Edit tour

Windows Analysis Report
https://informed.deliveryewo.top/us/

Overview

General Information

Sample URL:	https://informed.deliveryewo.top/us/
Analysis ID:	1589678
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

AI detected suspicious Javascript

AI detected suspicious URL

HTML page contains obfuscated javascript

HTML body with high number of embedded images detected

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://informed.deliveryewo.top/us/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ETPRO PHISHING Darcula Landing Page M2 2024-01-02

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-13T01:03:48.013375+0100	2859493	1	Successful Credential Theft Detected	104.21.32.1	443	192.168.2.5	49742	TCP
2025-01-13T01:03:48.665121+0100	2859493	1	Successful Credential Theft Detected	104.21.32.1	443	192.168.2.5	49746	TCP

HTTP traffic detected: POST /api/MC41OTg1ODg3MjQ0ODI4NTc4 HTTP/1.1Host: informed.deliveryewo.topConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://informed.deliveryewo.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://informed.deliveryewo.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3a&sid=ITEeaLOmJelecMf0Akgl	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/13.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/d4b14678TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/f2e2ef63TeKnX.woff	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3d&sid=ITEeaLOmJelecMf0Akgl	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/44.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/23edd9acTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/9b0c1debTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/api/MC45NjAzNjEzODAwMjg2MTU=	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/f0ee2557KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OML&sid=ITEeaLOmJelecMf0Akgl	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-LY5&sid=ITEeaLOmJelecMf0Akgl	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/c27b6911KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OuP&sid=hrFXMYPchp0NT5J3Akgv	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/b93300ebTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/143268e9KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/47.png	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/e394ed97TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/60.png	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/api/MC41OTg1ODg3MjQ0ODI4NTc4	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/87f26b59TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/5acd8d5aTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/dc6d90ceKXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/78d59236KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/986ebc6cTeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/4cd1ec68TeKnX.css	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/c12815f2TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/7357514cKXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-RfM&sid=hrFXMYPchp0NT5J3Akgv	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/8cf6cd52TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/43.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/3213f1cfKXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/5.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/da2e0f69TeKnX.svg	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/62ff200fKXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/0cabecd3KXMp5.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=websocket&sid=hrFXMYPchp0NT5J3Akgv	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/ffd7af61TeKnX.woff	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-Ok2	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/assets/index-4b020bd6.js	Avira URL Cloud: Label: phishing
Source: https://informed.deliveryewo.top/us/layout/images/63.png	Avira URL Cloud: Label: phishing

Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://informed.deliveryewo.top/us/assets/3213f1c... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. While some of the functionality may be legitimate (e.g., analytics, error reporting), the overall level of suspicious activity warrants a closer review. The use of heavily encoded strings and the presence of unknown domains increase the risk score.
Source: 1.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://informed.deliveryewo.top/us/assets/78d5923... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of `eval` and the construction of a function from a string indicate the potential for executing remote or malicious code. Additionally, the script appears to be sending user data to external servers, which could lead to data leaks or other security issues. The heavy obfuscation of the code further raises concerns about the script's true purpose and intent. While some of the behaviors could be legitimate, the overall risk profile of this script is high and warrants further investigation.

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://informed.deliveryewo.top
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://informed.deliveryewo.top

Source: https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	HTTP Parser: Title: USPS.com - Sign In does not match URL
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Title: USPS.com - Sign In does not match URL

Source: https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://3976941.fls.doubleclick.net/activityi;src=3976941;type=fy18r0;cat=click0;ord=8494965341653;npa=0;auiddc=1958804496.1736726673;ps=1;pcor=941969985;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=click0;ord=8494965341653;npa=0;auiddc=1958804496.1736726673;ps=1;pcor=941969985;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://3976941.fls.doubleclick.net/activityi;src=3976941;type=fy18r0;cat=click0;ord=8494965341653;npa=0;auiddc=1958804496.1736726673;ps=1;pcor=941969985;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=click0;ord=8494965341653;npa=0;auiddc=1958804496.1736726673;ps=1;pcor=941969985;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe5190v9190898584z878733333za201zb78733333;gcd=13l3l3l3l1l1;dma=0;tag_exp=101925629~102067555~102067808~102081485~102123607~102198178;epver=2;~oref=https%3A%2F%2Freg.usps.com%2Fentreg%2FLoginAction_input%3Fapp%3DGSS%26appURL%3Dhttps%3A%2F%2Fcns.usps.com%2F?

Source: https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	HTTP Parser: <input type="password" .../> found
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: <input type="password" .../> found

Source: https://informed.deliveryewo.top/us/	HTTP Parser: No favicon
Source: https://informed.deliveryewo.top/us/	HTTP Parser: No favicon
Source: https://informed.deliveryewo.top/us/	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v	HTTP Parser: No favicon
Source: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v	HTTP Parser: No favicon
Source: https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	HTTP Parser: No favicon
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No favicon

Source: https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	HTTP Parser: No <meta name="copyright".. found
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	HTTP Parser: No <meta name="copyright".. found

Source: Network traffic	Suricata IDS: 2859493 - Severity 1 - ETPRO PHISHING Darcula Landing Page M2 2024-01-02 : 104.21.32.1:443 -> 192.168.2.5:49742
Source: Network traffic	Suricata IDS: 2859493 - Severity 1 - ETPRO PHISHING Darcula Landing Page M2 2024-01-02 : 104.21.32.1:443 -> 192.168.2.5:49746

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_694.2.dr, chromecache_335.2.dr, chromecache_348.2.dr, chromecache_520.2.dr	String found in binary or memory: F.src="https://www.youtube.com/iframe_api";z=document.getElementsByTagName("script")[0];z.parentNode.insertBefore(F,z);var C=[],p=[],u=[],A=d.YT_MILESTONE,K=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<C.length;a++)p[a]=new YT.Player(C[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange,onError:onPlayerError}})};onPlayerReady=function(a){};onPlayerError=function(a){q("video_error",{videotitle:void 0!==a.target.playerInfo?a.target.playerInfo.videoData.title:a.target.getVideoData().title})}; equals www.youtube.com (Youtube)
Source: chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_686.2.dr, chromecache_787.2.dr, chromecache_432.2.dr, chromecache_330.2.dr, chromecache_527.2.dr, chromecache_687.2.dr, chromecache_433.2.dr, chromecache_708.2.dr, chromecache_842.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_686.2.dr, chromecache_787.2.dr, chromecache_330.2.dr, chromecache_708.2.dr, chromecache_842.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=vC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},yC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_314.2.dr, chromecache_454.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_314.2.dr, chromecache_454.2.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_686.2.dr, chromecache_787.2.dr, chromecache_432.2.dr, chromecache_330.2.dr, chromecache_527.2.dr, chromecache_687.2.dr, chromecache_433.2.dr, chromecache_708.2.dr, chromecache_842.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(aF(w,"iframe_api")\|\|aF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!SE&&ZE(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_909.2.dr, chromecache_807.2.dr, chromecache_573.2.dr, chromecache_567.2.dr, chromecache_385.2.dr, chromecache_486.2.dr, chromecache_620.2.dr, chromecache_783.2.dr, chromecache_867.2.dr, chromecache_833.2.dr, chromecache_453.2.dr	String found in binary or memory: return b}OE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_686.2.dr, chromecache_787.2.dr, chromecache_330.2.dr, chromecache_833.2.dr, chromecache_453.2.dr, chromecache_708.2.dr, chromecache_842.2.dr	String found in binary or memory: var cE=function(a,b,c,d,e){var f=TB("fsl",c?"nv.mwt":"mwt",0),g;g=c?TB("fsl","nv.ids",[]):TB("fsl","ids",[]);if(!g.length)return!0;var k=YB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!DA(k,FA(b, equals www.facebook.com (Facebook)
Source: chromecache_368.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/3ede36f2\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:03:50 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *cf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H8j4wgRcKNfuKkgpgRAu2xKzqqcxCY8kTsnICwH9i49WLzfKYD7chbS8KurHi2nIcl42Sxlt%2FZYH9wrw38o%2BOvi9c4X9fnJze%2BC66ApFOBBNqPRAgoDWVaCWzr1FyEYbpoyoQblekbjX8V8%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9011201e3dff72b9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1854&min_rtt=1854&rtt_var=696&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3047&recv_bytes=954&delivery_rate=2356105&cwnd=218&unsent_bytes=0&cid=a4e32a2e12e3c282&ts=167&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:04:05 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *cf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pPcs3ggDeiwoMuSeDYvbynJWzLVNdRCeLiG5kfUTfO9T1hiKq74iUp4W%2BRdGMw8lfh%2B5zYwn702NYYXO%2ByTldxLtEtbNRv5ACWTNnLsH7fsu8XzWVn5QJX%2FE8geI5qRV0aB7oXbbYftwkss%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9011207c8c141875-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1673&min_rtt=1663&rtt_var=644&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3046&recv_bytes=954&delivery_rate=2511467&cwnd=154&unsent_bytes=0&cid=039d49f0c655670d&ts=149&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 00:04:05 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *cf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QJxXgMkEGPMrWzurlaX7lsdPqb9bc7bdlW4ncLvBxdnFbptN9BGi9fOuCL7WdhBOh%2B3I8pJC1%2BxhLvOQu7b%2FGs1JA8iW%2Bj%2B%2Fd6KNNYejMEMJqvgqqJS64s3XfzPB7Tf5eRPKVnAx6acOzvI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9011207cb8274344-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1755&min_rtt=1753&rtt_var=662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3046&recv_bytes=958&delivery_rate=2473178&cwnd=48&unsent_bytes=0&cid=fac9c151082de1c3&ts=155&x=0"

Source: chromecache_767.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_767.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?bgShadowXPos=&bgOverlayXPos=&bgErrorXPos=&bgHighlightXPos=&bgConten
Source: chromecache_383.2.dr, chromecache_616.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_752.2.dr	String found in binary or memory: http://www.apple.com/legal/itunes/appstore/us/terms.html
Source: chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	String found in binary or memory: http://www.linotype.com
Source: chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	String found in binary or memory: http://www.linotype.com/fontdesigners
Source: chromecache_537.2.dr	String found in binary or memory: http://www.linotype.com/license
Source: chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	String found in binary or memory: http://www.linotype.com/licensePart
Source: chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	String found in binary or memory: http://www.linotype.comhttp://www.linotype.com/fontdesignersNOTIFICATION
Source: chromecache_337.2.dr, chromecache_551.2.dr, chromecache_857.2.dr, chromecache_472.2.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_696.2.dr, chromecache_619.2.dr, chromecache_332.2.dr, chromecache_915.2.dr, chromecache_419.2.dr	String found in binary or memory: https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm
Source: chromecache_573.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_807.2.dr, chromecache_573.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_842.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_865.2.dr, chromecache_581.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_603.2.dr, chromecache_686.2.dr, chromecache_909.2.dr, chromecache_787.2.dr, chromecache_807.2.dr, chromecache_432.2.dr, chromecache_573.2.dr, chromecache_330.2.dr, chromecache_567.2.dr, chromecache_385.2.dr, chromecache_486.2.dr, chromecache_620.2.dr, chromecache_783.2.dr, chromecache_867.2.dr, chromecache_833.2.dr, chromecache_527.2.dr, chromecache_453.2.dr, chromecache_687.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_642.2.dr	String found in binary or memory: https://cdn.ampersend.io/26XHDMpyOV3qL7ZYed056wNv6sD.png)
Source: chromecache_694.2.dr, chromecache_335.2.dr, chromecache_348.2.dr, chromecache_520.2.dr	String found in binary or memory: https://dap.digitalgov.gov/web-vitals/dist/web-vitals.attribution.iife.js
Source: chromecache_314.2.dr, chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_472.2.dr	String found in binary or memory: https://eddm.usps.com/eddm/
Source: chromecache_396.2.dr, chromecache_583.2.dr, chromecache_428.2.dr, chromecache_553.2.dr, chromecache_411.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_319.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_319.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_891.2.dr, chromecache_765.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_605.2.dr, chromecache_789.2.dr, chromecache_446.2.dr, chromecache_908.2.dr, chromecache_758.2.dr, chromecache_420.2.dr	String found in binary or memory: https://github.com/requirejs/requirejs/blob/master/LICENSE
Source: chromecache_396.2.dr, chromecache_583.2.dr, chromecache_428.2.dr, chromecache_553.2.dr, chromecache_411.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_583.2.dr, chromecache_411.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_433.2.dr	String found in binary or memory: https://google.com
Source: chromecache_433.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_472.2.dr	String found in binary or memory: https://informeddelivery.usps.com
Source: chromecache_919.2.dr	String found in binary or memory: https://informeddelivery.usps.com/box/pages/intro/start.action
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://m.usps.com/m/HoldMail
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://m.usps.com/m/POLocatorAction
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://m.usps.com/m/ScheduleAPickupAction
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://m.usps.com/m/TermsConditions
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://m.usps.com/m/ZipLookupAction
Source: chromecache_752.2.dr	String found in binary or memory: https://managemymove.usps.com
Source: chromecache_752.2.dr	String found in binary or memory: https://moversguide.usps.com/
Source: chromecache_696.2.dr, chromecache_419.2.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MGOMOBILE
Source: chromecache_752.2.dr	String found in binary or memory: https://moversguide.usps.com/mgo/terms-of-use

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://informed.deliveryewo.top/us/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5420 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6016 --field-trial-handle=2036,i,27688294462984084,16663860135689450242,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: informed.deliveryewo.top
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: moversguide.usps.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: api.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: store.usps.com
Source: global traffic	DNS traffic detected: DNS query: content.usps.com
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: 3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com
Source: global traffic	DNS traffic detected: DNS query: cns.usps.com
Source: global traffic	DNS traffic detected: DNS query: 3976941.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3a&sid=ITEeaLOmJelecMf0Akgl	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/13.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/d4b14678TeKnX.svg	100%	Avira URL Cloud	phishing
https://eddm.usps.com/eddm/	0%	Avira URL Cloud	safe
https://informed.deliveryewo.top/us/assets/f2e2ef63TeKnX.woff	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3d&sid=ITEeaLOmJelecMf0Akgl	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/44.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/23edd9acTeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/9b0c1debTeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/api/MC45NjAzNjEzODAwMjg2MTU=	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/f0ee2557KXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OML&sid=ITEeaLOmJelecMf0Akgl	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-LY5&sid=ITEeaLOmJelecMf0Akgl	100%	Avira URL Cloud	phishing
http://www.linotype.com/fontdesigners	0%	Avira URL Cloud	safe
https://informed.deliveryewo.top/us/assets/c27b6911KXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OuP&sid=hrFXMYPchp0NT5J3Akgv	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/b93300ebTeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/143268e9KXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/47.png	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/e394ed97TeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/60.png	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/api/MC41OTg1ODg3MjQ0ODI4NTc4	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/87f26b59TeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/5acd8d5aTeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/dc6d90ceKXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/78d59236KXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/986ebc6cTeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/4cd1ec68TeKnX.css	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/c12815f2TeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/7357514cKXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-RfM&sid=hrFXMYPchp0NT5J3Akgv	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/8cf6cd52TeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/43.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/3213f1cfKXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/layout/images/5.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/da2e0f69TeKnX.svg	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/62ff200fKXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/0cabecd3KXMp5.js	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=websocket&sid=hrFXMYPchp0NT5J3Akgv	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/ffd7af61TeKnX.woff	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-Ok2	100%	Avira URL Cloud	phishing
https://informed.deliveryewo.top/us/assets/index-4b020bd6.js	100%	Avira URL Cloud	phishing
http://www.linotype.com/licensePart	0%	Avira URL Cloud	safe
https://informed.deliveryewo.top/us/layout/images/63.png	100%	Avira URL Cloud	phishing

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	142.250.185.70	true	false	high
informed.deliveryewo.top	104.21.32.1	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
h-usps.online-metrix.net	91.235.133.188	true	false	high
ad.doubleclick.net	142.250.184.198	true	false	high
d27f3qgc9anoq2.cloudfront.net	13.32.27.21	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	91.235.134.131	true	false	unknown
adservice.google.com	142.250.74.194	true	false	high
eu-aa.online-metrix.net	91.235.132.129	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
dbixd6p3vn7bv.cloudfront.net	13.35.58.17	true	false	unknown
amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	52.1.235.0	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
d296je7bbdd650.cloudfront.net	99.86.8.175	true	false	high
youtube-ui.l.google.com	142.250.186.110	true	false	high
fast.fonts.net	104.16.41.28	true	false	high
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.19	true	false	high
www.google.com	142.250.185.68	true	false	high
api.segment.io	35.163.144.222	true	false	high
h64.online-metrix.net	192.225.158.1	true	false	high
td.doubleclick.net	172.217.18.2	true	false	high
h.online-metrix.net	91.235.132.130	true	false	high
aa.online-metrix.net	91.235.132.129	true	false	high
reg.usps.com	unknown	unknown	false	high
dap.digitalgov.gov	unknown	unknown	false	high
content.usps.com	unknown	unknown	false	high
api.ampersend.io	unknown	unknown	false	high
cdn.segment.com	unknown	unknown	false	high
cdn.ampersend.io	unknown	unknown	false	high
www.usps.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
cns.usps.com	unknown	unknown	false	high
3976941.fls.doubleclick.net	unknown	unknown	false	high
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	high
store.usps.com	unknown	unknown	false	high
moversguide.usps.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://informed.deliveryewo.top/us/assets/d4b14678TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://h.online-metrix.net/rA_y80LCZk-2xq0T?0865aa3df7e703cf=2CT2FiXMP2PHyT7h-eLKpFHuBXJnbck4T6dlRhK-RxcS_V3FpYmtgLGEd7FINihluLIS8L-AbdtBtKa7nARHpiiYc8UxtvxFLr0fe3Jx-fn2tG00ygJYCIQZSY3mQWsNirbH6GhGPwH6PSHD_oTS7BzC17jX8_5UjkijJb2dLx6Kb1aRLbPdtkcrEq5-s6zuK_fBCe3C8KPyO0noXJrG	false		high
https://informed.deliveryewo.top/us/assets/23edd9acTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/api/MC45NjAzNjEzODAwMjg2MTU=	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3a&sid=ITEeaLOmJelecMf0Akgl	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/f2e2ef63TeKnX.woff	true	Avira URL Cloud: phishing	unknown
https://cdn.segment.com/v1/projects/UqpcmQEi1Z4oO1btpi5fjHrxJ7AIwGOu/settings	false		high
https://reg.usps.com/entreg/LoginAction_input?app=ATG&appURL=https%3A%2F%2Fstore.usps.com%2Fstore%2Fmyaccount%2FmyWishList.jsp%3Fselpage%3DWISHLIST	false		high
https://informed.deliveryewo.top/us/layout/images/13.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-M3d&sid=ITEeaLOmJelecMf0Akgl	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/layout/images/44.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/9b0c1debTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-LY5&sid=ITEeaLOmJelecMf0Akgl	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OML&sid=ITEeaLOmJelecMf0Akgl	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/f0ee2557KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/c27b6911KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-OuP&sid=hrFXMYPchp0NT5J3Akgv	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/143268e9KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/layout/images/47.png	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/e394ed97TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://content.usps.com/oQBcc-1zn_VbTYjt?3fbe44fe46560211=4FO_8Itz-3fFfMutvXeIUSLFN0F_PPwjemJEj_xvQEKTYh7faTGhRO3aEX-Ag_i836Ecd_hoce7DSrAL-5M3Qe7ZcAqdJjkiTgdkESc8T52FncWNuYgEvw_aFda_-dL-2uY9AwZwUfyTH_AKNunXFw2vH70XmiVpY0cyefKydCB0hOtZUur3XnUhnPt9aDQvphZIHz9R2_yNAiLtIbc&jac=1&je=303626266d6764683528332d304b30273041392530433c3c3366376761346166336934613f366539666038393c663a6a3031623b343038393333303b3833316430646164356d66333a306238653539633a6360693b3129	false		high
https://informed.deliveryewo.top/us/assets/b93300ebTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/layout/images/60.png	true	Avira URL Cloud: phishing	unknown
https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	false		high
https://informed.deliveryewo.top/api/MC41OTg1ODg3MjQ0ODI4NTc4	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/78d59236KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/87f26b59TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/5acd8d5aTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/dc6d90ceKXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/c12815f2TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/7357514cKXMp5.js	true	Avira URL Cloud: phishing	unknown
https://content.usps.com/wUsNwKHfjTckuFzL?1c966c6318849722=C3WmBrwCOwKSpCGYZIfdQv9JBug5JuwqUAsFRrprktjxmgEg03PoafcdfXEQ2aFKYQlMav63aDY5hv14ndJjVoVuJHg7bkLsFg6X6t8DYuFcLZNfMF-tjVC2mW894XAD8ZTb6OzV2vhGst2yPZ3ppitYc80&jac=1&je=393036302624776e61643f7f676a7276615d666f5d69667c65706c636e5d666374692472653f6e6f266061747b743f2d354a2530306e6d76676c2d3a32273143332c3232253a41273a307374617675732d32302d3149253030616061706761666727303027354624617d666a35616566626365343f38343f356e303064606a643b373b3e3135343b30666066396b34363d326266353434313e363b6d606d6633373b3d6160373c3d613033333524677a333530606a666366333536646936363a373d303a31356a323a363a6c39353b3636366360623d67673c31266578363d633f38353c303a386363643132353438693360643767323b60656e34356e6130266a716f3d5f696c6c6d7f732730323930247569603d27354027303063726b6a6b7c676374757065253a32273b432d32307a3a3e2530322d3a43273030606b766c657b71273a302533412732323e34273a302d324127303a627061666c7327303027314327354a27354a2732326270616e6c25303a273b412730304f6f6d67646d253032416a706d6f652d30302d304325323076657a736b676c2d323027314925303239393727303027354627324b27354a2732326270616e6c25303a273b41273030466f76253b4a412731464070636c642d30302d304325323076657a736b676c2d3230273149253032302d3230273546273041253f40273a306272616c64253a32273b432d3230416a7a6f6f697d652530302730412730327e67707b6b6f6e253032253b41273a3039313527303a2535442d3d442730412730306475646e546d7073696f6c4c697b74273a302d334327374a2535422d3a326070636c662730322d31432d3032476f6d676c6d2530384160726d6f672d3230253a4b253030746770716b6f6627303a2733412530323139372c382c3d39313a2c393330253a3a2535462730412735422d30306a70616e642732322d33432d303a4e6d76273b4243253b4c4270636c66273030253a41273a3076657271696f6625303a273b41273030302e322e38263027303027354627324b27354a2732326270616e6c25303a273b412730304b68706f6561756f273030273041253a30746d7073696f6c25323a253149273a3233333526302c35313b382c333130273030253f46273d46253243273232656f60616e6d253030273b416461647b652730412730306f6f6c676e2d303225334325323a25303a273a43273030786c63746e67726f273030273143253a3055616c646f777125323a25304b273a32726e637c666d72655e6570716b6d6c2730322d31432d303231302c302e3825303a273a432730307f6f75363c2d323027314364636e736d27354c2475616c3f25374a25303a607a616c66712d3230253b492537402735402730326a706366662532322733412d32304f6d67676e67273a3041687a676d67273030273041253a30746d7073696f6c25323a253149273a323333352d3230253f4c2530412735402730326a706366662532322733412d3230466d7c253140432d3346427a696e66273030273041253a30746d7073696f6c25323a253149273a323a27303a2535442d3a432735402730306072696c662d303225334325323a436a7a6d6569776f273a3227324b2d3230746770716b6d6e2d30302d314125323031313f25303a273f442737462d3241253a3a6d6d606b6e672730322d31436e636c73652732432d3230786e6974646d70652530322d3b41273030556b6c666f7f71273a30253744	false		high
https://cdn.ampersend.io/27qfd0nbCKt1nXcM5PFYh4mDyl3.svg	false		high
https://content.usps.com/wUsNwKHfjTckuFzL?1c966c6318849722=C3WmBrwCOwKSpCGYZIfdQv9JBug5JuwqUAsFRrprktjxmgEg03PoafcdfXEQ2aFKYQlMav63aDY5hv14ndJjVoVuJHg7bkLsFg6X6t8DYuFcLZNfMF-tjVC2mW894XAD8ZTb6OzV2vhGst2yPZ3ppitYc80&jac=1&je=393726266a64746e3531383d343e39383431	false		high
https://h64.online-metrix.net/w8vDqPckippjlCra?894198baed2861e1=9GqHtlJEykgxOXZAFujZohAUHASTpLXTqYa2KZu5WMHCUlKB-05Mo1IDir9oWT6CkGymaVyD4ldxQpMQRevKVUAbklp2cQdt_Nh2ezaF8c6ec6eNf4Ot0eNp02QeqTxNfBNzDltCNjYQyXIal5m6CPWvQe6033VJ	false		high
https://informed.deliveryewo.top/us/assets/986ebc6cTeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/4cd1ec68TeKnX.css	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/3213f1cfKXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-RfM&sid=hrFXMYPchp0NT5J3Akgv	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/layout/images/43.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/8cf6cd52TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://content.usps.com/yx6Zol5uAXN-mjzj?2ed7e4d4dd4157ba=yp6VkGNG3yHeCJBvh0ckFIYZydkEvpTwvVBZSABrYdzKsjKuRX3UYPQ0Gh8t-qBfZll3b9NO2gvGUeU9OlNkfvYhki5ZBp1tJ9ZrAEPHoFJk-JKf53iO7HnjN-8oDsDHzXV4WgGRh6TxdHeKseSUD6C7t58hZyUxvLB2vnQyMku5XgoZUvMqqAz2OjMKJBle1gOUdPvMspNl589V0YM	false		high
https://informed.deliveryewo.top/us/layout/images/5.svg	true	Avira URL Cloud: phishing	unknown
https://cdn.ampersend.io/26XHDMpyOV3qL7ZYed056wNv6sD.png	false		high
https://informed.deliveryewo.top/us/assets/0cabecd3KXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/da2e0f69TeKnX.svg	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/62ff200fKXMp5.js	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=websocket&sid=hrFXMYPchp0NT5J3Akgv	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/assets/ffd7af61TeKnX.woff	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/socket.io/?EIO=4&transport=polling&t=PHS-Ok2	true	Avira URL Cloud: phishing	unknown
https://informed.deliveryewo.top/us/layout/images/63.png	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/s/player/3ede36f2/www-widgetapi.vflset/www-widgetapi.js	false		high
https://informed.deliveryewo.top/us/assets/index-4b020bd6.js	true	Avira URL Cloud: phishing	unknown
https://content.usps.com/fp/clear.png	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_635.2.dr, chromecache_352.2.dr, chromecache_463.2.dr, chromecache_686.2.dr, chromecache_909.2.dr, chromecache_787.2.dr, chromecache_432.2.dr, chromecache_330.2.dr, chromecache_567.2.dr, chromecache_385.2.dr, chromecache_486.2.dr, chromecache_783.2.dr, chromecache_527.2.dr, chromecache_687.2.dr, chromecache_391.2.dr, chromecache_433.2.dr, chromecache_708.2.dr, chromecache_842.2.dr	false		high
https://www.usps.com/assets/images/default/right-arrow-inactive.png);	chromecache_662.2.dr, chromecache_489.2.dr	false		high
https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm	chromecache_696.2.dr, chromecache_619.2.dr, chromecache_332.2.dr, chromecache_915.2.dr, chromecache_419.2.dr	false		high
https://www.usps.com/store/images/ps-plus.png);	chromecache_584.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_865.2.dr, chromecache_581.2.dr	false		high
https://www.youtube.com	chromecache_454.2.dr	false		high
https://www.usps.com/store/images/ps-star.png	chromecache_584.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_583.2.dr, chromecache_411.2.dr	false		high
https://eddm.usps.com/eddm/	chromecache_472.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/component-guide/white-arrow.svg);	chromecache_489.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_581.2.dr	false		high
https://www.usps.com/store/images/info-icon.png	chromecache_584.2.dr	false		high
https://www.usps.com/global-elements/header/script/	chromecache_638.2.dr, chromecache_426.2.dr, chromecache_683.2.dr, chromecache_580.2.dr	false		high
https://managemymove.usps.com	chromecache_752.2.dr	false		high
https://informeddelivery.usps.com/box/pages/intro/start.action	chromecache_919.2.dr	false		high
https://moversguide.usps.com/?referral=MGOMOBILE	chromecache_696.2.dr, chromecache_419.2.dr	false		high
http://www.linotype.com/fontdesigners	chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	false	Avira URL Cloud: safe	unknown
https://git.io/fjule	chromecache_319.2.dr	false		high
https://www.usps.com/store/images/ps-carticon.png	chromecache_584.2.dr	false		high
https://www.usps.com/store/images/br_down.png	chromecache_584.2.dr	false		high
https://www.usps.com/store/images/usps_l_nav_red_arrow.svg	chromecache_584.2.dr	false		high
https://www.usps.com/privacypolicy	chromecache_739.2.dr	false		high
https://www.usps.com/store/images/new-icon.png)	chromecache_662.2.dr	false		high
https://www.usps.com/assets/images/default/close_x.svg);	chromecache_662.2.dr, chromecache_489.2.dr	false		high
https://www.usps.com/store/images/Alert-Icon.png)	chromecache_662.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_396.2.dr, chromecache_583.2.dr, chromecache_428.2.dr, chromecache_553.2.dr, chromecache_411.2.dr	false		high
https://www.usps.com/component-guide/blue-caret.svg)	chromecache_662.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_891.2.dr, chromecache_765.2.dr	false		high
https://www.usps.com/store/images/close_x.svg);	chromecache_584.2.dr	false		high
https://www.usps.com/	chromecache_696.2.dr, chromecache_752.2.dr, chromecache_419.2.dr	false		high
https://github.com/requirejs/requirejs/blob/master/LICENSE	chromecache_605.2.dr, chromecache_789.2.dr, chromecache_446.2.dr, chromecache_908.2.dr, chromecache_758.2.dr, chromecache_420.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_314.2.dr, chromecache_454.2.dr	false		high
https://tools.usps.com/go/TrackConfirmAction?qtc_tLabels1=	chromecache_372.2.dr, chromecache_588.2.dr	false		high
https://informeddelivery.usps.com	chromecache_472.2.dr	false		high
https://www.usps.com/assets/images/default/blue-caret-down.svg);	chromecache_662.2.dr	false		high
https://www.usps.com/store/images/search-submit-white.png	chromecache_584.2.dr	false		high
http://www.linotype.com/licensePart	chromecache_835.2.dr, chromecache_363.2.dr, chromecache_537.2.dr	false	Avira URL Cloud: safe	unknown
https://www.usps.com/global-elements/lib/script	chromecache_638.2.dr, chromecache_426.2.dr, chromecache_683.2.dr, chromecache_580.2.dr	false		high
https://www.usps.com/manage/informed-delivery.htm	chromecache_472.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_433.2.dr	false		high
https://getbootstrap.com/)	chromecache_396.2.dr, chromecache_583.2.dr, chromecache_428.2.dr, chromecache_553.2.dr, chromecache_411.2.dr	false		high
https://www.usps.com/store/images/br_down.png)	chromecache_584.2.dr	false		high
https://reg.usps.com/entreg/assets/html/informed-delivery.html	chromecache_739.2.dr	false		high
https://m.usps.com/m/ScheduleAPickupAction	chromecache_696.2.dr, chromecache_419.2.dr	false		high
https://m.usps.com/m/POLocatorAction	chromecache_696.2.dr, chromecache_419.2.dr	false		high
https://www.usps.com/mobile/info.htm	chromecache_752.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.41.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands	30286	THMUS	false
91.235.134.131	3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
142.250.186.110	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
142.250.186.70	unknown	United States	15169	GOOGLEUS	false
142.250.74.194	adservice.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
13.32.27.113	unknown	United States	7018	ATT-INTERNET4US	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
35.166.226.67	unknown	United States	16509	AMAZON-02US	false
142.250.184.198	ad.doubleclick.net	United States	15169	GOOGLEUS	false
104.21.32.1	informed.deliveryewo.top	United States	13335	CLOUDFLARENETUS	true
13.32.27.21	d27f3qgc9anoq2.cloudfront.net	United States	7018	ATT-INTERNET4US	false
91.235.133.188	h-usps.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.17	dbixd6p3vn7bv.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.18.2	td.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.35.58.53	unknown	United States	16509	AMAZON-02US	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
52.1.235.0	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.185.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
35.163.144.222	api.segment.io	United States	16509	AMAZON-02US	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589678
Start date and time:	2025-01-13 01:02:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://informed.deliveryewo.top/us/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@26/958@108/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://moversguide.usps.com/?referral=MG80 Browse: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v Browse: https://cns.usps.com/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://informed.deliveryewo.top/us/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Windows Analysis Report
https://informed.deliveryewo.top/us/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Jan 12 23:03:37 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9607438773090635
Encrypted:	false
SSDEEP:	48:8TdxT59tHMidAKZdA19ehwiZUklqeh3y+3:8TTYYy
MD5:	58FD172079D99DC8B37741A048C613BC
SHA1:	7539FBD13F393170579D9A7AC7FFE6DE4EB8AC99
SHA-256:	234FBABBCE681D6BC3AC348E7B6C25AE29FCE69CC5B99CA9760510F25DD30031
SHA-512:	0861EEB04DC6CA870AE66B780F08A43472BC48B7F29D458887E77F3E655B55F5B3D810B14C525E0C21995B168AD5B852F4494E47321162CBC4F29CD76D9EC7D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b...Ne..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I-Zq.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V-Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V-Zq.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V-Zq............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V-Zs............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........d........C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 01:03:40.640517950 CET	192.168.2.5	1.1.1.1	0xff5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:03:40.640952110 CET	192.168.2.5	1.1.1.1	0x1159	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 01:03:42.279129982 CET	192.168.2.5	1.1.1.1	0x4acb	Standard query (0)	informed.deliveryewo.top	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:03:42.279310942 CET	192.168.2.5	1.1.1.1	0xe9c0	Standard query (0)	informed.deliveryewo.top	65	IN (0x0001)	false
Jan 13, 2025 01:03:45.149924994 CET	192.168.2.5	1.1.1.1	0xf2e2	Standard query (0)	informed.deliveryewo.top	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:03:45.150121927 CET	192.168.2.5	1.1.1.1	0xbec8	Standard query (0)	informed.deliveryewo.top	65	IN (0x0001)	false
Jan 13, 2025 01:03:50.331494093 CET	192.168.2.5	1.1.1.1	0xd4ad	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:03:50.331883907 CET	192.168.2.5	1.1.1.1	0x7b08	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:02.850374937 CET	192.168.2.5	1.1.1.1	0x6f2c	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:02.850718975 CET	192.168.2.5	1.1.1.1	0x6ab9	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:03.920764923 CET	192.168.2.5	1.1.1.1	0x969d	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:03.921413898 CET	192.168.2.5	1.1.1.1	0x9630	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:06.484047890 CET	192.168.2.5	1.1.1.1	0x16ba	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:06.484200001 CET	192.168.2.5	1.1.1.1	0x9777	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:07.689743042 CET	192.168.2.5	1.1.1.1	0x8a58	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:07.689896107 CET	192.168.2.5	1.1.1.1	0x1349	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:07.883955002 CET	192.168.2.5	1.1.1.1	0xd0ce	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:07.884092093 CET	192.168.2.5	1.1.1.1	0x3fcb	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:08.481863976 CET	192.168.2.5	1.1.1.1	0x2efe	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:08.481978893 CET	192.168.2.5	1.1.1.1	0x2761	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:09.960872889 CET	192.168.2.5	1.1.1.1	0x8695	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:09.961354971 CET	192.168.2.5	1.1.1.1	0xac03	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:12.162599087 CET	192.168.2.5	1.1.1.1	0x5766	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:12.162734985 CET	192.168.2.5	1.1.1.1	0x9038	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:13.717497110 CET	192.168.2.5	1.1.1.1	0xc117	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:13.717644930 CET	192.168.2.5	1.1.1.1	0xa06f	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:14.603631020 CET	192.168.2.5	1.1.1.1	0x8181	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:14.604038000 CET	192.168.2.5	1.1.1.1	0xaa29	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:14.870052099 CET	192.168.2.5	1.1.1.1	0x1a3f	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:14.870428085 CET	192.168.2.5	1.1.1.1	0x2341	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:15.093983889 CET	192.168.2.5	1.1.1.1	0xd803	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:15.094629049 CET	192.168.2.5	1.1.1.1	0x8fbb	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Jan 13, 2025 01:04:15.809361935 CET	192.168.2.5	1.1.1.1	0xf24b	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:15.809489012 CET	192.168.2.5	1.1.1.1	0xf89b	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:15.912317991 CET	192.168.2.5	1.1.1.1	0x43d0	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:15.912682056 CET	192.168.2.5	1.1.1.1	0x13eb	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:15.924760103 CET	192.168.2.5	1.1.1.1	0x8194	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:16.180512905 CET	192.168.2.5	1.1.1.1	0xbfcd	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:16.181581974 CET	192.168.2.5	1.1.1.1	0x9fe	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:16.440299034 CET	192.168.2.5	1.1.1.1	0x515b	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:16.440639019 CET	192.168.2.5	1.1.1.1	0xca94	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:19.413538933 CET	192.168.2.5	1.1.1.1	0x3164	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:19.413882017 CET	192.168.2.5	1.1.1.1	0xb0f0	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:19.456589937 CET	192.168.2.5	1.1.1.1	0x1834	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:19.456876993 CET	192.168.2.5	1.1.1.1	0xb79d	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:19.474409103 CET	192.168.2.5	1.1.1.1	0x9fc3	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:19.474726915 CET	192.168.2.5	1.1.1.1	0xa42d	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:19.485443115 CET	192.168.2.5	1.1.1.1	0x2ef9	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:19.486052990 CET	192.168.2.5	1.1.1.1	0xe634	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:20.503355980 CET	192.168.2.5	1.1.1.1	0xf8a	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:22.455125093 CET	192.168.2.5	1.1.1.1	0x443	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:22.455755949 CET	192.168.2.5	1.1.1.1	0x73ec	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:22.835491896 CET	192.168.2.5	1.1.1.1	0x2d04	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:22.835649967 CET	192.168.2.5	1.1.1.1	0x5d74	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:22.837466955 CET	192.168.2.5	1.1.1.1	0xb60b	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:22.837622881 CET	192.168.2.5	1.1.1.1	0xd8da	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:22.912755966 CET	192.168.2.5	1.1.1.1	0xd0c8	Standard query (0)	3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:22.913022995 CET	192.168.2.5	1.1.1.1	0xc2a2	Standard query (0)	3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:23.551652908 CET	192.168.2.5	1.1.1.1	0x2918	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:23.551789045 CET	192.168.2.5	1.1.1.1	0x7e7c	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:25.328392982 CET	192.168.2.5	1.1.1.1	0x6a2d	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:25.328682899 CET	192.168.2.5	1.1.1.1	0xc1ac	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:25.345045090 CET	192.168.2.5	1.1.1.1	0x19b4	Standard query (0)	3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:25.345206022 CET	192.168.2.5	1.1.1.1	0x8342	Standard query (0)	3fym673kwneumoz35ab7iptd7eivjmjbq2usc7lk0a20c37610f20a9cam1.e.aa.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:27.951143980 CET	192.168.2.5	1.1.1.1	0x7a7d	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:27.951361895 CET	192.168.2.5	1.1.1.1	0x8ded	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:27.958916903 CET	192.168.2.5	1.1.1.1	0x8694	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:28.001391888 CET	192.168.2.5	1.1.1.1	0x3137	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Jan 13, 2025 01:04:28.001677036 CET	192.168.2.5	1.1.1.1	0x15f6	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:28.765604019 CET	192.168.2.5	1.1.1.1	0xce5c	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:28.766463041 CET	192.168.2.5	1.1.1.1	0x2ee0	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Jan 13, 2025 01:04:33.536664963 CET	192.168.2.5	1.1.1.1	0x542c	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:33.536798000 CET	192.168.2.5	1.1.1.1	0xdcbc	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Jan 13, 2025 01:04:35.156881094 CET	192.168.2.5	1.1.1.1	0x1c67	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:35.157464027 CET	192.168.2.5	1.1.1.1	0x3332	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:35.969943047 CET	192.168.2.5	1.1.1.1	0x1e31	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:35.970101118 CET	192.168.2.5	1.1.1.1	0x4e2f	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Jan 13, 2025 01:04:37.695234060 CET	192.168.2.5	1.1.1.1	0x6dea	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:37.695436954 CET	192.168.2.5	1.1.1.1	0x31ba	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:38.355743885 CET	192.168.2.5	1.1.1.1	0x44ed	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:38.355907917 CET	192.168.2.5	1.1.1.1	0xadb5	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:38.584728956 CET	192.168.2.5	1.1.1.1	0xd476	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:38.584868908 CET	192.168.2.5	1.1.1.1	0x3a11	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:38.672761917 CET	192.168.2.5	1.1.1.1	0x535e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:38.673063993 CET	192.168.2.5	1.1.1.1	0x9e42	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:39.654112101 CET	192.168.2.5	1.1.1.1	0xb021	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:40.155970097 CET	192.168.2.5	1.1.1.1	0x5b94	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:40.156107903 CET	192.168.2.5	1.1.1.1	0xae80	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:42.910195112 CET	192.168.2.5	1.1.1.1	0x33ba	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:42.910321951 CET	192.168.2.5	1.1.1.1	0xe5ea	Standard query (0)	reg.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:46.045880079 CET	192.168.2.5	1.1.1.1	0xbae8	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:46.046521902 CET	192.168.2.5	1.1.1.1	0xa84c	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:50.333108902 CET	192.168.2.5	1.1.1.1	0x1d27	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:50.333344936 CET	192.168.2.5	1.1.1.1	0xfcaa	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 01:04:52.125468969 CET	192.168.2.5	1.1.1.1	0x4987	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:04:52.125790119 CET	192.168.2.5	1.1.1.1	0x76f9	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Jan 13, 2025 01:05:01.534301996 CET	192.168.2.5	1.1.1.1	0xdd62	Standard query (0)	3976941.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:01.534465075 CET	192.168.2.5	1.1.1.1	0x4dfe	Standard query (0)	3976941.fls.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 01:05:01.534774065 CET	192.168.2.5	1.1.1.1	0x719a	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:01.534892082 CET	192.168.2.5	1.1.1.1	0x8e22	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 01:05:01.535125971 CET	192.168.2.5	1.1.1.1	0x23f	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:01.535243988 CET	192.168.2.5	1.1.1.1	0xe265	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 01:05:02.511007071 CET	192.168.2.5	1.1.1.1	0xd4	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:02.511607885 CET	192.168.2.5	1.1.1.1	0x585a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 01:05:03.458456039 CET	192.168.2.5	1.1.1.1	0x66cc	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:03.458672047 CET	192.168.2.5	1.1.1.1	0x2a66	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Jan 13, 2025 01:05:04.448507071 CET	192.168.2.5	1.1.1.1	0xf0	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 01:05:04.448580027 CET	192.168.2.5	1.1.1.1	0x176b	Standard query (0)	adservice.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:44 UTC	670	OUT	GET /us/ HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:44 UTC	943	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f4n%2B5SDOKbyP9YspHelZP7iJLea0RqtIB%2FOz10uf3DXxM5KGtYRj%2BeGfgSIcPeq2aPPzSBXWcvgbMeTiplLffZGr%2BonO36xt1RLpZbAOlMuI3Ihn6ypzKqpWuyNDa1Ghg755iE7kLk%2Bf1kE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90111ff95f0272b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1804&rtt_var=680&sent=6&recv=7&lost=0&retrans=0&sent_bytes=3047&recv_bytes=1248&delivery_rate=2407916&cwnd=218&unsent_bytes=0&cid=a7cf71fbd16a8c52&ts=397&x=0"
2025-01-13 00:03:44 UTC	426	IN	Data Raw: 36 36 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 Data Ascii: 666<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></scrip
2025-01-13 00:03:44 UTC	1219	IN	Data Raw: 63 6f 6c 21 3d 22 66 69 6c 65 3a 22 29 7b 77 69 6e 64 6f 77 2e 5f 5f 76 69 74 65 5f 69 73 5f 6d 6f 64 65 72 6e 5f 62 72 6f 77 73 65 72 3d 74 72 75 65 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 5f 5f 76 69 74 65 5f 69 73 5f 6d 6f 64 65 72 6e 5f 62 72 6f 77 73 65 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 76 69 74 65 3a 20 6c 6f 61 64 69 6e 67 20 6c 65 67 61 63 79 20 63 68 75 6e 6b 73 2c 20 73 79 6e 74 61 78 20 65 72 72 6f 72 20 61 62 6f 76 65 20 61 6e 64 20 74 68 65 20 73 61 6d 65 20 65 72 72 6f 72 20 62 65 6c 6f 77 20 73 68 6f 75 6c 64 20 62 65 20 69 67 6e 6f 72 65 64 22 29 3b 76 61 72 20 65 3d 64 Data Ascii: col!="file:"){window.__vite_is_modern_browser=true}</script> <script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=d
2025-01-13 00:03:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:44 UTC	602	OUT	GET /us/assets/index-4b020bd6.js HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://informed.deliveryewo.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://informed.deliveryewo.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:44 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:44 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60" CF-Cache-Status: HIT Age: 50526 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l0Zd0tdiYfW3KUq2bJVjQ8nEwMidyFkKXnnwbC29hZOslZkFPauCQwzaKms7%2B9wn7GNlrBcX0w0szqWxnVZADC8%2BsaHi4jIugO06RGi3ROeVeix%2BD4xGa51Y3t1vRTwgUhMRKWHGcXQJzrI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90111ffb48a74344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1699&min_rtt=1685&rtt_var=642&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3046&recv_bytes=1180&delivery_rate=2599406&cwnd=48&unsent_bytes=0&cid=d12d9624a269b907&ts=687&x=0"
2025-01-13 00:03:44 UTC	381	IN	Data Raw: 37 63 39 39 0d 0a 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 Data Ascii: 7c99var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 38 30 34 62 65 28 30 78 34 63 65 29 29 2f 30 78 38 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 62 61 29 29 2f 30 78 39 3b 69 66 28 5f 30 78 33 66 62 34 64 61 3d 3d 3d 5f 30 78 35 38 65 66 32 62 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 33 35 31 33 36 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 35 31 33 36 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 33 35 32 35 38 61 29 7b 5f 30 78 33 35 31 33 36 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 35 31 33 36 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 33 38 5f 30 78 31 64 65 38 2c 30 78 61 63 37 65 34 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4f 78 28 29 7b 76 61 72 20 5f 30 78 32 31 61 34 33 66 3d 61 33 38 5f 30 78 35 33 34 35 3b 69 6d 70 6f 72 74 2e 6d Data Ascii: 804be(0x4ce))/0x8+parseInt(_0x3804be(0x5ba))/0x9;if(_0x3fb4da===_0x58ef2b)break;else _0x35136a['push'](_0x35136a['shift']());}catch(_0x35258a){_0x35136a['push'](_0x35136a['shift']());}}}(a38_0x1de8,0xac7e4));function Ox(){var _0x21a43f=a38_0x5345;import.m
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 5f 30 78 62 31 35 35 32 64 5b 27 63 72 6f 73 73 6f 72 69 67 69 27 2b 27 6e 27 5d 3d 3d 3d 5f 30 78 35 63 66 38 65 34 28 30 78 31 63 65 29 2b 27 74 69 61 6c 73 27 3f 5f 30 78 34 31 35 31 35 64 5b 27 63 72 65 64 65 6e 74 69 61 6c 27 2b 27 73 27 5d 3d 5f 30 78 35 63 66 38 65 34 28 30 78 35 33 33 29 3a 5f 30 78 62 31 35 35 32 64 5b 27 63 72 6f 73 73 6f 72 69 67 69 27 2b 27 6e 27 5d 3d 3d 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3f 5f 30 78 34 31 35 31 35 64 5b 5f 30 78 35 63 66 38 65 34 28 30 78 33 63 36 29 2b 27 73 27 5d 3d 5f 30 78 35 63 66 38 65 34 28 30 78 36 61 33 29 3a 5f 30 78 34 31 35 31 35 64 5b 5f 30 78 35 63 66 38 65 34 28 30 78 33 63 36 29 2b 27 73 27 5d 3d 5f 30 78 35 63 66 38 65 34 28 30 78 31 33 39 29 2b 27 6e 27 2c 5f 30 78 34 31 35 31 35 64 3b 7d Data Ascii: _0xb1552d['crossorigi'+'n']===_0x5cf8e4(0x1ce)+'tials'?_0x41515d['credential'+'s']=_0x5cf8e4(0x533):_0xb1552d['crossorigi'+'n']==='anonymous'?_0x41515d[_0x5cf8e4(0x3c6)+'s']=_0x5cf8e4(0x6a3):_0x41515d[_0x5cf8e4(0x3c6)+'s']=_0x5cf8e4(0x139)+'n',_0x41515d;}
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 30 29 2b 27 5c 78 32 32 27 2b 5f 30 78 38 63 66 65 66 37 2b 27 5c 78 32 32 5d 27 2b 5f 30 78 35 39 62 35 30 35 29 29 72 65 74 75 72 6e 3b 7d 63 6f 6e 73 74 20 5f 30 78 36 63 34 39 62 65 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 30 37 65 37 66 28 30 78 34 36 66 29 2b 5f 30 78 34 30 37 65 37 66 28 30 78 33 34 66 29 5d 28 5f 30 78 34 30 37 65 37 66 28 30 78 31 62 33 29 29 3b 69 66 28 5f 30 78 36 63 34 39 62 65 5b 5f 30 78 34 30 37 65 37 66 28 30 78 31 63 35 29 5d 3d 5f 30 78 64 30 39 61 37 30 3f 5f 30 78 34 30 37 65 37 66 28 30 78 36 38 30 29 3a 71 6f 2c 5f 30 78 64 30 39 61 37 30 7c 7c 28 5f 30 78 36 63 34 39 62 65 5b 27 61 73 27 5d 3d 5f 30 78 34 30 37 65 37 66 28 30 78 35 65 39 29 2c 5f 30 78 36 63 34 39 62 65 5b 27 63 72 6f 73 73 4f 72 69 67 69 27 2b 27 Data Ascii: 0)+'\x22'+_0x8cfef7+'\x22]'+_0x59b505))return;}const _0x6c49be=document[_0x407e7f(0x46f)+_0x407e7f(0x34f)](_0x407e7f(0x1b3));if(_0x6c49be[_0x407e7f(0x1c5)]=_0xd09a70?_0x407e7f(0x680):qo,_0xd09a70\|\|(_0x6c49be['as']=_0x407e7f(0x5e9),_0x6c49be['crossOrigi'+'
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 63 35 39 30 28 30 78 37 30 62 29 5d 28 5f 30 78 34 66 65 62 38 33 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 56 6f 28 29 7b 76 61 72 20 5f 30 78 34 32 35 39 31 32 3d 61 33 38 5f 30 78 34 65 36 61 66 35 3b 63 6f 6e 73 74 20 5f 30 78 31 66 39 36 31 33 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 34 32 35 39 31 32 28 30 78 31 33 62 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 36 61 37 29 5d 28 5f 30 78 34 32 35 39 31 32 28 30 78 33 63 30 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 66 62 29 29 2c 5f 30 78 32 31 65 38 32 38 3d 64 6f 63 75 6d 65 6e 74 5b 27 71 75 65 72 79 53 65 6c 65 63 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 36 61 37 29 5d 28 5f 30 78 34 32 35 39 31 32 28 30 78 33 63 30 29 2b 27 2d 6d 61 73 6b 27 29 3b 5f 30 78 32 31 65 38 32 38 26 26 64 6f 63 75 6d 65 6e Data Ascii: c590(0x70b)](_0x4feb83);}function Vo(){var _0x425912=a38_0x4e6af5;const _0x1f9613=document[_0x425912(0x13b)+_0x425912(0x6a7)](_0x425912(0x3c0)+_0x425912(0x4fb)),_0x21e828=document['querySelec'+_0x425912(0x6a7)](_0x425912(0x3c0)+'-mask');_0x21e828&&documen
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 33 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 78 30 3a 5f 30 78 31 66 39 36 31 33 5b 5f 30 78 34 32 35 39 31 32 28 30 78 35 37 39 29 2b 27 74 65 27 5d 28 27 66 69 6c 6c 27 29 29 2b 28 5f 30 78 34 32 35 39 31 32 28 30 78 33 61 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 34 32 29 2b 27 61 74 74 72 69 62 75 74 65 4e 27 2b 27 61 6d 65 3d 5c 78 32 32 6f 70 61 63 69 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 65 34 29 2b 27 3d 5c 78 32 32 31 3b 30 5c 78 32 32 5c 78 32 30 6b 65 79 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 62 30 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 38 33 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 63 62 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 62 33 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 36 32 63 29 2b 5f 30 78 34 32 35 39 31 Data Ascii: 3==null?void 0x0:_0x1f9613[_0x425912(0x579)+'te']('fill'))+(_0x425912(0x3a4)+_0x425912(0x542)+'attributeN'+'ame=\x22opaci'+_0x425912(0x1e4)+'=\x221;0\x22\x20key'+_0x425912(0x4b0)+_0x425912(0x183)+_0x425912(0x3cb)+_0x425912(0x2b3)+_0x425912(0x62c)+_0x42591
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 78 34 32 35 39 31 32 28 30 78 33 66 31 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 35 65 29 2b 27 69 74 65 5c 78 32 32 2f 3e 5c 78 30 61 5c 78 32 30 5c 78 32 30 5c 78 32 30 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 34 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 37 31 30 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 63 63 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 34 36 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 39 31 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 39 30 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 32 36 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 66 37 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 64 62 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 63 30 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 32 30 29 2b 5f 30 78 34 32 35 39 31 Data Ascii: x425912(0x3f1)+_0x425912(0x15e)+'ite\x22/>\x0a\x20\x20\x20'+_0x425912(0x44f)+_0x425912(0x710)+_0x425912(0x5cc)+_0x425912(0x246)+_0x425912(0x191)+_0x425912(0x190)+_0x425912(0x226)+_0x425912(0x1f7)+_0x425912(0x1db)+_0x425912(0x5c0)+_0x425912(0x520)+_0x42591
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 30 78 32 35 35 29 29 2b 28 5f 30 78 31 66 39 36 31 33 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 78 30 3a 5f 30 78 31 66 39 36 31 33 5b 5f 30 78 34 32 35 39 31 32 28 30 78 35 37 39 29 2b 27 74 65 27 5d 28 27 66 69 6c 6c 27 29 29 2b 28 5f 30 78 34 32 35 39 31 32 28 30 78 33 61 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 34 32 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 63 31 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 35 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 65 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 33 37 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 62 30 29 2b 27 5c 78 32 32 5c 78 32 30 64 75 72 3d 5c 78 32 32 31 73 5c 78 32 32 27 2b 27 5c 78 32 30 62 65 67 69 6e 3d 5c 78 32 32 2d 30 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 30 37 Data Ascii: 0x255))+(_0x1f9613==null?void 0x0:_0x1f9613[_0x425912(0x579)+'te']('fill'))+(_0x425912(0x3a4)+_0x425912(0x542)+_0x425912(0x5c1)+_0x425912(0x25f)+_0x425912(0x1e4)+_0x425912(0x237)+_0x425912(0x4b0)+'\x22\x20dur=\x221s\x22'+'\x20begin=\x22-0'+_0x425912(0x507
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 61 65 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 61 35 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 62 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 65 31 29 2b 27 61 6e 73 66 6f 72 6d 3d 5c 78 32 32 72 27 2b 27 6f 74 61 74 65 28 32 37 30 5c 78 32 30 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 65 33 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 61 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 65 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 36 37 62 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 38 62 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 33 65 29 2b 27 65 69 67 68 74 3d 5c 78 32 32 31 32 5c 78 32 32 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 33 38 29 29 2b 28 5f 30 78 31 66 39 36 31 33 3d 3d 6e 75 6c Data Ascii: +_0x425912(0x4ae)+_0x425912(0x2a5)+_0x425912(0x3bf)+_0x425912(0x3e1)+'ansform=\x22r'+'otate(270\x20'+_0x425912(0x4e3)+_0x425912(0x2af)+_0x425912(0x5e4)+_0x425912(0x67b)+_0x425912(0x48b)+_0x425912(0x33e)+'eight=\x2212\x22'+_0x425912(0x438))+(_0x1f9613==nul
2025-01-13 00:03:44 UTC	1369	IN	Data Raw: 28 30 78 35 37 39 29 2b 27 74 65 27 5d 28 5f 30 78 34 32 35 39 31 32 28 30 78 35 62 65 29 29 29 2b 28 5f 30 78 34 32 35 39 31 32 28 30 78 33 61 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 34 32 29 2b 27 61 74 74 72 69 62 75 74 65 4e 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 35 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 65 34 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 32 33 37 29 2b 27 54 69 6d 65 73 3d 5c 78 32 32 30 3b 31 27 2b 5f 30 78 34 32 35 39 31 32 28 30 78 31 38 33 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 34 35 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 35 35 32 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 36 66 31 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 61 66 29 2b 5f 30 78 34 32 35 39 31 32 28 30 78 33 31 30 29 2b 27 74 3e 5c 78 Data Ascii: (0x579)+'te'](_0x425912(0x5be)))+(_0x425912(0x3a4)+_0x425912(0x542)+'attributeN'+_0x425912(0x25f)+_0x425912(0x1e4)+_0x425912(0x237)+'Times=\x220;1'+_0x425912(0x183)+_0x425912(0x45f)+_0x425912(0x552)+_0x425912(0x6f1)+_0x425912(0x3af)+_0x425912(0x310)+'t>\x

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:45 UTC	577	OUT	GET /us/assets/f6170fbbTeKnX.css HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://informed.deliveryewo.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:45 UTC	971	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:45 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0" CF-Cache-Status: HIT Age: 50527 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QI4Y%2BbPEqGS4hxknE%2FICDIegoAF82VaFIw29QxEEiGK9%2FotA35nRUvkAYYTsleBUp%2FcXBbyqtMFIQerJTffqoXCet0o2a6dxRFFDOEqFndjtXGv%2FjhMfkF8kma%2B6TE6xerKuUhr6aFcbygo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901120016da341a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1577&min_rtt=1568&rtt_var=606&sent=4&recv=6&lost=0&retrans=0&sent_bytes=3046&recv_bytes=1155&delivery_rate=2669104&cwnd=242&unsent_bytes=0&cid=48141ff450f5c47b&ts=142&x=0"
2025-01-13 00:03:45 UTC	398	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa
2025-01-13 00:03:45 UTC	554	IN	Data Raw: 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 39 39 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 2e 73 68 6f 77 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 69 6e 69 74 69 61 6c 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 20 2e 6c 6f 61 64 69 6e 67 7b 77 69 64 74 68 3a 33 38 70 78 3b 68 65 69 67 68 74 3a 33 38 70 78 7d 68 74 6d 6c 2c 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 20 61 75 74 6f 7d 5b 64 61 74 61 2d 74 5d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 5b 64 61 74 61 2d 74 5d Data Ascii: ;z-index:999999999}.g-loading-mask.show{opacity:1;pointer-events:initial}.g-loading-mask .loading{width:38px;height:38px}html,body{padding:0;border:0;margin:0;overflow-x:hidden;overflow-y:auto;overflow:hidden auto}[data-t]{font-size:1em!important}[data-t]

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:46 UTC	554	OUT	GET /us/assets/143268e9KXMp5.js HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://informed.deliveryewo.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:46 UTC	992	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0" CF-Cache-Status: HIT Age: 50528 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aNcDqh9ljW6eoXyUc6ROpaD9i9rIrugyKlSiQ1eWQa7Z0R%2Fl1w4Q9%2F%2FjQvYUbeZte918M8kI5Z8%2BF9oQiI1LPjarFDfAE0vp1m%2FujnbBlhwTodiPfjEYqK2wUI15u8i8awyU5roiexBs3wA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901120088d9341a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1563&min_rtt=1547&rtt_var=613&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3047&recv_bytes=1132&delivery_rate=2605591&cwnd=242&unsent_bytes=0&cid=96d6ab68fb1e043e&ts=162&x=0"
2025-01-13 00:03:46 UTC	377	IN	Data Raw: 31 31 63 30 0d 0a 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 Data Ascii: 11c0const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4c
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 36 30 62 34 63 65 28 30 78 63 62 29 29 2f 30 78 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 64 29 29 2f 30 78 39 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 65 29 29 2f 30 78 61 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 66 29 29 2f 30 78 62 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 34 29 29 2f 30 78 63 3b 69 66 28 5f 30 78 62 36 64 38 64 3d 3d 3d 5f 30 78 31 66 30 65 35 37 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 34 65 34 63 32 66 5b 27 70 75 73 68 27 5d 28 5f 30 78 34 65 34 63 32 66 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 31 61 63 36 61 35 29 7b 5f 30 78 34 65 34 63 32 66 5b 27 70 75 73 68 27 5d 28 5f Data Ascii: 60b4ce(0xcb))/0x8)+-parseInt(_0x60b4ce(0xbd))/0x9+parseInt(_0x60b4ce(0xbe))/0xa*(-parseInt(_0x60b4ce(0xbf))/0xb)+parseInt(_0x60b4ce(0xc4))/0xc;if(_0xb6d8d===_0x1f0e57)break;else _0x4e4c2f['push'](_0x4e4c2f['shift']());}catch(_0x1ac6a5){_0x4e4c2f['push'](_
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 32 5f 30 78 32 39 31 32 35 31 28 29 2c 27 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 27 3a 28 29 3d 3e 28 64 6f 63 75 6d 65 6e 74 5b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 64 29 5d 5b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 30 29 5d 28 30 78 30 2c 30 78 30 29 2c 7b 27 74 6f 70 27 3a 30 78 30 2c 27 6c 65 66 74 27 3a 30 78 30 7d 29 2c 27 72 6f 75 74 65 73 27 3a 5b 7b 27 70 61 74 68 27 3a 27 27 2c 27 63 6f 6d 70 6f 6e 65 6e 74 27 3a 28 29 3d 3e 61 32 5f 30 78 33 37 66 66 31 64 28 28 29 3d 3e 69 6d 70 6f 72 74 28 27 2e 2f 36 32 66 66 32 30 30 66 27 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 29 2c 5b 27 2e 2f 36 32 66 66 32 30 30 66 27 2b 27 4b 58 4d 70 35 2e 6a 73 27 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 35 29 2b 61 32 5f 30 78 Data Ascii: 2_0x291251(),'scrollBehavior':()=>(document[a2_0x5591cf(0xad)][a2_0x5591cf(0xc0)](0x0,0x0),{'top':0x0,'left':0x0}),'routes':[{'path':'','component':()=>a2_0x37ff1d(()=>import('./62ff200f'+a2_0x5591cf(0xca)),['./62ff200f'+'KXMp5.js',a2_0x5591cf(0xa5)+a2_0x
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 2e 2f 66 36 31 37 30 66 62 62 27 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 32 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 61 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 38 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 65 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 33 29 2b 27 4b 58 4d 70 35 2e 6a 73 27 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 35 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 32 Data Ascii: ./f6170fbb'+a2_0x5591cf(0xaa),a2_0x5591cf(0xb2)+a2_0x5591cf(0xca),a2_0x5591cf(0xba)+a2_0x5591cf(0xca),a2_0x5591cf(0xa8)+a2_0x5591cf(0xca),a2_0x5591cf(0xae)+a2_0x5591cf(0xca),a2_0x5591cf(0xb3)+'KXMp5.js',a2_0x5591cf(0xa5)+a2_0x5591cf(0xca),a2_0x5591cf(0xa2
2025-01-13 00:03:46 UTC	68	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 34 64 36 39 66 3b 7d 3b 72 65 74 75 72 6e 20 61 32 5f 30 78 31 38 34 63 28 29 3b 7d 65 78 70 6f 72 74 7b 5f 20 61 73 20 64 65 66 61 75 6c 74 7d 3b 0d 0a Data Ascii: ion(){return _0x14d69f;};return a2_0x184c();}export{_ as default};
2025-01-13 00:03:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:46 UTC	554	OUT	GET /us/assets/f0ee2557KXMp5.js HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://informed.deliveryewo.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:46 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690" CF-Cache-Status: HIT Age: 50528 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sp33uG8jqek%2FAlF51R%2FXBQdvzRgkFiD%2FiLpzxfQDoaXHjw5e4Y3RFu9bG6V9Dfcdy1xffl0tyjzilbJJz2KV7j1WSKAVs0k5o3ANp8kJpZVVd8aeAgWilSWjJgLAP6ABjIeFncnByBZPLgk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90112008ada741a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1598&rtt_var=601&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3046&recv_bytes=1132&delivery_rate=2740926&cwnd=242&unsent_bytes=0&cid=08ae148428ea6764&ts=161&x=0"
2025-01-13 00:03:46 UTC	381	IN	Data Raw: 37 63 39 62 0d 0a 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f Data Ascii: 7c9bconst a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 62 29 29 2f 30 78 38 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 61 30 29 29 2f 30 78 39 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 31 31 29 29 2f 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 32 61 29 29 2f 30 78 62 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 65 30 29 29 2f 30 78 63 29 3b 69 66 28 5f 30 78 66 32 37 34 31 38 3d 3d 3d 5f 30 78 33 63 36 35 31 37 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 34 66 37 64 62 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 34 66 37 64 62 30 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 31 38 34 35 30 39 29 7b 5f 30 78 34 66 37 Data Ascii: nt(_0x5c9abd(0x24b))/0x8)+parseInt(_0x5c9abd(0x1a0))/0x9(-parseInt(_0x5c9abd(0x211))/0xa)+parseInt(_0x5c9abd(0x22a))/0xb(parseInt(_0x5c9abd(0x1e0))/0xc);if(_0xf27418===_0x3c6517)break;else _0x4f7db0['push'](_0x4f7db0['shift']());}catch(_0x184509){_0x4f7
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 65 74 20 5f 30 78 31 36 66 64 32 37 3d 5f 30 78 31 30 63 65 37 36 5b 5f 30 78 33 64 36 34 34 61 28 30 78 31 64 62 29 5d 28 27 3f 27 29 3b 72 65 74 75 72 6e 20 5f 30 78 63 61 61 65 65 65 3c 5f 30 78 31 36 66 64 32 37 26 26 5f 30 78 63 61 61 65 65 65 3e 3d 30 78 30 26 26 28 5f 30 78 31 36 66 64 32 37 3d 2d 30 78 31 29 2c 5f 30 78 31 36 66 64 32 37 3e 2d 30 78 31 26 26 28 5f 30 78 32 61 31 37 31 65 3d 5f 30 78 31 30 63 65 37 36 5b 27 73 6c 69 63 65 27 5d 28 30 78 30 2c 5f 30 78 31 36 66 64 32 37 29 2c 5f 30 78 33 35 66 37 66 33 3d 5f 30 78 31 30 63 65 37 36 5b 27 73 6c 69 63 65 27 5d 28 5f 30 78 31 36 66 64 32 37 2b 30 78 31 2c 5f 30 78 63 61 61 65 65 65 3e 2d 30 78 31 3f 5f 30 78 63 61 61 65 65 65 3a 5f 30 78 31 30 63 65 37 36 5b 5f 30 78 33 64 36 34 34 61 Data Ascii: et _0x16fd27=_0x10ce76[_0x3d644a(0x1db)]('?');return _0xcaaeee<_0x16fd27&&_0xcaaeee>=0x0&&(_0x16fd27=-0x1),_0x16fd27>-0x1&&(_0x2a171e=_0x10ce76['slice'](0x0,_0x16fd27),_0x35f7f3=_0x10ce76['slice'](_0x16fd27+0x1,_0xcaaeee>-0x1?_0xcaaeee:_0x10ce76[_0x3d644a
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 5f 30 78 31 36 33 31 34 32 3d 61 33 35 5f 30 78 31 30 36 33 61 36 3b 72 65 74 75 72 6e 28 5f 30 78 34 30 36 36 35 62 5b 5f 30 78 31 36 33 31 34 32 28 30 78 31 62 61 29 5d 7c 7c 5f 30 78 34 30 36 36 35 62 29 3d 3d 3d 28 5f 30 78 31 65 30 62 64 64 5b 5f 30 78 31 36 33 31 34 32 28 30 78 31 62 61 29 5d 7c 7c 5f 30 78 31 65 30 62 64 64 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 5f 30 78 31 32 35 37 35 39 2c 5f 30 78 31 61 64 39 31 33 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 33 30 61 62 3d 61 33 35 5f 30 78 31 30 36 33 61 36 3b 69 66 28 4f 62 6a 65 63 74 5b 5f 30 78 33 38 33 30 61 62 28 30 78 31 62 30 29 5d 28 5f 30 78 31 32 35 37 35 39 29 5b 5f 30 78 33 38 33 30 61 62 28 30 78 32 31 61 29 5d 21 3d 3d 4f 62 6a 65 63 74 5b 5f 30 78 33 38 Data Ascii: ){const _0x163142=a35_0x1063a6;return(_0x40665b[_0x163142(0x1ba)]\|\|_0x40665b)===(_0x1e0bdd[_0x163142(0x1ba)]\|\|_0x1e0bdd);}function qe(_0x125759,_0x1ad913){const _0x3830ab=a35_0x1063a6;if(Object[_0x3830ab(0x1b0)](_0x125759)[_0x3830ab(0x21a)]!==Object[_0x38
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 27 2f 27 29 2b 27 2f 27 2b 5f 30 78 34 30 32 35 38 62 5b 27 73 6c 69 63 65 27 5d 28 5f 30 78 34 37 32 61 38 35 2d 28 5f 30 78 34 37 32 61 38 35 3d 3d 3d 5f 30 78 34 30 32 35 38 62 5b 5f 30 78 35 61 64 38 31 61 28 30 78 32 31 61 29 5d 3f 30 78 31 3a 30 78 30 29 29 5b 27 6a 6f 69 6e 27 5d 28 27 2f 27 29 3b 7d 76 61 72 20 59 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 34 38 35 63 37 29 7b 63 6f 6e 73 74 20 5f 30 78 39 37 64 63 31 62 3d 61 33 35 5f 30 78 31 30 36 33 61 36 3b 5f 30 78 34 34 38 35 63 37 5b 27 70 6f 70 27 5d 3d 5f 30 78 39 37 64 63 31 62 28 30 78 31 66 65 29 2c 5f 30 78 34 34 38 35 63 37 5b 5f 30 78 39 37 64 63 31 62 28 30 78 31 63 66 29 5d 3d 5f 30 78 39 37 64 63 31 62 28 30 78 31 63 66 29 3b 7d 28 59 7c 7c 28 59 3d 7b 7d 29 29 29 3b 76 61 72 Data Ascii: '/')+'/'+_0x40258b['slice'](_0x472a85-(_0x472a85===_0x40258b[_0x5ad81a(0x21a)]?0x1:0x0))['join']('/');}var Y;(function(_0x4485c7){const _0x97dc1b=a35_0x1063a6;_0x4485c7['pop']=_0x97dc1b(0x1fe),_0x4485c7[_0x97dc1b(0x1cf)]=_0x97dc1b(0x1cf);}(Y\|\|(Y={})));var
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 28 5f 30 78 35 32 36 35 31 36 29 3b 7d 63 6f 6e 73 74 20 75 74 3d 2f 5e 5b 5e 23 5d 2b 23 2f 3b 66 75 6e 63 74 69 6f 6e 20 66 74 28 5f 30 78 35 30 34 34 30 63 2c 5f 30 78 34 34 62 37 63 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 30 34 34 30 63 5b 27 72 65 70 6c 61 63 65 27 5d 28 75 74 2c 27 23 27 29 2b 5f 30 78 34 34 62 37 63 31 3b 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 5f 30 78 61 64 34 63 61 30 2c 5f 30 78 31 34 63 63 38 61 29 7b 63 6f 6e 73 74 20 5f 30 78 33 36 62 31 62 31 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 33 65 63 38 37 37 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 33 36 62 31 62 31 28 30 78 31 66 30 29 2b 27 65 6d 65 6e 74 27 5d 5b 5f 30 78 33 36 62 31 62 31 28 30 78 31 62 33 29 2b 27 67 43 6c 69 65 6e 74 52 65 63 27 2b 27 74 27 5d 28 29 Data Ascii: (_0x526516);}const ut=/^[^#]+#/;function ft(_0x50440c,_0x44b7c1){return _0x50440c['replace'](ut,'#')+_0x44b7c1;}function ht(_0xad4ca0,_0x14cc8a){const _0x36b1b1=a35_0x1063a6,_0x3ec877=document[_0x36b1b1(0x1f0)+'ement'][_0x36b1b1(0x1b3)+'gClientRec'+'t']()
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 78 31 62 39 29 5d 3a 77 69 6e 64 6f 77 5b 5f 30 78 33 31 35 34 33 62 28 30 78 31 65 33 29 2b 27 74 27 5d 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 6b 65 28 5f 30 78 34 36 39 61 61 30 2c 5f 30 78 34 32 32 66 30 62 29 7b 63 6f 6e 73 74 20 5f 30 78 34 66 34 35 66 34 3d 61 33 35 5f 30 78 31 30 36 33 61 36 3b 72 65 74 75 72 6e 28 68 69 73 74 6f 72 79 5b 5f 30 78 34 66 34 35 66 34 28 30 78 32 31 66 29 5d 3f 68 69 73 74 6f 72 79 5b 5f 30 78 34 66 34 35 66 34 28 30 78 32 31 66 29 5d 5b 5f 30 78 34 66 34 35 66 34 28 30 78 32 33 30 29 5d 2d 5f 30 78 34 32 32 66 30 62 3a 2d 30 78 31 29 2b 5f 30 78 34 36 39 61 61 30 3b 7d 63 6f 6e 73 74 20 68 65 3d 6e 65 77 20 4d 61 70 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 74 28 5f 30 78 33 39 34 61 30 63 2c 5f 30 78 34 36 36 34 31 37 29 Data Ascii: x1b9)]:window[_0x31543b(0x1e3)+'t']);}function ke(_0x469aa0,_0x422f0b){const _0x4f45f4=a35_0x1063a6;return(history[_0x4f45f4(0x21f)]?history[_0x4f45f4(0x21f)][_0x4f45f4(0x230)]-_0x422f0b:-0x1)+_0x469aa0;}const he=new Map();function mt(_0x394a0c,_0x466417)
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 78 31 62 62 35 33 61 29 2c 28 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 62 36 31 37 32 3d 5f 30 78 65 31 37 36 32 65 2c 5f 30 78 32 30 66 62 35 61 3d 5f 30 78 35 62 64 35 34 32 5b 5f 30 78 34 62 36 31 37 32 28 30 78 31 64 62 29 5d 28 5f 30 78 31 62 62 35 33 61 29 3b 5f 30 78 32 30 66 62 35 61 3e 2d 30 78 31 26 26 5f 30 78 35 62 64 35 34 32 5b 5f 30 78 34 62 36 31 37 32 28 30 78 32 36 30 29 5d 28 5f 30 78 32 30 66 62 35 61 2c 30 78 31 29 3b 7d 3b 7d 2c 27 64 65 73 74 72 6f 79 27 28 29 7b 5f 30 78 35 62 64 35 34 32 3d 5b 5d 2c 5f 30 78 32 66 32 30 39 66 3d 5b 75 65 5d 2c 5f 30 78 34 61 64 39 66 31 3d 30 78 30 3b 7d 2c 27 67 6f 27 28 5f 30 78 33 38 64 30 63 63 2c 5f 30 78 32 65 37 33 32 38 3d 21 30 78 30 29 7b 63 6f 6e 73 74 20 5f 30 78 34 33 66 32 36 62 3d Data Ascii: x1bb53a),()=>{const _0x4b6172=_0xe1762e,_0x20fb5a=_0x5bd542[_0x4b6172(0x1db)](_0x1bb53a);_0x20fb5a>-0x1&&_0x5bd542[_0x4b6172(0x260)](_0x20fb5a,0x1);};},'destroy'(){_0x5bd542=[],_0x2f209f=[ue],_0x4ad9f1=0x0;},'go'(_0x38d0cc,_0x2e7328=!0x0){const _0x43f26b=
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 28 5f 30 78 35 38 33 65 35 61 2c 5f 30 78 34 30 37 35 63 35 29 7b 72 65 74 75 72 6e 20 6b 28 6e 65 77 20 45 72 72 6f 72 28 29 2c 7b 27 74 79 70 65 27 3a 5f 30 78 35 38 33 65 35 61 2c 5b 4b 65 5d 3a 21 30 78 30 7d 2c 5f 30 78 34 30 37 35 63 35 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 49 28 5f 30 78 32 32 38 62 65 66 2c 5f 30 78 63 62 61 63 38 35 29 7b 63 6f 6e 73 74 20 5f 30 78 33 66 34 31 36 65 3d 61 33 35 5f 30 78 31 30 36 33 61 36 3b 72 65 74 75 72 6e 20 5f 30 78 32 32 38 62 65 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 4b 65 20 69 6e 20 5f 30 78 32 32 38 62 65 66 26 26 28 5f 30 78 63 62 61 63 38 35 3d 3d 6e 75 6c 6c 7c 7c 21 21 28 5f 30 78 32 32 38 62 65 66 5b 5f 30 78 33 66 34 31 36 65 28 30 78 32 35 35 29 5d 26 5f 30 78 63 62 61 63 38 35 Data Ascii: (_0x583e5a,_0x4075c5){return k(new Error(),{'type':_0x583e5a,[Ke]:!0x0},_0x4075c5);}function I(_0x228bef,_0xcbac85){const _0x3f416e=a35_0x1063a6;return _0x228bef instanceof Error&&Ke in _0x228bef&&(_0xcbac85==null\|\|!!(_0x228bef[_0x3f416e(0x255)]&_0xcbac85
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 65 29 2b 5f 30 78 35 38 66 32 37 38 28 30 78 32 33 61 29 2b 27 70 5c 78 32 30 66 6f 72 5c 78 32 30 70 61 72 61 27 2b 5f 30 78 35 38 66 32 37 38 28 30 78 31 62 36 29 2b 5f 30 78 34 34 65 31 31 66 2b 5f 30 78 35 38 66 32 37 38 28 30 78 32 36 63 29 2b 5f 30 78 34 35 61 30 65 30 2b 5f 30 78 35 38 66 32 37 38 28 30 78 32 32 63 29 2b 5f 30 78 34 66 38 64 30 31 5b 5f 30 78 35 38 66 32 37 38 28 30 78 31 63 30 29 5d 29 3b 7d 7d 6c 65 74 20 5f 30 78 32 36 35 34 30 61 3d 5f 30 78 31 35 66 30 64 65 3f 27 28 28 3f 3a 27 2b 5f 30 78 34 35 61 30 65 30 2b 5f 30 78 35 38 66 32 37 38 28 30 78 32 30 61 29 2b 5f 30 78 34 35 61 30 65 30 2b 5f 30 78 35 38 66 32 37 38 28 30 78 32 32 64 29 3a 27 28 27 2b 5f 30 78 34 35 61 30 65 30 2b 27 29 27 3b 5f 30 78 32 63 63 63 35 66 7c 7c Data Ascii: e)+_0x58f278(0x23a)+'p\x20for\x20para'+_0x58f278(0x1b6)+_0x44e11f+_0x58f278(0x26c)+_0x45a0e0+_0x58f278(0x22c)+_0x4f8d01[_0x58f278(0x1c0)]);}}let _0x26540a=_0x15f0de?'((?:'+_0x45a0e0+_0x58f278(0x20a)+_0x45a0e0+_0x58f278(0x22d):'('+_0x45a0e0+')';_0x2ccc5f\|\|

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:46 UTC	607	OUT	GET /favicon.ico HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://informed.deliveryewo.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:46 UTC	975	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:46 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0" CF-Cache-Status: HIT Age: 50532 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQiX5fPrcrxYDVaCXo1d7aVue6SObUJmDxvRTEqQR5Xjpy8UMALx7JFPfMOdARFLvIzV2KV%2BsMPir%2FPu%2F3WuqA9y%2F9w9DXd6KC6aLenEE4suQuT%2FhEg6D9m3YvNYWW3AwABvNPJ09h%2BfffQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90112008a9211875-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&min_rtt=1696&rtt_var=638&sent=4&recv=6&lost=0&retrans=0&sent_bytes=3048&recv_bytes=1185&delivery_rate=2565905&cwnd=154&unsent_bytes=0&cid=66ab4702c0bb87ee&ts=134&x=0"
2025-01-13 00:03:46 UTC	394	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 7f 52 50 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 78 4b 4a ff bf aa aa ff f8 f6 f6 ff fd fc fc ff d8 c9 c7 ff 9a 76 75 ff 6b 39 38 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 67 34 33 ff ab 8f 8e ff 86 5e 5d ff b6 9d 9d ff f0 eb eb ff ff ff ff ff ef e9 e9 ff b6 9b 9a ff 7b 4e 4c ff 66 33 32 ff 66 33 32 ff 66 33 32 51 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 85 5c 5b ff fe fd fd ff f7 f5 f5 ff c9 b7 b6 ff 97 74 73 ff 99 77 77 ff c7 b4 b4 ff f1 ed ed ff fb f9 f9 ff cd bb b9 ff 6b 39 38 ff 66 33 32 51 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff b4 9b 9b ff ff ff ff ff ff ff ff Data Ascii: RPf32f32f32f32f32f32f32f32Qf32Qf32f32f32xKJvuk98f32f32f32f32f32Qf32Qf32f32f32g43^]{NLf32f32f32Qf32Qf32f32f32\[tswwk98f32Qf32Qf32f32f32
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 39 37 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 fe fd fd a1 fe fd fd ff f1 eb ea ff bb a1 9f ff 7d 4e 4b ff 68 36 34 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 a4 86 85 a1 da ce ce ff Data Ascii: 97f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32}NKh64f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: e8 ff c2 aa a7 ff 84 59 56 ff 66 33 32 ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 66 33 32 a1 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff ba a3 a2 ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff f7 f4 f4 ff d4 c6 c6 ff a0 81 80 ff 72 43 42 ff 6b 39 38 ff 7b 4f 4e ff a7 8a 8a ff d2 c4 c3 ff f7 f4 f4 ff ff ff ff ff ff ff ff ff fe fe fe ff f0 ea e9 ff 7c 4e 4c ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 66 33 32 a1 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 6b 39 38 ff e6 dd dd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fa fa ff db cf cf ff b1 98 97 ff 8d 68 67 ff 74 45 44 ff 72 43 42 ff 8c 65 65 ff c5 Data Ascii: YVf32f32f32f32f32f32f32f32f32f32f32rCBk98{ON\|NLf32f32f32f32f32f32f32f32f32k98hgtEDrCBee
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 fd fd fd a1 fb fa fa ff f2 ed ec ff ce b9 b6 ff b2 97 95 ff 8c 61 5e ff 73 42 3f ff 6a 38 37 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 a1 ff ff ff 01 ff ff ff 01 95 6f 6c a1 79 48 45 ff 67 34 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32a^sB?j87f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32olyHEg42f32f32f32f32f32f32f32f32f32f32f32f3
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 e3 65 32 31 f1 66 33 31 f1 66 33 32 f1 66 33 32 f1 66 33 32 f1 66 33 32 f1 66 33 32 f1 65 32 32 f1 65 32 32 f1 65 32 32 f1 66 33 32 f1 65 32 32 f1 65 32 32 f1 66 33 32 f1 65 32 32 f1 65 32 32 f1 66 33 32 f1 65 32 32 f1 66 33 32 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 32 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 32 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 65 32 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 66 33 31 f1 65 32 32 f1 65 32 32 f1 66 33 32 e3 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 65 32 32 f1 66 33 32 ff 66 33 32 ff 65 32 31 ff 65 32 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32e21f31f32f32f32f32f32e22e22e22f32e22e22f32e22e22f32e22f32f31f31f31f32f31f31f31f31f32f31f31f31f31f31f31e21f31f31f31f31f31e22e22f32e22f32f32e21e22f32f32f32f32f32
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: a9 a8 f1 e9 e3 e2 ff fe fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff fb f9 f9 ff ca b3 af ff a0 7d 7b ff 75 42 3f ff 67 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 65 32 31 ff 66 33 31 ff 65 32 31 ff 65 32 31 ff 66 33 31 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 66 33 32 ff 65 32 31 ff 65 32 31 ff 65 32 32 ff 65 32 31 ff 66 33 31 ff 66 33 31 ff 65 32 31 ff 66 33 32 ff 65 32 31 ff 66 33 31 ff 66 33 31 ff 66 33 32 ff 66 33 31 ff 66 33 31 ff 66 33 31 f1 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 6a 39 38 f1 83 5a 59 ff c1 ac ac ff f6 f3 f2 ff fe fe fe ff ff ff ff ff fe fe fe ff fe fe fe ff f9 f6 f6 ff dd cf cd ff b6 99 95 ff 77 44 41 ff 68 35 34 ff 66 33 32 ff 66 33 32 ff 65 32 32 ff Data Ascii: }{uB?g32f32f32f32f32f32f32f32f32f32e21f31e21e21f31f32e21f32f32e21e21e22e21f31f31e21f32e21f31f31f32f31f31f31j98ZYwDAh54f32f32e22
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: 32 ff 66 33 31 ff 65 32 31 ff 65 32 31 ff 65 32 31 ff 66 33 31 ff 6d 3d 3c ff 9a 79 78 ff cf bf be ff fa f8 f8 ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff fc fa fa ff d3 c0 bd ff ac 8d 8a ff 79 47 44 ff 66 33 32 ff 66 33 31 ff 66 33 32 ff 66 33 31 ff 66 33 31 ff 66 33 32 ff 65 32 31 ff 65 32 31 ff 66 33 31 ff 65 32 31 ff 66 33 32 ff 66 33 31 ff 66 33 32 ff 65 32 31 ff 66 33 31 ff 66 33 32 ff 66 33 31 f1 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 f1 66 33 32 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 66 33 32 ff 65 32 32 ff 65 32 31 ff 66 33 32 ff 66 33 32 ff 65 32 31 ff 65 32 31 ff 66 33 32 ff 66 34 33 ff 6f 3f 3e ff 92 6d 6c ff d3 c5 c4 ff f3 ef ef ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff fe Data Ascii: 2f31e21e21e21f31m=<yxyGDf32f31f32f31f31f32e21e21f31e21f32f31f32e21f31f32f31f32f32f32e21f32f32e22e21f32f32e21e21f32f43o?>ml
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff fe fe fe ff f0 eb eb ff d9 cd cd ff af 95 95 ff 80 55 54 ff 67 34 33 ff 66 33 32 ff 68 36 35 ff 7a 4e 4d ff 8f 69 69 ff b3 99 98 ff d9 cd cc ff fb fa fa ff fe fe fe ff fe fe fe ff ff ff ff ff fe fe fe ff fe fe fe ff f4 ef ee ff 94 6c 69 ff 66 33 32 ff 65 32 31 ff 66 33 31 f1 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 31 f1 66 33 32 ff 66 33 32 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 65 32 31 ff 65 32 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 91 6d 6c ff f8 f5 f5 ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e8 e1 e0 ff be a8 a8 ff 97 75 Data Ascii: UTg43f32h65zNMiilif32e21f31f31f32f32f32e21f32e21e22f32f32f32mlu
2025-01-13 00:03:46 UTC	1369	IN	Data Raw: bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff bb a4 a4 ff b9 a1 a1 ff ca b9 b9 ff bc a7 a7 ff bc a7 a7 ff bc a7 a7 ff c3 af ae ff d1 c2 c2 ff ed e7 e7 ff fe fe fe ff e5 da d9 ff 6d 39 36 ff 65 32 31 f1 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 31 f1 65 32 31 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 66 33 31 ff 66 33 32 ff 66 33 31 ff 66 33 31 ff 65 32 31 ff 66 33 32 ff 66 33 31 ff 66 33 32 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 31 ff 66 33 31 ff 66 33 32 ff 66 33 31 ff 66 33 32 ff 65 32 31 ff 66 33 32 ff 65 32 31 ff 66 33 31 ff 66 33 32 ff 6f 3f 3e ff a0 80 7f ff fe fe fe ff fe fe fe Data Ascii: m96e21f31e21f32e21f32f31f32f31f31e21f32f31f32f32e21f32f32f32f32f32f32f31f31f32f31f32e21f32e21f31f32o?>

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:47 UTC	374	OUT	GET /us/assets/143268e9KXMp5.js HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:47 UTC	980	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0" CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RG6AUpLd794HGROnaVhxGcZI3o295S%2FepOCbamcO0hyUnONimg07KML3eQO2r%2Bp0QB%2BeEDipDejIjU1cdiZRV5oxN7bsvvTzuIE3qwvlGl%2BWQLWVHG00GqJ61Y3CKkfjL8uja370Go%2F0Jqc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9011200cae191875-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1603&min_rtt=1596&rtt_var=612&sent=5&recv=6&lost=0&retrans=0&sent_bytes=3047&recv_bytes=952&delivery_rate=2651331&cwnd=154&unsent_bytes=0&cid=a38b86171b29eefe&ts=164&x=0"
2025-01-13 00:03:47 UTC	389	IN	Data Raw: 31 31 63 30 0d 0a 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 Data Ascii: 11c0const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4c
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 29 2f 30 78 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 64 29 29 2f 30 78 39 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 65 29 29 2f 30 78 61 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 66 29 29 2f 30 78 62 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 34 29 29 2f 30 78 63 3b 69 66 28 5f 30 78 62 36 64 38 64 3d 3d 3d 5f 30 78 31 66 30 65 35 37 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 34 65 34 63 32 66 5b 27 70 75 73 68 27 5d 28 5f 30 78 34 65 34 63 32 66 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 31 61 63 36 61 35 29 7b 5f 30 78 34 65 34 63 32 66 5b 27 70 75 73 68 27 5d 28 5f 30 78 34 65 34 63 32 66 5b 27 73 68 Data Ascii: )/0x8)+-parseInt(_0x60b4ce(0xbd))/0x9+parseInt(_0x60b4ce(0xbe))/0xa*(-parseInt(_0x60b4ce(0xbf))/0xb)+parseInt(_0x60b4ce(0xc4))/0xc;if(_0xb6d8d===_0x1f0e57)break;else _0x4e4c2f['push'](_0x4e4c2f['shift']());}catch(_0x1ac6a5){_0x4e4c2f['push'](_0x4e4c2f['sh
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 2c 27 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 27 3a 28 29 3d 3e 28 64 6f 63 75 6d 65 6e 74 5b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 64 29 5d 5b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 30 29 5d 28 30 78 30 2c 30 78 30 29 2c 7b 27 74 6f 70 27 3a 30 78 30 2c 27 6c 65 66 74 27 3a 30 78 30 7d 29 2c 27 72 6f 75 74 65 73 27 3a 5b 7b 27 70 61 74 68 27 3a 27 27 2c 27 63 6f 6d 70 6f 6e 65 6e 74 27 3a 28 29 3d 3e 61 32 5f 30 78 33 37 66 66 31 64 28 28 29 3d 3e 69 6d 70 6f 72 74 28 27 2e 2f 36 32 66 66 32 30 30 66 27 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 29 2c 5b 27 2e 2f 36 32 66 66 32 30 30 66 27 2b 27 4b 58 4d 70 35 2e 6a 73 27 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 35 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 Data Ascii: ,'scrollBehavior':()=>(document[a2_0x5591cf(0xad)][a2_0x5591cf(0xc0)](0x0,0x0),{'top':0x0,'left':0x0}),'routes':[{'path':'','component':()=>a2_0x37ff1d(()=>import('./62ff200f'+a2_0x5591cf(0xca)),['./62ff200f'+'KXMp5.js',a2_0x5591cf(0xa5)+a2_0x5591cf(0xca)
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 32 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 61 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 38 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 65 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 62 33 29 2b 27 4b 58 4d 70 35 2e 6a 73 27 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 35 29 2b 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 63 61 29 2c 61 32 5f 30 78 35 35 39 31 63 66 28 30 78 61 32 29 2b 27 54 65 4b 6e 58 2e 63 73 73 Data Ascii: a2_0x5591cf(0xaa),a2_0x5591cf(0xb2)+a2_0x5591cf(0xca),a2_0x5591cf(0xba)+a2_0x5591cf(0xca),a2_0x5591cf(0xa8)+a2_0x5591cf(0xca),a2_0x5591cf(0xae)+a2_0x5591cf(0xca),a2_0x5591cf(0xb3)+'KXMp5.js',a2_0x5591cf(0xa5)+a2_0x5591cf(0xca),a2_0x5591cf(0xa2)+'TeKnX.css
2025-01-13 00:03:47 UTC	56	IN	Data Raw: 20 5f 30 78 31 34 64 36 39 66 3b 7d 3b 72 65 74 75 72 6e 20 61 32 5f 30 78 31 38 34 63 28 29 3b 7d 65 78 70 6f 72 74 7b 5f 20 61 73 20 64 65 66 61 75 6c 74 7d 3b 0d 0a Data Ascii: _0x14d69f;};return a2_0x184c();}export{_ as default};
2025-01-13 00:03:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-13 00:03:47 UTC	577	OUT	GET /us/assets/667bf194TeKnX.css HTTP/1.1 Host: informed.deliveryewo.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://informed.deliveryewo.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 00:03:47 UTC	979	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 00:03:47 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"10d59-190b57e26f0" CF-Cache-Status: HIT Age: 50529 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mgdWYrtny%2Bn8GMuHnc%2FWSDZzPdAyJlnP%2B6Cw4PGs5l3Bc3wAHxQwFBNWguW2nBP2T0e2oYZ%2BqXroMDRZQjrleHVY3peloaUnYVv8X5LvigEDq0cqOD%2BAtXLa4T9rZzVQagr5J0qdzYy2gaM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901120108bdd72b9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1792&min_rtt=1782&rtt_var=688&sent=4&recv=6&lost=0&retrans=0&sent_bytes=3047&recv_bytes=1155&delivery_rate=2349785&cwnd=218&unsent_bytes=0&cid=6c5aa0149cbf4856&ts=138&x=0"
2025-01-13 00:03:47 UTC	390	IN	Data Raw: 37 63 61 33 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7ca3/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 74 65 3a 23 66 66 66 3b 2d 2d 67 72 61 79 3a 23 36 63 37 35 37 64 3b 2d 2d 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d Data Ascii: te:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 6e 6f 74 28 5b 68 72 65 66 5d 29 3a 6e 6f 74 28 5b 74 61 62 69 6e 64 65 78 5d 29 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6d 61 72 67 Data Ascii: ebkit-text-decoration:none;text-decoration:none}a:not([href]):not([tabindex]):focus{outline:0}img{vertical-align:middle;border-style:none}label{margin-bottom:.5rem}button:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input{marg
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 35 7b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 37 7b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 72 64 65 72 2d 6c 67 2d 32 7b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 6c 67 2d 31 30 7b 6f 72 64 65 72 3a 31 30 7d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 Data Ascii: h:33.333333%}.col-lg-5{flex:0 0 41.666667%;max-width:41.666667%}.col-lg-7{flex:0 0 58.333333%;max-width:58.333333%}.order-lg-2{order:2}.order-lg-10{order:10}}.form-control{display:block;padding:.375rem .75rem;font-weight:400;background-color:#fff;backgrou
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 32 35 29 7d 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 3a 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 36 35 7d 2e 63 6f 6c 6c 61 70 73 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 25 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 3e 2e 63 75 73 74 6f Data Ascii: -shadow:0 0 0 .2rem rgba(0,123,255,.25)}.btn.disabled,.btn:disabled{opacity:.65}.collapse:not(.show){display:none}.input-group{display:flex;flex-wrap:wrap;align-items:stretch;width:100%}.input-group>.form-control{flex:1 1 auto;width:1%}.input-group>.custo
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 6a 75 6d 62 6f 74 72 6f 6e 7b 70 61 64 64 69 6e 67 3a 32 72 65 6d 20 31 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 6a 75 6d 62 6f 74 72 6f 6e 7b 70 61 64 64 69 6e 67 3a 34 72 65 6d 20 32 72 65 6d 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 72 65 6d 20 30 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 7d 2e 63 6c 6f 73 65 7b 66 6c 6f 61 Data Ascii: der-bottom-left-radius:0}.jumbotron{padding:2rem 1rem;background-color:#e9ecef;border-radius:.3rem}@media (min-width:576px){.jumbotron{padding:4rem 2rem}}@keyframes progress-bar-stripes{0%{background-position:1rem 0}to{background-position:0 0}}.close{floa
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 79 3a 2e 39 7d 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 6e 65 78 74 2d 69 63 6f 6e 2c 2e 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2d 70 72 65 76 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 2f 31 30 30 25 20 31 30 30 25 7d 2e 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 35 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 25 3b 6d 61 72 67 69 Data Ascii: y:.9}.carousel-control-next-icon,.carousel-control-prev-icon{display:inline-block;background:no-repeat 50%/100% 100%}.carousel-indicators{position:absolute;right:0;left:0;z-index:15;display:flex;justify-content:center;padding-left:0;margin-right:15%;margi
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 69 63 6b 79 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 30 7d 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 78 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 78 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 65 78 74 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: icky;top:0;z-index:1020}}.sr-only{position:absolute;width:1px;height:1px;padding:0;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}.mx-auto{margin-right:auto!important}.mx-auto{margin-left:auto!important}.text-left{text-align:left!important
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 61 74 65 73 2e 75 73 70 73 2d 63 6f 76 69 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 75 73 70 73 2d 75 70 64 61 74 65 73 2e 75 73 70 73 2d 63 6f 76 69 64 20 2e 72 6f 77 20 2e 61 72 74 69 63 6c 65 3a 6e 6f 74 28 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 29 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 69 74 6c 65 2d 61 72 65 61 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 25 7d 7d 73 65 63 74 69 6f 6e 2e 6a 75 6d 62 6f 74 72 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 Data Ascii: ates.usps-covid{margin-bottom:20px}@media screen and (min-width: 992px){.usps-updates.usps-covid .row .article:not(:last-of-type):after{display:none}.title-area-1{padding-left:10%;padding-right:10%}}section.jumbotron{background-color:#f7f7f7}@media (min-w
2025-01-13 00:03:47 UTC	1369	IN	Data Raw: 2d 35 2e 63 6f 6c 2d 31 32 2e 61 72 74 69 63 6c 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 20 68 33 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 20 69 6d 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 35 30 70 78 7d Data Ascii: -5.col-12.article{display:block;flex:0 0 100%;max-width:100%}.featured-usps p{display:block;text-align:center}}@media screen and (max-width: 767px){.featured-usps .article h3{padding-top:30px}}@media (min-width: 992px){.carousel-item img{min-height:250px}