD
MD5:	96DBA76E0823F1A7F3902903E93FFE31
SHA1:	4E80BD3AC9825C98AF132B1AA4F373B3DB0031EB
SHA-256:	3AAF2226DF0970D2424F7E8D3BBE8E91505DDF0767F073D1D8846DA313BA0CCC
SHA-512:	637FD5348D36DEEFB2590DE141B12E7293092E7C2B5A51985B6F265A1B7F733E9CB8B5DC21BA3AECE07D6CCB3B939B58BCB90EAD980E250A489A4CE01658EEDD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4m...N......,....$...4..lBN..v......,.7/.M.x.(`..Y..n..L...........!....e.I..N{k.KT.#.e......O..$...$$m..q..m..b.).<:..O.@.Ze..x.eE.sK....$.f.Ca/..H...\|.Ngs&vz~...N.D..ab$V.[.c....(.ck.........n...x.P..t..m*...5.G...K...tu;..G....V.I......kU...x.yJ.1.)..8..L.?9....i....O..\|n..fFM..U.8.E..R.0.d.^....^....BL..._.h7.../kt...2i.p._.H...(..kc;.....<Q..<=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18300)
Category:	dropped
Size (bytes):	18920
Entropy (8bit):	5.648118877162723
Encrypted:	false
SSDEEP:	384:byXIWN4tQu5vxh+g+k4Q/NOLxMgTy3e9naesPB8wEy1tj1GKxR:by4ft1N+u/NOOupaeEHPGW
MD5:	46074F20715B2E1D71813FE06D27F940
SHA1:	0A1F5FA5E8EE3161EE0A7FCF754FEA35A4D6C3F5
SHA-256:	19A614A48DD333665E26B26E63AB2174D2C904455065DF375EA23564AA3D6526
SHA-512:	0A3A595CFD90F343A04FAC3F108CF283F935F8C8FE6C0FF6DBCD581F24F8CD20792EA4097865E69427B95C2DF3060D7CE8E4B9373BD31D787F2CEB8D47E1C02A
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTML:P,createScript:P,createScriptURL:P})}catch(c){u.console&&u.console.error(c.message)}return H};(0,eval)(function(H,r){return(r=x())&&H.eval(r.createScript("1"))===1?function(c){return r.createScript(c)}:function(c){return""+c}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message),r.stack&&(H+=":"+r.stack)),r=k(c,218),r[0]>3)){c.i=(r=(H=(r[0]-=(H=H.slice(0,(r[0]\|0)-3),(H.length\|0)+3),i6(H)),c).i,c);try{c.hL?(D=(D=k(c,2))&&D[D.length-1]\|\|95,(G=k

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 51685, version 1.0
Category:	downloaded
Size (bytes):	51685
Entropy (8bit):	7.9896700805739025
Encrypted:	false
SSDEEP:	1536:BX9dRjLEqvmCEPq9offjUe8ZGeHIXOptaFTbQGFvq3s:BdjCCEPq9iwtHaFTVKs
MD5:	A93E96BE336C174933E68EF61D56E0D3
SHA1:	48F7A75A367904FF4A9A79689A508E29EDDA462C
SHA-256:	CC469406025B7CE0913CDEFC664007CD0FC46BC66A740DC7AFF67CC041BCCDE0
SHA-512:	3BDD3533A6EB40E0BBE2A3E68E597B6D40969EC18257FDCB2A2CF06668961DEAC22DF830D40DE1DC01B5B1CED068D0BD936F7805F1AB47464291F36DCB121876
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/5b4a262e-3342-44e2-8ad7-719998a68134.woff
Preview:	wOFF...............................,........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.k.cfpgm.......8........gasp...8............glyf...H......w..Z.hhead...,...6...6.#..hhea...d...!...$.E..hmtx............2.4.kern...t...>...X.D..loca.............U8.maxp....... ... ...Lname.......-.....j.post........... ...2prep...........nU..x.c`f.b..........................X.@....a}.......x...)..LL..s3.`..p..g..1.2.bP.B..D..c..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....Z.l.A..d.....f...<.r.<....}...P.Z.f.......A.......~................x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	81924
Entropy (8bit):	4.673419812443276
Encrypted:	false
SSDEEP:	768:7Pcr8JUkZrpULKt4bDcf3oQpeqfZs0BWeUz5+XIHx5qkgwJ:DrpEKt4moUeqfZbc5+XIHT
MD5:	A557A78D28BBE0E35F0212EF55E9E849
SHA1:	9256A3855C25CC363AF98BEAB9E33B2A1339DEAF
SHA-256:	2D70E37C566F4747A6E714441099FCF9384D1C76D2423422A2D12DE212F1E3E7
SHA-512:	DEA7B34CA411BB883C76378B909047163A847EBC0EF38C257541E268BF0780CC1664D3ABA8EB902F8AD57489E68C2A087D3A6C6DA6A091EFE6162F8F0563FA28
Malicious:	false
Reputation:	low
URL:	https://usps-ny.com/assets/bootstrap-icons.min.css
Preview:	/!. Bootstrap Icons v1.10.5 (https://icons.getbootstrap.com/). * Copyright 2019-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/icons/blob/main/LICENSE). /@font-face{font-display:block;font-family:bootstrap-icons;src:url("bootstrap-icons.woff2?1fa40e8900654d2863d011707b9fb6f2") format("woff2"),url("bootstrap-icons.woff?1fa40e8900654d2863d011707b9fb6f2") format("woff")}.bi::before,[class=" bi-"]::before,[class^=bi-]::before{display:inline-block;font-family:bootstrap-icons!important;font-style:normal;font-weight:400!important;font-variant:normal;text-transform:none;line-height:1;vertical-align:-.125em;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.bi-123::before{content:"\f67f"}.bi-alarm-fill::before{content:"\f101"}.bi-alarm::before{content:"\f102"}.bi-align-bottom::before{content:"\f103"}.bi-align-center::before{content:"\f104"}.bi-align-end::before{content:"\f105"}.bi-align-middle::before{content:"\f106"}.bi-align-start::before{con

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-09T18:38:35.493723+0100	2057273	ET PHISHING BULLSreCaptcha Credential Phish Landing Page M1 2024-10-17	1	185.31.200.249	443	192.168.2.16	49708	TCP
2025-01-09T18:38:35.493723+0100	2057274	ET PHISHING Suspected BULLSreCaptcha Credential Phish Landing Page M2 2024-10-17	1	185.31.200.249	443	192.168.2.16	49708	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 18:38:34.554678917 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.554707050 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:34.554785967 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.555675030 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.555723906 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:34.555788994 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.555895090 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.555907011 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:34.556772947 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:34.556802034 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.205967903 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.206475019 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.206506968 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.208048105 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.208132982 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.213622093 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.213700056 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.214056015 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.214062929 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.259649992 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.259932041 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.259958982 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.260927916 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.263345957 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.263453960 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.264029026 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.264103889 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.308957100 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.308978081 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.357630014 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.493345022 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.493560076 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.493655920 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.494446039 CET	49708	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:35.494460106 CET	443	49708	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:35.515525103 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:35.515563965 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:35.515662909 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:35.515820026 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:35.515825987 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.222500086 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.222950935 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.222965956 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.224602938 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.224790096 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.225681067 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.225771904 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.225877047 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.225888968 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.281018019 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.522811890 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.522948027 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.523001909 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.523020029 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.523221016 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.523278952 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.525343895 CET	49709	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.525357962 CET	443	49709	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.539984941 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.540035009 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:36.540131092 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.540290117 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:36.540326118 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.254158020 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.254616976 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.254681110 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.256145000 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.256335974 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.256623030 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.256714106 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.256803989 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.256822109 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.302027941 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.415679932 CET	80	49689	192.229.211.108	192.168.2.16
Jan 9, 2025 18:38:37.415846109 CET	49689	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:37.548232079 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.548378944 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.548461914 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.548525095 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.548715115 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:37.548779964 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.550380945 CET	49712	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:37.550410032 CET	443	49712	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.088763952 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.088807106 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.088877916 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.089148998 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.089164019 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.305382013 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:38.305409908 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:38.305491924 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:38.305762053 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:38.305775881 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:38.989343882 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.989609957 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.989674091 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.991122007 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:38.991209030 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.991466045 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:38.991549969 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:39.036197901 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:39.036217928 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:39.083523989 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.083730936 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.083743095 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.083909988 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:39.084618092 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.084681988 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.085196018 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.085257053 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.085429907 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.085438013 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.131916046 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.408087969 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408138037 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408171892 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408243895 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.408313036 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408361912 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408371925 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.408390045 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.408508062 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.414105892 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.414161921 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.414237976 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.414253950 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.420294046 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.421700001 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.421716928 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.426717043 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.426841021 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.426856041 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.483956099 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.498795986 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.498897076 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.498922110 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.498996973 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.499048948 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.499109030 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.504270077 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.510669947 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.513875961 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.513927937 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.516329050 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.517409086 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.517431021 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.523057938 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.523124933 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.523143053 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.534235001 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.538535118 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.538614035 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.552347898 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.552428961 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.552457094 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.569791079 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.569880962 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.569936037 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.578778982 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.578948021 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.578968048 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.585196972 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.586083889 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.586098909 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.591655016 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.591702938 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.591732979 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.591751099 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.591860056 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:39.591922998 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.592061043 CET	49716	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:39.592093945 CET	443	49716	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:40.441030979 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:40.741050005 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:41.195174932 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.195223093 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.195288897 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.195632935 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.195655107 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.224273920 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.224315882 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.224416971 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.224678040 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.224689960 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.347965002 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:41.849199057 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.849535942 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.849580050 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.850045919 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.850394964 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.850480080 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.850509882 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.879880905 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.880362034 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.880387068 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.881508112 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.882011890 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.882183075 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.882184029 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.895345926 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.902930021 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:41.927325964 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:41.934943914 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.131154060 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.131501913 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.131572962 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.138467073 CET	49722	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.138514996 CET	443	49722	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.152924061 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153048992 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153115034 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.153131962 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153209925 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153253078 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.153259993 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153347015 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.153393030 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.153398037 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.163249016 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.163319111 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.163327932 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.165682077 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.165745974 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.165752888 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.171387911 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.171451092 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.171458960 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.219940901 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.221549034 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.221616983 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.221692085 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.222043991 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.222067118 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.243041039 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.243220091 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.243273020 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.243295908 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.243375063 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.243431091 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.244134903 CET	49723	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.244153023 CET	443	49723	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.261883974 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:42.303354025 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:42.396689892 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.396750927 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.396832943 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.397133112 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.397145987 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.441628933 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:42.441772938 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:42.441828012 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:42.443702936 CET	49707	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:42.443717957 CET	443	49707	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:42.478437901 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.478508949 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.478595018 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.478883982 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:42.478898048 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:42.550964117 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:42.861637115 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.862076998 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.862112999 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.862457037 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.862865925 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.862937927 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.863049030 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:42.907349110 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:42.987176895 CET	49689	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:43.034699917 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.035044909 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.035060883 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.035526991 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.035922050 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.036000013 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.036099911 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.079345942 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.197861910 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.198293924 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.198357105 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.199508905 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.199687958 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.199851036 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.199939013 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.199960947 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.200159073 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.200524092 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.201198101 CET	49726	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.201232910 CET	443	49726	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.243372917 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.378946066 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.379076004 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.379163980 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.379237890 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.379242897 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.379276991 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.379304886 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.382230997 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.382318020 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.382318020 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.382340908 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.382450104 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.382457018 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.388509035 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.388576984 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.388587952 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.395399094 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.395484924 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.395490885 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.450001001 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.465084076 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.468096018 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.468306065 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.468312979 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.468367100 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.468462944 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.468529940 CET	49727	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:43.468542099 CET	443	49727	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:43.484060049 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.484189987 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.484278917 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.484288931 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.484325886 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.484375954 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.484386921 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.491029978 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.491116047 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.491130114 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.491156101 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.491434097 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.491643906 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.492089033 CET	49728	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.492105961 CET	443	49728	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.574785948 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.574843884 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:43.574937105 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.575221062 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:43.575239897 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.330272913 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.330715895 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.330751896 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.331249952 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.331597090 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.331691980 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.331746101 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.331811905 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.331844091 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.583771944 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.583836079 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.583888054 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.583925009 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.583995104 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.584005117 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.584053040 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.589656115 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.589732885 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.589782000 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.589793921 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.595813990 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.595874071 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.595885038 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.602351904 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.602417946 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.602427006 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.649735928 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.670989037 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.672743082 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.672813892 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.672852039 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.673155069 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.673208952 CET	443	49733	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.673265934 CET	49733	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.676798105 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:44.676857948 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:44.676933050 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:44.677206993 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:44.677215099 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:44.717278004 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.717360020 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.717443943 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.717714071 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:44.717749119 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:44.964016914 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:45.323474884 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.323868990 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.323915005 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.324381113 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.324755907 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.324843884 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.324923992 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.371340036 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.373363972 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.432126045 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.432498932 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.432559013 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.435652971 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.435743093 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.436216116 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.436291933 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.436393976 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.479340076 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.487987995 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.488008022 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.535970926 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.660301924 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.660356998 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.660423040 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.660463095 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.661185026 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.661272049 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.661822081 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.661849976 CET	443	49734	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.661865950 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.662539959 CET	49734	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.731748104 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.731858015 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.731955051 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.732028961 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.732044935 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.732073069 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.732129097 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.732156992 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.732213020 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.732228041 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.737708092 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.737778902 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.737804890 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.744743109 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.744817972 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.744833946 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.750480890 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.750787020 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.750802040 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.806081057 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.822244883 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.822411060 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.822504997 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.822665930 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.822704077 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.822765112 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.827127934 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.833558083 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.833627939 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.833650112 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.841327906 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.841415882 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.841483116 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.841497898 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.841573954 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.846288919 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.852363110 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.852436066 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.852442026 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.852469921 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.852523088 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.858757019 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.868541002 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.868604898 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.868618965 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.890588045 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.890657902 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.890671015 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.892062902 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.892127991 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.892141104 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.906462908 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.906528950 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.906541109 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.909075975 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.909143925 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.909156084 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.909409046 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.909473896 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.909621954 CET	49739	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:45.909651041 CET	443	49739	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:45.913134098 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.913224936 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:45.913330078 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.913638115 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:45.913675070 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.554181099 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.554649115 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.554686069 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.554980993 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.555424929 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.555490017 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.555588961 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.603339911 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881764889 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881808043 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881833076 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881870985 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881871939 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.881906033 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.881930113 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.887773037 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.887841940 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.887850046 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.887923002 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.887995958 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.888003111 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.894156933 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.894218922 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.894227982 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.902951002 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.903290033 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.903305054 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.952080965 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.968636990 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.971003056 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.971069098 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.971189022 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.971255064 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.971339941 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.977401972 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.983685017 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.983752966 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.983757019 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.983779907 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.985944033 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.989886045 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.996184111 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.996315956 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.996376991 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:46.996387005 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:46.996431112 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.002605915 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.008722067 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.008873940 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.008888960 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.008902073 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.009124994 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.015115976 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.021431923 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.021511078 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.021541119 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.027635098 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.027712107 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.027898073 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.027960062 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.028024912 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.033978939 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.040303946 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.040369987 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.040385008 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.040514946 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:47.040694952 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.040779114 CET	49745	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:47.040818930 CET	443	49745	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:48.606712103 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:48.889406919 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:48.889494896 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:48.889561892 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:48.907984972 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:49.472178936 CET	49714	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:49.472259045 CET	443	49714	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:49.517769098 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:49.771277905 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:50.331374884 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:50.331409931 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:50.331501961 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:50.331715107 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:50.331726074 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:50.728106976 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:51.004374027 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.004693031 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.004712105 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.005157948 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.005433083 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.005505085 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.005645990 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.005645990 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.005676985 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.299413919 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.299513102 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.299838066 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.300156116 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.300156116 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.303339005 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.303437948 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.303683043 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.306955099 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.306997061 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.311165094 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.311208963 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.311515093 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.311515093 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.311551094 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.604011059 CET	49748	443	192.168.2.16	142.250.181.228
Jan 9, 2025 18:38:51.604048967 CET	443	49748	142.250.181.228	192.168.2.16
Jan 9, 2025 18:38:51.936203003 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.936996937 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.937014103 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.938091993 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.939292908 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.939414978 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.939414978 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.939429998 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.939486980 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:51.955480099 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.955770969 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.955842018 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.956334114 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.956680059 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.956773043 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:51.956845999 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:51.985969067 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:51.999340057 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.000997066 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:52.244533062 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.244636059 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.244816065 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:52.244887114 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.244930983 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.244986057 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:52.245292902 CET	49749	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:38:52.245326996 CET	443	49749	142.250.186.100	192.168.2.16
Jan 9, 2025 18:38:52.289115906 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.289299011 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.289398909 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.290282011 CET	49750	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.290293932 CET	443	49750	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.300128937 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.300225973 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.300323009 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.300525904 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.300618887 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.300705910 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.300721884 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.300757885 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.301006079 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.301048994 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.439213991 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.439332008 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.439441919 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.439671993 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.439707994 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.914338112 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.914691925 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.914719105 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.914845943 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.915023088 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.915057898 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.915184021 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.915482044 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.915545940 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.915559053 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.915668011 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.915859938 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:52.915930033 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.959346056 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:52.970985889 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.060925007 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.061295986 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.061362028 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.064568043 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.064646006 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.065131903 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.065227032 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.065351009 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.065368891 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.066380978 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:53.114984035 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.130999088 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:53.328162909 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.328346014 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.328489065 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.330210924 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.330262899 CET	443	49752	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.330312014 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.330341101 CET	49752	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.330940008 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.368989944 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:53.371330023 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.444243908 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.444325924 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.444506884 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.444876909 CET	49753	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.444921970 CET	443	49753	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.446573973 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.446616888 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.446686983 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.446909904 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.446922064 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.608745098 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.608918905 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.608944893 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.608978987 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.609006882 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.609083891 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.609121084 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.624751091 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.624793053 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.624871969 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.625098944 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.625116110 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.628225088 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.628319979 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.628520012 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.628528118 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.628565073 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.628622055 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.628755093 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.628776073 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.628840923 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.629508018 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.629515886 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.629570961 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.629930019 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.629966021 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.630343914 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.630357027 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.630547047 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.630568027 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.630861044 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.630872965 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.656047106 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.707331896 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.707361937 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.707453966 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.707477093 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.707551003 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.707564116 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.707659006 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.707712889 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.707811117 CET	49751	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.707842112 CET	443	49751	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.708216906 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.708260059 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.708321095 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.708662987 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:53.708677053 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:53.974030018 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:54.320656061 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.321150064 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.321182013 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.321871996 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.322448969 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.322540045 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.322554111 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.363332987 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.376027107 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.410316944 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.410818100 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.410849094 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.411488056 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.411879063 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.411969900 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.412105083 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.412761927 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.413034916 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.413094997 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.413772106 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.414351940 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.414450884 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.414558887 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.430038929 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.430308104 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.430318117 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.431334972 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.431425095 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.431704044 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.431780100 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.431843996 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.431850910 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.432549953 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.432732105 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.432739973 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.433676004 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.433857918 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.433890104 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.435349941 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.435477018 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.435669899 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.435745001 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.435760021 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.435779095 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.435834885 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.435908079 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.436130047 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.436206102 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.436207056 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.455339909 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.455357075 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.472018957 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.479376078 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.491719961 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.491730928 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.491883039 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.491964102 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.518254042 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.518719912 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.518743038 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.519654036 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.519732952 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.520143032 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.520214081 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.520466089 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.520473957 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.535553932 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.535693884 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.567584038 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.661457062 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.661653996 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.661753893 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.663433075 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.663486958 CET	443	49754	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.663518906 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.663558960 CET	49754	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.664607048 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.664647102 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.664736032 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.665052891 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.665069103 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.710185051 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.712225914 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.712284088 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.712368965 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.712454081 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.712454081 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.712966919 CET	49755	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.712995052 CET	443	49755	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.713320971 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.713395119 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.713483095 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.713732958 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.713767052 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.720527887 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.725264072 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.735419989 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.735572100 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.735693932 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.736195087 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.736195087 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.736231089 CET	443	49758	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.736300945 CET	49758	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737324953 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737346888 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737386942 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737406015 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737404108 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737437010 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737479925 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737601995 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737659931 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737678051 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737698078 CET	443	49759	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.737710953 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.737751961 CET	49759	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.757117987 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.773032904 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.797868967 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.797892094 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.797940969 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.797980070 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.798034906 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.798055887 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.798203945 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.807837009 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.807847977 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.807874918 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.807885885 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.807902098 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.807934999 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.807946920 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.808104038 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.819859982 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.851205111 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.851263046 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.851342916 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.851353884 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.851510048 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.869029045 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.885873079 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.885885954 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.885943890 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.885986090 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.886003017 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.886048079 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.886070013 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.936568022 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.936614990 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.936826944 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.936872959 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.936939955 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.938718081 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.938741922 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.938816071 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.938838005 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.938894033 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941441059 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941483021 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941540956 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941541910 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941556931 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941557884 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941591978 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941615105 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941622972 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.941642046 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941653967 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.941678047 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943478107 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943490028 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943531990 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943540096 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943591118 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943607092 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943635941 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943636894 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943646908 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.943666935 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943701982 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943979979 CET	49760	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.943994999 CET	443	49760	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.966111898 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.966159105 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.966263056 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.966279030 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.966305017 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.966332912 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.966346025 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.966417074 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.966810942 CET	49756	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.966842890 CET	443	49756	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.969870090 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.969907045 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.969994068 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.970354080 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.970400095 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.970465899 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.970531940 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.970546961 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.970719099 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.970737934 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.973222971 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.973252058 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.973326921 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:54.973336935 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:54.973386049 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.030288935 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.030308962 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.030401945 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.030416965 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.030484915 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.045530081 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.045545101 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.045598030 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.045603991 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.045648098 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.057297945 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.057315111 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.057394028 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.057404995 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.057466984 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.071126938 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.071141005 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.071213007 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.071218967 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.071274042 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.085594893 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.085608959 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.085691929 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.085697889 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.085740089 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.107568979 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.107613087 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.107650995 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.107656002 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.107703924 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.112646103 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.112721920 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.112740993 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.112771034 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.112796068 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.112798929 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.112854004 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.113071918 CET	49757	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.113084078 CET	443	49757	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.115533113 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.115586042 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.115670919 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.115796089 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.115888119 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.115958929 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.115981102 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.116005898 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.116064072 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.116125107 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.116143942 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.116247892 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.116269112 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.116348982 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.116368055 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.188019037 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:55.319442034 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.319804907 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.319832087 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.320274115 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.320663929 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.320741892 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.320822954 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.367330074 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.376157999 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.376498938 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.376530886 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.376971960 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.377352953 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.377423048 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.377509117 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.419367075 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.629722118 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.630240917 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.630275965 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.631731033 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.631820917 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.632206917 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.632292032 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.632373095 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.632385015 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.632776022 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.633357048 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.633430004 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.633457899 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.634296894 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.634670019 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.634697914 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.635001898 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.635364056 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.635433912 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.635499954 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.679371119 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.680927992 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.683120966 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.683137894 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.721189976 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.721211910 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.721297026 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.721319914 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.721472025 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.721524000 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.721664906 CET	49762	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.721678019 CET	443	49762	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.730048895 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.751744986 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.752079964 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.752110958 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.753516912 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.753587008 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.753950119 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.754013062 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.754122972 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.754132032 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769033909 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769046068 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769170046 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769193888 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769243956 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.769267082 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.769418001 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.769418001 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.794677973 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.794990063 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.795011044 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.796428919 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.796602011 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.796864033 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.796931028 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.797122002 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.797132969 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.801050901 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.801263094 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.801287889 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.802045107 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.802067995 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.802117109 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.802134037 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.802160025 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.802181959 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.802691936 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.802752972 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.803190947 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.803255081 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.803342104 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.803349972 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.809004068 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.833693027 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.833730936 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.833775997 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.833792925 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.833815098 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.833821058 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.833865881 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.834115028 CET	49763	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.834136009 CET	443	49763	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.836621046 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.836658001 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.836735010 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.837001085 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.837009907 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.841080904 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.857130051 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.930335045 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.930388927 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.930521965 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.930569887 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.930711031 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.931262016 CET	49765	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.931301117 CET	443	49765	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.931657076 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.931726933 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.931807041 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.932238102 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.932269096 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.933759928 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.933832884 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.933895111 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.933921099 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.933983088 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.934050083 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.934299946 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.934329987 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.934798002 CET	49764	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.934823990 CET	443	49764	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.935086012 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.935133934 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.935199976 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.935434103 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.935452938 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.936986923 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.937012911 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:55.937074900 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.937330008 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:55.937336922 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.047911882 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.047969103 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.048046112 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.048165083 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.048165083 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.048751116 CET	49768	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.048794031 CET	443	49768	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.049279928 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.049379110 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.049467087 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.049742937 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.049777031 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.051944017 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.051964045 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.052016973 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.052169085 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.052180052 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.095237017 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.095392942 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.095523119 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.095731974 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.095732927 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.096220016 CET	49767	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.096260071 CET	443	49767	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.096494913 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.096558094 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.096638918 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.096873045 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.096899986 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.099901915 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.099992037 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.100076914 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.100254059 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.100289106 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103262901 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103426933 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103447914 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103497028 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.103526115 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103538990 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.103590965 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.103641033 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.103998899 CET	49766	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.104011059 CET	443	49766	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.104388952 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.104413986 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.104487896 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.104882956 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.104909897 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.106950045 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.106986046 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.107074976 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.107251883 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.107275009 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.488893986 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.489238024 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.489255905 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.490349054 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.490727901 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.490761995 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.490767002 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.490899086 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.539139986 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.545661926 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.545902967 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.545943022 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.546413898 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.546664953 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.546767950 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.546776056 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.553517103 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.553715944 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.553730011 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.554806948 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.555192947 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.555351973 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.555392027 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.573124886 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.573352098 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.573375940 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.573863029 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.574219942 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.574219942 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.574290037 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.587127924 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.587153912 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.591113091 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.591383934 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.591418028 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.594664097 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.594759941 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.594960928 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.595038891 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.595045090 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.603007078 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.619096041 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.639369011 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.650209904 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.650269032 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.683465958 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.683722973 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.683752060 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.687271118 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.687486887 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.687784910 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.687952042 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.687962055 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.698052883 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.713768959 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.714148998 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.714210987 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.715976954 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.716233015 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.716243982 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.716485023 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.716684103 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.716692924 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.717911005 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.718008995 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.718350887 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.718493938 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.718497992 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.719294071 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.719371080 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.719412088 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.719621897 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.719763994 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.721303940 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.721376896 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.721395969 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.721759081 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.721946001 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.722039938 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.730165958 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.730226040 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.731570959 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.731796980 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.731817007 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.733237982 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.733314037 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.733674049 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.733798027 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.733820915 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.740178108 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.740408897 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.740418911 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.741846085 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.741909981 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.742273092 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.742350101 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.742440939 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.742448092 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.762118101 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.762119055 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.762124062 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.762128115 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.762131929 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.762150049 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.778096914 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.778110981 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.778211117 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.794006109 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.794703960 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.794822931 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.794879913 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.794887066 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.794972897 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.795042992 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.795620918 CET	49769	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.795629978 CET	443	49769	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.798706055 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.798737049 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.798826933 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.799072027 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.799086094 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.810024023 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.810029984 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.810981989 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.826035023 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.847404003 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.847594976 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.847665071 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.847676039 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.847728968 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.847738028 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.847800016 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.848119974 CET	49773	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.848129988 CET	443	49773	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.850001097 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.850059032 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.850120068 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.850141048 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.850161076 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.850227118 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.851058960 CET	49770	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.851092100 CET	443	49770	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.855699062 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.855760098 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.855868101 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.856178045 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.856208086 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.865708113 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.865880013 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.865946054 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.866683960 CET	49771	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.866693974 CET	443	49771	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.893969059 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.894104004 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.894340038 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.895926952 CET	49772	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.895971060 CET	443	49772	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.901073933 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.901092052 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.901165009 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.901462078 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.901470900 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.979309082 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.979469061 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:56.979557991 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.983495951 CET	49774	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:56.983537912 CET	443	49774	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.000200987 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.000252008 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.000380039 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.002737045 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.002768993 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.003032923 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.003123999 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.003218889 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.004961967 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.005006075 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.006386042 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.006602049 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.006671906 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.006743908 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.006782055 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.006851912 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.011383057 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011384010 CET	49777	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.011420012 CET	443	49777	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011504889 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011560917 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.011569977 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011642933 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011693954 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.011718988 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.011755943 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.011826038 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.013273001 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.013380051 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.013437033 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.013448000 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.013510942 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.013556004 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.017812967 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.017827988 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.024949074 CET	49775	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.024956942 CET	443	49775	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.027148962 CET	49776	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.027162075 CET	443	49776	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.027890921 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.028007030 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.028028011 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.028089046 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.028115034 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.028151989 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.028161049 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.028207064 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.034708977 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.034769058 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.034822941 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.034832954 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.034843922 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.034905910 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.042903900 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.042965889 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.043064117 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.047353983 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.047385931 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.049932957 CET	49778	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.049945116 CET	443	49778	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.052491903 CET	49779	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.052514076 CET	443	49779	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.062444925 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.062532902 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.062634945 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.062926054 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.062964916 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.076355934 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.076436043 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.076517105 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.076677084 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.076703072 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.416382074 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.416685104 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.416711092 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.417172909 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.417538881 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.417556047 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.417620897 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.462016106 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.469980001 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.470458031 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.470523119 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.471003056 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.471395969 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.471488953 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.471560955 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.519378901 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.550215006 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.550575018 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.550595999 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.553741932 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.553916931 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.554203987 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.554250002 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.554361105 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.554368973 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.589279890 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:38:57.604207039 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.628238916 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.628611088 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.628673077 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.629571915 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.629654884 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.629801035 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.630096912 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.630163908 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.630323887 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.630387068 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.630482912 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.630500078 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.631551027 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.631953001 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.632116079 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.632128954 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.632152081 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.661686897 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.662064075 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.662105083 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.662576914 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.662978888 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.663069010 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.663119078 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.665715933 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.665981054 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.665997028 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.667443991 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.667540073 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.667871952 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.667958021 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.668025017 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.683085918 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.683155060 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.700793028 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.701066971 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.701107025 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.703327894 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.704557896 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.704651117 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.704848051 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.704927921 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.704938889 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.711332083 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714132071 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714277983 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714375019 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.714396954 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714416027 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714447021 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714503050 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.714879990 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.714910030 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.714961052 CET	49780	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.714973927 CET	443	49780	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.715023041 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.717983961 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.718051910 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.718071938 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.718086004 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.718475103 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.718627930 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.718657017 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.747034073 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.747040987 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.763060093 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.763322115 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.763355017 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.763361931 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.766776085 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.766836882 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.766889095 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.766910076 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.766926050 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.766998053 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.768248081 CET	49781	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.768261909 CET	443	49781	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.795061111 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.810040951 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.846944094 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.847122908 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.847224951 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.847862005 CET	49782	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.847875118 CET	443	49782	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.925018072 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.925262928 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.925406933 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.925790071 CET	49785	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.925802946 CET	443	49785	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.927598000 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.937072992 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:38:57.968188047 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:57.970453024 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:57.970757008 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.001538992 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.001665115 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.001749992 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.001773119 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.001831055 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.001903057 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.002279997 CET	49787	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.002288103 CET	443	49787	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.013945103 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.013974905 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014018059 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014034986 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014094114 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014123917 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.014190912 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014229059 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.014229059 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.014256954 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.014489889 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014616013 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014686108 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.014740944 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014774084 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.014843941 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.015151024 CET	49788	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.015178919 CET	443	49788	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.016038895 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.016040087 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.050941944 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.050992012 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.051171064 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.051172018 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.051234961 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.051309109 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.056917906 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.056934118 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.057001114 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.057044983 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.057049036 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.057077885 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.057097912 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.057123899 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.057147980 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.057168007 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.062371016 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062386990 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062407970 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062418938 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062444925 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062467098 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.062484026 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.062513113 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.062561035 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.094185114 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.094207048 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.094249010 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.094266891 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.095643044 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.095666885 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.095710993 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.099131107 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.099131107 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.099153042 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.099180937 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.099237919 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.100581884 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.100631952 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.100661039 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.100706100 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.100773096 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.100809097 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.100832939 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.104193926 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.104295969 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.104309082 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.104340076 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.104394913 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.104756117 CET	49783	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.104784966 CET	443	49783	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.134929895 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.135071993 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.135092020 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.135104895 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.135159016 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.135159969 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.135416031 CET	49784	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.135454893 CET	443	49784	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.143927097 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.143953085 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144026995 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144058943 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144090891 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144114017 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144114017 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144129992 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144179106 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144192934 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144227028 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.144272089 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144587040 CET	49786	443	192.168.2.16	185.31.200.249
Jan 9, 2025 18:38:58.144602060 CET	443	49786	185.31.200.249	192.168.2.16
Jan 9, 2025 18:38:58.324299097 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:58.324364901 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:58.324470043 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:58.324748039 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:58.324785948 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.352500916 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.352864027 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.352895021 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.354546070 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.354628086 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.360524893 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.360629082 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.360761881 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.360790014 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.372018099 CET	49673	443	192.168.2.16	204.79.197.203
Jan 9, 2025 18:38:59.403425932 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.691097975 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.691400051 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.691485882 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.691960096 CET	49791	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.691987991 CET	443	49791	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.862377882 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.862464905 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:38:59.862581015 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.862788916 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:38:59.862816095 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.823246956 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.823677063 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:00.823740959 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.825205088 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.825287104 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:00.825704098 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:00.825793982 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.825885057 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:00.825901985 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:00.879219055 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:01.169820070 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:01.170078993 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:01.170265913 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:01.170994043 CET	49792	443	192.168.2.16	192.229.221.165
Jan 9, 2025 18:39:01.171037912 CET	443	49792	192.229.221.165	192.168.2.16
Jan 9, 2025 18:39:02.396075010 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:39:07.544236898 CET	49678	443	192.168.2.16	20.189.173.10
Jan 9, 2025 18:39:11.997243881 CET	49680	80	192.168.2.16	192.229.211.108
Jan 9, 2025 18:39:20.553670883 CET	80	49697	84.201.210.39	192.168.2.16
Jan 9, 2025 18:39:20.553884029 CET	49697	80	192.168.2.16	84.201.210.39
Jan 9, 2025 18:39:20.553884029 CET	49697	80	192.168.2.16	84.201.210.39
Jan 9, 2025 18:39:20.558861971 CET	80	49697	84.201.210.39	192.168.2.16
Jan 9, 2025 18:39:21.219952106 CET	80	49698	84.201.210.39	192.168.2.16
Jan 9, 2025 18:39:21.220298052 CET	49698	80	192.168.2.16	84.201.210.39
Jan 9, 2025 18:39:21.220299006 CET	49698	80	192.168.2.16	84.201.210.39
Jan 9, 2025 18:39:21.225229025 CET	80	49698	84.201.210.39	192.168.2.16
Jan 9, 2025 18:39:38.143517017 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:38.143557072 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.143665075 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:38.143910885 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:38.143924952 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.784006119 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.784384012 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:38.784408092 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.784698963 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.784985065 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:38.785041094 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:38.829178095 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:48.693197012 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:48.693357944 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:39:48.693520069 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:49.469099045 CET	49795	443	192.168.2.16	142.250.186.100
Jan 9, 2025 18:39:49.469140053 CET	443	49795	142.250.186.100	192.168.2.16
Jan 9, 2025 18:40:11.227540016 CET	49700	80	192.168.2.16	192.229.221.95
Jan 9, 2025 18:40:11.227551937 CET	49699	443	192.168.2.16	20.190.159.64
Jan 9, 2025 18:40:11.237133980 CET	80	49700	192.229.221.95	192.168.2.16
Jan 9, 2025 18:40:11.237160921 CET	443	49699	20.190.159.64	192.168.2.16
Jan 9, 2025 18:40:11.237261057 CET	49700	80	192.168.2.16	192.229.221.95
Jan 9, 2025 18:40:11.237286091 CET	49699	443	192.168.2.16	20.190.159.64
Jan 9, 2025 18:40:14.328557968 CET	49701	443	192.168.2.16	20.190.159.64
Jan 9, 2025 18:40:14.333586931 CET	443	49701	20.190.159.64	192.168.2.16
Jan 9, 2025 18:40:14.333661079 CET	49701	443	192.168.2.16	20.190.159.64

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 9, 2025 18:38:33.398206949 CET	53	56824	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:33.401246071 CET	53	50181	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:34.212776899 CET	49231	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:34.212924957 CET	61656	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:34.553896904 CET	53	61656	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:34.553946018 CET	53	49231	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:34.611377001 CET	53	54844	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:35.507584095 CET	56912	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:35.507811069 CET	50202	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:35.514364004 CET	53	56912	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:35.515055895 CET	53	50202	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:35.517965078 CET	53	58252	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:36.531480074 CET	53304	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:36.531619072 CET	51631	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:36.536376953 CET	53	59771	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:36.538456917 CET	53	53304	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:36.539537907 CET	53	51631	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:36.846759081 CET	53	65312	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.080097914 CET	60653	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:38.080360889 CET	50646	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:38.086947918 CET	53	50646	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.087436914 CET	53	60653	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.275206089 CET	53	54105	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.297825098 CET	62906	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:38.297980070 CET	64150	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:38.304653883 CET	53	64150	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.304840088 CET	53	62906	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:38.409584999 CET	53	51752	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:39.426125050 CET	53	51395	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:51.708436012 CET	53	54774	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:52.302649021 CET	65004	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:52.302769899 CET	49680	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:52.424498081 CET	53	49680	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:52.438597918 CET	53	65004	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:58.150552988 CET	58210	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:58.150702953 CET	51065	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:58.281466007 CET	53	51065	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:58.323457003 CET	53	58210	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:59.694693089 CET	59475	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:59.694842100 CET	51864	53	192.168.2.16	1.1.1.1
Jan 9, 2025 18:38:59.825877905 CET	53	59475	1.1.1.1	192.168.2.16
Jan 9, 2025 18:38:59.871268988 CET	53	51864	1.1.1.1	192.168.2.16
Jan 9, 2025 18:39:10.761132002 CET	53	61524	1.1.1.1	192.168.2.16
Jan 9, 2025 18:39:33.059432030 CET	53	52856	1.1.1.1	192.168.2.16
Jan 9, 2025 18:39:33.221481085 CET	53	51866	1.1.1.1	192.168.2.16
Jan 9, 2025 18:39:44.764273882 CET	138	138	192.168.2.16	192.168.2.255
Jan 9, 2025 18:40:02.845350027 CET	53	65144	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 9, 2025 18:38:59.871362925 CET	192.168.2.16	1.1.1.1	c24a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 9, 2025 18:38:34.212776899 CET	192.168.2.16	1.1.1.1	0x8c67	Standard query (0)	usps-ny.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:34.212924957 CET	192.168.2.16	1.1.1.1	0xac0e	Standard query (0)	usps-ny.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:35.507584095 CET	192.168.2.16	1.1.1.1	0xc597	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:35.507811069 CET	192.168.2.16	1.1.1.1	0x5768	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:36.531480074 CET	192.168.2.16	1.1.1.1	0x3b90	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:36.531619072 CET	192.168.2.16	1.1.1.1	0x910b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:38.080097914 CET	192.168.2.16	1.1.1.1	0xdc3a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:38.080360889 CET	192.168.2.16	1.1.1.1	0x3dba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:38.297825098 CET	192.168.2.16	1.1.1.1	0x6098	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:38.297980070 CET	192.168.2.16	1.1.1.1	0x2309	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:52.302649021 CET	192.168.2.16	1.1.1.1	0x9396	Standard query (0)	usps-ny.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:52.302769899 CET	192.168.2.16	1.1.1.1	0xc06e	Standard query (0)	usps-ny.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:58.150552988 CET	192.168.2.16	1.1.1.1	0x2603	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:58.150702953 CET	192.168.2.16	1.1.1.1	0xbac8	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Jan 9, 2025 18:38:59.694693089 CET	192.168.2.16	1.1.1.1	0xb7d3	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:59.694842100 CET	192.168.2.16	1.1.1.1	0x2e82	Standard query (0)	reg.usps.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 9, 2025 18:38:34.553946018 CET	1.1.1.1	192.168.2.16	0x8c67	No error (0)	usps-ny.com		185.31.200.249	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:35.514364004 CET	1.1.1.1	192.168.2.16	0xc597	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:35.515055895 CET	1.1.1.1	192.168.2.16	0x5768	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 18:38:36.538456917 CET	1.1.1.1	192.168.2.16	0x3b90	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:36.539537907 CET	1.1.1.1	192.168.2.16	0x910b	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 18:38:38.086947918 CET	1.1.1.1	192.168.2.16	0x3dba	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 18:38:38.087436914 CET	1.1.1.1	192.168.2.16	0xdc3a	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:38.304653883 CET	1.1.1.1	192.168.2.16	0x2309	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 9, 2025 18:38:38.304840088 CET	1.1.1.1	192.168.2.16	0x6098	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:52.438597918 CET	1.1.1.1	192.168.2.16	0x9396	No error (0)	usps-ny.com		185.31.200.249	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:58.281466007 CET	1.1.1.1	192.168.2.16	0xbac8	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 18:38:58.323457003 CET	1.1.1.1	192.168.2.16	0x2603	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 18:38:58.323457003 CET	1.1.1.1	192.168.2.16	0x2603	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:59.825877905 CET	1.1.1.1	192.168.2.16	0xb7d3	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 9, 2025 18:38:59.825877905 CET	1.1.1.1	192.168.2.16	0xb7d3	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Jan 9, 2025 18:38:59.871268988 CET	1.1.1.1	192.168.2.16	0x2e82	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

usps-ny.com

https:

www.google.com

reg.usps.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:35 UTC	654	OUT	GET / HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:35 UTC	502	IN	HTTP/1.1 200 OK set-cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-length: 1180 date: Thu, 09 Jan 2025 17:38:35 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:35 UTC	1180	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 27 20 2f 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 27 70 6f 73 74 27 20 6e 61 6d 65 3d 27 6d 79 66 6f 72 6d 27 3e 0d 0a 20 20 20 20 3c 64 69 76 0d 0a 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 6c 65 66 74 3a 20 35 30 25 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 33 37 70 Data Ascii: <meta name='viewport' content='width=device-width, initial-scale=1' /><script src='https://www.google.com/recaptcha/api.js'></script><form method='post' name='myform'> <div style='position: absolute; top: 50%; left: 50%; margin-top: -37p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49709	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:36 UTC	618	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:36 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 09 Jan 2025 17:38:36 GMT Date: Thu, 09 Jan 2025 17:38:36 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:36 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-09 17:38:36 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-09 17:38:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49712	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:37 UTC	447	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:37 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 09 Jan 2025 17:38:37 GMT Date: Thu, 09 Jan 2025 17:38:37 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:37 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-01-09 17:38:37 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2025-01-09 17:38:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49716	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:39 UTC	943	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:39 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 09 Jan 2025 17:38:39 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-gzUVEa97GC7jGopP2aTQEQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:39 UTC	229	IN	Data Raw: 35 37 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 57d5<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 67 7a 55 56 45 61 39 37 47 43 37 6a 47 6f 70 50 32 61 54 51 45 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 37 35 56 46 7a 62 6b 41 4f 6d 6d 37 54 70 76 47 78 53 64 4a 58 55 59 6e 4e 65 74 45 78 53 45 36 48 6b 4e 32 74 41 76 Data Ascii: aWOvLbjGuoA8Hj2oS/recaptcha__en.js" nonce="gzUVEa97GC7jGopP2aTQEQ"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA75VFzbkAOmm7TpvGxSdJXUYnNetExSE6HkN2tAv
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 37 61 37 4b 58 4f 4d 52 32 53 62 46 54 73 56 58 70 38 4a 4e 6f 47 63 6a 31 68 53 63 30 6c 52 4f 6c 67 33 76 75 55 63 74 41 52 61 57 6a 79 47 76 34 34 6c 76 75 63 34 5f 39 41 62 45 49 5f 41 45 7a 7a 52 72 49 36 68 78 61 4b 75 6b 63 33 63 52 6f 63 72 68 70 37 5a 70 42 67 38 6a 36 46 6d 75 39 44 48 64 5a 75 71 32 47 65 73 41 6e 6e 6a 67 69 2d 31 31 76 4a 50 65 55 66 6b 72 2d 5f 44 71 68 77 6b 48 41 45 6c 71 46 52 4d 70 4b 47 45 46 6d 53 4a 45 5a 30 41 44 4a 73 37 45 56 4f 7a 4b 4c 5f 78 77 75 57 51 32 39 76 47 5a 35 53 74 7a 63 76 31 4c 48 6a 53 56 61 73 34 78 54 4f 77 30 35 35 48 4c 46 35 77 69 78 34 59 79 41 77 59 66 74 52 73 5a 47 76 7a 5f 7a 78 55 6f 48 75 31 58 65 45 66 35 63 76 77 52 68 70 38 6a 6a 64 43 6c 52 5a 4c 76 6a 34 59 57 63 43 32 33 63 6b 62 Data Ascii: 7a7KXOMR2SbFTsVXp8JNoGcj1hSc0lROlg3vuUctARaWjyGv44lvuc4_9AbEI_AEzzRrI6hxaKukc3cRocrhp7ZpBg8j6Fmu9DHdZuq2GesAnnjgi-11vJPeUfkr-_DqhwkHAElqFRMpKGEFmSJEZ0ADJs7EVOzKL_xwuWQ29vGZ5Stzcv1LHjSVas4xTOw055HLF5wix4YyAwYftRsZGvz_zxUoHu1XeEf5cvwRhp8jjdClRZLvj4YWcC23ckb
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 4d 44 56 72 51 6c 4a 42 4c 30 64 31 61 33 42 7a 4d 44 46 72 53 6a 46 77 54 55 31 74 56 31 6c 33 52 6d 52 36 57 54 59 77 4d 6d 5a 34 55 33 64 45 65 44 4a 43 54 6e 70 6b 61 32 67 30 56 33 70 73 4d 46 70 76 4d 45 52 42 65 45 63 76 53 33 6c 4c 5a 56 41 72 4e 54 52 31 5a 57 70 43 56 54 4a 4b 62 7a 56 42 62 57 74 55 64 47 35 6e 53 55 6c 74 65 6b 46 55 4d 7a 6c 43 51 57 63 77 52 6b 6b 72 55 47 64 49 52 44 46 45 61 6c 5a 6b 61 47 5a 6a 4d 58 52 55 4e 46 6f 31 61 47 68 6c 63 55 6c 6a 62 55 52 46 51 31 4e 75 65 6a 4e 31 4d 44 46 6a 62 56 41 34 4f 57 64 70 52 47 4d 34 63 6e 63 72 54 30 4e 71 52 6a 56 53 52 57 78 34 63 46 41 31 62 6e 4a 55 5a 31 52 32 53 58 64 30 55 30 70 78 56 43 74 54 5a 54 64 74 4e 30 64 56 63 45 4a 51 4d 47 31 79 4b 7a 4a 73 4e 45 70 46 4e 32 39 Data Ascii: MDVrQlJBL0d1a3BzMDFrSjFwTU1tV1l3RmR6WTYwMmZ4U3dEeDJCTnpka2g0V3psMFpvMERBeEcvS3lLZVArNTR1ZWpCVTJKbzVBbWtUdG5nSUltekFUMzlCQWcwRkkrUGdIRDFEalZkaGZjMXRUNFo1aGhlcUljbURFQ1NuejN1MDFjbVA4OWdpRGM4cncrT0NqRjVSRWx4cFA1bnJUZ1R2SXd0U0pxVCtTZTdtN0dVcEJQMG1yKzJsNEpFN29
2025-01-09 17:38:39 UTC	1390	IN	Data Raw: 4a 6a 61 33 4a 5a 51 6c 6b 32 54 33 49 33 64 6b 74 56 4f 44 64 53 52 48 70 51 52 45 77 34 4f 46 4d 79 51 57 64 57 64 57 4a 46 57 6d 34 77 51 31 6f 32 4c 33 4e 45 56 48 4a 4f 51 6b 45 34 64 57 4a 50 52 30 74 6c 4e 33 52 74 64 57 56 59 51 53 39 57 4d 7a 46 5a 53 6c 63 72 54 44 41 31 55 55 45 33 59 57 6c 4b 64 6d 35 6e 4e 6c 52 31 55 56 6f 78 55 33 52 46 61 58 64 55 5a 44 68 54 51 6a 46 68 64 47 59 76 4f 57 78 31 63 6d 52 44 51 6b 64 71 56 46 46 69 4d 43 39 69 4e 6e 42 79 59 33 63 72 55 6d 64 7a 4e 6d 4e 73 61 6d 39 72 56 7a 52 75 61 45 46 47 53 43 38 32 55 6c 55 31 4f 48 42 4d 54 43 74 6e 64 6e 6c 32 4d 46 46 42 53 57 6c 69 64 56 64 4e 63 30 67 34 5a 56 5a 30 54 45 55 72 57 46 67 76 52 56 42 4d 59 33 46 69 53 31 46 34 53 57 49 32 59 56 4d 34 62 56 42 57 61 Data Ascii: Jja3JZQlk2T3I3dktVODdSRHpQREw4OFMyQWdWdWJFWm4wQ1o2L3NEVHJOQkE4dWJPR0tlN3RtdWVYQS9WMzFZSlcrTDA1UUE3YWlKdm5nNlR1UVoxU3RFaXdUZDhTQjFhdGYvOWx1cmRDQkdqVFFiMC9iNnByY3crUmdzNmNsam9rVzRuaEFGSC82UlU1OHBMTCtndnl2MFFBSWlidVdNc0g4ZVZ0TEUrWFgvRVBMY3FiS1F4SWI2YVM4bVBWa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49722	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:41 UTC	848	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:42 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 09 Jan 2025 17:38:42 GMT Date: Thu, 09 Jan 2025 17:38:42 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:42 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 52 54 62 45 6f 38 5f 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js');
2025-01-09 17:38:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49723	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:41 UTC	836	OUT	GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8&co=aHR0cHM6Ly91c3BzLW55LmNvbTo0NDM.&hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&theme=light&size=normal&cb=kfsalkbmi1hw Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:42 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18920 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 07 Jan 2025 09:01:06 GMT Expires: Wed, 07 Jan 2026 09:01:06 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 203856 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 17:38:42 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 69 66 28 28 72 3d 28 48 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 72 29 7c 7c 21 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTM
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 69 66 28 21 63 2e 47 43 26 26 28 75 3d 76 6f 69 64 20 30 2c 72 26 26 72 5b 30 5d 3d 3d 3d 43 26 26 28 48 3d 72 5b 31 5d 2c 75 3d 72 5b 32 5d 2c 72 3d 76 6f 69 64 20 30 29 2c 79 3d 6b 28 63 2c 38 34 29 2c 79 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 78 3d 6b 28 63 2c 39 30 29 3e 3e 33 2c 79 2e 70 75 73 68 28 48 2c 78 3e 3e 38 26 32 35 35 2c 78 26 32 35 35 29 2c 75 21 3d 76 6f 69 64 20 30 26 26 79 2e 70 75 73 68 28 75 26 32 35 35 29 29 2c 48 3d 22 22 2c 72 26 26 28 72 2e 6d 65 73 73 61 67 65 26 26 28 48 2b 3d 72 2e 6d 65 73 73 61 67 65 29 Data Ascii: DX-License-Identifier: Apache-2.0','*/','var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message)
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 48 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 63 7d 2c 79 68 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 29 7b 72 65 74 75 72 6e 20 6b 28 48 2c 28 76 28 34 36 38 2c 28 78 50 28 48 2c 28 28 78 3d 6b 28 48 2c 34 36 38 29 2c 48 29 2e 75 26 26 78 3c 48 2e 4e 3f 28 76 28 34 36 38 2c 48 2c 48 2e 4e 29 2c 6a 4a 28 48 2c 63 29 29 3a 76 28 34 36 38 2c 48 2c 63 29 2c 72 29 29 2c 48 29 2c 78 29 2c 34 38 29 29 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 2e 56 3f 42 24 28 48 2e 6f 2c 48 29 3a 71 28 74 72 75 65 2c 48 2c 38 29 7d 2c 77 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 Data Ascii: =="function"&&typeof H.call=="undefined")return"object";return c},yh=function(H,r,c,x){return k(H,(v(468,(xP(H,((x=k(H,468),H).u&&x<H.N?(v(468,H,H.N),jJ(H,c)):v(468,H,c),r)),H),x),48))},I=function(H){return H.V?B$(H.o,H):q(true,H,8)},w={passive:true,captu
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 48 5d 7c 7c 28 72 2e 4a 5b 48 5d 3d 6e 6e 28 31 31 38 2c 72 2c 63 2c 48 29 29 3a 72 2e 4a 5b 48 5d 3d 6e 6e 28 31 35 33 2c 72 2c 63 2c 48 29 7d 48 3d 3d 31 35 30 26 26 28 72 2e 48 3d 71 28 66 61 6c 73 65 2c 72 2c 33 32 29 2c 72 2e 76 3d 76 6f 69 64 20 30 29 7d 2c 6e 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 72 65 74 75 72 6e 28 47 3d 58 5b 28 44 3d 28 79 3d 5a 61 2c 48 26 37 29 2c 63 3d 5b 2d 37 30 2c 2d 36 34 2c 2d 35 31 2c 2d 31 30 30 2c 34 2c 2d 36 35 2c 63 2c 31 34 2c 33 30 2c 38 31 5d 2c 72 29 2e 53 5d 28 72 2e 48 74 29 2c 47 29 5b 72 2e 53 5d 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 44 2b 3d 36 2b 37 2a 48 2c 44 26 3d 28 75 3d 5a 2c 37 29 7d 2c 47 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 Data Ascii: H]\|\|(r.J[H]=nn(118,r,c,H)):r.J[H]=nn(153,r,c,H)}H==150&&(r.H=q(false,r,32),r.v=void 0)},nn=function(H,r,c,x,y,u,G,D){return(G=X[(D=(y=Za,H&7),c=[-70,-64,-51,-100,4,-65,c,14,30,81],r).S](r.Ht),G)[r.S]=function(Z){D+=6+7*H,D&=(u=Z,7)},G.concat=function(Z){r
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 2c 72 5d 3b 69 66 28 48 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 48 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 48 2e 63 72 65 61 74 65 28 72 2a 34 2a 72 2b 2d 36 34 2a 72 2b 36 29 2c 48 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 46 34 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 66 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 29 7b 28 79 3d 6b 28 48 2c 28 79 3d 28 72 26 3d 28 63 3d 72 26 34 2c 33 29 2c 4d 28 48 29 29 2c 78 3d 4d 28 48 29 2c 79 29 29 2c 63 26 26 28 79 3d 69 36 28 22 22 2b 79 29 29 2c 72 29 26 26 6e 28 78 2c 48 2c 64 28 79 2e 6c 65 6e 67 74 68 2c 32 29 29 2c 6e 28 78 2c 48 2c 79 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 48 2e 57 2e 73 70 6c 69 63 65 28 30 2c 30 2c 72 29 7d 2c 69 36 3d Data Ascii: ,r];if(H.value)return H.create();return H.create(r4r+-64*r+6),H.prototype},F4=function(H){return H},fn=function(H,r,c,x,y){(y=k(H,(y=(r&=(c=r&4,3),M(H)),x=M(H),y)),c&&(y=i6(""+y)),r)&&n(x,H,d(y.length,2)),n(x,H,y)},A=function(H,r){H.W.splice(0,0,r)},i6=
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 61 72 74 7c 7c 30 2c 47 26 26 47 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 75 2e 73 38 3d 47 5b 30 5d 2c 75 2e 79 45 3d 47 5b 31 5d 29 2c 48 29 74 72 79 7b 75 2e 68 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 48 29 7d 63 61 74 63 68 28 50 29 7b 75 2e 68 3d 7b 7d 7d 65 28 74 72 75 65 2c 21 28 41 28 75 2c 28 41 28 75 2c 28 41 28 75 2c 28 76 28 31 36 37 2c 28 54 28 32 35 39 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b 76 28 28 4b 3d 6b 28 50 2c 28 42 3d 6b 28 50 2c 28 4e 3d 28 4b 3d 28 42 3d 4d 28 50 29 2c 4d 29 28 50 29 2c 4d 28 50 29 29 2c 42 29 29 2c 4b 29 29 2c 4e 29 2c 50 2c 42 5b 4b 5d 29 7d 2c 28 54 28 28 54 28 34 32 34 2c 28 54 28 34 37 31 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 29 7b 28 50 3d 28 42 3d 4d 28 50 29 2c 6b 28 50 2e 69 2c 42 29 29 2c 50 Data Ascii: art\|\|0,G&&G.length==2&&(u.s8=G[0],u.yE=G[1]),H)try{u.h=JSON.parse(H)}catch(P){u.h={}}e(true,!(A(u,(A(u,(A(u,(v(167,(T(259,function(P,B,N,K){v((K=k(P,(B=k(P,(N=(K=(B=M(P),M)(P),M(P)),B)),K)),N),P,B[K])},(T((T(424,(T(471,function(P,B){(P=(B=M(P),k(P.i,B)),P
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 3d 6b 28 50 2c 53 29 2c 6b 29 28 50 2c 42 29 2c 6b 28 50 2e 69 2c 4b 29 29 2c 4b 21 3d 3d 30 29 26 26 28 42 3d 49 48 28 31 2c 53 2c 50 2c 42 2c 4b 2c 4e 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4e 2c 42 2c 77 29 2c 76 28 31 33 32 2c 50 2c 5b 4b 2c 4e 2c 42 5d 29 29 7d 29 2c 75 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b 28 4b 3d 28 42 3d 28 4e 3d 28 4b 3d 28 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4d 28 50 29 29 2c 6b 28 50 2c 42 29 29 2c 6b 28 50 2c 4b 29 29 2c 76 29 28 4e 2c 50 2c 2b 28 42 3d 3d 4b 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 29 7b 76 28 28 4e 3d 28 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4e 29 2c 50 2c 22 22 2b 6b 28 50 2c 42 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f Data Ascii: =k(P,S),k)(P,B),k(P.i,K)),K!==0)&&(B=IH(1,S,P,B,K,N),K.addEventListener(N,B,w),v(132,P,[K,N,B]))}),u),0),function(P,B,N,K){(K=(B=(N=(K=(B=M(P),M(P)),M(P)),k(P,B)),k(P,K)),v)(N,P,+(B==K))}),u),function(P,B,N){v((N=(B=M(P),M(P)),N),P,""+k(P,B))}),u),functio
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 2c 50 29 29 2c 76 28 42 2c 50 2c 6b 28 50 2c 4e 29 7c 7c 6b 28 50 2c 4b 29 29 7d 2c 75 29 2c 75 29 29 2c 6c 28 34 29 29 29 2c 75 29 29 2c 76 29 28 34 38 2c 75 2c 7b 7d 29 2c 75 29 2c 5b 5d 29 2c 75 29 2c 5b 5d 29 2c 75 29 29 2c 54 29 28 32 30 33 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 2c 45 2c 66 2c 4a 2c 62 2c 61 2c 56 2c 4c 29 7b 66 75 6e 63 74 69 6f 6e 20 46 28 70 2c 59 29 7b 66 6f 72 28 3b 62 3c 70 3b 29 4b 7c 3d 49 28 50 29 3c 3c 62 2c 62 2b 3d 38 3b 72 65 74 75 72 6e 20 4b 3e 3e 3d 28 59 3d 28 62 2d 3d 70 2c 4b 26 28 31 3c 3c 70 29 2d 31 29 2c 70 29 2c 59 7d 66 6f 72 28 56 3d 28 53 3d 45 3d 28 42 3d 28 61 3d 28 28 4b 3d 28 66 3d 4d 28 50 29 2c 62 3d 30 29 2c 46 28 33 29 29 7c 30 29 2b 31 2c 46 29 28 35 29 2c 30 29 2c 5b 5d 29 3b 45 Data Ascii: ,P)),v(B,P,k(P,N)\|\|k(P,K))},u),u)),l(4))),u)),v)(48,u,{}),u),[]),u),[]),u)),T)(203,function(P,B,N,K,S,E,f,J,b,a,V,L){function F(p,Y){for(;b<p;)K\|=I(P)<<b,b+=8;return K>>=(Y=(b-=p,K&(1<<p)-1),p),Y}for(V=(S=E=(B=(a=((K=(f=M(P),b=0),F(3))\|0)+1,F)(5),0),[]);E
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 2e 4a 4c 2e 70 75 73 68 28 78 3c 3d 32 35 34 3f 78 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 63 2e 4b 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 75 7d 7d 2c 68 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 72 65 74 75 72 6e 20 72 2e 6c 24 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 63 3d 78 7d 2c 66 61 6c 73 65 2c 48 29 2c 63 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 28 76 28 48 2c 63 2c 72 29 2c 72 29 5b 77 63 5d 3d 32 37 39 36 7d 2c 78 50 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 29 7b 69 66 28 21 48 2e 49 29 7b 48 2e 50 2b 2b 3b 74 72 79 7b 66 6f 72 28 79 3d 28 78 3d 28 63 3d 48 2e 4e 2c 30 29 2c 76 6f 69 64 20 30 29 3b 2d 2d 72 3b 29 74 72 79 7b 69 66 28 75 3d 76 6f 69 64 20 30 2c 48 2e 56 29 79 3d 42 24 28 Data Ascii: .JL.push(x<=254?x:254))}finally{c.K=false}return u}},hW=function(H,r,c){return r.l$(function(x){c=x},false,H),c},T=function(H,r,c){(v(H,c,r),r)[wc]=2796},xP=function(H,r,c,x,y,u){if(!H.I){H.P++;try{for(y=(x=(c=H.N,0),void 0);--r;)try{if(u=void 0,H.V)y=B$(
2025-01-09 17:38:42 UTC	1390	IN	Data Raw: 48 5b 28 72 7c 30 29 2b 31 5d 3c 3c 31 36 7c 48 5b 28 72 7c 30 29 2b 32 5d 3c 3c 38 7c 48 5b 28 72 7c 30 29 2b 33 5d 7d 2c 4a 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 28 72 3d 49 28 48 29 2c 72 26 31 32 38 29 26 26 28 72 3d 72 26 31 32 37 7c 49 28 48 29 3c 3c 37 29 2c 72 7d 2c 4c 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3c 48 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 48 5b 72 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 52 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 29 7b 66 6f 72 28 63 3d 28 78 3d 28 72 7c 30 29 2d 31 2c 5b 5d 29 3b 78 3e 3d 30 3b 78 2d 2d 29 63 5b 28 72 7c Data Ascii: H[(r\|0)+1]<<16\|H[(r\|0)+2]<<8\|H[(r\|0)+3]},JW=function(H,r){return(r=I(H),r&128)&&(r=r&127\|I(H)<<7),r},Ln=function(H,r){return r=0,function(){return r<H.length?{done:false,value:H[r++]}:{done:true}}},R,d=function(H,r,c,x){for(c=(x=(r\|0)-1,[]);x>=0;x--)c[(r\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49707	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:42 UTC	624	OUT	GET /favicon.ico HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:42 UTC	389	IN	HTTP/1.1 404 Not Found content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 1249 date: Thu, 09 Jan 2025 17:38:42 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:42 UTC	1249	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49726	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:42 UTC	491	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:43 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 09 Jan 2025 17:38:43 GMT Date: Thu, 09 Jan 2025 17:38:43 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:43 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 52 54 62 45 6f 38 5f 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/RTbEo8_aWOvLbjGuoA8Hj2oS/recaptcha__en.js');
2025-01-09 17:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49727	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:43 UTC	483	OUT	GET /js/bg/GaYUpI3TM2ZeJrJuY6shdNLJBEVQZd83XqI1ZKo9ZSY.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:43 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18920 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 15:44:40 GMT Expires: Fri, 09 Jan 2026 15:44:40 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 02 Dec 2024 19:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 6843 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 17:38:43 UTC	580	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 69 66 28 28 72 3d 28 48 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 72 29 7c 7c 21 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 48 3b 74 72 79 7b 48 3d 72 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(H){return H},u=this\|\|self,x=function(H,r){if((r=(H=null,u).trustedTypes,!r)\|\|!r.createPolicy)return H;try{H=r.createPolicy("bg",{createHTM
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 69 66 28 21 63 2e 47 43 26 26 28 75 3d 76 6f 69 64 20 30 2c 72 26 26 72 5b 30 5d 3d 3d 3d 43 26 26 28 48 3d 72 5b 31 5d 2c 75 3d 72 5b 32 5d 2c 72 3d 76 6f 69 64 20 30 29 2c 79 3d 6b 28 63 2c 38 34 29 2c 79 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 78 3d 6b 28 63 2c 39 30 29 3e 3e 33 2c 79 2e 70 75 73 68 28 48 2c 78 3e 3e 38 26 32 35 35 2c 78 26 32 35 35 29 2c 75 21 3d 76 6f 69 64 20 30 26 26 79 2e 70 75 73 68 28 75 26 32 35 35 29 29 2c 48 3d 22 22 2c 72 26 26 28 72 2e 6d 65 73 73 61 67 65 26 26 28 48 2b 3d 72 2e 6d 65 73 73 61 67 65 29 2c 72 Data Ascii: -License-Identifier: Apache-2.0','*/','var g=function(H,r,c,x,y,u,G,D){if(!c.GC&&(u=void 0,r&&r[0]===C&&(H=r[1],u=r[2],r=void 0),y=k(c,84),y.length==0&&(x=k(c,90)>>3,y.push(H,x>>8&255,x&255),u!=void 0&&y.push(u&255)),H="",r&&(r.message&&(H+=r.message),r
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 48 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 63 7d 2c 79 68 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 29 7b 72 65 74 75 72 6e 20 6b 28 48 2c 28 76 28 34 36 38 2c 28 78 50 28 48 2c 28 28 78 3d 6b 28 48 2c 34 36 38 29 2c 48 29 2e 75 26 26 78 3c 48 2e 4e 3f 28 76 28 34 36 38 2c 48 2c 48 2e 4e 29 2c 6a 4a 28 48 2c 63 29 29 3a 76 28 34 36 38 2c 48 2c 63 29 2c 72 29 29 2c 48 29 2c 78 29 2c 34 38 29 29 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 2e 56 3f 42 24 28 48 2e 6f 2c 48 29 3a 71 28 74 72 75 65 2c 48 2c 38 29 7d 2c 77 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 Data Ascii: "function"&&typeof H.call=="undefined")return"object";return c},yh=function(H,r,c,x){return k(H,(v(468,(xP(H,((x=k(H,468),H).u&&x<H.N?(v(468,H,H.N),jJ(H,c)):v(468,H,c),r)),H),x),48))},I=function(H){return H.V?B$(H.o,H):q(true,H,8)},w={passive:true,capture
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 7c 7c 28 72 2e 4a 5b 48 5d 3d 6e 6e 28 31 31 38 2c 72 2c 63 2c 48 29 29 3a 72 2e 4a 5b 48 5d 3d 6e 6e 28 31 35 33 2c 72 2c 63 2c 48 29 7d 48 3d 3d 31 35 30 26 26 28 72 2e 48 3d 71 28 66 61 6c 73 65 2c 72 2c 33 32 29 2c 72 2e 76 3d 76 6f 69 64 20 30 29 7d 2c 6e 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 2c 47 2c 44 29 7b 72 65 74 75 72 6e 28 47 3d 58 5b 28 44 3d 28 79 3d 5a 61 2c 48 26 37 29 2c 63 3d 5b 2d 37 30 2c 2d 36 34 2c 2d 35 31 2c 2d 31 30 30 2c 34 2c 2d 36 35 2c 63 2c 31 34 2c 33 30 2c 38 31 5d 2c 72 29 2e 53 5d 28 72 2e 48 74 29 2c 47 29 5b 72 2e 53 5d 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 44 2b 3d 36 2b 37 2a 48 2c 44 26 3d 28 75 3d 5a 2c 37 29 7d 2c 47 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 Data Ascii: \|\|(r.J[H]=nn(118,r,c,H)):r.J[H]=nn(153,r,c,H)}H==150&&(r.H=q(false,r,32),r.v=void 0)},nn=function(H,r,c,x,y,u,G,D){return(G=X[(D=(y=Za,H&7),c=[-70,-64,-51,-100,4,-65,c,14,30,81],r).S](r.Ht),G)[r.S]=function(Z){D+=6+7*H,D&=(u=Z,7)},G.concat=function(Z){ret
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 5d 3b 69 66 28 48 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 48 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 48 2e 63 72 65 61 74 65 28 72 2a 34 2a 72 2b 2d 36 34 2a 72 2b 36 29 2c 48 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 46 34 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 48 7d 2c 66 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 29 7b 28 79 3d 6b 28 48 2c 28 79 3d 28 72 26 3d 28 63 3d 72 26 34 2c 33 29 2c 4d 28 48 29 29 2c 78 3d 4d 28 48 29 2c 79 29 29 2c 63 26 26 28 79 3d 69 36 28 22 22 2b 79 29 29 2c 72 29 26 26 6e 28 78 2c 48 2c 64 28 79 2e 6c 65 6e 67 74 68 2c 32 29 29 2c 6e 28 78 2c 48 2c 79 29 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 48 2e 57 2e 73 70 6c 69 63 65 28 30 2c 30 2c 72 29 7d 2c 69 36 3d 66 75 Data Ascii: ];if(H.value)return H.create();return H.create(r4r+-64*r+6),H.prototype},F4=function(H){return H},fn=function(H,r,c,x,y){(y=k(H,(y=(r&=(c=r&4,3),M(H)),x=M(H),y)),c&&(y=i6(""+y)),r)&&n(x,H,d(y.length,2)),n(x,H,y)},A=function(H,r){H.W.splice(0,0,r)},i6=fu
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 74 7c 7c 30 2c 47 26 26 47 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 75 2e 73 38 3d 47 5b 30 5d 2c 75 2e 79 45 3d 47 5b 31 5d 29 2c 48 29 74 72 79 7b 75 2e 68 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 48 29 7d 63 61 74 63 68 28 50 29 7b 75 2e 68 3d 7b 7d 7d 65 28 74 72 75 65 2c 21 28 41 28 75 2c 28 41 28 75 2c 28 41 28 75 2c 28 76 28 31 36 37 2c 28 54 28 32 35 39 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b 76 28 28 4b 3d 6b 28 50 2c 28 42 3d 6b 28 50 2c 28 4e 3d 28 4b 3d 28 42 3d 4d 28 50 29 2c 4d 29 28 50 29 2c 4d 28 50 29 29 2c 42 29 29 2c 4b 29 29 2c 4e 29 2c 50 2c 42 5b 4b 5d 29 7d 2c 28 54 28 28 54 28 34 32 34 2c 28 54 28 34 37 31 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 29 7b 28 50 3d 28 42 3d 4d 28 50 29 2c 6b 28 50 2e 69 2c 42 29 29 2c 50 5b 30 Data Ascii: t\|\|0,G&&G.length==2&&(u.s8=G[0],u.yE=G[1]),H)try{u.h=JSON.parse(H)}catch(P){u.h={}}e(true,!(A(u,(A(u,(A(u,(v(167,(T(259,function(P,B,N,K){v((K=k(P,(B=k(P,(N=(K=(B=M(P),M)(P),M(P)),B)),K)),N),P,B[K])},(T((T(424,(T(471,function(P,B){(P=(B=M(P),k(P.i,B)),P[0
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 28 50 2c 53 29 2c 6b 29 28 50 2c 42 29 2c 6b 28 50 2e 69 2c 4b 29 29 2c 4b 21 3d 3d 30 29 26 26 28 42 3d 49 48 28 31 2c 53 2c 50 2c 42 2c 4b 2c 4e 29 2c 4b 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4e 2c 42 2c 77 29 2c 76 28 31 33 32 2c 50 2c 5b 4b 2c 4e 2c 42 5d 29 29 7d 29 2c 75 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 29 7b 28 4b 3d 28 42 3d 28 4e 3d 28 4b 3d 28 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4d 28 50 29 29 2c 6b 28 50 2c 42 29 29 2c 6b 28 50 2c 4b 29 29 2c 76 29 28 4e 2c 50 2c 2b 28 42 3d 3d 4b 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 29 7b 76 28 28 4e 3d 28 42 3d 4d 28 50 29 2c 4d 28 50 29 29 2c 4e 29 2c 50 2c 22 22 2b 6b 28 50 2c 42 29 29 7d 29 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (P,S),k)(P,B),k(P.i,K)),K!==0)&&(B=IH(1,S,P,B,K,N),K.addEventListener(N,B,w),v(132,P,[K,N,B]))}),u),0),function(P,B,N,K){(K=(B=(N=(K=(B=M(P),M(P)),M(P)),k(P,B)),k(P,K)),v)(N,P,+(B==K))}),u),function(P,B,N){v((N=(B=M(P),M(P)),N),P,""+k(P,B))}),u),function(
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 29 29 2c 76 28 42 2c 50 2c 6b 28 50 2c 4e 29 7c 7c 6b 28 50 2c 4b 29 29 7d 2c 75 29 2c 75 29 29 2c 6c 28 34 29 29 29 2c 75 29 29 2c 76 29 28 34 38 2c 75 2c 7b 7d 29 2c 75 29 2c 5b 5d 29 2c 75 29 2c 5b 5d 29 2c 75 29 29 2c 54 29 28 32 30 33 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 42 2c 4e 2c 4b 2c 53 2c 45 2c 66 2c 4a 2c 62 2c 61 2c 56 2c 4c 29 7b 66 75 6e 63 74 69 6f 6e 20 46 28 70 2c 59 29 7b 66 6f 72 28 3b 62 3c 70 3b 29 4b 7c 3d 49 28 50 29 3c 3c 62 2c 62 2b 3d 38 3b 72 65 74 75 72 6e 20 4b 3e 3e 3d 28 59 3d 28 62 2d 3d 70 2c 4b 26 28 31 3c 3c 70 29 2d 31 29 2c 70 29 2c 59 7d 66 6f 72 28 56 3d 28 53 3d 45 3d 28 42 3d 28 61 3d 28 28 4b 3d 28 66 3d 4d 28 50 29 2c 62 3d 30 29 2c 46 28 33 29 29 7c 30 29 2b 31 2c 46 29 28 35 29 2c 30 29 2c 5b 5d 29 3b 45 3c 42 Data Ascii: )),v(B,P,k(P,N)\|\|k(P,K))},u),u)),l(4))),u)),v)(48,u,{}),u),[]),u),[]),u)),T)(203,function(P,B,N,K,S,E,f,J,b,a,V,L){function F(p,Y){for(;b<p;)K\|=I(P)<<b,b+=8;return K>>=(Y=(b-=p,K&(1<<p)-1),p),Y}for(V=(S=E=(B=(a=((K=(f=M(P),b=0),F(3))\|0)+1,F)(5),0),[]);E<B
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 4c 2e 70 75 73 68 28 78 3c 3d 32 35 34 3f 78 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 63 2e 4b 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 75 7d 7d 2c 68 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 72 65 74 75 72 6e 20 72 2e 6c 24 28 66 75 6e 63 74 69 6f 6e 28 78 29 7b 63 3d 78 7d 2c 66 61 6c 73 65 2c 48 29 2c 63 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 29 7b 28 76 28 48 2c 63 2c 72 29 2c 72 29 5b 77 63 5d 3d 32 37 39 36 7d 2c 78 50 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 2c 79 2c 75 29 7b 69 66 28 21 48 2e 49 29 7b 48 2e 50 2b 2b 3b 74 72 79 7b 66 6f 72 28 79 3d 28 78 3d 28 63 3d 48 2e 4e 2c 30 29 2c 76 6f 69 64 20 30 29 3b 2d 2d 72 3b 29 74 72 79 7b 69 66 28 75 3d 76 6f 69 64 20 30 2c 48 2e 56 29 79 3d 42 24 28 48 2e Data Ascii: L.push(x<=254?x:254))}finally{c.K=false}return u}},hW=function(H,r,c){return r.l$(function(x){c=x},false,H),c},T=function(H,r,c){(v(H,c,r),r)[wc]=2796},xP=function(H,r,c,x,y,u){if(!H.I){H.P++;try{for(y=(x=(c=H.N,0),void 0);--r;)try{if(u=void 0,H.V)y=B$(H.
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 28 72 7c 30 29 2b 31 5d 3c 3c 31 36 7c 48 5b 28 72 7c 30 29 2b 32 5d 3c 3c 38 7c 48 5b 28 72 7c 30 29 2b 33 5d 7d 2c 4a 57 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 28 72 3d 49 28 48 29 2c 72 26 31 32 38 29 26 26 28 72 3d 72 26 31 32 37 7c 49 28 48 29 3c 3c 37 29 2c 72 7d 2c 4c 6e 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3c 48 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 48 5b 72 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 52 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 72 2c 63 2c 78 29 7b 66 6f 72 28 63 3d 28 78 3d 28 72 7c 30 29 2d 31 2c 5b 5d 29 3b 78 3e 3d 30 3b 78 2d 2d 29 63 5b 28 72 7c 30 29 Data Ascii: (r\|0)+1]<<16\|H[(r\|0)+2]<<8\|H[(r\|0)+3]},JW=function(H,r){return(r=I(H),r&128)&&(r=r&127\|I(H)<<7),r},Ln=function(H,r){return r=0,function(){return r<H.length?{done:false,value:H[r++]}:{done:true}}},R,d=function(H,r,c,x){for(c=(x=(r\|0)-1,[]);x>=0;x--)c[(r\|0)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49728	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:43 UTC	862	OUT	GET /recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:43 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 09 Jan 2025 17:38:43 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-0pJzzReQqRJvLU7xxAYG1A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:43 UTC	229	IN	Data Raw: 31 65 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 Data Ascii: 1e14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* c
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 Data Ascii: yrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A6
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+0
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family:
2025-01-09 17:38:43 UTC	1390	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-01-09 17:38:43 UTC	529	IN	Data Raw: 5f 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 30 70 4a 7a 7a 52 65 51 71 52 4a 76 4c 55 37 78 78 41 59 47 31 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 30 70 4a 7a 7a 52 65 51 71 52 4a 76 4c 55 37 78 78 41 59 47 31 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 Data Ascii: _aWOvLbjGuoA8Hj2oS/recaptcha__en.js" nonce="0pJzzReQqRJvLU7xxAYG1A"> </script></head><body><input type="hidden" id="recaptcha-token"><script type="text/javascript" nonce="0pJzzReQqRJvLU7xxAYG1A"> recaptcha.frame.Main.init("[\x2
2025-01-09 17:38:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49733	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:44 UTC	859	OUT	POST /recaptcha/api2/reload?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:44 UTC	7787	OUT	Data Raw: 0a 18 52 54 62 45 6f 38 5f 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 12 ce 0f 30 33 41 46 63 57 65 41 37 35 56 46 7a 62 6b 41 4f 6d 6d 37 54 70 76 47 78 53 64 4a 58 55 59 6e 4e 65 74 45 78 53 45 36 48 6b 4e 32 74 41 76 59 52 39 2d 53 51 52 71 6e 73 45 69 4b 4f 66 2d 75 59 52 31 5a 71 42 70 71 53 35 79 65 45 66 43 63 57 32 68 69 33 6d 70 73 50 6d 47 76 77 33 47 53 61 4f 53 4b 39 72 46 34 43 4a 7a 41 4a 32 73 4f 59 4e 2d 45 37 58 63 39 6f 4e 74 69 46 54 7a 39 58 38 52 50 54 6f 63 4b 4b 32 75 45 74 4e 50 4e 30 34 2d 53 5a 44 71 48 33 66 6e 61 57 4e 43 32 32 72 39 46 62 78 4a 66 7a 35 4f 72 7a 7a 49 33 4e 76 69 39 69 69 39 6a 30 62 31 47 43 4b 49 42 5f 61 69 6d 64 6d 30 46 6e 7a 4a 71 53 59 4f 43 64 75 31 42 45 73 71 4b 71 70 55 59 6c 49 41 6c 33 2d Data Ascii: RTbEo8_aWOvLbjGuoA8Hj2oS03AFcWeA75VFzbkAOmm7TpvGxSdJXUYnNetExSE6HkN2tAvYR9-SQRqnsEiKOf-uYR1ZqBpqS5yeEfCcW2hi3mpsPmGvw3GSaOSK9rF4CJzAJ2sOYN-E7Xc9oNtiFTz9X8RPTocKK2uEtNPN04-SZDqH3fnaWNC22r9FbxJfz5OrzzI3Nvi9ii9j0b1GCKIB_aimdm0FnzJqSYOCdu1BEsqKqpUYlIAl3-
2025-01-09 17:38:44 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Date: Thu, 09 Jan 2025 17:38:44 GMT Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE; Expires=Tue, 08-Jul-2025 17:38:44 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Thu, 09 Jan 2025 17:38:44 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:44 UTC	390	IN	Data Raw: 34 30 61 64 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 43 42 7a 4b 71 78 75 38 31 74 35 59 32 45 57 58 50 6e 64 6d 57 58 78 68 49 65 76 33 71 63 6e 43 5a 4b 34 33 66 6c 45 56 51 43 73 66 59 36 66 4b 4e 5f 75 61 64 4b 33 50 6d 34 38 34 64 34 30 52 6a 46 37 56 56 33 47 39 78 64 6d 75 51 51 32 79 58 49 70 62 71 6b 54 79 73 32 55 33 7a 6a 67 49 4f 39 6f 75 42 4e 69 42 65 5f 73 55 30 61 72 65 79 5f 4e 47 77 70 72 4e 4f 68 57 54 57 51 51 31 5a 66 6b 78 6c 39 6b 4e 6c 71 2d 71 67 47 4c 51 61 45 36 79 61 78 52 32 4f 6c 36 62 65 6c 62 41 70 34 4f 31 67 72 37 59 69 30 44 5f 39 76 6b 2d 6e 4b 49 58 47 6a 6e 33 39 76 69 6c 55 31 72 73 66 42 37 6f 4a 45 47 33 4f 36 46 4c 59 55 57 65 55 33 4a 65 48 61 7a 75 6b 6d 74 7a 46 66 46 5f 5a Data Ascii: 40ad)]}'["rresp","03AFcWeA7CBzKqxu81t5Y2EWXPndmWXxhIev3qcnCZK43flEVQCsfY6fKN_uadK3Pm484d40RjF7VV3G9xdmuQQ2yXIpbqkTys2U3zjgIO9ouBNiBe_sU0arey_NGwprNOhWTWQQ1Zfkxl9kNlq-qgGLQaE6yaxR2Ol6belbAp4O1gr7Yi0D_9vk-nKIXGjn39vilU1rsfB7oJEG3O6FLYUWeU3JeHazukmtzFfF_Z
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 33 59 76 6e 49 4c 42 4b 41 55 54 4c 6a 67 78 6a 37 54 31 76 47 6e 5f 42 65 38 72 67 4a 46 4e 66 36 39 6e 76 68 6f 47 30 2d 53 45 53 6f 77 5f 46 61 45 61 65 50 5a 49 4a 54 43 36 42 48 6d 66 71 63 55 34 4c 47 78 65 4e 79 6b 54 68 76 35 66 55 69 54 47 63 37 43 4a 68 4e 66 70 38 72 76 45 58 4e 41 62 77 6b 68 32 64 54 4e 51 6f 6f 73 70 5f 5a 6b 6b 53 30 4d 64 78 67 78 69 39 73 73 68 31 72 6d 59 55 75 34 4c 49 2d 77 54 38 64 7a 32 38 5a 4e 49 50 4f 4e 63 42 78 4d 79 49 37 45 4a 51 70 7a 52 73 31 54 74 63 4a 71 6e 50 4e 62 41 48 57 53 35 52 4d 51 48 66 76 66 41 59 42 49 5a 76 4f 71 76 6f 77 78 66 32 42 48 69 54 6e 67 6e 65 6f 68 4b 4b 79 46 4d 5a 53 4b 41 6a 38 75 50 66 76 56 55 52 2d 57 4e 37 6b 71 68 49 5f 30 55 45 76 51 4f 67 73 30 76 50 73 56 53 54 55 6b 7a Data Ascii: 3YvnILBKAUTLjgxj7T1vGn_Be8rgJFNf69nvhoG0-SESow_FaEaePZIJTC6BHmfqcU4LGxeNykThv5fUiTGc7CJhNfp8rvEXNAbwkh2dTNQoosp_ZkkS0Mdxgxi9ssh1rmYUu4LI-wT8dz28ZNIPONcBxMyI7EJQpzRs1TtcJqnPNbAHWS5RMQHfvfAYBIZvOqvowxf2BHiTngneohKKyFMZSKAj8uPfvVUR-WN7kqhI_0UEvQOgs0vPsVSTUkz
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 38 6d 61 48 47 6c 54 55 45 65 6e 61 52 5f 6a 74 6e 4d 30 78 5f 75 4b 55 68 4e 35 32 44 50 32 36 76 50 6f 30 51 41 46 61 59 41 7a 77 6d 6d 39 43 45 69 5f 2d 57 4e 33 5f 43 55 4d 69 50 4c 6c 32 78 58 59 51 5f 48 45 6f 36 68 43 50 65 39 4f 69 44 31 78 57 57 77 4c 70 64 47 6e 4c 56 31 36 5f 67 6b 35 52 6a 34 62 6b 6d 58 68 59 59 62 37 48 6d 33 7a 34 6a 6a 66 32 6a 31 51 4f 65 54 4e 67 35 62 7a 5a 64 65 6d 48 54 75 69 6f 2d 72 55 58 6b 51 46 77 52 75 41 39 39 30 4c 63 37 4d 71 62 7a 39 33 73 69 4c 39 45 37 4e 77 57 34 76 55 35 55 44 69 77 6c 77 6b 79 47 58 68 6f 52 73 5a 57 5a 2d 39 72 47 41 56 6d 33 38 48 45 66 6f 4d 74 69 72 50 4c 63 6f 6f 49 39 37 35 59 5f 4e 6d 33 43 70 55 48 37 33 35 46 59 63 36 38 79 57 68 71 78 42 63 57 6c 6f 71 54 47 58 74 4e 6c 55 70 Data Ascii: 8maHGlTUEenaR_jtnM0x_uKUhN52DP26vPo0QAFaYAzwmm9CEi_-WN3_CUMiPLl2xXYQ_HEo6hCPe9OiD1xWWwLpdGnLV16_gk5Rj4bkmXhYYb7Hm3z4jjf2j1QOeTNg5bzZdemHTuio-rUXkQFwRuA990Lc7Mqbz93siL9E7NwW4vU5UDiwlwkyGXhoRsZWZ-9rGAVm38HEfoMtirPLcooI975Y_Nm3CpUH735FYc68yWhqxBcWloqTGXtNlUp
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 34 31 79 53 2d 79 75 65 76 47 42 65 52 6a 41 32 68 65 57 48 73 49 36 65 4d 55 41 52 45 6d 42 73 75 48 6c 5f 46 6c 38 41 66 56 4e 53 6c 76 79 32 6a 4a 6f 57 77 33 71 68 66 74 55 50 30 79 74 71 34 2d 72 71 6c 7a 48 55 56 4a 61 54 63 62 52 5f 33 56 6a 6d 54 2d 65 51 4e 62 6a 48 69 2d 7a 4f 79 47 69 47 54 34 49 63 73 52 56 30 6d 50 73 6c 4d 2d 4d 43 58 33 6b 58 4c 41 46 35 4f 36 4d 6d 37 61 78 39 6a 2d 5f 33 74 6b 5a 53 7a 34 4d 4e 7a 34 75 4c 59 66 34 42 66 30 35 6c 53 53 51 34 44 4b 63 38 4b 65 79 4c 4e 32 31 43 4f 4c 48 5f 69 75 6f 6f 4f 49 55 58 51 5f 4f 55 33 72 51 6b 6c 35 6b 37 47 35 55 48 6c 79 54 32 71 58 59 68 57 45 59 56 59 6f 77 2d 44 6d 63 4f 63 55 76 4c 61 61 33 34 6a 44 58 4c 4a 38 5f 66 35 4c 36 4f 4a 6f 35 5f 66 72 71 2d 4e 65 38 76 54 4c 4a Data Ascii: 41yS-yuevGBeRjA2heWHsI6eMUAREmBsuHl_Fl8AfVNSlvy2jJoWw3qhftUP0ytq4-rqlzHUVJaTcbR_3VjmT-eQNbjHi-zOyGiGT4IcsRV0mPslM-MCX3kXLAF5O6Mm7ax9j-_3tkZSz4MNz4uLYf4Bf05lSSQ4DKc8KeyLN21COLH_iuooOIUXQ_OU3rQkl5k7G5UHlyT2qXYhWEYVYow-DmcOcUvLaa34jDXLJ8_f5L6OJo5_frq-Ne8vTLJ
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 4d 44 4a 77 4d 62 64 6a 71 55 5f 58 6f 68 30 37 5f 69 46 47 6d 46 51 44 72 58 72 76 4b 75 73 4d 63 36 36 78 4e 52 67 32 64 34 43 68 57 46 57 73 4c 30 78 65 6a 42 31 71 4b 53 7a 4b 4b 63 35 71 58 65 76 58 59 49 32 41 77 5f 52 42 5a 52 46 63 6d 48 33 64 66 6d 70 48 73 51 56 43 36 4b 4b 70 4f 63 76 54 30 52 6e 5f 53 41 6f 6f 49 43 38 65 4d 43 50 5a 32 54 4a 43 6e 56 31 5f 71 6d 61 5f 44 6c 55 37 4e 77 64 61 61 4f 2d 4e 4c 77 55 63 43 36 58 55 64 6d 46 76 48 4f 61 7a 59 70 41 53 64 6b 64 69 73 63 70 7a 69 62 70 63 65 71 66 32 64 39 6d 6c 37 6d 39 6c 42 30 31 30 78 2d 34 70 31 4a 4b 35 74 6f 78 4f 62 4a 59 6a 38 37 53 32 38 4a 4f 5a 6a 6e 74 33 59 59 5f 73 4b 59 46 5f 53 44 79 44 54 6c 67 38 6e 67 78 6b 53 6e 38 35 4b 71 7a 39 65 63 65 4d 42 33 37 43 46 53 52 Data Ascii: MDJwMbdjqU_Xoh07_iFGmFQDrXrvKusMc66xNRg2d4ChWFWsL0xejB1qKSzKKc5qXevXYI2Aw_RBZRFcmH3dfmpHsQVC6KKpOcvT0Rn_SAooIC8eMCPZ2TJCnV1_qma_DlU7NwdaaO-NLwUcC6XUdmFvHOazYpASdkdiscpzibpceqf2d9ml7m9lB010x-4p1JK5toxObJYj87S28JOZjnt3YY_sKYF_SDyDTlg8ngxkSn85Kqz9eceMB37CFSR
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 64 58 5a 4f 56 6c 51 34 5a 57 56 55 53 6a 56 57 4e 6d 5a 71 4d 6d 39 49 63 55 49 32 55 6d 73 79 56 45 31 54 64 45 64 75 63 48 70 78 64 6c 6f 32 56 6a 68 54 53 31 64 73 61 32 4e 42 53 44 59 31 51 6c 6c 49 54 47 74 30 61 47 78 76 63 6d 45 32 55 6b 74 6d 4c 7a 64 6a 4e 54 4a 76 62 6a 46 35 57 57 4a 6e 55 79 74 35 54 54 6c 76 55 6e 42 4f 61 6a 49 32 62 58 4a 45 63 57 55 32 4e 47 78 32 63 56 42 53 4e 57 52 52 55 33 5a 4e 53 45 73 35 4d 6e 70 6f 62 56 4a 73 64 46 51 76 4e 6d 4a 51 4e 54 46 49 52 44 64 75 52 6d 6c 56 51 56 6b 7a 56 32 5a 6e 53 54 4e 6f 64 6e 64 35 55 6c 45 33 4e 6e 42 68 5a 32 45 35 57 6d 4d 7a 5a 7a 68 6d 4c 31 52 78 61 31 64 30 51 32 31 45 59 7a 4e 4e 4d 6d 56 73 55 30 4a 57 4d 58 45 32 51 6c 4e 35 5a 32 56 56 55 30 30 30 55 31 67 32 52 69 73 Data Ascii: dXZOVlQ4ZWVUSjVWNmZqMm9IcUI2UmsyVE1TdEducHpxdlo2VjhTS1dsa2NBSDY1QllITGt0aGxvcmE2UktmLzdjNTJvbjF5WWJnUyt5TTlvUnBOajI2bXJEcWU2NGx2cVBSNWRRU3ZNSEs5MnpobVJsdFQvNmJQNTFIRDduRmlVQVkzV2ZnSTNodnd5UlE3NnBhZ2E5WmMzZzhmL1Rxa1d0Q21EYzNNMmVsU0JWMXE2QlN5Z2VVU000U1g2Ris
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 68 77 5a 47 68 32 54 31 56 6f 5a 56 46 30 57 58 4e 75 4e 47 4e 69 65 56 5a 53 57 45 35 4b 53 32 52 57 61 32 6f 77 51 33 46 6f 51 6c 5a 30 54 32 4e 33 4f 53 74 44 4c 31 5a 54 55 31 46 58 52 55 31 51 4e 6b 4a 61 55 48 4e 31 52 30 64 52 4d 30 68 33 54 55 4a 44 61 55 4d 35 56 6b 59 35 4d 57 73 7a 62 33 63 33 54 6d 46 73 52 32 4e 4e 56 48 42 71 52 6b 68 56 65 44 45 77 52 48 6c 46 64 33 64 6e 59 57 39 35 62 6b 35 57 57 6a 59 77 4e 69 39 45 57 55 35 79 53 55 5a 56 4e 31 46 72 65 47 74 58 59 6c 6c 4d 5a 56 42 71 4b 32 64 43 51 6e 59 34 4b 32 68 48 57 6b 56 33 61 45 70 32 65 47 39 6a 51 7a 64 6d 4d 6a 6b 79 5a 58 5a 74 63 57 77 7a 55 6b 4a 4a 56 56 42 7a 65 57 39 48 64 6a 56 6d 51 56 56 6b 62 33 56 4d 4d 58 6c 75 52 54 56 47 57 58 5a 52 4e 58 5a 6f 61 31 6c 54 63 Data Ascii: hwZGh2T1VoZVF0WXNuNGNieVZSWE5KS2RWa2owQ3FoQlZ0T2N3OStDL1ZTU1FXRU1QNkJaUHN1R0dRM0h3TUJDaUM5VkY5MWszb3c3TmFsR2NNVHBqRkhVeDEwRHlFd3dnYW95bk5WWjYwNi9EWU5ySUZVN1FreGtXYllMZVBqK2dCQnY4K2hHWkV3aEp2eG9jQzdmMjkyZXZtcWwzUkJJVVBzeW9HdjVmQVVkb3VMMXluRTVGWXZRNXZoa1lTc
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 65 6d 46 68 55 58 46 43 53 32 35 42 59 58 42 30 4f 57 35 4c 52 55 4a 6c 54 6c 46 76 57 46 70 53 53 45 6c 70 5a 55 6c 70 59 6b 63 30 57 6d 6b 78 54 48 4a 4d 63 47 39 74 52 33 6b 76 4c 31 4e 59 65 48 42 53 53 6d 4d 35 54 47 56 6b 5a 30 4a 48 62 55 64 56 53 30 4e 6c 56 44 6c 74 56 7a 4a 4b 4d 7a 46 72 53 32 46 73 65 6b 55 33 65 6c 5a 31 54 46 56 79 4b 7a 4e 34 51 6a 64 6b 54 48 68 77 4e 58 46 56 65 6d 39 70 4e 6c 52 34 57 58 42 4c 5a 58 46 35 64 43 38 76 56 54 68 55 59 6a 64 6b 65 47 4a 6f 56 45 52 72 5a 57 64 44 65 6c 6c 36 4e 47 55 78 62 47 64 58 53 32 70 45 54 30 4a 71 62 31 63 79 64 7a 4a 56 4d 32 68 59 53 57 68 4e 55 7a 4a 56 56 55 70 4c 5a 7a 42 6a 4d 47 5a 76 53 30 46 53 54 47 56 71 56 6e 5a 46 62 69 39 6c 4b 7a 5a 4e 53 31 5a 5a 4e 48 4e 44 62 6b 63 Data Ascii: emFhUXFCS25BYXB0OW5LRUJlTlFvWFpSSElpZUlpYkc0WmkxTHJMcG9tR3kvL1NYeHBSSmM5TGVkZ0JHbUdVS0NlVDltVzJKMzFrS2FsekU3elZ1TFVyKzN4QjdkTHhwNXFVem9pNlR4WXBLZXF5dC8vVThUYjdkeGJoVERrZWdDell6NGUxbGdXS2pET0Jqb1cydzJVM2hYSWhNUzJVVUpLZzBjMGZvS0FSTGVqVnZFbi9lKzZNS1ZZNHNDbkc
2025-01-09 17:38:44 UTC	1390	IN	Data Raw: 4a 4e 52 7a 56 69 64 56 68 4e 65 54 42 7a 56 45 6c 55 4b 32 78 42 4c 32 6b 33 52 46 68 30 57 54 5a 6e 52 30 4d 30 5a 58 52 4a 56 47 46 68 53 46 70 4d 54 45 5a 73 55 6b 64 55 65 58 5a 42 61 58 6c 4a 4e 32 46 71 55 6d 70 6f 53 30 4e 73 52 55 78 42 52 58 4a 7a 4f 45 4e 7a 4d 57 4e 46 61 57 56 31 54 54 55 76 4d 32 6b 35 54 58 46 4f 56 33 56 31 4d 57 68 42 56 7a 64 44 53 44 64 59 56 45 4e 52 54 6a 5a 6c 57 55 46 75 4e 48 52 77 51 56 4e 6c 62 48 6c 49 62 7a 52 77 51 57 77 77 59 6d 6c 43 52 58 5a 77 4c 7a 51 79 4e 33 56 46 53 6b 52 73 53 6d 6c 44 63 6b 56 55 54 55 4e 4a 52 6c 5a 49 63 6c 56 4b 52 58 4a 49 62 46 5a 35 54 45 70 30 52 6b 52 48 59 55 31 55 4c 30 52 48 52 47 6b 34 57 47 56 4e 5a 30 39 54 56 46 70 45 4e 54 56 49 5a 30 64 6c 57 47 39 5a 63 32 4a 75 63 Data Ascii: JNRzVidVhNeTBzVElUK2xBL2k3RFh0WTZnR0M0ZXRJVGFhSFpMTEZsUkdUeXZBaXlJN2FqUmpoS0NsRUxBRXJzOENzMWNFaWV1TTUvM2k5TXFOV3V1MWhBVzdDSDdYVENRTjZlWUFuNHRwQVNlbHlIbzRwQWwwYmlCRXZwLzQyN3VFSkRsSmlDckVUTUNJRlZIclVKRXJIbFZ5TEp0RkRHYU1UL0RHRGk4WGVNZ09TVFpENTVIZ0dlWG9Zc2Juc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49734	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:45 UTC	606	OUT	GET /recaptcha/api2/reload?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
2025-01-09 17:38:45 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 09 Jan 2025 17:38:45 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:45 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2025-01-09 17:38:45 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2025-01-09 17:38:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49739	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:45 UTC	1148	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
2025-01-09 17:38:45 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 09 Jan 2025 17:38:45 GMT Date: Thu, 09 Jan 2025 17:38:45 GMT Cache-Control: private, max-age=30 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 17:38:45 UTC	709	IN	Data Raw: 63 30 64 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: c0daJFIFC!"$"$C,,"}!1AQa"q
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 1a 49 b4 ad 4e 7b 6b cb 4b 54 d5 23 d4 65 b7 8c a5 d4 f7 f6 4f 04 cd 24 b8 99 91 24 24 6d f9 08 71 12 a3 6d 11 05 62 bf 29 1c 3c 3a e6 af e6 4f ae 40 d6 5a 65 84 96 78 17 65 45 c4 73 4b 1c a7 cb f3 24 e6 66 cc 43 61 2f 86 dc 48 0a 18 80 7c de 4e 67 73 26 76 7a 7e b9 e2 bb 0d 4e df 44 b4 f0 be 89 61 62 24 56 11 5b dc 63 cb 80 ca 04 92 28 c2 ab 63 6b b1 03 91 e7 c3 91 90 c1 b9 fd 6e d2 1f 10 78 b3 50 bc d1 74 db 80 af 6d 2a df cb 98 99 35 1c 47 17 95 12 4b b9 bc b5 74 75 3b 86 d2 47 ba 92 b3 eb 56 17 49 e1 8b e7 d4 b5 bb e9 e5 6b 55 91 d2 fe 78 e0 b7 79 4a ed 31 9f 29 90 a8 38 db b4 b9 4c b8 3f 39 c9 ac ff 00 12 69 b7 da e7 85 fc 4f 16 95 7c 6e 18 ea 66 46 4d a1 da 55 8e 38 c3 45 85 19 52 1d 30 bc 64 ed 5e a1 b7 15 1b 5e ff 00 2e be 42 4c ab e2 ed 5f ec 8b Data Ascii: IN{kKT#eO$$$mqmb)<:O@ZexeEsK$fCa/H\|Ngs&vz~NDab$V[c(cknxPtm*5GKtu;GVIkUxyJ1)8L?9iO\|nfFMU8ER0d^^.BL_
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: d8 ae 91 0e b5 70 4c 97 b6 ba 8b 23 5a 31 9c aa 96 56 94 24 eb 26 e5 da c9 8f bc 4a a9 f9 41 b1 ac f8 74 5d 5d 69 3a 86 8b f1 4f c1 17 31 c3 13 4c b3 5e 6a 12 59 cc cd 2a 80 e1 a3 2e e6 3c a8 1c 29 8c a9 66 c2 a9 00 d4 7a 37 85 67 b0 fb 6b 7f c2 63 f0 86 ed af 1e 46 99 af 35 87 95 8a bb 23 14 24 fd e0 1a 35 61 bb 24 1c 9c f2 6b 15 19 6f 72 4c 3f 10 c1 6d 65 e2 39 06 ab 67 33 ea 17 62 68 62 5d 3b 36 56 d7 6b b9 81 12 97 21 b7 96 e4 e0 90 41 4c 6e cf 37 6f 75 4b c9 fc 37 a7 5b e9 c2 0b 5b 6b 26 88 cf 3c f9 8e 10 f1 32 85 88 09 08 72 a1 c0 cb 70 40 52 3e 66 f9 6b a0 d1 be 15 78 c2 f7 4d 8d bc 29 e2 2f 03 3d 84 12 38 63 65 a9 3d c0 32 b2 f2 19 c4 67 3b 77 02 aa 72 40 d9 9d d8 04 d3 87 e0 bf c4 88 75 f8 2d c6 91 67 7b 69 24 8b 31 96 cf 54 09 14 53 64 81 2b 19 Data Ascii: pL#Z1V$&JAt]]i:O1L^jY*.<)fz7gkcF5#$5a$korL?me9g3bhb];6Vk!ALn7ouK7[[k&<2rp@R>fkxM)/=8ce=2g;wr@u-g{i$1TSd+
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: ae a3 3c 10 e9 37 7f 6e 9e 7b 30 e4 b4 4e 10 24 0e 06 3e 5d b1 23 36 15 c1 00 e5 97 04 9c 1d 2f c4 b7 06 e6 fb 5b d6 ee f5 1d 3d 02 c7 6f 6e 23 08 5d 99 03 e4 10 53 04 e4 bf de 01 41 63 dd 41 5e a3 4a b9 b6 bb 0f 68 ba 65 f6 a3 68 a9 0e ab 04 d7 f7 a1 a4 8d 98 82 91 c7 9c 91 80 af 8d cd c9 04 31 c3 6e 35 3b a5 a8 df 98 be 1a f1 de bb aa eb 16 5a 6d 8e b7 3d ea 43 39 9a 4b d9 f4 ef b3 89 82 3a 87 45 f2 ce d0 86 27 3c 48 a4 86 20 e4 16 4d 90 f8 83 56 f1 17 89 34 7b 1b cb c6 d3 34 dd 56 d6 26 d4 25 82 48 a5 46 48 a3 32 c7 23 32 61 88 52 ad 1e 3b 9f 9f 1d 06 39 0b fb cd b7 37 33 c3 a8 6b f0 f9 d6 d6 92 5a c6 8c 3c e9 90 65 3e 67 42 d8 c9 39 c9 23 e6 7c ed 62 00 3d 6f 86 75 9d 1a cf c3 eb 6f 1b b8 b0 bf b6 58 df 48 84 bd de c4 77 22 57 dc 31 20 f9 09 5e 08 55 Data Ascii: <7n{0N$>]#6/[=on#]SAcA^Jheh1n5;Zm=C9K:E'<H MV4{4V&%HFH2#2aR;973kZ<e>gB9#\|b=ouoXHw"W1 ^U
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 58 30 cb 7f 0a c7 f3 49 b6 48 d0 79 6c 22 6c a1 2c ce c7 a0 c7 3a 9a d7 87 ae 6d f4 9d 1e da e7 54 d0 b4 58 25 26 5b 67 d3 77 4e d7 32 00 19 1e 30 54 30 60 a3 1b 83 92 c5 94 75 60 2a 8b aa 4b 28 ba 9b 56 d6 d7 51 96 26 b5 8e fd af a6 28 90 c6 c9 99 c1 da 4e d6 2d bf 69 6f 2f 0c 7e 75 38 c7 4c 25 a6 e0 76 fe 2b 9e f7 4d f8 35 a5 6b 91 f8 7e 2f 0e dd 5f c9 71 e1 b4 b5 ba 85 63 8e 0b 09 b2 ff 00 78 62 43 86 87 7e f9 79 2f 24 ed b4 ab ae 38 2b 5d 4e f3 4f 92 d3 44 b6 86 68 a2 b3 76 12 49 35 a1 02 e2 35 fb c5 76 0e 0e 49 23 83 9f 97 2d 92 41 8f 44 b8 bd b8 f0 5d 8f 83 74 fb 7b 0b b8 ee 3c 43 75 76 8f 74 ac 46 f8 20 87 07 e4 62 a4 32 97 04 7c c0 e7 83 de a5 d5 a0 b7 be b2 8d 75 13 63 69 77 1b cb 1b 05 b8 6b 75 46 f3 1d 65 21 f0 41 de 50 e1 59 72 40 7e 4e 0e 2a Data Ascii: X0IHyl"l,:mTX%&[gwN20T0`u`K(VQ&(N-io/~u8L%v+M5k~/_qcxbC~y/$8+]NODhvI55vI#-AD]t{<CuvtF b2\|uciwkuFe!APYr@~N
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 93 80 48 50 5a 3d 9c 7b 19 f2 dc c3 06 d2 ca 21 6b 71 67 79 a4 ee 69 24 b7 12 2c 91 a4 ec 42 85 1b 9c e1 58 71 f3 10 55 58 06 ce 38 3a 01 34 fd 53 4a 92 5f 0b 58 ea b1 5c c3 12 83 70 85 da 76 4f 3b 0d 10 45 61 bf 62 b4 64 1f 98 05 da 18 a9 da 6b bb 82 4f 04 8b 1b 28 b4 a7 f0 dd b6 db 24 2e ab e2 fb ab 60 aa d2 4a ea 99 f2 c6 e2 37 31 21 b0 ca 5b 04 01 b4 9a da df 88 20 bc d3 ae 60 59 64 b6 b6 b7 d5 2d e0 37 1a 3f 89 61 0a 4c 91 4f 33 b0 96 44 53 b7 1f 2e d6 21 4b 28 54 2b b0 82 38 f6 1d 8f 3b 30 6a da 46 a7 6d a5 49 7a b7 3a 7d cd ec 73 35 c4 2b e6 09 5d 8a b2 06 63 d0 90 aa d8 07 a3 67 91 8a ad a5 c5 02 e9 cb e6 f8 85 2d 2e ae a4 57 69 21 7d c5 57 07 87 c1 53 9d cf ce 49 ed d8 12 3d 83 4d d1 34 8f 15 eb 90 78 82 db 4e d7 2e 1a d5 54 4b 24 37 3a 74 90 dc Data Ascii: HPZ={!kqgyi$,BXqUX8:4SJ_X\pvO;EabdkO($.`J71![ `Yd-7?aLO3DS.!K(T+8;0jFmIz:}s5+]cg-.Wi!}WSI=M4xN.TK$7:t
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 31 bb a4 6c e1 99 d3 7e 46 dc 9c 01 ce 32 fc be b7 3f 87 53 58 5b dd 16 c2 d0 ac 5b 99 26 89 01 8c 4a 19 54 82 bf 2a f0 aa 58 7c f8 03 73 63 f8 8d cb 1d 62 c5 26 82 ea 1d 2b 4d d3 a0 73 09 1e 45 9a cf 24 bf 27 98 d1 b6 d0 19 79 28 ca 40 e0 c5 93 d4 03 8c 66 6b bb fb 8b a9 a3 9e 45 9a ec 48 d2 00 92 c1 b4 0d 85 50 02 33 95 7d 9d 18 b6 3a 6e e1 5c 23 67 71 dc df d0 05 ce 97 e1 1d 62 38 bc 37 a4 6a 4d 61 a9 db b3 4f a9 d8 b4 b1 ee b8 44 49 16 14 0a 0f 0e 23 38 1d 55 87 07 e5 ce 11 bd b7 b1 f1 24 b7 33 40 f6 d3 ce b1 ce 6d 2c ac 12 da 25 2a 0a ed 45 97 e6 39 c9 fb b8 27 27 f0 dc f0 95 bd cc 1f 08 fc 7b a8 ea f6 66 ea c6 d6 6b 4b 38 23 dc b0 86 91 2e 59 d9 18 27 21 43 4c a4 80 46 43 10 ac 3a ad 3f 1b 68 f3 c6 f1 2e b3 a0 e8 fa 36 a1 35 8b dd d9 4f a2 e5 11 5a Data Ascii: 1l~F2?SX[[&JTX\|scb&+MsE$'y(@fkEHP3}:n\#gqb87jMaODI#8U$3@m,%E9''{fkK8#.Y'!CLFC:?h.65OZ
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 37 1c 61 8b 3e de 48 ea a7 38 20 7a 8e 0e 0d 3d 22 8d 62 5d 6e fc a8 ee e6 37 3f 99 42 4d 12 42 d0 2c ec da c1 68 cc 27 6b 4b 12 66 36 e7 e6 c8 c0 23 d8 8e dd 6a 3d a2 1a 47 a0 eb 1f b4 1d b6 b4 58 eb 9f 04 b4 cd 50 b6 cc fd a8 89 73 b3 7e cf bd 01 fb be 64 98 f4 de d8 ea 6b 24 7c 79 f0 4c 76 6d 6a 7e 02 f8 5d 2d a6 65 95 a3 0d 12 a4 8c bb 95 5b 1f 67 c1 23 73 80 7b 6e 61 dc d7 0f 6f 24 77 29 e7 41 af 5b b0 68 ca b0 11 2e d4 66 e1 08 04 e5 4e 7b 31 39 e4 71 da de 97 a2 ea fa e6 bf 06 97 67 ae 69 f6 e4 c4 d2 b9 4b 72 64 da 08 19 da 49 18 c9 03 ef 0e a7 ae 29 73 a8 ad 41 9e 82 3e 29 fc 11 d4 a2 8e d6 6f 85 52 69 57 c6 29 12 76 b2 b3 8e 31 08 78 5e 39 81 78 99 5d 90 23 c9 9f 97 38 1b b6 82 06 3c fb e1 95 b5 8a 3c b3 ea be 17 89 6e 97 3a a6 88 c2 57 81 59 b7 Data Ascii: 7a>H8 z="b]n7?BMB,h'kKf6#j=GXPs~dk$\|yLvmj~]-e[g#s{nao$w)A[h.fN{19qgiKrdI)sA>)oRiW)v1x^9x]#8<<n:WY
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 8e 57 83 c7 5c e4 d7 79 ef 1a d6 da ea 29 8e 24 b8 43 31 49 70 89 fb c1 c2 ed 00 3b 36 f3 b8 f2 32 0f b6 2d 2b e8 80 2c 65 b7 49 f1 1e 9a 43 23 79 11 3c b8 32 e5 10 29 ce d5 fb 99 18 2c 09 c1 3e 9d 23 d3 6e ad b4 e4 db 71 70 21 48 1e 26 fd cd d3 15 2b 9c a9 00 2f 25 94 b6 e1 df 68 38 19 c8 65 c4 01 27 37 67 53 8d 0c 2e 72 bb 31 e4 b3 e7 2d 83 cf 2f 83 c9 03 6e 46 48 35 36 a8 64 7b 71 7d 13 c1 30 f2 3c f0 19 36 e7 68 1d 39 ce 3e 6d c0 10 70 7b 8c 8a ab 2b d8 0e de 0b 9b 69 ff 00 66 ff 00 1d 35 ba 4a a5 f5 fd ee 5c fd e2 66 80 82 14 80 57 8d a3 07 27 20 9e f8 1e 6f 09 b3 6f 10 4c d6 d7 8d 72 e3 4f bc 8e 53 b7 0b 95 b4 70 0a f6 da 7a 00 38 1b 78 e3 15 d3 7c 3f b6 d4 75 6f 86 fe 3d d1 6c be d3 3c 93 dd e9 a9 6d 04 b2 60 99 64 ba d9 ce 48 01 98 ec 04 9c 74 19 Data Ascii: W\y)$C1Ip;62-+,eIC#y<2),>#nqp!H&+/%h8e'7gS.r1-/nFH56d{q}0<6h9>mp{+if5J\fW' ooLrOSpz8x\|?uo=l<m`dHt
2025-01-09 17:38:45 UTC	1390	IN	Data Raw: 3b 55 98 ee d8 db 8b 4c 03 6f 55 c2 ab 1e 92 eb c3 7f 0d bc 2b 3b 58 fc 46 f1 ad 95 af 8a a7 26 eb 51 8a c7 4c 8e fe 20 ee 4e 1b 74 96 b2 32 16 50 ae 53 20 02 e4 aa 85 2b 55 64 89 bb 67 8b 5d 5a 5d 43 a9 25 a3 de de c4 65 f9 b2 64 2c bb 40 c9 55 3d 72 0f 73 8e 3f 58 6f b6 db ca 2e 2d ef e7 55 67 1b b1 26 f5 fb be e7 d0 0f 5e d8 1d 2a d5 ac 97 7a ce a0 d6 36 a4 4d 23 20 96 31 0c 4a d1 c4 d8 cb 3b 13 c8 f9 88 39 e4 e1 88 c6 ee 01 7f 05 96 9c c6 c2 3c ea da 83 12 44 51 a6 e5 57 03 69 2c 06 4e 71 92 47 3c 8c f1 9a cd 5f a9 9a b8 fd 3b 43 bf be b5 01 ae 44 24 c4 49 b6 60 1c bb 23 11 90 a4 80 07 dd c7 f0 f2 33 c7 5e ab 41 d3 f4 ad 2b c3 f1 eb de 19 d6 ee 2d f5 78 2d be cf 73 14 16 4f 33 dc 4d 2a 2b 42 36 ba 9d 88 ce 06 1b 6e 1b 38 04 1a cb d3 7c 37 aa 26 a5 a7 Data Ascii: ;ULoU+;XF&QL Nt2PS +Udg]Z]C%ed,@U=rs?Xo.-Ug&^z6M# 1J;9<DQWi,NqG<_;CD$I`#3^A+-x-sO3M+B6n8\|7&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49745	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:46 UTC	816	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7EhHXCa-Gem3Q4tUmEg952sU1pyhEyVCE8jPfLS8NHSPjhmDkKpZ1G0V2cIkkA-_oMKbVv2S1fXHX0d7s31Eqgz04Pp5AN86uWnGJaqP8zdeGlxY9mj1xHhpb5HFmtyg7S1aEm7aMVRLBiFtPhJFUfE0Qq-ctI0zTLkqdNmHcDFZEQiRqJ8dMF0k3ib7P2cS-9Pk27&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
2025-01-09 17:38:46 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 09 Jan 2025 17:38:46 GMT Date: Thu, 09 Jan 2025 17:38:46 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 17:38:46 UTC	709	IN	Data Raw: 63 30 64 61 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: c0daJFIFC!"$"$C,,"}!1AQa"q
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 1a 49 b4 ad 4e 7b 6b cb 4b 54 d5 23 d4 65 b7 8c a5 d4 f7 f6 4f 04 cd 24 b8 99 91 24 24 6d f9 08 71 12 a3 6d 11 05 62 bf 29 1c 3c 3a e6 af e6 4f ae 40 d6 5a 65 84 96 78 17 65 45 c4 73 4b 1c a7 cb f3 24 e6 66 cc 43 61 2f 86 dc 48 0a 18 80 7c de 4e 67 73 26 76 7a 7e b9 e2 bb 0d 4e df 44 b4 f0 be 89 61 62 24 56 11 5b dc 63 cb 80 ca 04 92 28 c2 ab 63 6b b1 03 91 e7 c3 91 90 c1 b9 fd 6e d2 1f 10 78 b3 50 bc d1 74 db 80 af 6d 2a df cb 98 99 35 1c 47 17 95 12 4b b9 bc b5 74 75 3b 86 d2 47 ba 92 b3 eb 56 17 49 e1 8b e7 d4 b5 bb e9 e5 6b 55 91 d2 fe 78 e0 b7 79 4a ed 31 9f 29 90 a8 38 db b4 b9 4c b8 3f 39 c9 ac ff 00 12 69 b7 da e7 85 fc 4f 16 95 7c 6e 18 ea 66 46 4d a1 da 55 8e 38 c3 45 85 19 52 1d 30 bc 64 ed 5e a1 b7 15 1b 5e ff 00 2e be 42 4c ab e2 ed 5f ec 8b Data Ascii: IN{kKT#eO$$$mqmb)<:O@ZexeEsK$fCa/H\|Ngs&vz~NDab$V[c(cknxPtm*5GKtu;GVIkUxyJ1)8L?9iO\|nfFMU8ER0d^^.BL_
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: d8 ae 91 0e b5 70 4c 97 b6 ba 8b 23 5a 31 9c aa 96 56 94 24 eb 26 e5 da c9 8f bc 4a a9 f9 41 b1 ac f8 74 5d 5d 69 3a 86 8b f1 4f c1 17 31 c3 13 4c b3 5e 6a 12 59 cc cd 2a 80 e1 a3 2e e6 3c a8 1c 29 8c a9 66 c2 a9 00 d4 7a 37 85 67 b0 fb 6b 7f c2 63 f0 86 ed af 1e 46 99 af 35 87 95 8a bb 23 14 24 fd e0 1a 35 61 bb 24 1c 9c f2 6b 15 19 6f 72 4c 3f 10 c1 6d 65 e2 39 06 ab 67 33 ea 17 62 68 62 5d 3b 36 56 d7 6b b9 81 12 97 21 b7 96 e4 e0 90 41 4c 6e cf 37 6f 75 4b c9 fc 37 a7 5b e9 c2 0b 5b 6b 26 88 cf 3c f9 8e 10 f1 32 85 88 09 08 72 a1 c0 cb 70 40 52 3e 66 f9 6b a0 d1 be 15 78 c2 f7 4d 8d bc 29 e2 2f 03 3d 84 12 38 63 65 a9 3d c0 32 b2 f2 19 c4 67 3b 77 02 aa 72 40 d9 9d d8 04 d3 87 e0 bf c4 88 75 f8 2d c6 91 67 7b 69 24 8b 31 96 cf 54 09 14 53 64 81 2b 19 Data Ascii: pL#Z1V$&JAt]]i:O1L^jY*.<)fz7gkcF5#$5a$korL?me9g3bhb];6Vk!ALn7ouK7[[k&<2rp@R>fkxM)/=8ce=2g;wr@u-g{i$1TSd+
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: ae a3 3c 10 e9 37 7f 6e 9e 7b 30 e4 b4 4e 10 24 0e 06 3e 5d b1 23 36 15 c1 00 e5 97 04 9c 1d 2f c4 b7 06 e6 fb 5b d6 ee f5 1d 3d 02 c7 6f 6e 23 08 5d 99 03 e4 10 53 04 e4 bf de 01 41 63 dd 41 5e a3 4a b9 b6 bb 0f 68 ba 65 f6 a3 68 a9 0e ab 04 d7 f7 a1 a4 8d 98 82 91 c7 9c 91 80 af 8d cd c9 04 31 c3 6e 35 3b a5 a8 df 98 be 1a f1 de bb aa eb 16 5a 6d 8e b7 3d ea 43 39 9a 4b d9 f4 ef b3 89 82 3a 87 45 f2 ce d0 86 27 3c 48 a4 86 20 e4 16 4d 90 f8 83 56 f1 17 89 34 7b 1b cb c6 d3 34 dd 56 d6 26 d4 25 82 48 a5 46 48 a3 32 c7 23 32 61 88 52 ad 1e 3b 9f 9f 1d 06 39 0b fb cd b7 37 33 c3 a8 6b f0 f9 d6 d6 92 5a c6 8c 3c e9 90 65 3e 67 42 d8 c9 39 c9 23 e6 7c ed 62 00 3d 6f 86 75 9d 1a cf c3 eb 6f 1b b8 b0 bf b6 58 df 48 84 bd de c4 77 22 57 dc 31 20 f9 09 5e 08 55 Data Ascii: <7n{0N$>]#6/[=on#]SAcA^Jheh1n5;Zm=C9K:E'<H MV4{4V&%HFH2#2aR;973kZ<e>gB9#\|b=ouoXHw"W1 ^U
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 58 30 cb 7f 0a c7 f3 49 b6 48 d0 79 6c 22 6c a1 2c ce c7 a0 c7 3a 9a d7 87 ae 6d f4 9d 1e da e7 54 d0 b4 58 25 26 5b 67 d3 77 4e d7 32 00 19 1e 30 54 30 60 a3 1b 83 92 c5 94 75 60 2a 8b aa 4b 28 ba 9b 56 d6 d7 51 96 26 b5 8e fd af a6 28 90 c6 c9 99 c1 da 4e d6 2d bf 69 6f 2f 0c 7e 75 38 c7 4c 25 a6 e0 76 fe 2b 9e f7 4d f8 35 a5 6b 91 f8 7e 2f 0e dd 5f c9 71 e1 b4 b5 ba 85 63 8e 0b 09 b2 ff 00 78 62 43 86 87 7e f9 79 2f 24 ed b4 ab ae 38 2b 5d 4e f3 4f 92 d3 44 b6 86 68 a2 b3 76 12 49 35 a1 02 e2 35 fb c5 76 0e 0e 49 23 83 9f 97 2d 92 41 8f 44 b8 bd b8 f0 5d 8f 83 74 fb 7b 0b b8 ee 3c 43 75 76 8f 74 ac 46 f8 20 87 07 e4 62 a4 32 97 04 7c c0 e7 83 de a5 d5 a0 b7 be b2 8d 75 13 63 69 77 1b cb 1b 05 b8 6b 75 46 f3 1d 65 21 f0 41 de 50 e1 59 72 40 7e 4e 0e 2a Data Ascii: X0IHyl"l,:mTX%&[gwN20T0`u`K(VQ&(N-io/~u8L%v+M5k~/_qcxbC~y/$8+]NODhvI55vI#-AD]t{<CuvtF b2\|uciwkuFe!APYr@~N
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 93 80 48 50 5a 3d 9c 7b 19 f2 dc c3 06 d2 ca 21 6b 71 67 79 a4 ee 69 24 b7 12 2c 91 a4 ec 42 85 1b 9c e1 58 71 f3 10 55 58 06 ce 38 3a 01 34 fd 53 4a 92 5f 0b 58 ea b1 5c c3 12 83 70 85 da 76 4f 3b 0d 10 45 61 bf 62 b4 64 1f 98 05 da 18 a9 da 6b bb 82 4f 04 8b 1b 28 b4 a7 f0 dd b6 db 24 2e ab e2 fb ab 60 aa d2 4a ea 99 f2 c6 e2 37 31 21 b0 ca 5b 04 01 b4 9a da df 88 20 bc d3 ae 60 59 64 b6 b6 b7 d5 2d e0 37 1a 3f 89 61 0a 4c 91 4f 33 b0 96 44 53 b7 1f 2e d6 21 4b 28 54 2b b0 82 38 f6 1d 8f 3b 30 6a da 46 a7 6d a5 49 7a b7 3a 7d cd ec 73 35 c4 2b e6 09 5d 8a b2 06 63 d0 90 aa d8 07 a3 67 91 8a ad a5 c5 02 e9 cb e6 f8 85 2d 2e ae a4 57 69 21 7d c5 57 07 87 c1 53 9d cf ce 49 ed d8 12 3d 83 4d d1 34 8f 15 eb 90 78 82 db 4e d7 2e 1a d5 54 4b 24 37 3a 74 90 dc Data Ascii: HPZ={!kqgyi$,BXqUX8:4SJ_X\pvO;EabdkO($.`J71![ `Yd-7?aLO3DS.!K(T+8;0jFmIz:}s5+]cg-.Wi!}WSI=M4xN.TK$7:t
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 31 bb a4 6c e1 99 d3 7e 46 dc 9c 01 ce 32 fc be b7 3f 87 53 58 5b dd 16 c2 d0 ac 5b 99 26 89 01 8c 4a 19 54 82 bf 2a f0 aa 58 7c f8 03 73 63 f8 8d cb 1d 62 c5 26 82 ea 1d 2b 4d d3 a0 73 09 1e 45 9a cf 24 bf 27 98 d1 b6 d0 19 79 28 ca 40 e0 c5 93 d4 03 8c 66 6b bb fb 8b a9 a3 9e 45 9a ec 48 d2 00 92 c1 b4 0d 85 50 02 33 95 7d 9d 18 b6 3a 6e e1 5c 23 67 71 dc df d0 05 ce 97 e1 1d 62 38 bc 37 a4 6a 4d 61 a9 db b3 4f a9 d8 b4 b1 ee b8 44 49 16 14 0a 0f 0e 23 38 1d 55 87 07 e5 ce 11 bd b7 b1 f1 24 b7 33 40 f6 d3 ce b1 ce 6d 2c ac 12 da 25 2a 0a ed 45 97 e6 39 c9 fb b8 27 27 f0 dc f0 95 bd cc 1f 08 fc 7b a8 ea f6 66 ea c6 d6 6b 4b 38 23 dc b0 86 91 2e 59 d9 18 27 21 43 4c a4 80 46 43 10 ac 3a ad 3f 1b 68 f3 c6 f1 2e b3 a0 e8 fa 36 a1 35 8b dd d9 4f a2 e5 11 5a Data Ascii: 1l~F2?SX[[&JTX\|scb&+MsE$'y(@fkEHP3}:n\#gqb87jMaODI#8U$3@m,%E9''{fkK8#.Y'!CLFC:?h.65OZ
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 37 1c 61 8b 3e de 48 ea a7 38 20 7a 8e 0e 0d 3d 22 8d 62 5d 6e fc a8 ee e6 37 3f 99 42 4d 12 42 d0 2c ec da c1 68 cc 27 6b 4b 12 66 36 e7 e6 c8 c0 23 d8 8e dd 6a 3d a2 1a 47 a0 eb 1f b4 1d b6 b4 58 eb 9f 04 b4 cd 50 b6 cc fd a8 89 73 b3 7e cf bd 01 fb be 64 98 f4 de d8 ea 6b 24 7c 79 f0 4c 76 6d 6a 7e 02 f8 5d 2d a6 65 95 a3 0d 12 a4 8c bb 95 5b 1f 67 c1 23 73 80 7b 6e 61 dc d7 0f 6f 24 77 29 e7 41 af 5b b0 68 ca b0 11 2e d4 66 e1 08 04 e5 4e 7b 31 39 e4 71 da de 97 a2 ea fa e6 bf 06 97 67 ae 69 f6 e4 c4 d2 b9 4b 72 64 da 08 19 da 49 18 c9 03 ef 0e a7 ae 29 73 a8 ad 41 9e 82 3e 29 fc 11 d4 a2 8e d6 6f 85 52 69 57 c6 29 12 76 b2 b3 8e 31 08 78 5e 39 81 78 99 5d 90 23 c9 9f 97 38 1b b6 82 06 3c fb e1 95 b5 8a 3c b3 ea be 17 89 6e 97 3a a6 88 c2 57 81 59 b7 Data Ascii: 7a>H8 z="b]n7?BMB,h'kKf6#j=GXPs~dk$\|yLvmj~]-e[g#s{nao$w)A[h.fN{19qgiKrdI)sA>)oRiW)v1x^9x]#8<<n:WY
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 8e 57 83 c7 5c e4 d7 79 ef 1a d6 da ea 29 8e 24 b8 43 31 49 70 89 fb c1 c2 ed 00 3b 36 f3 b8 f2 32 0f b6 2d 2b e8 80 2c 65 b7 49 f1 1e 9a 43 23 79 11 3c b8 32 e5 10 29 ce d5 fb 99 18 2c 09 c1 3e 9d 23 d3 6e ad b4 e4 db 71 70 21 48 1e 26 fd cd d3 15 2b 9c a9 00 2f 25 94 b6 e1 df 68 38 19 c8 65 c4 01 27 37 67 53 8d 0c 2e 72 bb 31 e4 b3 e7 2d 83 cf 2f 83 c9 03 6e 46 48 35 36 a8 64 7b 71 7d 13 c1 30 f2 3c f0 19 36 e7 68 1d 39 ce 3e 6d c0 10 70 7b 8c 8a ab 2b d8 0e de 0b 9b 69 ff 00 66 ff 00 1d 35 ba 4a a5 f5 fd ee 5c fd e2 66 80 82 14 80 57 8d a3 07 27 20 9e f8 1e 6f 09 b3 6f 10 4c d6 d7 8d 72 e3 4f bc 8e 53 b7 0b 95 b4 70 0a f6 da 7a 00 38 1b 78 e3 15 d3 7c 3f b6 d4 75 6f 86 fe 3d d1 6c be d3 3c 93 dd e9 a9 6d 04 b2 60 99 64 ba d9 ce 48 01 98 ec 04 9c 74 19 Data Ascii: W\y)$C1Ip;62-+,eIC#y<2),>#nqp!H&+/%h8e'7gS.r1-/nFH56d{q}0<6h9>mp{+if5J\fW' ooLrOSpz8x\|?uo=l<m`dHt
2025-01-09 17:38:46 UTC	1390	IN	Data Raw: 3b 55 98 ee d8 db 8b 4c 03 6f 55 c2 ab 1e 92 eb c3 7f 0d bc 2b 3b 58 fc 46 f1 ad 95 af 8a a7 26 eb 51 8a c7 4c 8e fe 20 ee 4e 1b 74 96 b2 32 16 50 ae 53 20 02 e4 aa 85 2b 55 64 89 bb 67 8b 5d 5a 5d 43 a9 25 a3 de de c4 65 f9 b2 64 2c bb 40 c9 55 3d 72 0f 73 8e 3f 58 6f b6 db ca 2e 2d ef e7 55 67 1b b1 26 f5 fb be e7 d0 0f 5e d8 1d 2a d5 ac 97 7a ce a0 d6 36 a4 4d 23 20 96 31 0c 4a d1 c4 d8 cb 3b 13 c8 f9 88 39 e4 e1 88 c6 ee 01 7f 05 96 9c c6 c2 3c ea da 83 12 44 51 a6 e5 57 03 69 2c 06 4e 71 92 47 3c 8c f1 9a cd 5f a9 9a b8 fd 3b 43 bf be b5 01 ae 44 24 c4 49 b6 60 1c bb 23 11 90 a4 80 07 dd c7 f0 f2 33 c7 5e ab 41 d3 f4 ad 2b c3 f1 eb de 19 d6 ee 2d f5 78 2d be cf 73 14 16 4f 33 dc 4d 2a 2b 42 36 ba 9d 88 ce 06 1b 6e 1b 38 04 1a cb d3 7c 37 aa 26 a5 a7 Data Ascii: ;ULoU+;XF&QL Nt2PS +Udg]Z]C%ed,@U=rs?Xo.-Ug&^z6M# 1J;9<DQWi,NqG<_;CD$I`#3^A+-x-sO3M+B6n8\|7&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49748	142.250.181.228	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:51 UTC	996	OUT	POST /recaptcha/api2/userverify?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6318 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=RTbEo8_aWOvLbjGuoA8Hj2oS&k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
2025-01-09 17:38:51 UTC	6318	OUT	Data Raw: 76 3d 52 54 62 45 6f 38 5f 61 57 4f 76 4c 62 6a 47 75 6f 41 38 48 6a 32 6f 53 26 63 3d 30 33 41 46 63 57 65 41 37 43 42 7a 4b 71 78 75 38 31 74 35 59 32 45 57 58 50 6e 64 6d 57 58 78 68 49 65 76 33 71 63 6e 43 5a 4b 34 33 66 6c 45 56 51 43 73 66 59 36 66 4b 4e 5f 75 61 64 4b 33 50 6d 34 38 34 64 34 30 52 6a 46 37 56 56 33 47 39 78 64 6d 75 51 51 32 79 58 49 70 62 71 6b 54 79 73 32 55 33 7a 6a 67 49 4f 39 6f 75 42 4e 69 42 65 5f 73 55 30 61 72 65 79 5f 4e 47 77 70 72 4e 4f 68 57 54 57 51 51 31 5a 66 6b 78 6c 39 6b 4e 6c 71 2d 71 67 47 4c 51 61 45 36 79 61 78 52 32 4f 6c 36 62 65 6c 62 41 70 34 4f 31 67 72 37 59 69 30 44 5f 39 76 6b 2d 6e 4b 49 58 47 6a 6e 33 39 76 69 6c 55 31 72 73 66 42 37 6f 4a 45 47 33 4f 36 46 4c 59 55 57 65 55 33 4a 65 48 61 7a 75 6b Data Ascii: v=RTbEo8_aWOvLbjGuoA8Hj2oS&c=03AFcWeA7CBzKqxu81t5Y2EWXPndmWXxhIev3qcnCZK43flEVQCsfY6fKN_uadK3Pm484d40RjF7VV3G9xdmuQQ2yXIpbqkTys2U3zjgIO9ouBNiBe_sU0arey_NGwprNOhWTWQQ1Zfkxl9kNlq-qgGLQaE6yaxR2Ol6belbAp4O1gr7Yi0D_9vk-nKIXGjn39vilU1rsfB7oJEG3O6FLYUWeU3JeHazuk
2025-01-09 17:38:51 UTC	838	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 09 Jan 2025 17:38:51 GMT X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:51 UTC	552	IN	Data Raw: 61 34 62 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 73 54 75 68 70 30 6b 66 61 4c 4d 44 65 2d 48 4e 56 6b 74 47 37 6b 70 4e 71 42 6b 79 4f 5f 67 33 33 6b 41 64 37 75 4e 6f 50 6f 79 46 63 57 4b 77 66 68 6c 6d 75 72 50 5a 65 33 30 47 65 78 37 43 30 73 35 63 67 37 76 53 58 53 4f 32 63 4c 44 65 48 4a 61 76 67 67 63 62 74 33 31 4a 37 5f 4b 6c 48 59 45 6a 61 72 48 43 30 34 6b 66 6b 49 4a 68 31 6c 66 62 43 71 38 32 2d 49 38 4d 7a 6b 5f 35 57 47 53 42 6a 2d 68 6d 36 6a 72 35 4a 76 62 39 37 78 42 52 57 6d 56 73 58 49 63 72 2d 4c 56 63 56 58 62 68 31 4a 7a 73 6d 54 55 6d 48 50 55 5f 47 4a 64 62 58 6f 72 62 37 44 39 37 56 55 36 6a 73 75 4d 5f 73 52 52 34 6f 4d 31 72 6d 47 65 30 50 50 6f 69 4a 4f 78 65 70 5a 50 50 37 56 6a 67 77 Data Ascii: a4b)]}'["uvresp","03AFcWeA4sTuhp0kfaLMDe-HNVktG7kpNqBkyO_g33kAd7uNoPoyFcWKwfhlmurPZe30Gex7C0s5cg7vSXSO2cLDeHJavggcbt31J7_KlHYEjarHC04kfkIJh1lfbCq82-I8Mzk_5WGSBj-hm6jr5Jvb97xBRWmVsXIcr-LVcVXbh1JzsmTUmHPU_GJdbXorb7D97VU6jsuM_sRR4oM1rmGe0PPoiJOxepZPP7Vjgw
2025-01-09 17:38:51 UTC	1390	IN	Data Raw: 72 65 4d 4b 50 69 2d 70 30 35 59 6c 70 42 49 69 58 32 72 6e 64 68 66 35 4e 62 69 70 4d 30 50 4b 34 49 4e 6b 61 44 4a 43 5a 6e 33 39 5f 66 33 51 50 38 69 51 6b 71 67 56 4d 71 31 52 6a 53 7a 4f 65 35 74 74 48 6e 65 6c 77 4d 76 38 68 33 39 44 36 6a 70 6e 39 64 6a 49 67 6f 54 73 36 44 51 41 4d 41 66 59 72 6c 76 62 33 4a 35 48 56 66 77 66 6c 38 57 34 73 34 65 35 67 42 53 66 6e 68 4c 56 76 64 48 6f 51 79 34 6d 41 67 4a 45 51 4d 41 45 55 66 4d 76 6a 32 46 39 75 30 4c 61 47 65 64 68 7a 56 63 75 63 6a 41 4a 71 2d 76 47 72 76 42 6c 38 47 44 6f 69 4b 65 47 39 64 35 39 71 43 71 31 4f 6b 5a 4a 65 65 61 72 6d 6a 2d 63 48 2d 2d 65 50 49 36 48 74 78 6d 62 69 4c 53 4d 64 41 44 65 37 4b 36 34 67 50 44 39 57 53 41 54 46 4a 43 4b 4e 54 44 4c 76 49 59 32 6e 64 64 2d 59 37 56 Data Ascii: reMKPi-p05YlpBIiX2rndhf5NbipM0PK4INkaDJCZn39_f3QP8iQkqgVMq1RjSzOe5ttHnelwMv8h39D6jpn9djIgoTs6DQAMAfYrlvb3J5HVfwfl8W4s4e5gBSfnhLVvdHoQy4mAgJEQMAEUfMvj2F9u0LaGedhzVcucjAJq-vGrvBl8GDoiKeG9d59qCq1OkZJeearmj-cH--ePI6HtxmbiLSMdADe7K64gPD9WSATFJCKNTDLvIY2ndd-Y7V
2025-01-09 17:38:51 UTC	700	IN	Data Raw: 35 68 39 44 34 7a 38 30 6a 78 41 43 51 51 55 34 4a 41 37 42 73 32 31 35 55 4a 66 47 79 31 69 68 5a 72 30 50 6a 30 4b 48 35 67 31 6c 64 6d 6d 79 32 4a 32 55 2d 61 4d 41 57 48 4f 58 69 4b 59 39 30 64 4a 71 64 6b 6b 37 30 4c 66 6b 53 47 56 67 72 6d 64 2d 6e 51 4e 32 6d 68 48 48 31 4d 4c 58 42 67 52 51 44 55 78 51 75 71 36 38 5f 34 51 5a 6e 69 57 79 32 50 7a 34 33 31 74 79 6a 35 75 74 58 61 74 73 37 45 70 70 4e 30 55 79 70 4f 37 42 52 76 70 45 63 6e 42 47 65 51 61 49 32 36 6b 4d 36 65 70 4e 36 6e 38 41 6c 70 36 69 63 30 70 48 7a 50 57 4a 62 44 76 53 39 6b 6f 36 4e 58 77 49 73 4e 66 49 70 47 79 78 4e 2d 65 4c 4a 6b 45 55 2d 4d 45 33 67 5a 75 6c 30 5a 34 6d 49 65 46 6d 4e 62 61 4b 45 73 34 37 70 62 78 63 77 37 68 34 4c 6a 41 71 48 30 49 39 6f 31 30 72 37 49 33 Data Ascii: 5h9D4z80jxACQQU4JA7Bs215UJfGy1ihZr0Pj0KH5g1ldmmy2J2U-aMAWHOXiKY90dJqdkk70LfkSGVgrmd-nQN2mhHH1MLXBgRQDUxQuq68_4QZniWy2Pz431tyj5utXats7EppN0UypO7BRvpEcnBGeQaI26kM6epN6n8Alp6ic0pHzPWJbDvS9ko6NXwIsNfIpGyxN-eLJkEU-ME3gZul0Z4mIeFmNbaKEs47pbxcw7h4LjAqH0I9o10r7I3
2025-01-09 17:38:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49750	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:51 UTC	753	OUT	POST /valider.php HTTP/1.1 Host: usps-ny.com Connection: keep-alive Content-Length: 2455 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://usps-ny.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:51 UTC	2455	OUT	Data Raw: 72 65 73 70 6f 6e 73 65 3d 30 33 41 46 63 57 65 41 34 73 54 75 68 70 30 6b 66 61 4c 4d 44 65 2d 48 4e 56 6b 74 47 37 6b 70 4e 71 42 6b 79 4f 5f 67 33 33 6b 41 64 37 75 4e 6f 50 6f 79 46 63 57 4b 77 66 68 6c 6d 75 72 50 5a 65 33 30 47 65 78 37 43 30 73 35 63 67 37 76 53 58 53 4f 32 63 4c 44 65 48 4a 61 76 67 67 63 62 74 33 31 4a 37 5f 4b 6c 48 59 45 6a 61 72 48 43 30 34 6b 66 6b 49 4a 68 31 6c 66 62 43 71 38 32 2d 49 38 4d 7a 6b 5f 35 57 47 53 42 6a 2d 68 6d 36 6a 72 35 4a 76 62 39 37 78 42 52 57 6d 56 73 58 49 63 72 2d 4c 56 63 56 58 62 68 31 4a 7a 73 6d 54 55 6d 48 50 55 5f 47 4a 64 62 58 6f 72 62 37 44 39 37 56 55 36 6a 73 75 4d 5f 73 52 52 34 6f 4d 31 72 6d 47 65 30 50 50 6f 69 4a 4f 78 65 70 5a 50 50 37 56 6a 67 77 67 6f 67 4a 44 31 33 48 33 78 4b 48 Data Ascii: response=03AFcWeA4sTuhp0kfaLMDe-HNVktG7kpNqBkyO_g33kAd7uNoPoyFcWKwfhlmurPZe30Gex7C0s5cg7vSXSO2cLDeHJavggcbt31J7_KlHYEjarHC04kfkIJh1lfbCq82-I8Mzk_5WGSBj-hm6jr5Jvb97xBRWmVsXIcr-LVcVXbh1JzsmTUmHPU_GJdbXorb7D97VU6jsuM_sRR4oM1rmGe0PPoiJOxepZPP7VjgwgogJD13H3xKH
2025-01-09 17:38:52 UTC	434	IN	HTTP/1.1 200 OK content-type: application/json expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-length: 40 date: Thu, 09 Jan 2025 17:38:52 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:52 UTC	40	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 22 74 72 75 65 22 2c 22 72 65 64 69 72 65 63 74 22 3a 22 68 6f 6d 65 70 61 67 65 22 7d Data Ascii: {"success":"true","redirect":"homepage"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49749	142.250.186.100	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:51 UTC	610	OUT	GET /recaptcha/api2/userverify?k=6LeXXLIqAAAAAH97sMQ3RRj-Wviac2_EieSAJOq8 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AJNbFncclK69KL7at1cmn6LHT3gctXFAAslsRuJXjtVZygHGD-Quk5v-TSfYR7FcsZAoGFGqzIzsn-qcCJxMEXE
2025-01-09 17:38:52 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 09 Jan 2025 17:38:52 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 17:38:52 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2025-01-09 17:38:52 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2025-01-09 17:38:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49752	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:52 UTC	764	OUT	GET / HTTP/1.1 Host: usps-ny.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:53 UTC	626	IN	HTTP/1.1 302 Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache location: connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa content-type: text/html; charset=UTF-8 content-length: 0 date: Thu, 09 Jan 2025 17:38:53 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49753	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:53 UTC	392	OUT	GET /valider.php HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:53 UTC	355	IN	HTTP/1.1 302 Found location: index.php content-type: text/html; charset=UTF-8 content-length: 0 date: Thu, 09 Jan 2025 17:38:53 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49751	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:53 UTC	934	OUT	GET /connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa HTTP/1.1 Host: usps-ny.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:53 UTC	445	IN	HTTP/1.1 200 OK expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-length: 16990 date: Thu, 09 Jan 2025 17:38:53 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:53 UTC	8192	IN	Data Raw: 20 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 Data Ascii: <!DOCTYPE html><!DOCTYPE html><html lang="en" class="h-100"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="icon" href="http
2025-01-09 17:38:53 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 66 6e 61 6d 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 46 75 6c 6c 20 6e 61 6d 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: id="fname" required class="form-control form-control-lg" placeholder="Full name" /> </div>
2025-01-09 17:38:53 UTC	606	IN	Data Raw: 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 61 73 73 65 74 73 2f 78 5f 6c 6f 67 6f 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 58 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 63 6f 6e 2e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 Data Ascii: ="list-inline-item"> <a> <img src="assets/x_logo.png" alt="Image of X social media icon." /> </a> </li> <li class="list

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49754	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	390	OUT	GET /index.php HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	626	IN	HTTP/1.1 302 Found expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache location: connexion.php?sslchannel=true&sessionid=xfyjQHgdpt23YVLyBzgV6YdHEbgPHoR8GI69kEcYdykCBgdwi9Fb5hVfxQHvV03qfOrGxvZ1GsBTlznEpaKvv8Dz7ZmnaJbzeo4ke6wsKDl6rJuUyHOZHrEWjoiEs7BR1n content-type: text/html; charset=UTF-8 content-length: 0 date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49755	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	758	OUT	GET /assets/usps-fonts.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "9d5-6754a28a-2f2f06;;;" last-modified: Sat, 07 Dec 2024 19:31:22 GMT content-type: text/css content-length: 2517 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:54 UTC	2517	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 22 3b 73 72 63 3a 75 72 6c 28 22 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b 73 72 63 3a 75 72 6c 28 22 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 2c 75 72 6c 28 22 35 38 61 62 35 30 37 35 2d 35 33 65 61 2d 34 36 65 36 2d 39 37 38 33 2d 63 62 62 33 33 35 36 36 35 66 38 38 2e 73 76 67 23 35 38 61 62 35 30 37 35 2d 35 33 65 61 2d 34 36 65 36 2d 39 37 38 33 2d 63 62 62 33 Data Ascii: @font-face{font-family:"HelveticaNeueW02-65Medi";src:url("55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49756	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	767	OUT	GET /assets/bootstrap-icons.min.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	500	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "14004-6754a2a6-2f2ed8;;;" last-modified: Sat, 07 Dec 2024 19:31:50 GMT content-type: text/css content-length: 81924 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 49 63 6f 6e 73 20 76 31 2e 31 30 2e 35 20 28 68 74 74 70 73 3a 2f 2f 69 63 6f 6e 73 2e 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 39 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 69 63 6f 6e 73 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 62 6f 6f 74 73 74 72 61 70 2d 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 62 6f 6f Data Ascii: /! Bootstrap Icons v1.10.5 (https://icons.getbootstrap.com/) * Copyright 2019-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/icons/blob/main/LICENSE) */@font-face{font-display:block;font-family:bootstrap-icons;src:url("boo
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 65 22 7d 2e 62 69 2d 63 68 65 63 6b 32 2d 61 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 66 22 7d 2e 62 69 2d 63 68 65 63 6b 32 2d 63 69 72 63 6c 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 30 22 7d 2e 62 69 2d 63 68 65 63 6b 32 2d 73 71 75 61 72 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 31 22 7d 2e 62 69 2d 63 68 65 63 6b 32 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 32 22 7d 2e 62 69 2d 63 68 65 76 72 6f 6e 2d 62 61 72 2d 63 6f 6e 74 72 61 63 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 33 22 7d 2e 62 69 2d 63 68 65 76 72 6f 6e 2d 62 61 72 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 Data Ascii: fore{content:"\f26e"}.bi-check2-all::before{content:"\f26f"}.bi-check2-circle::before{content:"\f270"}.bi-check2-square::before{content:"\f271"}.bi-check2::before{content:"\f272"}.bi-chevron-bar-contract::before{content:"\f273"}.bi-chevron-bar-down::befor
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 66 22 7d 2e 62 69 2d 67 6f 6f 67 6c 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 30 22 7d 2e 62 69 2d 67 72 61 70 68 2d 64 6f 77 6e 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 31 22 7d 2e 62 69 2d 67 72 61 70 68 2d 75 70 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 32 22 7d 2e 62 69 2d 67 72 69 64 2d 31 78 32 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 33 22 7d 2e 62 69 2d 67 72 69 64 2d 31 78 32 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 34 22 7d 2e 62 69 2d 67 72 69 64 2d 33 78 32 2d 67 61 70 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 66 35 22 7d 2e 62 69 2d Data Ascii: ontent:"\f3ef"}.bi-google::before{content:"\f3f0"}.bi-graph-down::before{content:"\f3f1"}.bi-graph-up::before{content:"\f3f2"}.bi-grid-1x2-fill::before{content:"\f3f3"}.bi-grid-1x2::before{content:"\f3f4"}.bi-grid-3x2-gap-fill::before{content:"\f3f5"}.bi-
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 5c 66 35 38 33 22 7d 2e 62 69 2d 73 71 75 61 72 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 34 22 7d 2e 62 69 2d 73 74 61 63 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 35 22 7d 2e 62 69 2d 73 74 61 72 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 36 22 7d 2e 62 69 2d 73 74 61 72 2d 68 61 6c 66 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 37 22 7d 2e 62 69 2d 73 74 61 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 38 22 7d 2e 62 69 2d 73 74 61 72 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 38 39 22 7d 2e 62 69 2d 73 74 69 63 6b 69 65 73 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: \f583"}.bi-square::before{content:"\f584"}.bi-stack::before{content:"\f585"}.bi-star-fill::before{content:"\f586"}.bi-star-half::before{content:"\f587"}.bi-star::before{content:"\f588"}.bi-stars::before{content:"\f589"}.bi-stickies-fill::before{content:"\
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 65 6e 74 3a 22 5c 66 37 32 61 22 7d 2e 62 69 2d 63 6c 69 70 62 6f 61 72 64 32 2d 6d 69 6e 75 73 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 62 22 7d 2e 62 69 2d 63 6c 69 70 62 6f 61 72 64 32 2d 6d 69 6e 75 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 63 22 7d 2e 62 69 2d 63 6c 69 70 62 6f 61 72 64 32 2d 70 6c 75 73 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 64 22 7d 2e 62 69 2d 63 6c 69 70 62 6f 61 72 64 32 2d 70 6c 75 73 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 65 22 7d 2e 62 69 2d 63 6c 69 70 62 6f 61 72 64 32 2d 70 75 6c 73 65 2d 66 69 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 32 66 22 7d 2e 62 69 2d 63 Data Ascii: ent:"\f72a"}.bi-clipboard2-minus-fill::before{content:"\f72b"}.bi-clipboard2-minus::before{content:"\f72c"}.bi-clipboard2-plus-fill::before{content:"\f72d"}.bi-clipboard2-plus::before{content:"\f72e"}.bi-clipboard2-pulse-fill::before{content:"\f72f"}.bi-c
2025-01-09 17:38:54 UTC	4	IN	Data Raw: 63 63 22 7d Data Ascii: cc"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49757	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	761	OUT	GET /assets/bootstrap.min.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "2f955-67536aa6-2f2edb;;;" last-modified: Fri, 06 Dec 2024 21:20:38 GMT content-type: text/css content-length: 194901 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 32 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b Data Ascii: @charset "UTF-8";/! Bootstrap v5.2.3 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 33 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 34 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 35 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 36 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 78 6c 2d 37 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d Data Ascii: 33333%}.col-xl-2{flex:0 0 auto;width:16.66666667%}.col-xl-3{flex:0 0 auto;width:25%}.col-xl-4{flex:0 0 auto;width:33.33333333%}.col-xl-5{flex:0 0 auto;width:41.66666667%}.col-xl-6{flex:0 0 auto;width:50%}.col-xl-7{flex:0 0 auto;width:58.33333333%}.col-xl-
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 72 3d 27 33 27 20 66 69 6c 6c 3d 27 25 32 33 66 66 66 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 2e 66 6f 72 6d 2d 73 77 69 74 63 68 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 72 65 76 65 72 73 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 2e 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 73 77 69 74 63 68 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 72 65 76 65 72 73 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 62 74 6e 2d 63 68 65 63 6b Data Ascii: r='3' fill='%23fff'/%3e%3c/svg%3e")}.form-switch.form-check-reverse{padding-right:2.5em;padding-left:0}.form-switch.form-check-reverse .form-check-input{margin-right:-2.5em;margin-left:0}.form-check-inline{display:inline-block;margin-right:1rem}.btn-check
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 62 67 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 7d 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 7b 2d 2d 62 73 2d 62 74 6e 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 73 2d 62 74 6e 2d 62 67 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 62 74 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 67 3a 23 35 63 36 33 36 61 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f Data Ascii: s-btn-disabled-color:#fff;--bs-btn-disabled-bg:#0d6efd;--bs-btn-disabled-border-color:#0d6efd}.btn-secondary{--bs-btn-color:#fff;--bs-btn-bg:#6c757d;--bs-btn-border-color:#6c757d;--bs-btn-hover-color:#fff;--bs-btn-hover-bg:#5c636a;--bs-btn-hover-border-co
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 Data Ascii: umn;align-items:flex-start;justify-content:center}.btn-group-vertical>.btn,.btn-group-vertical>.btn-group{width:100%}.btn-group-vertical>.btn-group:not(:first-child),.btn-group-vertical>.btn:not(:first-child){margin-top:-1px}.btn-group-vertical>.btn-group
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 2d 6c 65 66 74 3a 30 7d 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 61 72 64 2d 68 65 61 64 65 72 2c 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 2e 63 61 72 64 2d 69 6d 67 2d 74 6f 70 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 63 61 72 64 2d 67 72 6f 75 70 3e 2e 63 61 72 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 Data Ascii: -left:0}.card-group>.card:not(:last-child){border-top-right-radius:0;border-bottom-right-radius:0}.card-group>.card:not(:last-child) .card-header,.card-group>.card:not(:last-child) .card-img-top{border-top-right-radius:0}.card-group>.card:not(:last-child)
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 64 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 64 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 64 3e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c Data Ascii: list-group-horizontal-md{flex-direction:row}.list-group-horizontal-md>.list-group-item:first-child:not(:last-child){border-bottom-left-radius:var(--bs-list-group-border-radius);border-top-right-radius:0}.list-group-horizontal-md>.list-group-item:last-chil
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 6f 6c 74 69 70 2d 62 67 29 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 73 74 61 72 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 7b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2d 68 65 69 67 68 74 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 2d 77 69 64 74 68 29 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 64 61 74 61 2d 70 6f 70 70 65 72 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 6c 65 66 74 5d 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 3a 3a 62 65 66 6f 72 65 2c Data Ascii: oltip-bg)}.bs-tooltip-auto[data-popper-placement^=left] .tooltip-arrow,.bs-tooltip-start .tooltip-arrow{right:0;width:var(--bs-tooltip-arrow-height);height:var(--bs-tooltip-arrow-width)}.bs-tooltip-auto[data-popper-placement^=left] .tooltip-arrow::before,
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 2e 39 38 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 6c 67 2e 6f 66 66 63 61 6e 76 61 73 2d 65 6e 64 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 77 69 64 74 68 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 2e 39 38 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d Data Ascii: }}@media (max-width:991.98px){.offcanvas-lg.offcanvas-end{top:0;right:0;width:var(--bs-offcanvas-width);border-left:var(--bs-offcanvas-border-width) solid var(--bs-offcanvas-border-color);transform:translateX(100%)}}@media (max-width:991.98px){.offcanvas-
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 67 72 6f 77 2d 30 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 67 72 6f 77 2d 31 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 30 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 68 72 69 6e 6b 2d 31 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 77 72 61 70 Data Ascii: lex-direction:row-reverse!important}.flex-column-reverse{flex-direction:column-reverse!important}.flex-grow-0{flex-grow:0!important}.flex-grow-1{flex-grow:1!important}.flex-shrink-0{flex-shrink:0!important}.flex-shrink-1{flex-shrink:1!important}.flex-wrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49758	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	761	OUT	GET /assets/sticky-footer.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	492	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "0-67536aa6-2f2f02;;;" last-modified: Fri, 06 Dec 2024 21:20:38 GMT content-type: text/css content-length: 0 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49759	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	758	OUT	GET /assets/usps-theme.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "2d45-6754a27e-2f2f07;;;" last-modified: Sat, 07 Dec 2024 19:31:10 GMT content-type: text/css content-length: 11589 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:54 UTC	11589	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 6c 69 67 68 74 3a 23 66 37 66 37 66 37 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 72 67 62 3a 32 34 37 2c 32 34 37 2c 32 34 37 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 75 73 70 73 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 6e 74 2d 75 73 70 73 29 3b 2d 2d 62 73 2d 68 65 61 64 65 72 2d 77 68 69 74 65 3a 23 66 66 66 3b 2d 2d 62 73 2d 68 65 61 64 65 72 2d 77 68 69 74 65 2d 72 67 62 3a 32 35 35 2c 32 35 35 2c 32 35 35 3b 2d 2d 62 73 2d 68 65 61 64 65 72 2d 64 61 72 6b 3a 23 64 Data Ascii: :root{--bs-light:#f7f7f7;--bs-light-rgb:247,247,247;--bs-font-usps:"HelveticaNeueW02-55Roma","Helvetica Neue",Helvetica,Arial,sans-serif;--bs-body-font-family:var(--bs-font-usps);--bs-header-white:#fff;--bs-header-white-rgb:255,255,255;--bs-header-dark:#d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49760	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:54 UTC	761	OUT	GET /assets/jquery-ui.min.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:54 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:54 GMT etag: "41a4-67536aa6-2f2ef2;;;" last-modified: Fri, 06 Dec 2024 21:20:38 GMT content-type: text/css content-length: 16804 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:54 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:54 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 34 2d 30 32 2d 30 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 74 68 65 6d 65 2e 63 73 73 0a 2a 20 54 6f 20 76 69 65 77 20 61 6e 64 20 6d 6f 64 69 66 79 20 74 68 69 73 20 74 68 65 6d 65 2c 20 76 69 73 69 74 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 2f 74 68 65 6d 65 72 6f 6c 6c 65 72 2f 3f 73 63 6f 70 65 3d 26 66 6f 6c 64 65 72 4e 61 6d 65 3d 62 61 73 65 26 63 6f 72 6e 65 72 52 61 64 69 75 73 53 68 61 64 6f 77 3d 38 70 78 26 6f 66 66 73 65 74 4c 65 66 74 53 68 61 64 6f 77 3d 30 Data Ascii: /! jQuery UI - v1.13.2 - 2024-02-02 http://jqueryui.com* Includes: core.css, autocomplete.css, menu.css, theme.css* To view and modify this theme, visit http://jqueryui.com/themeroller/?scope=&folderName=base&cornerRadiusShadow=8px&offsetLeftShadow=0
2025-01-09 17:38:54 UTC	420	IN	Data Raw: 72 6e 65 72 2d 61 6c 6c 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 74 6f 70 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 72 69 67 68 74 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 74 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 6c 65 66 74 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6c 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 75 69 2d 63 6f 72 6e 65 72 2d 61 6c 6c 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 6f 74 74 6f 6d 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 72 69 67 68 74 2c 2e 75 69 2d 63 6f 72 6e 65 72 2d 62 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 Data Ascii: rner-all,.ui-corner-top,.ui-corner-right,.ui-corner-tr{border-top-right-radius:3px}.ui-corner-all,.ui-corner-bottom,.ui-corner-left,.ui-corner-bl{border-bottom-left-radius:3px}.ui-corner-all,.ui-corner-bottom,.ui-corner-right,.ui-corner-br{border-bottom-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49762	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	551	OUT	GET /connexion.php?sslchannel=true&sessionid=xfyjQHgdpt23YVLyBzgV6YdHEbgPHoR8GI69kEcYdykCBgdwi9Fb5hVfxQHvV03qfOrGxvZ1GsBTlznEpaKvv8Dz7ZmnaJbzeo4ke6wsKDl6rJuUyHOZHrEWjoiEs7BR1n HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:55 UTC	445	IN	HTTP/1.1 200 OK expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache content-type: text/html; charset=UTF-8 content-length: 16990 date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:55 UTC	8192	IN	Data Raw: 20 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 Data Ascii: <!DOCTYPE html><!DOCTYPE html><html lang="en" class="h-100"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="icon" href="http
2025-01-09 17:38:55 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 66 6e 61 6d 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 71 75 69 72 65 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 20 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 46 75 6c 6c 20 6e 61 6d 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 Data Ascii: id="fname" required class="form-control form-control-lg" placeholder="Full name" /> </div>
2025-01-09 17:38:55 UTC	606	IN	Data Raw: 3d 22 6c 69 73 74 2d 69 6e 6c 69 6e 65 2d 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 61 73 73 65 74 73 2f 78 5f 6c 6f 67 6f 2e 70 6e 67 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 58 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 63 6f 6e 2e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 Data Ascii: ="list-inline-item"> <a> <img src="assets/x_logo.png" alt="Image of X social media icon." /> </a> </li> <li class="list

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49763	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	759	OUT	GET /assets/megamenu-v2.css HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:55 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:55 GMT etag: "aeb5-60631b40-2f2efa;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: text/css content-length: 44725 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 68 74 6d 6c 20 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2c 62 6f 64 79 20 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 64 69 76 2c 64 69 76 20 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 73 70 61 6e 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 70 70 6c 65 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6f 62 6a 65 63 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 69 66 72 61 6d 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 68 31 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 68 32 2c 2e 67 6c 6f 62 Data Ascii: html .global--navigation,body .global--navigation,.global--navigation div,div .global--navigation,.global--navigation span,.global--navigation applet,.global--navigation object,.global--navigation iframe,.global--navigation h1,.global--navigation h2,.glob
2025-01-09 17:38:55 UTC	16384	IN	Data Raw: 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 33 35 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 3a 68 6f 76 65 72 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 75 6c 20 6c 69 20 61 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e Data Ascii: ansform-origin:0 35%}.global--navigation nav ul li a.nav-first-element:hover,.global--navigation nav ul li a.nav-first-element:focus{color:#336}.global--navigation nav ul li a.nav-first-element:hover:before,.global--navigation nav ul li a.nav-first-elemen
2025-01-09 17:38:55 UTC	11957	IN	Data Raw: 69 73 74 2c 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 2e 6c 61 6e 67 2d 73 65 6c 65 63 74 2e 61 63 74 69 76 65 20 2e 6c 61 6e 67 2d 6c 69 73 74 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 65 64 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 65 66 74 3a 32 70 78 3b 74 6f 70 3a 33 30 70 78 3b 77 69 64 74 68 3a 38 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 31 70 78 20 23 64 38 64 38 64 38 7d 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 23 6c 69 6e 6b 2d 6c 61 6e 67 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 64 65 64 65 64 7d 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 2e 6c Data Ascii: ist,.nav-utility .lang-select.active .lang-list{max-height:400px;overflow:visible;background:#ededed;z-index:20;display:inline-block;left:2px;top:30px;width:89px;box-shadow:0 2px 1px #d8d8d8}.nav-utility #link-lang:hover{background:#ededed}.nav-utility .l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49765	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	801	OUT	GET /assets/logo-sb.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:55 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:55 GMT etag: "de5-60631b40-2f2ef5;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 3557 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:55 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49764	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	803	OUT	GET /assets/hamburger.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:55 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:55 GMT etag: "222-60631b40-2f2eef;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 546 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:55 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49768	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	805	OUT	GET /assets/logo_mobile.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:55 GMT etag: "80c-60631b40-2f2ef6;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 2060 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49767	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	800	OUT	GET /assets/search.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:55 GMT etag: "5b9-60631b40-2f2f00;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 1465 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:55 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49766	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:55 UTC	805	OUT	GET /assets/footer-logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "150e-67536aac-2f2ee6;;;" last-modified: Fri, 06 Dec 2024 21:20:44 GMT content-type: image/png content-length: 5390 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49769	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	806	OUT	GET /assets/threads_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "745-67536aae-2f2f03;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1861 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49770	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	808	OUT	GET /assets/instagram_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "b12-67536aae-2f2ef1;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 2834 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49773	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	399	OUT	GET /assets/logo-sb.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "de5-60631b40-2f2ef5;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 3557 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49771	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	401	OUT	GET /assets/hamburger.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	501	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "222-60631b40-2f2eef;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 546 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49772	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	806	OUT	GET /assets/youtube_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "371-67536aae-2f2f09;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 881 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49774	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	800	OUT	GET /assets/x_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:56 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "54d-67536aae-2f2f08;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1357 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:56 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49776	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	808	OUT	GET /assets/pinterest_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "a65-67536aae-2f2efb;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 2661 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49775	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	403	OUT	GET /assets/logo_mobile.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "80c-60631b40-2f2ef6;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 2060 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49777	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	398	OUT	GET /assets/search.svg HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	502	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "5b9-60631b40-2f2f00;;;" last-modified: Tue, 30 Mar 2021 12:36:16 GMT content-type: image/svg+xml content-length: 1465 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49779	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	403	OUT	GET /assets/footer-logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	499	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "150e-67536aac-2f2ee6;;;" last-modified: Fri, 06 Dec 2024 21:20:44 GMT content-type: image/png content-length: 5390 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49778	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:56 UTC	807	OUT	GET /assets/facebook_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/connexion.php?sslchannel=true&sessionid=cVzvQTv8dz5OLgbnL3VHksjtz7nzooVPm3M0mvLERA10KjtAkGojv1WosvaRllXY0A29CC7dx73VviCg3Wm4zQ1fMyTIdZ2V9hguhDeKefWwYsK5MG6llVymmdelDj13Sa Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:56 GMT etag: "74c-67536aae-2f2ee3;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1868 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:56 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49780	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	404	OUT	GET /assets/threads_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "745-67536aae-2f2f03;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1861 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49781	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	406	OUT	GET /assets/instagram_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "b12-67536aae-2f2ef1;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 2834 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49782	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	404	OUT	GET /assets/youtube_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	497	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "371-67536aae-2f2f09;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 881 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49785	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	398	OUT	GET /assets/x_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "54d-67536aae-2f2f08;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1357 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49783	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	646	OUT	GET /assets/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usps-ny.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://usps-ny.com/assets/usps-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	433	IN	HTTP/1.1 200 OK etag: "e542-6754a0f4-2f2edf;;;" last-modified: Sat, 07 Dec 2024 19:24:36 GMT content-type: application/font-woff content-length: 58690 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 e5 42 00 0f 00 00 00 02 04 0c 00 01 00 00 00 00 e1 40 00 00 04 02 00 00 09 2b 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 12 2b a8 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 03 43 0e fb 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 19 00 09 67 6c 79 66 00 00 04 48 00 00 c0 b0 00 01 b7 c8 7d 95 00 6e 68 65 61 64 00 00 c4 f8 00 00 00 36 00 00 00 36 e9 5a 31 79 68 68 65 61 00 00 c5 30 00 00 00 21 00 00 00 24 07 5e 04 87 68 6d 74 78 00 00 c5 54 00 00 02 d6 00 00 06 18 20 00 38 11 6b 65 72 6e 00 00 c8 2c 00 00 0a fe 00 00 1c c2 08 f7 06 d0 6c 6f 63 61 00 00 d3 2c 00 00 03 Data Ascii: wOFFB@+OS/2XV`+cmapt8cvt HHCfpgm8gasp8glyfH}nhead66Z1yhhea0!$^hmtxT 8kern,loca,
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 21 5d b3 22 c3 f5 23 45 c3 a9 b6 81 06 87 33 dc d3 34 b0 b0 60 6d d9 c5 e7 f7 6d 9c e3 af 9b b3 71 a0 65 69 7f 83 55 9f 68 ef aa ef 1e 8d 86 47 52 81 79 7d 13 bb a3 0b ce eb ed dd be b8 d9 dd 32 af 4d c8 2e 1e ab cb 84 3f 40 8b be 6b 96 4f 19 a2 6e a5 27 99 72 3e 2c 36 9d 0f e3 94 d8 f7 70 39 2b 8b f0 06 ce 71 f4 65 32 d0 c4 5a a9 20 83 77 04 6f 4a 3f 50 15 8c cb 3c a8 7a f7 1d 9c 42 93 3d 4c d7 60 73 aa 1a 25 3c f9 6a d3 a4 f4 4f 66 dc 6c ea ca b3 b6 7c 57 7e 89 67 ee da 19 8e 8a d2 6f 57 ba 2b da a5 24 78 44 12 19 47 7c 54 69 57 53 32 a4 e8 69 32 55 28 b3 ea 33 6a c9 cb b3 cb e8 86 cd b8 69 08 23 e6 90 b8 3b 3d c3 5d 57 0f a5 42 33 ba 96 24 c6 35 d9 9c df d2 17 76 e8 87 cf 24 21 a6 66 f0 fe d4 c9 05 4a 3c 9c b7 48 88 07 bd 48 33 fb da 42 f2 a0 48 8b 18 Data Ascii: !]"#E34`mmqeiUhGRy}2M.?@kOn'r>,6p9+qe2Z woJ?P<zB=L`s%<jOfl\|W~goW+$xDG\|TiWS2i2U(3ji#;=]WB3$5v$!fJ<HH3BH
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 3d a4 17 84 da f7 f1 e7 b0 73 1c 14 4c 5c 60 27 49 2d fd 08 60 32 0a fe 51 03 3f a4 f2 58 15 12 52 0b a5 94 6d 86 d2 8b a1 1b e8 0c db c8 eb 41 74 ae e6 86 f4 f8 af c9 4e d5 e3 25 99 54 db 40 d4 66 af eb 69 1c 18 2f da 50 fe ee 2d e1 bf 26 37 4d a5 d6 74 55 d7 f4 6f 19 68 59 d9 17 35 ab 33 ed 5d b5 dd 13 b1 ba 91 54 68 b8 77 cb ae 82 a6 0b c9 4c 47 0a 9a 46 b7 76 2d d9 3e d9 ec 6e 19 6e 33 ce 58 13 d1 20 e3 92 fe f9 22 5c f0 08 42 c3 f0 21 99 21 ba 77 91 f6 07 81 a3 52 84 4e b8 82 da 08 1d 6f 7e 3b a0 6d 4e 1a ed 1a f2 db 3d a5 f7 b7 9b bc 37 ae 25 5a 22 26 66 3f 37 3c 03 71 5a 32 fa ca 19 06 b6 71 ec ad 33 0c 3c c9 f1 69 66 08 10 74 47 03 53 19 8d 4c 77 34 73 4d 9b 41 77 cc bf 08 7f 3e 49 63 ff 7f 88 0a 1a 86 3f f5 19 21 a9 3d 2a 34 13 66 20 80 90 ff c3 Data Ascii: =sL\`'I-`2Q?XRmAtN%T@fi/P-&7MtUohY53]ThwLGFv->nn3X "\B!!wRNo~;mN=7%Z"&f?7<qZ2q3<iftGSLw4sMAw>Ic?!=*4f
2025-01-09 17:38:58 UTC	9538	IN	Data Raw: 5c 04 38 90 b4 2a 15 ac e8 46 5d bc 07 be a4 87 75 f1 1e 58 24 1e 20 67 3c 70 8e 78 94 71 28 1b a1 ec 84 72 1d 69 bd 85 99 21 9b 05 87 ed ff 6f 67 57 17 1a c5 15 85 ef dc bb 93 ed 66 76 b3 c9 d4 cd 76 d3 c4 a0 81 1a ad ba da 4d 22 da 82 d1 90 a0 06 ad 79 58 a5 01 5f 8a c2 2a 84 68 9e f4 2d 56 28 15 1f 2c 94 56 1a 5a 44 28 fd a1 85 be f5 61 5b 4a 09 56 e8 82 ad 58 a8 58 f6 21 0f 52 f0 41 22 82 82 25 66 3d 3f f7 ec ce ec 6e 0c f8 70 98 93 21 7b 67 ee 77 67 ce 3d f7 cc 39 df cd 75 18 18 45 17 13 25 69 f1 95 4e 61 fc a8 a5 c7 a1 14 50 67 2a 9f cf 2f 5f 3b 7a 74 ff 58 bc 37 ee 75 79 bd eb 8f 1f a7 9d 26 f5 fb 85 c2 b7 e3 07 77 ef 89 44 0e 44 cc 6b eb f7 8d 2f 8f c1 e3 5c 1b a3 d7 9d 4c 68 84 32 0d 75 a3 cc 69 83 39 a2 78 4c 96 39 ed 2a 65 b9 80 7b ca 2b 26 4f Data Ascii: \8F]uX$ g<pxq(ri!ogWfvvM"yX_h-V(,VZD(a[JVXX!RA"%f=?np!{gwg=9uE%iNaPg/_;ztX7uy&wDDk/\Lh2ui9xL9e{+&O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49784	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	646	OUT	GET /assets/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usps-ny.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://usps-ny.com/assets/usps-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	433	IN	HTTP/1.1 200 OK etag: "b641-6754a128-2f2ed6;;;" last-modified: Sat, 07 Dec 2024 19:25:28 GMT content-type: application/font-woff content-length: 46657 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 b6 41 00 0f 00 00 00 01 95 e0 00 01 00 00 00 00 b2 40 00 00 04 01 00 00 09 2a 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 18 2d d5 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 40 00 00 00 40 03 0f 0e ae 66 70 67 6d 00 00 02 f8 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 30 00 00 00 10 00 00 00 10 00 12 00 09 67 6c 79 66 00 00 04 40 00 00 91 8c 00 01 49 68 12 7b 34 d4 68 65 61 64 00 00 95 cc 00 00 00 36 00 00 00 36 e9 5c 32 97 68 68 65 61 00 00 96 04 00 00 00 21 00 00 00 24 07 6f 04 83 68 6d 74 78 00 00 96 28 00 00 02 e2 00 00 06 18 49 94 2d db 6b 65 72 6e 00 00 99 0c 00 00 0b 1e 00 00 1d 4c 1c cf 17 ab 6c 6f 63 61 00 00 a4 2c 00 00 04 Data Ascii: wOFFA@*OS/2XV`-cmapt8cvt @@fpgm8gasp0glyf@Ih{4head66\2hhea!$ohmtx(I-kernLloca,
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 58 11 4c c3 c2 e4 5e 81 41 0a e2 88 f1 31 b0 07 b3 b3 e2 b6 0f dc dd 9b 42 4f 0b ee ea c3 b7 84 50 5d 6d be 50 8f 27 38 e0 f3 0e 27 ec 3e 97 d5 98 36 7b c2 29 9f 7f 38 14 2c 3b ad 3e 57 57 eb 7f d9 22 5e ab a3 b3 d3 d5 e1 f4 77 ec e2 ff e8 68 f7 e2 3f 14 dc 67 61 ad f2 03 15 17 c4 b4 2a 7b 96 5c 81 20 f2 76 e2 ce af 7c eb 02 5b 6d af 56 2c 6f c3 be 63 4d 3b c7 5a 69 72 d0 48 5e 2d 31 98 57 40 7a bb 12 38 8d 3b 9d 5a 9d fc e0 c3 73 73 ad 98 11 f1 4b 6a e1 11 b1 af c8 fb d4 98 7a ad d2 0d 12 72 a1 a1 2e 19 ee da 40 4a 8a f3 79 62 b1 53 61 50 8f bb 41 df 4e dc 26 36 8c 0b d5 c5 58 07 75 ef 99 38 ef 96 33 ea 3d f3 3c a1 70 06 5a 3f a3 24 e1 40 93 0a 55 24 b1 67 21 3e 62 80 36 f1 4b e0 73 f2 e7 d3 ec a5 29 5c 2b a8 ed ec b7 84 aa 8f 26 72 97 9e 40 d6 cd 3b 1c Data Ascii: XL^A1BOP]mP'8'>6{)8,;>WW"^wh?ga*{\ v\|[mV,ocM;ZirH^-1W@z8;ZssKjzr.@JybSaPAN&6Xu83=<pZ?$@U$g!>b6Ks)\+&r@;
2025-01-09 17:38:58 UTC	13889	IN	Data Raw: fe 3a 13 61 1e bc df 65 e2 30 13 43 4c bc ce c4 65 4c 6c e2 d3 d7 a4 fc 98 2d 2c 2d 18 e0 8f fe a0 b9 a1 ab b0 b2 7b 24 71 03 e9 73 ec f2 55 60 4e a1 94 3b ad ec cb d2 cf 43 7f 3b 13 ad 7c 9a 5b c3 e7 a2 0f 49 e2 7e 79 7d 59 5e 8f f1 b9 a8 91 b3 85 b8 0d a3 3c 79 9e 37 09 d5 aa af 31 11 67 62 88 89 4b 99 78 8a 4d d7 de 21 89 5b d1 74 4d cb b1 d9 9c b0 45 ec a2 57 88 6d 7f 21 86 96 ea 84 fd a8 a8 d7 bb 97 36 be 47 7f f2 fc a0 6c 15 88 1f fe a4 dc b7 d2 62 6d 81 ec ad 4c 61 d9 0a c3 bb 23 20 f7 d8 b0 1a 5d 14 6b 32 a7 8e ba 34 ef 14 07 f2 39 36 2d 78 80 35 12 f3 6c 52 34 cf 3a a7 18 d9 b6 aa a1 90 82 a1 90 b2 0c 16 d3 15 39 5f 2d 80 5a b0 80 6c b6 88 62 24 4b 58 2c b8 6c ba ac d8 89 41 06 02 20 ec d3 1c e1 fa 36 25 f5 80 b0 7b 0e 1c 6c 29 64 08 d0 da a6 59 Data Ascii: :ae0CLeLl-,-{$qsU`N;C;\|[I~y}Y^<y71gbKxM![tMEWm!6GlbmLa# ]k2496-x5lR4:9_-Zlb$KX,lA 6%{l)dY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49786	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	646	OUT	GET /assets/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1 Host: usps-ny.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usps-ny.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://usps-ny.com/assets/usps-fonts.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	433	IN	HTTP/1.1 200 OK etag: "c9e5-6754a16e-2f2ed7;;;" last-modified: Sat, 07 Dec 2024 19:26:38 GMT content-type: application/font-woff content-length: 51685 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 c9 e5 00 0f 00 00 00 01 c5 18 00 01 00 00 00 00 c5 e0 00 00 04 05 00 00 09 2c 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 1a 2b a3 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 04 6b 0d 63 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 16 00 09 67 6c 79 66 00 00 04 48 00 00 a4 e1 00 01 77 f4 d2 5a ae 68 68 65 61 64 00 00 a9 2c 00 00 00 36 00 00 00 36 e9 23 09 93 68 68 65 61 00 00 a9 64 00 00 00 21 00 00 00 24 07 45 04 7f 68 6d 74 78 00 00 a9 88 00 00 02 ea 00 00 06 18 32 dd 34 05 6b 65 72 6e 00 00 ac 74 00 00 0b 3e 00 00 1d 58 16 44 17 a8 6c 6f 63 61 00 00 b7 b4 00 00 03 Data Ascii: wOFF,OS/2XV`+cmapt8cvt HHkcfpgm8gasp8glyfHwZhhead,66#hhead!$Ehmtx24kernt>XDloca
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 8e 31 36 6c ab 2c ab bc 12 8c 68 b4 c4 e9 82 24 16 09 a9 45 03 d6 bd 50 d0 71 a2 e1 1e 70 82 60 70 28 07 e0 69 01 e8 d7 00 f4 6b 00 fa 35 40 43 39 00 fd 1a 60 7d 8a eb 22 01 5a 92 16 3d 3a 49 ba c0 7e b2 f2 6f a3 0f 5d c6 0d 83 0b c2 76 37 0a a2 6a 7a 5f 31 ad 48 50 4d 94 95 ed 3a 0a b6 db cf 42 e1 80 67 00 d5 54 5a cd d8 fc 9a 5b 68 f3 9a 81 76 56 69 8c 75 75 7b fb 36 17 fc 81 c1 ed 43 dd 5b 3d ca c1 d2 ac 45 cd c7 27 56 8d af 56 f3 91 a6 c7 65 c5 19 74 d4 75 ae d9 db d3 b7 6f 4d 32 de 39 56 ba d0 5a cc 86 f6 6f d8 b2 37 98 5d a6 c9 48 f9 5a 26 23 ff fe a2 32 72 49 a9 57 43 c2 ee af c8 de fe 0b 06 de bb 62 22 82 04 2e 66 41 c3 37 39 d9 c6 5a 5c 8f 78 9f d2 4e e8 18 4e 2e eb 5a 64 75 f0 5a 45 df d2 d6 ed 73 58 6a cd 5e 73 4b 36 e6 02 69 b7 cf 99 08 3b 14 Data Ascii: 16l,h$EPqp`p(ik5@C9`}"Z=:I~o]v7jz_1HPM:BgTZ[hvViuu{6C[=E'VVetuoM29VZo7]HZ&#2rIWCb".fA79Z\xNN.ZduZEsXj^sK6i;
2025-01-09 17:38:58 UTC	16384	IN	Data Raw: 48 f9 ac 8f 92 bc 5f f0 9d 19 85 76 3a 15 7f 28 fa bc ae ec ef 46 c9 be 4f ce 4b a7 39 7f f9 3e f5 53 ba 93 69 c8 21 53 b3 92 c8 69 77 93 c5 6e 70 0a b7 2b 7d cb 2c db eb cd 2a 86 75 3b 7f 95 69 f2 87 f4 54 cb ca ab 05 75 c6 75 a0 f7 3a f4 6f e7 59 b1 09 b9 77 40 c5 06 b6 2d 09 ba dd 81 51 f7 93 57 c8 93 44 c4 63 ec a4 ac 86 78 cd 90 c3 b1 8b 6e ce 24 fc f0 4e 2d 40 22 f4 02 00 97 e0 77 0d 1d da f1 b2 ba 9d af 8f 0c 2d b9 68 59 f8 18 09 e1 73 8c ad df 62 14 5d 10 95 20 dd 14 98 24 c6 d6 6f 31 a0 3c ad e2 c9 55 5a 07 c9 94 ac ca aa b8 b6 70 dc d4 4b 70 14 50 91 77 fd ad a7 d4 bd 42 c1 a3 da d8 b5 58 4a a7 0e b1 cd d0 00 00 5b a5 bd 1e 2a 3c 1a d8 82 a7 41 3b 0a 3f 69 c1 d3 00 47 a5 01 f6 73 83 d6 0b bf 49 f8 a1 dd 5b 35 7c 58 83 68 38 c3 d1 72 46 01 d8 25 Data Ascii: H_v:(FOK9>Si!Siwnp+},u;iTuu:oYw@-QWDcxn$N-@"w-hYsb] $o1<UZpKpPwBXJ[<A;?iGsI[5\|Xh8rF%
2025-01-09 17:38:58 UTC	2533	IN	Data Raw: de 53 69 04 33 e7 4a c2 ac 41 9a 2d 53 7e 8a 60 e4 71 a9 79 f4 48 a5 90 83 44 58 bc c2 2c 85 3e 91 42 c6 39 58 86 37 e8 8a 06 16 95 46 c5 4a db 94 45 25 8f b3 be 0a 95 8c a1 df f0 3c 43 cd 80 e6 50 96 0a fc bd c0 6d ba 8c d1 09 30 0f 14 d0 90 7d 3e 92 dd e5 3e 4d 57 8c 03 0b 3d 10 d4 c1 84 d9 a3 02 90 71 b0 c7 3f da de 7d dc 7c b2 d3 fa 64 8b 6f b7 b7 37 b6 5b ed 4b ab de 99 60 ec 94 09 56 30 c3 38 cb 58 0f 9e 86 0d 98 84 ef 88 29 d6 87 8f 81 f9 18 fe c7 30 26 59 ca 42 58 17 81 14 c1 7b 02 73 21 ac 57 30 8e 7b 0a 78 0a 98 11 ac 0b 3b 24 e9 2c 41 43 5c ad c0 39 d4 c8 c1 56 06 eb 39 cb e1 89 1a 4b d0 84 ab fa 35 1f 3a 60 35 07 a9 47 76 24 d3 d5 fa 21 ac f5 5e 28 1a 47 bf 72 58 5f 90 df 03 d0 61 67 bf 83 4f 8b ed b2 36 3c 39 db 80 cf 16 6b c2 7f 1b a4 97 64 Data Ascii: Si3JA-S~`qyHDX,>B9X7FJE%<CPm0}>>MW=q?}\|do7[K`V08X)0&YBX{s!W0{x;$,AC\9V9K5:`5Gv$!^(GrX_agO6<9kd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49787	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	406	OUT	GET /assets/pinterest_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:57 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "a65-67536aae-2f2efb;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 2661 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:57 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49788	185.31.200.249	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:57 UTC	405	OUT	GET /assets/facebook_logo.png HTTP/1.1 Host: usps-ny.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ckbfeod92h4qm0votcpaip21hf
2025-01-09 17:38:58 UTC	498	IN	HTTP/1.1 200 OK cache-control: public, max-age=604800 expires: Thu, 16 Jan 2025 17:38:57 GMT etag: "74c-67536aae-2f2ee3;;;" last-modified: Fri, 06 Dec 2024 21:20:46 GMT content-type: image/png content-length: 1868 accept-ranges: bytes date: Thu, 09 Jan 2025 17:38:57 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" connection: close
2025-01-09 17:38:58 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49791	192.229.221.165	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:38:59 UTC	585	OUT	GET /entreg/favicon.ico HTTP/1.1 Host: reg.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://usps-ny.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:38:59 UTC	513	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 51398 Cache-Control: no-cache Content-Type: image/x-icon Date: Thu, 09 Jan 2025 17:38:59 GMT Etag: "47e-624af23fe2980" Expires: Thu, 09 Jan 2025 17:38:58 GMT Last-Modified: Thu, 17 Oct 2024 17:01:42 GMT nnCoection: close Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN, DENY x-ruleset-version: 2.5 Content-Length: 1150 Connection: close
2025-01-09 17:38:59 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49792	192.229.221.165	443	7080	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 17:39:00 UTC	354	OUT	GET /entreg/favicon.ico HTTP/1.1 Host: reg.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 17:39:01 UTC	513	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 51400 Cache-Control: no-cache Content-Type: image/x-icon Date: Thu, 09 Jan 2025 17:39:01 GMT Etag: "47e-624af23fe2980" Expires: Thu, 09 Jan 2025 17:39:00 GMT Last-Modified: Thu, 17 Oct 2024 17:01:42 GMT nnCoection: close Server: ECAcc (dce/269C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN, DENY x-ruleset-version: 2.5 Content-Length: 1150 Connection: close
2025-01-09 17:39:01 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Target ID:	0
Start time:	12:38:31
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:38:32
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1956,i,3063441335937202057,9881994057553729332,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:38:33
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usps-ny.com"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://usps-ny.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
https://usps-ny.com