Edit tour

Windows Analysis Report
https://us-usps-pxcyuc.xyz/update/

Overview

General Information

Sample URL:	https://us-usps-pxcyuc.xyz/update/
Analysis ID:	1526983
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML page contains obfuscated javascript

Performs DNS queries to domains with low reputation

HTML body with high number of embedded images detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5788 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5920 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-pxcyuc.xyz/update/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/MC4xODEwMjg4NjE0OTQ0ODg2 HTTP/1.1Host: us-usps-pxcyuc.xyzConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://us-usps-pxcyuc.xyzSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://us-usps-pxcyuc.xyz/update/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://us-usps-pxcyuc.xyz/update/	HTTP Parser: No favicon
Source: https://us-usps-pxcyuc.xyz/update/	HTTP Parser: No favicon
Source: https://us-usps-pxcyuc.xyz/update/	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon
Source: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze	HTTP Parser: No favicon
Source: https://moversguide.usps.com/mgo/disclaimer?referral=MG80	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50356 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-pxcyuc.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-pxcyuc.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-pxcyuc.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: us-usps-pxcyuc.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_723.2.dr, chromecache_409.2.dr, chromecache_615.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_723.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=rA(a,c,e);Q(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return Q(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},uA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_635.2.dr, chromecache_467.2.dr	String found in binary or memory: e.page_referrer=C(document.referrer):document.referrer,e=z(F(e),"default");e=N(e);e=O(e);E("config",c.GWT_GA4ID[a],e)}y?H({search_term:y}):""})();var S=1;if(c.YOUTUBE){G=document.createElement("script");G.src="https://www.youtube.com/iframe_api";A=document.getElementsByTagName("script")[0];A.parentNode.insertBefore(G,A);var D=[],p=[],v=[],B=c.YT_MILESTONE,L=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<D.length;a++)p[a]=new YT.Player(D[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_603.2.dr, chromecache_723.2.dr, chromecache_409.2.dr, chromecache_615.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_331.2.dr, chromecache_771.2.dr, chromecache_561.2.dr, chromecache_810.2.dr, chromecache_434.2.dr, chromecache_805.2.dr, chromecache_328.2.dr, chromecache_675.2.dr, chromecache_314.2.dr, chromecache_403.2.dr, chromecache_817.2.dr, chromecache_888.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_771.2.dr, chromecache_603.2.dr, chromecache_723.2.dr, chromecache_403.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: us-usps-pxcyuc.xyz
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: moversguide.usps.com
Source: global traffic	DNS traffic detected: DNS query: cdn.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: api.ampersend.io
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: store.usps.com
Source: global traffic	DNS traffic detected: DNS query: www.usps.com
Source: global traffic	DNS traffic detected: DNS query: aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: content.usps.com
Source: global traffic	DNS traffic detected: DNS query: h.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: h64.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: eu-aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: 3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: dap.digitalgov.gov
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: resources.digital-cloud-gov.medallia.com
Source: global traffic	DNS traffic detected: DNS query: cns.usps.com
Source: global traffic	DNS traffic detected: DNS query: reg.usps.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 16:53:16 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 16:53:27 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 06 Oct 2024 16:53:27 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-usps-pxcyuc.xyz/update/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5788 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5920 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5788 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5920 --field-trial-handle=1924,i,13307289160937544966,1786567563431314092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://git.io/fjule	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
64.233.167.157	unknown	United States	15169	GOOGLEUS	false
104.16.41.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false
91.235.132.129	eu-aa.online-metrix.net	Netherlands	30286	THMUS	false
170.106.137.178	us-usps-pxcyuc.xyz	Singapore	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	true
91.235.134.131	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net	Netherlands	30286	THMUS	false
52.21.60.247	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
91.235.133.188	h-usps.online-metrix.net	Netherlands	30286	THMUS	false
13.35.58.17	unknown	United States	16509	AMAZON-02US	false
108.156.60.60	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.110.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
192.229.221.165	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
192.225.158.1	h64.online-metrix.net	United States	30286	THMUS	false
18.165.122.64	dbixd6p3vn7bv.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
44.234.198.184	api.segment.io	United States	16509	AMAZON-02US	false
99.86.8.175	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
54.210.62.10	unknown	United States	14618	AMAZON-AESUS	false
91.235.132.130	h.online-metrix.net	Netherlands	30286	THMUS	false
13.32.27.91	unknown	United States	7018	ATT-INTERNET4US	false

IP
192.168.2.4
192.168.2.5

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526983
Start date and time:	2024-10-06 18:52:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-usps-pxcyuc.xyz/update/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.troj.win@26/982@84/22
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://moversguide.usps.com/?referral=MG80 Browse: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v Browse: https://cns.usps.com/

Input	Output
URL: https://us-usps-pxcyuc.xyz/update/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://moversguide.usps.com/mgo/disclaimer?referral=MG80 Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.usps.com/store/shipping-supplies/scales-accessories/_/N-4f2uze Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://cns.usps.com/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Name	Malicious	Reputation
https://3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net/Nt7fnbDH5Gtcn5RK?dd4bc1943f1627ff=9W2Aokx8H2oXbmDrEIX1tP5ELHSAVBOyMm3xGlu_1pUbhP_GtkwJQeua94Dmj3qXKZCpNHy5Mg3BoM0pSdFcQTgErmCfTQk-1Vdk60QCAZk1azALemAd0eVJKQ7Ej4yct_mtoqqaIZPMDyMu_y-zQbjpBdF0pxEjvTnp	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/7357514cKXMp5.js	true	unknown
https://www.usps.com/ecp/asset/images/843070-T0.jpg	false	unknown
https://www.usps.com/test/nav/images/business.svg	false	unknown
https://www.usps.com/international/go-now.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/request.js	false	unknown
https://us-usps-pxcyuc.xyz/update/layout/images/43.svg	true	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/touch.js	false	unknown
https://store.usps.com/media/psm/css/ps.css	false	unknown
https://www.usps.com/store/images/ps-subicon-supplies.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/declare.js	false	unknown
https://content.usps.com/5p2w283drq25ul5r.js?40pjdf5rewos7kpw=3fym673k&py40r4blqj17ovc6=48ea77b5-2c28-4b63-92ea-232997e7241a	false	unknown
https://us-usps-pxcyuc.xyz/update/layout/images/8.svg	true	unknown
https://www.usps.com/assets/images/home/change_address.svg	false	unknown
https://moversguide.usps.com/js/chunk-vendors.19f78359.js	false	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=websocket&sid=H9KOeMVHgWIWfPXmAJgx	false	unknown
https://www.usps.com/assets/images/home/printcustomsforms.svg	false	unknown
https://cdn.segment.com/v1/projects/UqpcmQEi1Z4oO1btpi5fjHrxJ7AIwGOu/settings	false	unknown
https://moversguide.usps.com/js/address~bootstrap~contact~desktop~mobile.00054ee3.js	false	unknown
https://cns.usps.com/scripts/molasses.js	false	unknown
https://moversguide.usps.com/js/rts.4a36fbde.js	false	unknown
https://moversguide.usps.com/css/address~bootstrap~contact~desktop~mobile.9a89caf3.css	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/8cf6cd52TeKnX.svg	true	unknown
https://cns.usps.com/global-elements/footer/css/footer-sb.css	false	unknown
https://www.usps.com/store/images/ps-subicon-cards.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/config.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/browser.js	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/0cabecd3KXMp5.js	true	unknown
https://moversguide.usps.com/js/simulator.521279c0.js	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/e394ed97TeKnX.svg	true	unknown
https://www.usps.com/store/images/ps-subicon-business.png	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-attr.js	false	unknown
https://us-usps-pxcyuc.xyz/update/layout/images/12.svg	true	unknown
https://us-usps-pxcyuc.xyz/update/assets/143268e9KXMp5.js	true	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=polling&t=P9Ym9gA&sid=1U-wAvGRkv-vMEO7AJhD	false	unknown
https://content.usps.com/SHr3w0ePBKTAUOS7?e6be3b78ceb464c1=VSDQDZDC6cWTRzX0FFERUMFE1b7DHhjLYvaL4Qbv8cpPVaFO5tA3JszGsLw_C4_sIPQRtFbNWpcNAFMOeOiYrUJq7XD7xtvG0uFCZmxb6Ivn4SwSJRePzkpYA5QBApDFQaUMIGxfSsHxmjEituCvcoWlVXk&jb=333e266c71633f6269343567383c623a3a3b303c663464316761346d6d36633430396330613c38	false	unknown
https://store.usps.com/media/psm/script/popper.min.js	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/4cd1ec68TeKnX.css	true	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=polling&t=P9Ym0hb&sid=ocOatvDRtwF_1HHDAJgu	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/topic.js	false	unknown
https://www.usps.com/store/images/br_down.png	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/f4397cedTeKnX.css	true	unknown
https://store.usps.com/media/endeca/store/script/store-init.js	false	unknown
https://www.usps.com/assets/images/home/free_boxes.svg	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/dom-form.js	false	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=polling&t=P9Ym2tX	false	unknown
https://moversguide.usps.com/js/dcoa.52ad1015.js	false	unknown
https://store.usps.com/external/scripts/dojo-1.9.7/_base/lang.js	false	unknown
https://www.usps.com/manage/go-now.png	false	unknown
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false	unknown
https://www.usps.com/assets/script/home/megamenu-additions.js	false	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=polling&t=P9YmEYb&sid=k0677UQ2gSB-_qCoAJhP	false	unknown
https://us-usps-pxcyuc.xyz/update/assets/f2e2ef63TeKnX.woff	true	unknown
https://us-usps-pxcyuc.xyz/update/layout/images/19.svg	true	unknown
https://reg.usps.com/entreg/LoginAction_input?app=GSS&appURL=https://cns.usps.com/	false	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false	unknown
https://h.online-metrix.net/kEY0jGmNlpIUTNWC?9bf0d03b89802037=D5RFElw8XTLcqmYBqlbws1Q-hGm-XuLnDA94OskhCIa0zTfFWiVtiv1d7BJXJqunjKNcr7G3Ukps_95gcaeUpOZOYuqttokAUrUV_GPsw2z7oAfeAn1KvajNUHcNM0231NVhosNyxOsV3kJQ0nTgeqbjBSq0TjlN5zDKN_f_WEZZ7tM	false	unknown
https://moversguide.usps.com/js/desktop~mobile~rts~smsRts.e7345641.js	false	unknown
https://moversguide.usps.com/js/email.ed5298ec.js	false	unknown
https://content.usps.com/5ZTZol0tE_F8RkXJ?f4669ecb4b9446c3=chplIE22fZLNBxz5tddU_TNdt_5eBTrOLip-7YKSE7OXIrtq_iNozgkMhTDZwAeBQddyykfNSrLovvIUbGLGltpy79UnTetS25_MfpEwhXZ26NcZLp4FV4e6SCXXg88vcdz3Q0ceRKJfSS2Q79mIIf2puPOZ5JBwaT1gKGB_nzY6IkiG4RXyD8a91rwVTLOvzvbuJbH70L_u0OUIs78&je=313b26267067743d32475830325c4532	false	unknown
https://store.usps.com/external/scripts/dijit-1.9.7/_Container.js	false	unknown
https://www.usps.com/ecp/asset/images/843067-T0.jpg	false	unknown
https://us-usps-pxcyuc.xyz/update/layout/images/50.png	true	unknown
https://us-usps-pxcyuc.xyz/socket.io/?EIO=4&transport=polling&t=P9YmDyR&sid=G7JuyWf3lnqqQ6YrAJhM	false	unknown
https://cns.usps.com/global-elements/footer/script/jquery-3.7.1.js	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/usps	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/assets/images/default/right-arrow-inactive.png);	chromecache_437.2.dr, chromecache_606.2.dr	false		unknown
https://about.usps.com/who/legal/privacy-policy/full-privacy-policy.htm	chromecache_367.2.dr, chromecache_637.2.dr, chromecache_269.2.dr, chromecache_560.2.dr, chromecache_876.2.dr	false		unknown
https://www.usps.com/store/images/ps-plus.png);	chromecache_520.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_815.2.dr, chromecache_518.2.dr	false	URL Reputation: safe	unknown
https://store.usps.com/store	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_725.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_359.2.dr, chromecache_519.2.dr	false		unknown
https://www.usps.com/business/manage-mail.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/ecpext/asset/images/oct24-supplies-d.jpg);	chromecache_326.2.dr	false		unknown
https://www.usps.com/international/	chromecache_725.2.dr	false		unknown
https://www.usps.com/store/images/info-icon.png	chromecache_520.2.dr	false		unknown
https://www.usps.com/global-elements/header/script/	chromecache_516.2.dr, chromecache_626.2.dr, chromecache_580.2.dr, chromecache_376.2.dr	false		unknown
https://managemymove.usps.com	chromecache_688.2.dr	false		unknown
https://informeddelivery.usps.com/box/pages/intro/start.action	chromecache_879.2.dr	false		unknown
https://www.usps.com/shop/money-orders.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/business/verify-postage.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/O_FRB2-T0.jpg	chromecache_326.2.dr	false		unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://git.io/fjule	chromecache_257.2.dr	false	URL Reputation: safe	unknown
https://www.usps.com/store/images/ps-carticon.png	chromecache_520.2.dr	false		unknown
https://about.usps.com/what/government-services/	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://store.usps.com/store/cards-envelopes	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/EP14PE-T0.jpg	chromecache_326.2.dr	false		unknown
https://www.usps.com/store/images/usps_l_nav_red_arrow.svg	chromecache_520.2.dr	false		unknown
https://www.usps.com/ecp/asset/images/BOX_CREKIT1-T0.jpg	chromecache_326.2.dr	false		unknown
https://www.usps.com/store/images/new-icon.png)	chromecache_606.2.dr	false		unknown
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://store.usps.com/store/stamps	chromecache_725.2.dr	false		unknown
https://postcalc.usps.com/?country=10440	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/business/label-broker.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/international/letters.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_335.2.dr, chromecache_326.2.dr, chromecache_725.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 18:53:07.548784018 CEST	192.168.2.4	1.1.1.1	0xce74	Standard query (0)	us-usps-pxcyuc.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:07.548899889 CEST	192.168.2.4	1.1.1.1	0xe06f	Standard query (0)	us-usps-pxcyuc.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:53:10.010536909 CEST	192.168.2.4	1.1.1.1	0x5abb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:10.011611938 CEST	192.168.2.4	1.1.1.1	0xb30	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:10.713620901 CEST	192.168.2.4	1.1.1.1	0xbb0	Standard query (0)	us-usps-pxcyuc.xyz	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:10.714184999 CEST	192.168.2.4	1.1.1.1	0xcf53	Standard query (0)	us-usps-pxcyuc.xyz	65	IN (0x0001)	false
Oct 6, 2024 18:53:28.249686956 CEST	192.168.2.4	1.1.1.1	0xc250	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:28.249810934 CEST	192.168.2.4	1.1.1.1	0x64e	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:30.782980919 CEST	192.168.2.4	1.1.1.1	0xb875	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:30.783104897 CEST	192.168.2.4	1.1.1.1	0xdcc2	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:31.987628937 CEST	192.168.2.4	1.1.1.1	0xf84f	Standard query (0)	cdn.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:31.987999916 CEST	192.168.2.4	1.1.1.1	0xac65	Standard query (0)	cdn.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:32.604958057 CEST	192.168.2.4	1.1.1.1	0x9a52	Standard query (0)	moversguide.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.605143070 CEST	192.168.2.4	1.1.1.1	0xe64f	Standard query (0)	moversguide.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:32.720376015 CEST	192.168.2.4	1.1.1.1	0x17d	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.720539093 CEST	192.168.2.4	1.1.1.1	0xbc49	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:34.957916975 CEST	192.168.2.4	1.1.1.1	0x7cca	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:34.958189011 CEST	192.168.2.4	1.1.1.1	0x4724	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:36.757438898 CEST	192.168.2.4	1.1.1.1	0x7dcd	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:36.757586002 CEST	192.168.2.4	1.1.1.1	0x73b7	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:38.396210909 CEST	192.168.2.4	1.1.1.1	0x3aae	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:38.399743080 CEST	192.168.2.4	1.1.1.1	0x6e7	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:39.097754002 CEST	192.168.2.4	1.1.1.1	0x14e7	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:39.097922087 CEST	192.168.2.4	1.1.1.1	0x81aa	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:41.118558884 CEST	192.168.2.4	1.1.1.1	0x4dcc	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.119010925 CEST	192.168.2.4	1.1.1.1	0x1dc5	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:41.157552004 CEST	192.168.2.4	1.1.1.1	0x2fd3	Standard query (0)	api.segment.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.157819033 CEST	192.168.2.4	1.1.1.1	0xf8ac	Standard query (0)	api.segment.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:41.175247908 CEST	192.168.2.4	1.1.1.1	0x4cc5	Standard query (0)	api.ampersend.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.175632000 CEST	192.168.2.4	1.1.1.1	0xc633	Standard query (0)	api.ampersend.io	65	IN (0x0001)	false
Oct 6, 2024 18:53:43.604090929 CEST	192.168.2.4	1.1.1.1	0xdf55	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:43.605988026 CEST	192.168.2.4	1.1.1.1	0x84d0	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:43.619791031 CEST	192.168.2.4	1.1.1.1	0xb0d0	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:45.338052988 CEST	192.168.2.4	1.1.1.1	0x516c	Standard query (0)	aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:45.339128971 CEST	192.168.2.4	1.1.1.1	0xc047	Standard query (0)	aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.420264006 CEST	192.168.2.4	1.1.1.1	0x5734	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.420412064 CEST	192.168.2.4	1.1.1.1	0xb7bf	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:45.425649881 CEST	192.168.2.4	1.1.1.1	0x6ad	Standard query (0)	store.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.425822973 CEST	192.168.2.4	1.1.1.1	0x1b46	Standard query (0)	store.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:45.776571989 CEST	192.168.2.4	1.1.1.1	0x46a3	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.777062893 CEST	192.168.2.4	1.1.1.1	0x7a60	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:47.380484104 CEST	192.168.2.4	1.1.1.1	0x5889	Standard query (0)	content.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:53:47.380484104 CEST	192.168.2.4	1.1.1.1	0xd0fc	Standard query (0)	content.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.855817080 CEST	192.168.2.4	1.1.1.1	0xc7e7	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.856179953 CEST	192.168.2.4	1.1.1.1	0x6ba8	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:49.870852947 CEST	192.168.2.4	1.1.1.1	0x8c31	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.871011019 CEST	192.168.2.4	1.1.1.1	0x8232	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:49.894383907 CEST	192.168.2.4	1.1.1.1	0xa7d6	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.894920111 CEST	192.168.2.4	1.1.1.1	0x7e4d	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:50.058924913 CEST	192.168.2.4	1.1.1.1	0x30c7	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.060244083 CEST	192.168.2.4	1.1.1.1	0xc697	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:50.068578959 CEST	192.168.2.4	1.1.1.1	0x3c52	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:50.178113937 CEST	192.168.2.4	1.1.1.1	0xe901	Standard query (0)	eu-aa.online-metrix.net	28	IN (0x0001)	false
Oct 6, 2024 18:53:50.181674004 CEST	192.168.2.4	1.1.1.1	0x4d4	Standard query (0)	eu-aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.770512104 CEST	192.168.2.4	1.1.1.1	0xe5ac	Standard query (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.770792961 CEST	192.168.2.4	1.1.1.1	0x1583	Standard query (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:50.834963083 CEST	192.168.2.4	1.1.1.1	0x590a	Standard query (0)	h64.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.835196972 CEST	192.168.2.4	1.1.1.1	0xde93	Standard query (0)	h64.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:51.659594059 CEST	192.168.2.4	1.1.1.1	0x9f66	Standard query (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:51.659763098 CEST	192.168.2.4	1.1.1.1	0x97af	Standard query (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:52.824522018 CEST	192.168.2.4	1.1.1.1	0xf480	Standard query (0)	h.online-metrix.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:52.824727058 CEST	192.168.2.4	1.1.1.1	0x3dba	Standard query (0)	h.online-metrix.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:56.700412989 CEST	192.168.2.4	1.1.1.1	0x9b82	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:56.700797081 CEST	192.168.2.4	1.1.1.1	0xbf2b	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 6, 2024 18:53:57.441997051 CEST	192.168.2.4	1.1.1.1	0x966d	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:57.442138910 CEST	192.168.2.4	1.1.1.1	0x4f9b	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Oct 6, 2024 18:54:00.727799892 CEST	192.168.2.4	1.1.1.1	0xb5e0	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.727937937 CEST	192.168.2.4	1.1.1.1	0xda2b	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 6, 2024 18:54:00.756712914 CEST	192.168.2.4	1.1.1.1	0xb5d3	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.756901979 CEST	192.168.2.4	1.1.1.1	0x9064	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 18:54:01.673389912 CEST	192.168.2.4	1.1.1.1	0x52d8	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.673603058 CEST	192.168.2.4	1.1.1.1	0xc75	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 6, 2024 18:54:01.676867008 CEST	192.168.2.4	1.1.1.1	0x9278	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.677056074 CEST	192.168.2.4	1.1.1.1	0xd649	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 18:54:01.848009109 CEST	192.168.2.4	1.1.1.1	0x49c4	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.848130941 CEST	192.168.2.4	1.1.1.1	0x5d86	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Oct 6, 2024 18:54:03.315181017 CEST	192.168.2.4	1.1.1.1	0x6956	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:03.315359116 CEST	192.168.2.4	1.1.1.1	0x8dde	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Oct 6, 2024 18:54:10.251302958 CEST	192.168.2.4	1.1.1.1	0x5469	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:10.251668930 CEST	192.168.2.4	1.1.1.1	0x8f1	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:54:14.225747108 CEST	192.168.2.4	1.1.1.1	0x33df	Standard query (0)	cns.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:14.226264954 CEST	192.168.2.4	1.1.1.1	0x648c	Standard query (0)	cns.usps.com	65	IN (0x0001)	false
Oct 6, 2024 18:54:23.108884096 CEST	192.168.2.4	1.1.1.1	0xd355	Standard query (0)	reg.usps.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:23.109436989 CEST	192.168.2.4	1.1.1.1	0xf438	Standard query (0)	reg.usps.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 18:53:08.225853920 CEST	1.1.1.1	192.168.2.4	0xce74	No error (0)	us-usps-pxcyuc.xyz		170.106.137.178	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:10.216211081 CEST	1.1.1.1	192.168.2.4	0xb30	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 18:53:10.216701031 CEST	1.1.1.1	192.168.2.4	0x5abb	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:11.212759018 CEST	1.1.1.1	192.168.2.4	0xbb0	No error (0)	us-usps-pxcyuc.xyz		170.106.137.178	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:23.461365938 CEST	1.1.1.1	192.168.2.4	0xd871	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:23.461365938 CEST	1.1.1.1	192.168.2.4	0xd871	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:28.376126051 CEST	1.1.1.1	192.168.2.4	0xc250	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:28.376126051 CEST	1.1.1.1	192.168.2.4	0xc250	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:28.381922007 CEST	1.1.1.1	192.168.2.4	0x64e	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:30.802484035 CEST	1.1.1.1	192.168.2.4	0xb875	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:30.802484035 CEST	1.1.1.1	192.168.2.4	0xb875	No error (0)	dbixd6p3vn7bv.cloudfront.net		18.165.122.64	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:30.802484035 CEST	1.1.1.1	192.168.2.4	0xb875	No error (0)	dbixd6p3vn7bv.cloudfront.net		18.165.122.73	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:30.802484035 CEST	1.1.1.1	192.168.2.4	0xb875	No error (0)	dbixd6p3vn7bv.cloudfront.net		18.165.122.106	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:30.802484035 CEST	1.1.1.1	192.168.2.4	0xb875	No error (0)	dbixd6p3vn7bv.cloudfront.net		18.165.122.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:30.832828999 CEST	1.1.1.1	192.168.2.4	0xdcc2	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.010463953 CEST	1.1.1.1	192.168.2.4	0xf84f	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.010463953 CEST	1.1.1.1	192.168.2.4	0xf84f	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.17	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.010463953 CEST	1.1.1.1	192.168.2.4	0xf84f	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.47	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.010463953 CEST	1.1.1.1	192.168.2.4	0xf84f	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.83	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.010463953 CEST	1.1.1.1	192.168.2.4	0xf84f	No error (0)	dbixd6p3vn7bv.cloudfront.net		13.35.58.53	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.034101963 CEST	1.1.1.1	192.168.2.4	0xac65	No error (0)	cdn.ampersend.io	dbixd6p3vn7bv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.728075027 CEST	1.1.1.1	192.168.2.4	0xbc49	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.729437113 CEST	1.1.1.1	192.168.2.4	0x17d	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.729437113 CEST	1.1.1.1	192.168.2.4	0x17d	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:32.734181881 CEST	1.1.1.1	192.168.2.4	0xe64f	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.737528086 CEST	1.1.1.1	192.168.2.4	0x9a52	No error (0)	moversguide.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:32.737528086 CEST	1.1.1.1	192.168.2.4	0x9a52	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:34.965054035 CEST	1.1.1.1	192.168.2.4	0x7cca	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:34.965054035 CEST	1.1.1.1	192.168.2.4	0x7cca	No error (0)	d296je7bbdd650.cloudfront.net		99.86.8.175	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:34.966268063 CEST	1.1.1.1	192.168.2.4	0x4724	No error (0)	cdn.segment.com	d296je7bbdd650.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:36.794351101 CEST	1.1.1.1	192.168.2.4	0x73b7	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:36.814939976 CEST	1.1.1.1	192.168.2.4	0x7dcd	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:36.814939976 CEST	1.1.1.1	192.168.2.4	0x7dcd	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		52.21.60.247	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:36.814939976 CEST	1.1.1.1	192.168.2.4	0x7dcd	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		34.203.32.92	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:36.814939976 CEST	1.1.1.1	192.168.2.4	0x7dcd	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.210.62.10	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:36.814939976 CEST	1.1.1.1	192.168.2.4	0x7dcd	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.83.47.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:38.403552055 CEST	1.1.1.1	192.168.2.4	0x3aae	No error (0)	api.segment.io		44.234.198.184	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:38.403552055 CEST	1.1.1.1	192.168.2.4	0x3aae	No error (0)	api.segment.io		34.223.74.168	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:38.403552055 CEST	1.1.1.1	192.168.2.4	0x3aae	No error (0)	api.segment.io		35.81.90.104	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:39.273803949 CEST	1.1.1.1	192.168.2.4	0x14e7	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:39.273803949 CEST	1.1.1.1	192.168.2.4	0x14e7	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:39.274125099 CEST	1.1.1.1	192.168.2.4	0x81aa	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:40.150151968 CEST	1.1.1.1	192.168.2.4	0x79e0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:40.150151968 CEST	1.1.1.1	192.168.2.4	0x79e0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.126199007 CEST	1.1.1.1	192.168.2.4	0x4dcc	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:41.126199007 CEST	1.1.1.1	192.168.2.4	0x4dcc	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.164566040 CEST	1.1.1.1	192.168.2.4	0x2fd3	No error (0)	api.segment.io		44.234.198.184	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.164566040 CEST	1.1.1.1	192.168.2.4	0x2fd3	No error (0)	api.segment.io		34.223.74.168	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.164566040 CEST	1.1.1.1	192.168.2.4	0x2fd3	No error (0)	api.segment.io		35.81.90.104	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.218628883 CEST	1.1.1.1	192.168.2.4	0x4cc5	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:41.218628883 CEST	1.1.1.1	192.168.2.4	0x4cc5	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.210.62.10	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.218628883 CEST	1.1.1.1	192.168.2.4	0x4cc5	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		52.21.60.247	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.218628883 CEST	1.1.1.1	192.168.2.4	0x4cc5	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		34.203.32.92	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.218628883 CEST	1.1.1.1	192.168.2.4	0x4cc5	No error (0)	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		54.83.47.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:41.228601933 CEST	1.1.1.1	192.168.2.4	0xc633	No error (0)	api.ampersend.io	amp-v3-public-api-production-1079934655.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:41.256155014 CEST	1.1.1.1	192.168.2.4	0x1dc5	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:43.611423969 CEST	1.1.1.1	192.168.2.4	0xdf55	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.345901012 CEST	1.1.1.1	192.168.2.4	0xc047	No error (0)	aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.428350925 CEST	1.1.1.1	192.168.2.4	0x5734	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.428350925 CEST	1.1.1.1	192.168.2.4	0x5734	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.551599979 CEST	1.1.1.1	192.168.2.4	0x1b46	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.591242075 CEST	1.1.1.1	192.168.2.4	0xb7bf	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.602276087 CEST	1.1.1.1	192.168.2.4	0x6ad	No error (0)	store.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.602276087 CEST	1.1.1.1	192.168.2.4	0x6ad	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:45.955410004 CEST	1.1.1.1	192.168.2.4	0x7a60	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.959518909 CEST	1.1.1.1	192.168.2.4	0x46a3	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:45.959518909 CEST	1.1.1.1	192.168.2.4	0x46a3	No error (0)	h-usps.online-metrix.net		91.235.133.188	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:47.506006002 CEST	1.1.1.1	192.168.2.4	0x5889	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:47.517868042 CEST	1.1.1.1	192.168.2.4	0xd0fc	No error (0)	content.usps.com	h-usps.online-metrix.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:47.517868042 CEST	1.1.1.1	192.168.2.4	0xd0fc	No error (0)	h-usps.online-metrix.net		91.235.133.188	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.862878084 CEST	1.1.1.1	192.168.2.4	0xc7e7	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.879905939 CEST	1.1.1.1	192.168.2.4	0x8c31	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:49.903316975 CEST	1.1.1.1	192.168.2.4	0xa7d6	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.066637993 CEST	1.1.1.1	192.168.2.4	0x30c7	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.229959011 CEST	1.1.1.1	192.168.2.4	0x4d4	No error (0)	eu-aa.online-metrix.net		91.235.132.129	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.787704945 CEST	1.1.1.1	192.168.2.4	0xe5ac	No error (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:50.842756987 CEST	1.1.1.1	192.168.2.4	0x590a	No error (0)	h64.online-metrix.net		192.225.158.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:51.677447081 CEST	1.1.1.1	192.168.2.4	0x9f66	No error (0)	3fym673kddrx36xyceyzg7ia35lysr423ruy6ujkc3efe65a08d94df8am1.e.aa.online-metrix.net		91.235.134.131	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:52.832292080 CEST	1.1.1.1	192.168.2.4	0xf480	No error (0)	h.online-metrix.net		91.235.132.130	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:56.709405899 CEST	1.1.1.1	192.168.2.4	0xbf2b	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Oct 6, 2024 18:53:56.709747076 CEST	1.1.1.1	192.168.2.4	0x9b82	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:56.709747076 CEST	1.1.1.1	192.168.2.4	0x9b82	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:57.449671030 CEST	1.1.1.1	192.168.2.4	0x4f9b	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Oct 6, 2024 18:53:57.450798035 CEST	1.1.1.1	192.168.2.4	0x966d	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:57.450798035 CEST	1.1.1.1	192.168.2.4	0x966d	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:53:59.366323948 CEST	1.1.1.1	192.168.2.4	0xb676	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:53:59.366323948 CEST	1.1.1.1	192.168.2.4	0xb676	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.736282110 CEST	1.1.1.1	192.168.2.4	0xb5e0	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:00.736282110 CEST	1.1.1.1	192.168.2.4	0xb5e0	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.60	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.736282110 CEST	1.1.1.1	192.168.2.4	0xb5e0	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.15	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.736282110 CEST	1.1.1.1	192.168.2.4	0xb5e0	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.24	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.736282110 CEST	1.1.1.1	192.168.2.4	0xb5e0	No error (0)	d27f3qgc9anoq2.cloudfront.net		108.156.60.13	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.746299982 CEST	1.1.1.1	192.168.2.4	0xda2b	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:00.763678074 CEST	1.1.1.1	192.168.2.4	0xb5d3	No error (0)	stats.g.doubleclick.net		142.250.110.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.763678074 CEST	1.1.1.1	192.168.2.4	0xb5d3	No error (0)	stats.g.doubleclick.net		142.250.110.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.763678074 CEST	1.1.1.1	192.168.2.4	0xb5d3	No error (0)	stats.g.doubleclick.net		142.250.110.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:00.763678074 CEST	1.1.1.1	192.168.2.4	0xb5d3	No error (0)	stats.g.doubleclick.net		142.250.110.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.013825893 CEST	1.1.1.1	192.168.2.4	0x477e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:01.013825893 CEST	1.1.1.1	192.168.2.4	0x477e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.685364008 CEST	1.1.1.1	192.168.2.4	0x9278	No error (0)	stats.g.doubleclick.net		64.233.167.157	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.685364008 CEST	1.1.1.1	192.168.2.4	0x9278	No error (0)	stats.g.doubleclick.net		64.233.167.155	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.685364008 CEST	1.1.1.1	192.168.2.4	0x9278	No error (0)	stats.g.doubleclick.net		64.233.167.156	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.685364008 CEST	1.1.1.1	192.168.2.4	0x9278	No error (0)	stats.g.doubleclick.net		64.233.167.154	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.697913885 CEST	1.1.1.1	192.168.2.4	0x52d8	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:01.698740005 CEST	1.1.1.1	192.168.2.4	0xc75	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:01.854882002 CEST	1.1.1.1	192.168.2.4	0x49c4	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:01.854882002 CEST	1.1.1.1	192.168.2.4	0x49c4	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.91	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.854882002 CEST	1.1.1.1	192.168.2.4	0x49c4	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.113	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.854882002 CEST	1.1.1.1	192.168.2.4	0x49c4	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.21	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.854882002 CEST	1.1.1.1	192.168.2.4	0x49c4	No error (0)	d27f3qgc9anoq2.cloudfront.net		13.32.27.50	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:01.856228113 CEST	1.1.1.1	192.168.2.4	0x5d86	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:03.323923111 CEST	1.1.1.1	192.168.2.4	0x8dde	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:03.342355013 CEST	1.1.1.1	192.168.2.4	0x6956	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:10.379607916 CEST	1.1.1.1	192.168.2.4	0x8f1	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:10.421781063 CEST	1.1.1.1	192.168.2.4	0x5469	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:10.421781063 CEST	1.1.1.1	192.168.2.4	0x5469	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:14.351974964 CEST	1.1.1.1	192.168.2.4	0x648c	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:14.399650097 CEST	1.1.1.1	192.168.2.4	0x33df	No error (0)	cns.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:14.399650097 CEST	1.1.1.1	192.168.2.4	0x33df	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:18.605874062 CEST	1.1.1.1	192.168.2.4	0xb618	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:18.605874062 CEST	1.1.1.1	192.168.2.4	0xb618	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:23.234217882 CEST	1.1.1.1	192.168.2.4	0xd355	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 18:54:23.234217882 CEST	1.1.1.1	192.168.2.4	0xd355	No error (0)	cs1799.wpc.upsiloncdn.net		192.229.221.165	A (IP address)	IN (0x0001)	false
Oct 6, 2024 18:54:23.235856056 CEST	1.1.1.1	192.168.2.4	0xf438	No error (0)	reg.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:08 UTC	668	OUT	GET /update/ HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:09 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"666-190b57e26f0"
2024-10-06 16:53:09 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:09 UTC	592	OUT	GET /update/assets/index-4b020bd6.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://us-usps-pxcyuc.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:09 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:09 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-10-06 16:53:09 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-10-06 16:53:09 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:09 UTC	573	OUT	GET /update/assets/f6170fbbTeKnX.css HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-pxcyuc.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:10 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:09 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0"
2024-10-06 16:53:10 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:10 UTC	546	OUT	GET /update/assets/143268e9KXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:11 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-10-06 16:53:11 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:11 UTC	546	OUT	GET /update/assets/f0ee2557KXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:11 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-10-06 16:53:11 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-10-06 16:53:11 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-10-06 16:53:11 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-10-06 16:53:11 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us-usps-pxcyuc.xyz/update/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Windows Analysis Report
https://us-usps-pxcyuc.xyz/update/

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:11 UTC	599	OUT	GET /favicon.ico HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us-usps-pxcyuc.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:11 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:11 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-10-06 16:53:11 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-10-06 16:53:11 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:11 UTC	373	OUT	GET /update/assets/index-4b020bd6.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:11 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-10-06 16:53:12 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-10-06 16:53:12 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 16:53:12 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=258750 Date: Sun, 06 Oct 2024 16:53:12 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	573	OUT	GET /update/assets/667bf194TeKnX.css HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-pxcyuc.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	349	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 68953 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"10d59-190b57e26f0"
2024-10-06 16:53:12 UTC	16035	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 7b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 38 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 69 6e 70 75 74 2d 2d 73 65 61 72 63 68 2e 73 65 61 72 63 68 2d 2d 73 75 62 6d 69 74 7b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 65 33 39 34 65 64 39 37 54 65 4b 6e 58 2e 73 76 67 29 6e 6f 2d 72 65 Data Ascii: vigation input.global-header--search-track{border:0;width:80%;display:inline-block;vertical-align:bottom;height:25px;padding-left:18px;background:#fff}.global--navigation input.input--search.search--submit{border:0;background:url(./e394ed97TeKnX.svg)no-re
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 38 37 66 32 36 62 35 39 54 65 4b 6e 58 2e 73 76 67 29 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 Data Ascii: :before,.global--navigation nav .tool-informed a:focus:before,.global--navigation nav .tool-informed a:hover:before{background:url(./87f26b59TeKnX.svg)}.global--navigation nav .tool-intercept a:before,.global--navigation nav .tool-intercept a:focus:before
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 7b 77 69 64 74 68 3a 31 35 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 Data Ascii: on nav li.menuheader:nth-of-type(1){width:15%}.global--navigation nav li.menuheader:nth-of-type(2){width:12%}.global--navigation nav li.menuheader:nth-of-type(3){width:12%}.global--navigation nav li.menuheader:nth-of-type(4){width:12%}.global--navigation
2024-10-06 16:53:13 UTC	3766	IN	Data Raw: 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 3b 73 72 63 3a 75 72 6c 28 2e 2f 63 63 34 36 39 34 30 36 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 32 65 32 65 66 36 33 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 66 64 37 61 66 36 31 54 65 4b 6e 58 2e 77 6f 66 66 29 Data Ascii: nt-face{font-family:HelveticaNeueW02-65Medi;src:url(./cc469406TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-55Roma;src:url(./f2e2ef63TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-75Bold;src:url(./ffd7af61TeKnX.woff)

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	573	OUT	GET /update/assets/4cd1ec68TeKnX.css HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us-usps-pxcyuc.xyz/update/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: text/css; charset=utf-8 Content-Length: 323 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"143-190b57e26f0"
2024-10-06 16:53:12 UTC	323	IN	Data Raw: 68 31 2e 74 69 74 6c 65 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 63 6f 6c 6f 72 3a 23 32 34 35 34 39 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 64 69 76 2e 63 6f 6e 74 65 6e 74 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 75 6c 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 75 6c 5b 64 61 74 61 2d 76 Data Ascii: h1.title[data-v-fe5ae731]{color:#24549d;font-size:2rem;text-align:center}div.content[data-v-fe5ae731]{padding:10px;background-color:#f2f2f2;border-radius:3px}ul[data-v-fe5ae731]{list-style:disc outside none!important;list-style:initial!important}ul[data-v

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	546	OUT	GET /update/assets/78d59236KXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35025 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"88d1-190b57e2ec0"
2024-10-06 16:53:12 UTC	16022	IN	Data Raw: 76 61 72 20 61 31 39 5f 30 78 65 64 64 35 37 36 3d 61 31 39 5f 30 78 31 36 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 66 30 63 61 2c 5f 30 78 35 32 30 36 64 33 29 7b 76 61 72 20 5f 30 78 33 37 34 38 61 39 3d 61 31 39 5f 30 78 31 36 61 35 2c 5f 30 78 32 34 63 32 61 35 3d 5f 30 78 32 35 66 30 63 61 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 34 65 34 30 63 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 65 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 34 34 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 62 35 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 61 Data Ascii: var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2*(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1a
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 37 31 28 30 78 31 64 62 29 2c 5f 30 78 35 39 39 39 37 31 28 30 78 31 62 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 37 26 26 21 70 28 5b 27 69 6e 74 65 72 6e 65 74 5f 65 27 2b 27 78 70 6c 6f 72 65 72 27 5d 2c 5f 30 78 35 31 36 35 64 35 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 31 26 26 21 70 28 5b 5f 30 78 35 39 39 39 37 31 28 30 78 31 36 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 5f 30 78 34 32 62 37 34 38 29 7b 76 61 72 20 5f 30 78 33 63 35 61 62 64 3d 61 31 39 5f 30 78 65 64 64 35 37 36 2c 5f 30 78 34 62 32 36 64 38 3d 5f 30 78 34 32 62 37 34 38 5b 5f 30 78 33 63 35 61 62 64 28 30 78 31 35 38 29 2b 27 6e 64 27 5d 3b 69 66 28 5f 30 78 34 62 32 36 64 38 Data Ascii: 71(0x1db),_0x599971(0x1b4)],_0x1a263a)\|\|_0xce2023===0x27&&!p(['internet_e'+'xplorer'],_0x5165d5)\|\|_0xce2023===0x21&&!p([_0x599971(0x164)],_0x1a263a);}}function F(_0x42b748){var _0x3c5abd=a19_0xedd576,_0x4b26d8=_0x42b748[_0x3c5abd(0x158)+'nd'];if(_0x4b26d8
2024-10-06 16:53:13 UTC	2619	IN	Data Raw: 74 61 74 65 27 3a 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 61 32 29 5d 2c 27 65 72 72 6f 72 27 3a 27 27 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 29 5d 2c 27 3a 5c 78 32 30 27 29 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 30 62 29 5d 29 7d 3a 5f 30 78 35 36 65 32 33 35 5b 5f 30 78 31 63 34 66 30 37 5d 3d 7b 27 73 74 61 74 65 27 3a 2d 30 78 33 2c 27 65 72 72 6f 72 27 3a 5f 30 78 33 64 38 61 61 38 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 27 27 5b 27 63 6f 6e 63 61 74 27 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 Data Ascii: tate':_0x3d8aa8[_0x24dfef(0xa2)],'error':''[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x172)],':\x20')[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x10b)])}:_0x56e235[_0x1c4f07]={'state':-0x3,'error':_0x3d8aa8 instanceof Error?''['concat'](_0x3d8aa8[_0x24dfef(0x172

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	546	OUT	GET /update/assets/09bf01f8KXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2039 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"7f7-190b57e26f0"
2024-10-06 16:53:12 UTC	2039	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 39 30 61 32 30 34 2c 5f 30 78 33 61 31 32 32 34 29 7b 63 6f 6e 73 74 20 5f 30 78 35 61 32 62 35 66 3d 61 30 5f 30 78 31 35 66 35 2c 5f 30 78 32 32 39 38 36 65 3d 5f 30 78 39 30 61 32 30 34 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 31 30 37 61 36 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 64 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 32 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 63 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 Data Ascii: (function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3*(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	546	OUT	GET /update/assets/7357514cKXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:12 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2613 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"a35-190b57e2ec0"
2024-10-06 16:53:12 UTC	2613	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 34 32 66 62 2c 5f 30 78 32 66 30 63 63 30 29 7b 63 6f 6e 73 74 20 5f 30 78 33 34 32 37 61 32 3d 61 31 38 5f 30 78 35 63 38 63 2c 5f 30 78 35 35 35 62 30 36 3d 5f 30 78 31 38 34 32 66 62 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 31 38 62 61 62 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 38 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 62 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 65 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 33 29 29 2f 30 78 34 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 Data Ascii: (function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1*(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:12 UTC	546	OUT	GET /update/assets/62ff200fKXMp5.js HTTP/1.1 Host: us-usps-pxcyuc.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us-usps-pxcyuc.xyz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 16:53:13 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 06 Oct 2024 16:53:12 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 70095 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"111cf-190b57e2ec0"
2024-10-06 16:53:13 UTC	16021	IN	Data Raw: 63 6f 6e 73 74 20 61 31 34 5f 30 78 35 61 39 34 39 36 3d 61 31 34 5f 30 78 66 34 37 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 62 64 30 33 2c 5f 30 78 34 64 64 33 33 35 29 7b 63 6f 6e 73 74 20 5f 30 78 31 30 39 36 66 39 3d 61 31 34 5f 30 78 66 34 37 31 2c 5f 30 78 31 61 33 62 36 34 3d 5f 30 78 31 33 62 64 30 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 65 30 66 65 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 37 37 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 33 30 61 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 34 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 Data Ascii: const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3*(parseInt(_0x1096
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 73 3a 2f 2f 77 77 27 2b 27 77 2e 75 73 70 73 2e 63 6f 6d 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 30 34 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 37 64 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 63 29 29 5d 29 5d 29 2c 65 28 27 75 6c 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 27 2c 27 61 72 69 61 2d 68 69 64 64 65 6e 27 3a 27 74 72 75 65 27 7d 2c 5b 65 28 27 68 33 27 2c 7b 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 63 64 29 2b 27 6c 79 27 7d 2c 27 5c 75 30 30 61 30 27 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d Data Ascii: s://ww'+'w.usps.com'+a14_0x5a9496(0x231)+a14_0x5a9496(0x404)},a14_0x5a9496(0x37d)+a14_0x5a9496(0x26c))])]),e('ul',{'role':'menu','aria-hidden':'true'},[e('h3',{'class':a14_0x5a9496(0x3cd)+'ly'},'\u00a0'),e('li',null,[e('a',{'role':'menuitem','tabindex':'-
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 5f 30 78 35 61 39 34 39 36 28 30 78 34 61 33 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 32 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 64 65 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 33 37 29 2b 27 69 6c 27 29 5d 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d 31 27 2c 27 68 72 65 66 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 35 38 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 64 39 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 Data Ascii: _0x5a9496(0x4a3)+a14_0x5a9496(0x262)},a14_0x5a9496(0x3de)+a14_0x5a9496(0x337)+'il')]),e('li',null,[e('a',{'role':'menuitem','tabindex':'-1','href':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x231)+a14_0x5a9496(0x258)+a14_0x5a9496(0x4d9)},a14_0x5a9496(0
2024-10-06 16:53:13 UTC	16384	IN	Data Raw: 30 78 35 61 39 34 39 36 28 30 78 32 32 38 29 7d 29 2c 65 28 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 65 64 29 2c 7b 27 72 6f 6c 65 27 3a 27 73 65 61 72 63 68 27 2c 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 36 61 29 2b 27 62 61 6c 2d 68 65 61 64 65 72 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 39 31 29 2c 27 61 63 74 69 6f 6e 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 36 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 32 30 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 31 61 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 63 35 29 7d 2c 5b 65 28 27 73 70 61 6e 27 2c 7b 27 61 72 Data Ascii: 0x5a9496(0x228)}),e(a14_0x5a9496(0x3ed),{'role':'search','class':a14_0x5a9496(0x46a)+'bal-header'+a14_0x5a9496(0x491),'action':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x36c)+a14_0x5a9496(0x420)+a14_0x5a9496(0x1ac)+a14_0x5a9496(0x2c5)},[e('span',{'ar
2024-10-06 16:53:13 UTC	4922	IN	Data Raw: 27 2c 27 6f 6d 2d 6d 61 69 6c 2e 68 74 27 2c 27 69 6e 70 75 74 27 2c 27 73 74 63 61 6c 63 2e 75 73 70 27 2c 27 73 69 6e 65 73 73 27 2c 27 65 6c 69 76 65 72 79 27 2c 27 6e 61 76 2d 66 75 6c 6c 27 2c 27 61 62 65 6c 49 6e 66 6f 72 6d 27 2c 27 53 6b 69 70 5c 78 32 30 48 65 6c 70 5c 78 32 30 27 2c 27 4d 69 6c 69 74 61 72 79 5c 78 32 30 26 27 2c 27 76 69 63 65 73 2e 68 74 6d 27 2c 27 2f 69 6e 74 65 72 6e 61 74 69 27 2c 27 72 6e 61 74 69 6f 6e 61 6c 2d 27 2c 27 74 6f 6f 6c 2d 69 6e 74 65 72 27 2c 27 68 2d 74 72 61 63 6b 2d 69 6e 27 2c 27 5c 78 32 32 68 74 74 70 73 3a 2f 2f 66 27 2c 27 69 6d 61 67 65 73 2f 34 38 2e 27 2c 27 61 74 69 6f 6e 2e 68 74 6d 6c 27 2c 27 65 72 2e 68 74 6d 27 2c 27 72 63 65 70 74 2e 68 74 6d 27 2c 27 2d 66 6f 6f 74 65 72 2d 2d 6e 27 2c 27 Data Ascii: ','om-mail.ht','input','stcalc.usp','siness','elivery','nav-full','abelInform','Skip\x20Help\x20','Military\x20&','vices.htm','/internati','rnational-','tool-inter','h-track-in','\x22https://f','images/48.','ation.html','er.htm','rcept.htm','-footer--n','

Timestamp	Bytes transferred	Direction	Data
2024-10-06 16:53:13 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 16:53:13 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=258685 Date: Sun, 06 Oct 2024 16:53:13 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-06 16:53:13 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}