Edit tour

Windows Analysis Report
https://hgdffds.cyou/

Overview

General Information

Sample URL:	https://hgdffds.cyou/
Analysis ID:	1428490
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 --field-trial-handle=2432,i,14948990831735324925,17602649722396218757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hgdffds.cyou/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9eaae524-fc57-4196-aa0a-a0c7cf304e37&u_sclid=8660dedb-6af1-4531-b113-d51105e7c3d9
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9eaae524-fc57-4196-aa0a-a0c7cf304e37&u_sclid=8660dedb-6af1-4531-b113-d51105e7c3d9
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://ct.pinterest.com/ct.html
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://tools.usps.com/find-location.htm	HTTP Parser: Iframe src: https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9eaae524-fc57-4196-aa0a-a0c7cf304e37&u_sclid=8660dedb-6af1-4531-b113-d51105e7c3d9

Source: https://8905209.fls.doubleclick.net/activityi;dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108?

HTTP Parser: Base64 decoded: floodlight_config_id: 8905209advertiser_domain: "https://doubleclick.net"xfa_attribution_interaction_type: CONVERSIONdebug_key: 4355182761169815269ctc_conversion_bucket: 7archetype_id: 1archetype_id: 3archetype_id: 4archetype_id: 5archetype_id: 6...

Source: https://td.doubleclick.net/td/rul/978081151?random=1713487460484&cv=11&fst=1713487460484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	HTTP Parser: No favicon
Source: https://crb.kargo.com/api/v1/initsync/61e0c856-4d3b-41a1-a161-12dba178d193?partners=Tapad&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	HTTP Parser: No favicon
Source: https://www.usps.com/globals/site-index.htm	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487473009&cv=11&fst=1713487473009&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487477500&cv=11&fst=1713487477500&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487482897&cv=11&fst=1713487482897&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	HTTP Parser: No favicon
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No favicon
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://www.usps.com/help/contact-us.htm	HTTP Parser: No favicon
Source: https://www.usps.com/help/contact-us.htm	HTTP Parser: No favicon
Source: https://www.usps.com/help/contact-us.htm	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487505235&cv=11&fst=1713487505235&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&hn=www.googleadservices.com&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://www.usps.com/manage/informed-delivery.htm	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/978081151?random=1713487512834&cv=11&fst=1713487512834&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&hn=www.googleadservices.com&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://8905209.fls.doubleclick.net/activityi;dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108?	HTTP Parser: No favicon
Source: https://3976941.fls.doubleclick.net/activityi;dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm?	HTTP Parser: No favicon

Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="author".. found
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="author".. found
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="author".. found

Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="copyright".. found
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="copyright".. found
Source: https://tools.usps.com/find-location.htm	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.63.206.91
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: hgdffds.cyouConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.usps.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/welcome/bootstrap.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/css/megamenu-v4.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optimize.js?id=GTM-T35N9RL HTTP/1.1Host: www.googleoptimize.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/hamburger.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/logo_mobile.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/search.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/hamburger.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/location.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/find_zip.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/calculate_price.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/featured_clicknship.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/schedule_pickup.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/stamps.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/logo_mobile.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/search.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/holdmail.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/po_box.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/change_address.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/free_boxes.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/chinese_characters.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/utility_customer_service.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/utility_languages.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ship/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/search.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/gifts.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/schedule_pickup.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/location.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/stamps.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/find_zip.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/calculate_price.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/featured_clicknship.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/business.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/package-intercept.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/printcustomsforms.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/collectors.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/holdmail.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/chinese_characters.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/free_boxes.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/change_address.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/po_box.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/shipping-supplies.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /international/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /business/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manage/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/tracking.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/utility_languages.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/search.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/utility_customer_service.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/gifts.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ship/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/megamenu-v3.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/ge-login.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/requirejs/require.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/header-init-search.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/business.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/collectors.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/printcustomsforms.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/package-intercept.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/home/megamenu-additions.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/welcome/welcome-styles.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/main-sb.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/footer-sb.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/globals/jquery.min.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/globals/popper.min.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /test/nav/images/shipping-supplies.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /international/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /business/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manage/go-now.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/tracking.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/globals/bootstrap.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/welcome/welcome.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/welcome/jq.roughly.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/premium/id-phoneblur.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/passport-scanner.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.usps.com/global-elements/footer/css/main-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.usps.com/global-elements/footer/css/main-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/trackingCode.js HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.usps.com/global-elements/footer/css/main-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/scroll-red.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/assets/css/welcome/welcome-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/featured-small-biz-10.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/pp-cedarwood.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/po-boxes-box.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/facebook_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/instagram_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/threads_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/x_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/youtube_logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/require-jquery.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/helpers.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/search-fe.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /component-guide/blue-caret.svg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/assets/css/welcome/welcome-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/footer-logo.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/global-elements/footer/css/footer-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/premium/id-phoneblur.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/passport-scanner.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/scroll-red.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/featured-small-biz-10.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/pp-cedarwood.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/featured/po-boxes-box.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/facebook_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/instagram_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/threads_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/x_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/youtube_logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
Source: global traffic	HTTP traffic detected: GET /ct/core.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /component-guide/blue-caret.svg HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/footer-logo.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
Source: global traffic	HTTP traffic detected: GET /scevent.min.js HTTP/1.1Host: sc-static.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/pixel.js HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&gjid=1539724385&_gid=1668540185.1713487459&_u=YGBAiEABBAAAAGAEq~&z=840242377 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=1989466777.1713487459&jid=2051262266&gjid=1052602915&_gid=1668540185.1713487459&_u=YGDACUABBAAAAGAGqCC~&z=1445488733 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat/amzn.js HTTP/1.1Host: c.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487458951 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/resize-manager.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&_u=YGBAiEABBAAAAGAEq~&z=1427125113 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct/lib/main.6192ffb7.js HTTP/1.1Host: s.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/978081151?random=1713487460484&cv=11&fst=1713487460484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=07093c6e-4f8c-47e3-90a9-df076e0b6c1e&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487460175&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&_u=YGBAiEABBAAAAGAEq~&z=1427125113 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487458951 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978081151/?random=1713487460484&cv=11&fst=1713487460484&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487460175&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk\|t
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1713487461003&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487461012 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487460484&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqkyqiUTDFCu4oGQySV3fayfazt1IxiO-0kaiLyGNpScI6V1xJ&random=4076281178&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=event-source;navigation-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fpx%3Fid%3D1391229%26seg%3D24232669%26t%3D1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487460484&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqkyqiUTDFCu4oGQySV3fayfazt1IxiO-0kaiLyGNpScI6V1xJ&random=4076281178&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/xyz.js HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487461012 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1713487461003&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /integrations?source=usps HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jpuid?jsonp=RB.jsonPUID HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCLi39puGzYUDFXGvOgUdenIGbw%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D2194093973356%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D2031524609%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=8df227c1-3868-4673-9b60-b3e223bd931f&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCLi39puGzYUDFXGvOgUdenIGbw%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D2194093973356%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D2031524609%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=8df227c1-3868-4673-9b60-b3e223bd931f&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
Source: global traffic	HTTP traffic detected: GET /api/v1/initsync/61e0c856-4d3b-41a1-a161-12dba178d193?partners=Tapad&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d03-a0bb-4bd778aeac36%3Frid%3Da7f62f15-09b6-4c32-819b-f308e9c9ee1f%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://crb.kargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(i!EKxF!GV/K9sk@3@'s>Tig^G`
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d03-a0bb-4bd778aeac36%3Frid%3Da7f62f15-09b6-4c32-819b-f308e9c9ee1f%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://crb.kargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1713487465261; TapAd_DID=931fa39b-5a72-4e48-add6-b250d9527046
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
Source: global traffic	HTTP traffic detected: GET /api/v1/sync/Tapad/139b5024-cf81-4d03-a0bb-4bd778aeac36?rid=a7f62f15-09b6-4c32-819b-f308e9c9ee1f&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=931fa39b-5a72-4e48-add6-b250d9527046 HTTP/1.1Host: crb.kargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://crb.kargo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
Source: global traffic	HTTP traffic detected: GET /static/ct/token_create.js HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ct.html HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=ftfeq77&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/sync/Tapad/139b5024-cf81-4d03-a0bb-4bd778aeac36?rid=a7f62f15-09b6-4c32-819b-f308e9c9ee1f&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=931fa39b-5a72-4e48-add6-b250d9527046 HTTP/1.1Host: crb.kargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
Source: global traffic	HTTP traffic detected: GET /assets/images/home/favicon.ico HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/images/home/favicon.ico HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /globals/site-index.htm HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /iwov-resources/fixed-layout/one-column.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/customer.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/usps.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/css/components/components.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/css/elements.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/scripts/login.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/script/utility-bar-init.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/widgets/select-box.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/widgets/modal-box.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/text-fields.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/links.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/button-styles.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/modals.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/qt-modals.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/css/globals/tooltips.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/script/component-guide-init.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /assets/fonts/9a2e4855-380f-477f-950e-d98e8db54eac.woff HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.usps.com/global-elements/footer/css/main-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /t/trackingCode.js HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "32dd789522cc6923c80141fcf5d3a614"If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "26433217e805a89cf41adac58221316e"If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/ContentTemplates/common/css/usps.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487472640 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/components/utility-bar.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/jquery/dist/jquery.min.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=613e6c51-7685-45b8-bef0-5b31957f2f86&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487472927&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487472936 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/components/faq.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f
Source: global traffic	HTTP traffic detected: GET /assets/script/components/tips.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f
Source: global traffic	HTTP traffic detected: GET /td/rul/978081151?random=1713487473009&cv=11&fst=1713487473009&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978081151/?random=1713487473009&cv=11&fst=1713487473009&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487472640 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/script/components/tabs.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /assets/script/components/learn-more.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /assets/script/components/scalable-table.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /assets/script/components/video-player.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /assets/script/lib/jquery.magnific-popup.js HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487472936 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487472927&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487473009&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2JHkPVt-tnKlEdHUNi1gsF-jdQdzoqJ3C0tY0l0DOIIWIWmC&random=2215184526&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487473009&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2JHkPVt-tnKlEdHUNi1gsF-jdQdzoqJ3C0tY0l0DOIIWIWmC&random=2215184526&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/globals/site-index.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1If-Modified-Since: Fri, 19 Apr 2024 00:19:12 GMT
Source: global traffic	HTTP traffic detected: GET /t/trackingCode.js HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "32dd789522cc6923c80141fcf5d3a614"If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "26433217e805a89cf41adac58221316e"If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487476802 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487477011 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=6367275e-57a4-41ca-9aaf-2982466da930&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487477437&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487477132&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/978081151?random=1713487477500&cv=11&fst=1713487477500&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978081151/?random=1713487477500&cv=11&fst=1713487477500&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487477553 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;navigation-source;event-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487477011 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487477437&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487477132&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487476802 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487477500&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlW3764nJGY186F_0zXHR01T9Xi6YNZOpnsJEEAbgTbGgGLq8&random=1689325733&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487477553 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487477500&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlW3764nJGY186F_0zXHR01T9Xi6YNZOpnsJEEAbgTbGgGLq8&random=1689325733&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/xyz.js HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /integrations?source=usps HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCL_uhKSGzYUDFVxYCAQdSvUJxg%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D6354536417899%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1495885406%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=35e00348-67d6-4649-bf63-5b46cd06d410&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCL_uhKSGzYUDFVxYCAQdSvUJxg%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D6354536417899%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1495885406%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=35e00348-67d6-4649-bf63-5b46cd06d410&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNMeq%n^1.ZD$25ADb6_:!:w<$cb7C:
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f
Source: global traffic	HTTP traffic detected: GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23endnav&upid=ftfeq77&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487476.0.0.0; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487477.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487480400; kampyleUserSessionsCount=3; kampyleSessionPageCounter=1If-Modified-Since: Fri, 19 Apr 2024 00:19:12 GMT
Source: global traffic	HTTP traffic detected: GET /t/trackingCode.js HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "32dd789522cc6923c80141fcf5d3a614"If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "26433217e805a89cf41adac58221316e"If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362 HTTP/1.1Host: trkn.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487482936&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487482608 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9c988a59-cae7-410a-9543-1318a7b675ba&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487482777&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/978081151?random=1713487482897&cv=11&fst=1713487482897&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23skipallnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487482942 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978081151/?random=1713487482897&cv=11&fst=1713487482897&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362 HTTP/1.1Host: trkn.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487482608 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: 3976941.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487482777&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: triggerReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487482936&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487482897&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcq2kl4KEppHztJrKN02A6Rdv2Z7g1SfOedZkYAl3SmuY_a6F&random=3131734260&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23skipallnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487482942 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1Host: ara.paa-reporting-advertising.amazonConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGin]>TRD$25ADb6_:!:yRhdzOh?
Source: global traffic	HTTP traffic detected: GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487482897&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcq2kl4KEppHztJrKN02A6Rdv2Z7g1SfOedZkYAl3SmuY_a6F&random=3131734260&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/xyz.js HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /integrations?source=usps HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCJuM26aGzYUDFT2xOgUdteENwA%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7597053583434%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1863172012%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=2bc5471e-866f-4918-89f2-3c6d58560ca6&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCJuM26aGzYUDFT2xOgUdteENwA%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7597053583434%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1863172012%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=2bc5471e-866f-4918-89f2-3c6d58560ca6&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1Host: getrockerbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3976941.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
Source: global traffic	HTTP traffic detected: GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS
Source: global traffic	HTTP traffic detected: GET /seg?add=18564790 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS
Source: global traffic	HTTP traffic detected: GET /seg?add=18564794 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNYajC!dejT9sk@3@'s>Tk^j6T
Source: global traffic	HTTP traffic detected: GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&upid=ftfeq77&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /find-location.htm HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459
Source: global traffic	HTTP traffic detected: GET /styles/libs/bootstrap.min.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /styles/default-styles.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /styles/po-locator.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/css/megamenu-v4.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /4.11/esri/themes/light/main.css HTTP/1.1Host: js.arcgis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /4.11/ HTTP/1.1Host: js.arcgis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/modernizr/modernizr.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/megamenu-v3.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/ge-login.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /4.11/dojo/dojo.js HTTP/1.1Host: js.arcgis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/lib/script/requirejs/require.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/script/header-init-search.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/package-intercept.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/global-elements/header/css/megamenu-v4.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/blue-caret-down.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/styles/po-locator.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/blue-caret-down.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/styles/po-locator.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/nav-red-chevron.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/styles/default-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/compass.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/styles/po-locator.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/backtop.png HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/package-intercept.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/navigation-divider.png HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/styles/default-styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/libs/jquery3.min.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/libs/bootstrap.min.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/libs/moment.min.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/polo/po-locator.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/polo/po-locator-ajax.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/blue-caret-down.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/blue-caret-down.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/nav-red-chevron.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/compass.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/backtop.png HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /scripts/polo/po-locator-map.js HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/main-sb.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/css/footer-sb.css HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/list-icon.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/polocator/map-icon.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/votebymail/success-checkmark.svg HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /media/zipcode-lookup/navigation-divider.png HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /4.11/dojo/nls/dojo_en-us.js HTTP/1.1Host: js.arcgis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tools.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tools.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/trackingCode.js HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "32dd789522cc6923c80141fcf5d3a614"If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
Source: global traffic	HTTP traffic detected: GET /global-elements/header/POLOCATOR-header.htm HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/security/ipAddress HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/json;charset=utf-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getOnlineServices HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/json;charset=utf-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getfaqlinks HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/json;charset=utf-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getglossarylinks HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Content-Type: application/json;charset=utf-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/footer-logo.png HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/global-elements/footer/css/footer-sb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
Source: global traffic	HTTP traffic detected: GET /assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tools.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1Host: dap.digitalgov.govConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "26433217e805a89cf41adac58221316e"If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad"If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1Host: fast.fonts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkgIf-None-Match: "d41d8cd98f00b204e9800998ecf8427e"If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487495013&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978081151/?random=1713487495162&cv=11&fst=1713487495162&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9eaae524-fc57-4196-aa0a-a0c7cf304e37&u_sclid=8660dedb-6af1-4531-b113-d51105e7c3d9 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
Source: global traffic	HTTP traffic detected: GET /signals/config/533374513433337?v=2.9.154&r=stable&domain=tools.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1Host: www.redditstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tools.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /global-elements/navigation/TOOLS-navigation.htm HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487495449&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tools.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1Host: tr.snapchat.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tools.usps.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftools.usps.com%2Ffind-location.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487495455 HTTP/1.1Host: ct.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://tools.usps.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487495162&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeerc4GmYpORgVSkmi6THNJOe9nZm5zWbv-RJfK0xrtU7_Kz6&random=1497933720&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/POLOCATOR-footer.htm HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://tools.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/polocator/list-icon.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?ts=1713487495013&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
Source: global traffic	HTTP traffic detected: GET /media/votebymail/success-checkmark.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/images/footer-logo.png HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /media/polocator/map-icon.svg HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getglossarylinks HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getfaqlinks HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftools.usps.com%2Ffind-location.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487495455 HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487495449&dep=2%2CPAGE_LOAD HTTP/1.1Host: ct.pinterest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
Source: global traffic	HTTP traffic detected: GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978081151/?random=1713487495162&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeerc4GmYpORgVSkmi6THNJOe9nZm5zWbv-RJfK0xrtU7_Kz6&random=1497933720&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/POLocator/getOnlineServices HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /UspsToolsRestServices/rest/security/ipAddress HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /global-elements/header/POLOCATOR-header.htm HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /global-elements/navigation/TOOLS-navigation.htm HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
Source: global traffic	HTTP traffic detected: GET /global-elements/footer/POLOCATOR-footer.htm HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tools.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tools.usps.com/find-location.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; SameSite=None; ADRUM_BTa=R:0\|g:962e5571-11f5-42f6-b37a-177042c883f2\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; ADRUM_BT1=R:0\|i:132208\|e:2
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tools.usps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; SameSite=None; ADRUM_BTa=R:0\|g:a03a9fca-43e6-44df-8406-b045456edd1b\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; ADRUM_BT1=R:0\|i:132169\|e:0
Source: global traffic	HTTP traffic detected: GET /help/contact-us.htm HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/css/globals/bootstrap.min.css HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.usps.com/help/contact-us.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
Source: global traffic	HTTP traffic detected: GET /assets/images/help/hero-contact-us.jpg HTTP/1.1Host: www.usps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.usps.com/help/contact-us.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0

Source: chromecache_445.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.facebook.com (Facebook)
Source: chromecache_445.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.twitter.com (Twitter)
Source: chromecache_445.2.dr	String found in binary or memory: [{"@context":"http://schema.org","@id":"https://www.usps.com/#organization","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg","contactPoint":[{"@type":"ContactPoint","telephone":"+1-800-222-1811","contactType":"package tracking","availableLanguage":["EN","ES"],"contactOpintion":"TollFree","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-275-8777","contactType":"customer service","contactOption":"TollFree","availableLanguage":["EN","ES"],"areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-877-8339","contactType":"customer service","contactOption":["HearingImpairedSupported","TollFree"],"availableLanguage":"EN","areaServed":"US"},{"@type":"ContactPoint","telephone":"+1-800-344-7779","contactType":"technical support","areaServed":"US","availableLanguage":["EN","ES"]}],"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},{"@context":"http://schema.org","@id":"https://www.usps.com/#webpage","@type":"WebPage","url":"https://www.usps.com/"},{"@context":"http://schema.org","@id":"https://www.usps.com/#website","@type":"WebSite","url":"https://www.usps.com/","name":"USPS","potentialAction":{"@type":"SearchAction","target":"https://www.usps.com/searchesults.htm?keyword={search_term_string}","query-input":"required name=search_term_string"}}] equals www.youtube.com (Youtube)
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: <img alt="Image of Facebook social media icon." src="https://www.usps.com/global-elements/footer/images/facebook_logo.png"> equals www.facebook.com (Facebook)
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/footer/images/youtube_logo.png"> equals www.youtube.com (Youtube)
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> equals www.facebook.com (Facebook)
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.c
Source: chromecache_249.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.co
Source: chromecache_249.2.dr	String found in binary or memory: - Mail & Package Notifications \| USPS"><meta property="og:description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app."><meta property="og:image" content="https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg"> <script type="application/ld+json">{"@context":"http://schema.org","@type":"HowTo","headline":"Informed Delivery - Mail & Package Notifications","name":"How to See Photos of Your Mail Before It Arrives","mainEntityOfPage":{"@type":"WebPage","id":"https://www.usps.com/manage/informed-delivery.htm"},"description":"Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.","image":{"@type":"ImageObject","url":"https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg","width":974,"height":413},"author":{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"},"sameAs":["https://www.facebook.com/USPS","https://twitter.com/usps","http://www.pinterest.com/uspsstamps/","https://www.youtube.com/usps"]},"step":[{"@type":"HowToSection","name":"Steps","position":1,"itemListElement":[{"@type":"HowToStep","position":1,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 1: Sign in to your personal USPS.com account or sign up for one, free."}},{"@type":"HowToStep","position":2,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 2: Verify that your address is eligible for Informed Delivery, then opt-in."}},{"@type":"HowToStep","position":3,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 3: Verify your identity. In the event you can't verify your identity online, you can verify your identity by mail, or in-person at a USPS location that offers Identity Verification Services."}},{"@type":"HowToStep","position":4,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 4: That's it. You're ready to automatically start receiving Daily Digest email previews (you'll typically start getting them within 3 days of signing up)."}},{"@type":"HowToStep","position":5,"itemListElement":{"@type":"HowToDirection","position":1,"text":"Step 5: You'll also see the status of incoming packages, as well as outbound Click-N-Ship packages you send to other people."}}]}]}</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.co
Source: chromecache_268.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_304.2.dr	String found in binary or memory: <!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.facebook.com (Facebook)
Source: chromecache_304.2.dr	String found in binary or memory: <!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.twitter.com (Twitter)
Source: chromecache_304.2.dr	String found in binary or memory: <!--ls:begin[head-injection]--><meta name="viewport" content="width=device-width, initial-scale=1"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="twitter:card" content="summary" /><meta name="twitter:site" content="@USPS" /><meta name="twitter:title" content="Contact Us \| USPS" /><meta name="twitter:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta name="twitter:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg" /><meta property="og:url" content="https://www.usps.com/help/contact-us.htm" /><meta property="og:type" content="article" /><meta property="og:title" content="Contact Us \| USPS" /><meta property="og:description" content="Get help with USPS products and services: Connect with USPS Customer Service by email or phone." /><meta property="og:image" content="https://www.usps.com/assets/images/help/hero-contact-us.jpg"><script type="application/ld+json">[{"@context":"http://schema.org","@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}},{"@context":"http://schema.org","@type":"Article","mainEntityOfPage":{"@type":"WebPage","@id":"https://www.usps.com/help/contact-us.htm"},"headline":"Contact Us \| USPS","description":"Get help with USPS products and services: Connect with USPS Customer Service by email or phone.","image":"/assets/images/help/hero-contact-us.jpg","author":{"@type":"Organization","name":"United States Postal Service"},"publisher":{"@type":"Organization","legalName":"United States Postal Service","alternateName":"USPS","url":"https://www.usps.com/","sameAs":["https://www.facebook.com/USPS?rf=108501355848630","https://twitter.com/usps","https://www.youtube.com/usps"],"logo":{"@type":"ImageObject","url":"https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg"}}}]</script><!--ls:end[head-injection]--><!--ls:begin[script]--><!--ls:end[script]--></head> equals www.youtube.com (Youtube)
Source: chromecache_393.2.dr, chromecache_233.2.dr, chromecache_523.2.dr	String found in binary or memory: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script> equals www.yahoo.com (Yahoo)
Source: chromecache_462.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_462.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Tg:d,Rg:e,Sg:f,Dh:g,Eh:h,xe:m,zb:b},p=D.YT,q=function(){FC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(IC(w,"iframe_api")\|\|IC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!zC&&GC(x[A],n.xe))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_335.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Kz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!p.length)return!0;var q=Gz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;M(121);if("https://www.facebook.com/tr/"===r)return M(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!rI(q, equals www.facebook.com (Facebook)
Source: chromecache_471.2.dr	String found in binary or memory: if(oCONFIG.YOUTUBE){var tag=document.createElement("script");tag.src=document.location.protocol+"//www.youtube.com/iframe_api";var firstScriptTag=document.getElementsByTagName("script")[0];firstScriptTag.parentNode.insertBefore(tag,firstScriptTag);var videoArray=[],playerArray=[],_buckets=[],_milestoneController=oCONFIG.YT_MILESTONE,ytUtils=[];onYouTubeIframeAPIReady=function(){for(var a=0;a<videoArray.length;a++)playerArray[a]=new YT.Player(videoArray[a],{events:{onReady:onPlayerReady,onStateChange:onPlayerStateChange, equals www.youtube.com (Youtube)
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: hgdffds.cyou

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&gjid=1539724385&_gid=1668540185.1713487459&_u=YGBAiEABBAAAAGAEq~&z=840242377 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.usps.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.usps.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 00:44:22 GMTContent-Type: text/htmlContent-Length: 1971Connection: closeVary: Accept-EncodingETag: "631f1a4d-7b3"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 00:44:39 GMTContent-Type: text/htmlContent-Length: 1971Connection: closeVary: Accept-EncodingETag: "631f1a4d-7b3"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 00:44:45 GMTContent-Type: text/htmlContent-Length: 1971Connection: closeVary: Accept-EncodingETag: "631f1a4d-7b3"

Source: chromecache_607.2.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_444.2.dr	String found in binary or memory: http://esriurl.com/cors8664
Source: chromecache_444.2.dr	String found in binary or memory: http://get.webgl.org
Source: chromecache_444.2.dr	String found in binary or memory: http://get.webgl.org/troubleshooting/
Source: chromecache_574.2.dr, chromecache_250.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_527.2.dr, chromecache_593.2.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_444.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_549.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_451.2.dr	String found in binary or memory: http://postcalc.usps.com/
Source: chromecache_249.2.dr, chromecache_304.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_404.2.dr	String found in binary or memory: http://travel.state.gov/content/travel.html
Source: chromecache_488.2.dr	String found in binary or memory: http://www.amazon.com/b/?&node=7253015011.
Source: chromecache_441.2.dr, chromecache_560.2.dr, chromecache_570.2.dr, chromecache_361.2.dr, chromecache_341.2.dr, chromecache_377.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_381.2.dr, chromecache_261.2.dr, chromecache_561.2.dr	String found in binary or memory: http://www.linotype.com
Source: chromecache_381.2.dr, chromecache_261.2.dr, chromecache_561.2.dr	String found in binary or memory: http://www.linotype.com/fontdesigners
Source: chromecache_561.2.dr	String found in binary or memory: http://www.linotype.com/license
Source: chromecache_381.2.dr, chromecache_261.2.dr, chromecache_561.2.dr	String found in binary or memory: http://www.linotype.com/licensePart
Source: chromecache_381.2.dr, chromecache_261.2.dr, chromecache_561.2.dr	String found in binary or memory: http://www.linotype.comhttp://www.linotype.com/fontdesignersNOTIFICATION
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: http://www.pinterest.com/uspsstamps/
Source: chromecache_234.2.dr	String found in binary or memory: https://8905209.fls.doubleclick.net/activityi;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid
Source: chromecache_248.2.dr, chromecache_432.2.dr, chromecache_448.2.dr	String found in binary or memory: https://about.usps.com
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/careers/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/newsroom/
Source: chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/newsroom/events/
Source: chromecache_440.2.dr, chromecache_554.2.dr	String found in binary or memory: https://about.usps.com/newsroom/national-releases/welcome.htm#national-media-contacts
Source: chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_451.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/newsroom/service-alerts/residential/welcome.htm
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/resources/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/what/government-services/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/accessibility-statement/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/fair-chance-act/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/foia/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/no-fear-act/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/privacy-policy/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://about.usps.com/who/legal/terms-of-use.htm
Source: chromecache_621.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_283.2.dr, chromecache_335.2.dr, chromecache_621.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_523.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat
Source: chromecache_234.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat
Source: chromecache_393.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat
Source: chromecache_233.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_262.2.dr	String found in binary or memory: https://adsmovil.api.beeswax.com/
Source: chromecache_580.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_285.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_285.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_451.2.dr	String found in binary or memory: https://cfo.usps.com/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://cfo.usps.com/cfo-web/labelInformation.html
Source: chromecache_440.2.dr, chromecache_451.2.dr, chromecache_554.2.dr	String found in binary or memory: https://cns.usps.com
Source: chromecache_304.2.dr	String found in binary or memory: https://cns.usps.com/
Source: chromecache_313.2.dr, chromecache_300.2.dr	String found in binary or memory: https://ct.pinterest.com/stats/
Source: chromecache_285.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_285.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_285.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_285.2.dr	String found in binary or memory: https://drafts.csswg.org/selectors/#relational
Source: chromecache_451.2.dr	String found in binary or memory: https://eddm.usps.com/eddm
Source: chromecache_432.2.dr	String found in binary or memory: https://eddm.usps.com/eddm/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://eddm.usps.com/eddm/customer/routeSearch.action
Source: chromecache_304.2.dr	String found in binary or memory: https://emailus.usps.com/s/
Source: chromecache_304.2.dr	String found in binary or memory: https://faq.usps.com/s/
Source: chromecache_564.2.dr, chromecache_423.2.dr	String found in binary or memory: https://faq.usps.com/s/article/Find-USPS-Locations
Source: chromecache_249.2.dr	String found in binary or memory: https://faq.usps.com/s/article/Informed-Delivery-The-Basics
Source: chromecache_249.2.dr	String found in binary or memory: https://faq.usps.com/s/article/Informed-Delivery-The-Basics#signingup
Source: chromecache_304.2.dr	String found in binary or memory: https://faq.usps.com/s/article/Missing-Mail-The-Basics
Source: chromecache_249.2.dr	String found in binary or memory: https://faq.usps.com/s/article/USPS-Delivery-Instructions-The-Basics
Source: chromecache_249.2.dr	String found in binary or memory: https://faq.usps.com/s/article/USPS-Electronic-Signature-Online
Source: chromecache_304.2.dr	String found in binary or memory: https://faq.usps.com/s/article/USPS-Tracking-The-Basics
Source: chromecache_304.2.dr	String found in binary or memory: https://faq.usps.com/s/article/Where-is-my-package
Source: chromecache_234.2.dr	String found in binary or memory: https://fl.a.ki/ctc?io=7550&payout=0&st=informed
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://gateway.usps.com/
Source: chromecache_323.2.dr, chromecache_291.2.dr, chromecache_472.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_393.2.dr, chromecache_233.2.dr, chromecache_234.2.dr, chromecache_523.2.dr	String found in binary or memory: https://getrockerbox.com/assets/xyz.js
Source: chromecache_305.2.dr	String found in binary or memory: https://getrockerbox.com/integrations?source=
Source: chromecache_305.2.dr	String found in binary or memory: https://getrockerbox.com/jpuid?jsonp=RB.jsonPUID
Source: chromecache_305.2.dr	String found in binary or memory: https://getrockerbox.com/rb?
Source: chromecache_574.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/157)
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/299)
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_574.2.dr, chromecache_323.2.dr, chromecache_291.2.dr, chromecache_472.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_291.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_285.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_468.2.dr	String found in binary or memory: https://google.com
Source: chromecache_468.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_304.2.dr	String found in binary or memory: https://holdmail.usps.com/holdmail/
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_285.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_304.2.dr	String found in binary or memory: https://informeddelivery.usps.com
Source: chromecache_304.2.dr	String found in binary or memory: https://informeddelivery.usps.com/
Source: chromecache_249.2.dr	String found in binary or memory: https://informeddelivery.usps.com/box/pages/secure/DashboardAction_input.action
Source: chromecache_285.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_234.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:cyprwis&fmt=3
Source: chromecache_234.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_285.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_285.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_234.2.dr	String found in binary or memory: https://js.adsrvr.org/up_loader.1.1.0.js
Source: chromecache_404.2.dr	String found in binary or memory: https://js.arcgis.com/4.11/
Source: chromecache_444.2.dr	String found in binary or memory: https://js.arcgis.com/4.11/dojo
Source: chromecache_444.2.dr	String found in binary or memory: https://js.arcgis.com/4.11/esri/copyright.txt
Source: chromecache_404.2.dr	String found in binary or memory: https://js.arcgis.com/4.11/esri/themes/light/main.css
Source: chromecache_285.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_451.2.dr	String found in binary or memory: https://loyalty.usps.com/
Source: chromecache_451.2.dr	String found in binary or memory: https://moversguide.usps.com
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG80
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://moversguide.usps.com/?referral=MG82
Source: chromecache_249.2.dr	String found in binary or memory: https://moversguide.usps.com/mgo/disclaimer?referral=MG82
Source: chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://pe.usps.com
Source: chromecache_440.2.dr, chromecache_554.2.dr	String found in binary or memory: https://pe.usps.gov/
Source: chromecache_234.2.dr	String found in binary or memory: https://peornia-comargers.icu/conversion.gif?cid=
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://postalmuseum.si.edu/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://postalpro.usps.com/
Source: chromecache_304.2.dr	String found in binary or memory: https://postcalc.usps.com/
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://postcalc.usps.com/?country=10440
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://postcalc.usps.com/business
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_285.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_234.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4720112;ord=
Source: chromecache_234.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4720112;ord=1?
Source: chromecache_234.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4722620;ord=
Source: chromecache_234.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4722620;ord=1?
Source: chromecache_234.2.dr	String found in binary or memory: https://r.turn.com/r/beacon?b2=A7iCTpQGFU-S2U1J29tcAlrp_3VWRgiabflHnamOnMqfgWyBHra5nbXx39S0t2NAeeCzc
Source: chromecache_393.2.dr, chromecache_233.2.dr, chromecache_523.2.dr	String found in binary or memory: https://r.turn.com/r/beacon?b2=HpxTzGTzKKlxb6HzAVw5IjPx27ujoOEwgoCyEMiUu4GfgWyBHra5nbXx39S0t2NAAAzK7
Source: chromecache_440.2.dr, chromecache_554.2.dr	String found in binary or memory: https://redelivery.usps.com/redelivery/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://reg.usps.com/entreg/LoginAction_input?app=Phoenix&appURL=/
Source: chromecache_445.2.dr, chromecache_249.2.dr	String found in binary or memory: https://reg.usps.com/portal/login
Source: chromecache_249.2.dr	String found in binary or memory: https://reg.usps.com/portal/register
Source: chromecache_249.2.dr	String found in binary or memory: https://reg.usps.com/portal/register?app=RMIN&appURL=https%3A%2F%2Freg.usps.com%2F%2Fpreferences%3Fa
Source: chromecache_249.2.dr	String found in binary or memory: https://reg.usps.com/preferences
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://retail-pi.usps.com/retailpi/actions/index.action
Source: chromecache_313.2.dr	String found in binary or memory: https://s.pinimg.com/ct/lib/main.6192ffb7.js
Source: chromecache_305.2.dr	String found in binary or memory: https://secure.adnxs.com/px?
Source: chromecache_234.2.dr	String found in binary or memory: https://secure.adnxs.com/px?id=1040877&seg=14970805&t=2
Source: chromecache_234.2.dr	String found in binary or memory: https://secure.adnxs.com/px?id=1170912&seg=19465850&t=1
Source: chromecache_393.2.dr, chromecache_233.2.dr, chromecache_523.2.dr	String found in binary or memory: https://secure.adnxs.com/px?id=1391229&seg=24232669&t=1
Source: chromecache_444.2.dr	String found in binary or memory: https://server.arcgisonline.com
Source: chromecache_444.2.dr	String found in binary or memory: https://services.arcgisonline.com
Source: chromecache_448.2.dr	String found in binary or memory: https://sitpx-about.usps.com
Source: chromecache_234.2.dr	String found in binary or memory: https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=informeddelivery
Source: chromecache_335.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_444.2.dr	String found in binary or memory: https://static.arcgis.com/fonts
Source: chromecache_575.2.dr, chromecache_462.2.dr, chromecache_348.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_575.2.dr, chromecache_462.2.dr, chromecache_348.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_580.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store
Source: chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/
Source: chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=buy-stamps
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=cards-envelopes
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=shipping-supplies
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=stamp-collectors
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/browse/category.jsp?categoryId=stamp-gifts
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/pse/
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/results/business/_/N-1y2576k
Source: chromecache_451.2.dr	String found in binary or memory: https://store.usps.com/store/results/cards-envelopes/_/N-qqbb5n
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com/store/results/cards-envelopes/fruits-flowers/_/N-qqbb5nZ1dnrm08#content
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com/store/results/clothing/gifts/_/N-1yueprwZnnxamr#content
Source: chromecache_451.2.dr	String found in binary or memory: https://store.usps.com/store/results/collector-s-zone/_/N-1j49vgd
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v#cont
Source: chromecache_451.2.dr	String found in binary or memory: https://store.usps.com/store/results/gifts/_/N-nnxamr
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com/store/results/prepaid-priority-mail/_/N-1ved7wl?Dy=1#content
Source: chromecache_451.2.dr	String found in binary or memory: https://store.usps.com/store/results/shipping-supplies/_/N-7d0v8v
Source: chromecache_451.2.dr	String found in binary or memory: https://store.usps.com/store/results/stamps/_/N-9y93lv
Source: chromecache_445.2.dr	String found in binary or memory: https://store.usps.com/store/results/stamps/_/N-9y93lv#content
Source: chromecache_580.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/find-location.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction
Source: chromecache_416.2.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction?qtc_tLabels1=
Source: chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/go/TrackConfirmAction_input
Source: chromecache_445.2.dr	String found in binary or memory: https://tools.usps.com/go/ZipLookupAction_input
Source: chromecache_445.2.dr	String found in binary or memory: https://tools.usps.com/rcas.htm
Source: chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/redelivery.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/schedule-pickup-steps.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://tools.usps.com/zip-code-lookup.htm
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://twitter.com/usps
Source: chromecache_393.2.dr, chromecache_233.2.dr, chromecache_523.2.dr	String found in binary or memory: https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;
Source: chromecache_469.2.dr, chromecache_414.2.dr	String found in binary or memory: https://usps.com/locator/glossary.htm
Source: chromecache_249.2.dr	String found in binary or memory: https://usps.force.com/emailus/s/informed-delivery-inquiry
Source: chromecache_304.2.dr	String found in binary or memory: https://usps.force.com/emailus/s/uspscom-informeddelivery
Source: chromecache_444.2.dr	String found in binary or memory: https://utility.arcgis.com/sharing/kml
Source: chromecache_444.2.dr	String found in binary or memory: https://utility.arcgis.com/sharing/rss
Source: chromecache_444.2.dr	String found in binary or memory: https://utility.arcgisonline.com/arcgis/rest/services/Geometry/GeometryServer
Source: chromecache_444.2.dr	String found in binary or memory: https://www.arcgis.com
Source: chromecache_304.2.dr	String found in binary or memory: https://www.fcc.gov/general/trs-state-and-territories
Source: chromecache_304.2.dr	String found in binary or memory: https://www.fcc.gov/trs
Source: chromecache_335.2.dr, chromecache_471.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_580.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_580.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_580.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_580.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_269.2.dr, chromecache_495.2.dr, chromecache_297.2.dr, chromecache_401.2.dr, chromecache_477.2.dr, chromecache_530.2.dr, chromecache_565.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/978081151/?random
Source: chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_451.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Source: chromecache_575.2.dr, chromecache_283.2.dr, chromecache_335.2.dr, chromecache_462.2.dr, chromecache_348.2.dr, chromecache_621.2.dr, chromecache_468.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_283.2.dr, chromecache_335.2.dr, chromecache_621.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_580.2.dr, chromecache_471.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MVCC8H
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.instagram.com/uspostalservice/?hl=en
Source: chromecache_575.2.dr, chromecache_462.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_318.2.dr	String found in binary or memory: https://www.pinterest.com
Source: chromecache_524.2.dr, chromecache_338.2.dr	String found in binary or memory: https://www.redditstatic.com/ads/581d359d/pixel.js
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.threads.net/
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.uspis.gov/
Source: chromecache_445.2.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/fake-usps-emails
Source: chromecache_445.2.dr	String found in binary or memory: https://www.uspis.gov/news/scam-article/smishing
Source: chromecache_440.2.dr, chromecache_554.2.dr	String found in binary or memory: https://www.uspis.gov/report
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/
Source: chromecache_445.2.dr	String found in binary or memory: https://www.usps.com/#organization
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Source: chromecache_249.2.dr	String found in binary or memory: https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/help/hero-contact-us.jpg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/calculate_price.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/change_address.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/featured_clicknship.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/find_zip.svg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/free_boxes.svg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/hamburger.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/holdmail.svg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/location.svg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/logo_mobile.svg
Source: chromecache_334.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/m_dropdown_carat_white.svg)
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/po_box.svg
Source: chromecache_538.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/premium/usps_littlemo_bg.jpg)
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/printcustomsforms.svg);
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/schedule_pickup.svg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/search.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/stamps.svg
Source: chromecache_304.2.dr, chromecache_587.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/text-link-carat-grey.svg
Source: chromecache_304.2.dr, chromecache_587.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/text-link-carat-grey.svg);
Source: chromecache_587.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/text-link-carat-red.svg);
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_538.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg
Source: chromecache_538.2.dr	String found in binary or memory: https://www.usps.com/assets/images/home/tracking.svg);
Source: chromecache_538.2.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/premium/lifestyle-person-on-phone-dsk.jpg);
Source: chromecache_445.2.dr	String found in binary or memory: https://www.usps.com/assets/images/welcome/usps-homepage.jpg
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/assets/script/home/megamenu-additions.js
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/advertise-with-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/business-shipping.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/connect/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/connect/ecommerce.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/connect/local.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/customized-direct-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/every-door-direct-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/go-now.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/go-now.png
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/informed-delivery.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/international-shipping.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/label-broker.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/loyalty.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/manage-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/political-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/postage-options.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/prices.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/product-samples.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/promotions-incentives.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/return-services.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/shipping-consolidators.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/vendors.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/verify-postage.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/business/web-tools-apis/
Source: chromecache_440.2.dr, chromecache_554.2.dr	String found in binary or memory: https://www.usps.com/buy-stamps.htm
Source: chromecache_538.2.dr	String found in binary or memory: https://www.usps.com/component-guide/blue-caret.svg
Source: chromecache_304.2.dr, chromecache_587.2.dr	String found in binary or memory: https://www.usps.com/component-guide/blue-caret.svg);
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/facebook_logo.png
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/instagram_logo.png
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/pinterest_logo.png
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/threads_logo.png
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/x_logo.png
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/images/youtube_logo.png
Source: chromecache_267.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.usps.com/global-elements/footer/script/jquery-3.5.1
Source: chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Source: chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Source: chromecache_267.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.usps.com/global-elements/header/script/
Source: chromecache_267.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script
Source: chromecache_267.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/helpers
Source: chromecache_267.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.usps.com/global-elements/lib/script/require-jquery
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/globals/site-index.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/claims.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/contact-us.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/international-claims.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/international-refunds.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/missing-mail.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/help/refunds.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/customs-forms.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/first-class-mail-international.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/first-class-package-international-service.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/go-now.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/go-now.png
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/gxg.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/insurance-extra-services.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/international-how-to.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/letters.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/mail-shipping-services.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/money-transfers.htm
Source: chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/passports.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/preparing-international-shipments.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-express-international.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/priority-mail-international.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/international/shipping-restrictions.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_440.2.dr, chromecache_451.2.dr, chromecache_554.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/forward.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/go-now.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/go-now.png
Source: chromecache_249.2.dr	String found in binary or memory: https://www.usps.com/manage/informed-delivery.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/mail-for-deceased.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/mailboxes.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/package-intercept.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/manage/po-boxes.htm
Source: chromecache_240.2.dr	String found in binary or memory: https://www.usps.com/root/global/server_responses/anyapp_outage_apology.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/search
Source: chromecache_445.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=PO%20Boxes
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/search/results.htm?PNO=1&keyword=Passports
Source: chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/apo-fpo-dpo.htm?pov=international
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/custom-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/first-class-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/go-now.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/go-now.png
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/ground-advantage.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/insurance-extra-services.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/letters.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/mail-shipping-services.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/online-shipping.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/packages.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail-express.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/priority-mail.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/ship/shipping-restrictions.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/shop/money-orders.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/shop/returns-exchanges.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/store/go-now.htm
Source: chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.usps.com/store/go-now.png
Source: chromecache_445.2.dr	String found in binary or memory: https://www.usps.com/topjobs
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.uspsoig.gov/
Source: chromecache_462.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.youtube.com/usps

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50513
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443

Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.4:49743 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@34/675@183/67

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 --field-trial-handle=2432,i,14948990831735324925,17602649722396218757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hgdffds.cyou/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 --field-trial-handle=2432,i,14948990831735324925,17602649722396218757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://hgdffds.cyou/	1%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://sc-static.net/scevent.min.js	0%	URL Reputation	safe
https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$	0%	Virustotal		Browse
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	0%	Virustotal		Browse
https://getrockerbox.com/assets/xyz.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dart.l.doubleclick.net	172.217.215.149	true	false	high
d27f3qgc9anoq2.cloudfront.net	3.161.136.111	true	false	high
hgdffds.cyou	149.88.67.111	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	108.156.154.126	true	false	high
adservice.google.com	142.251.15.157	true	false	high
platform.twitter.map.fastly.net	151.101.12.157	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	76.13.32.146	true	false	unknown
stats.g.doubleclick.net	172.253.124.157	true	false	high
insight.adsrvr.org	15.197.193.217	true	false	high
cs1799.wpc.upsiloncdn.net	152.195.33.23	true	false	unknown
scontent.xx.fbcdn.net	31.13.66.19	true	false	high
crb.kargo.com	44.196.185.99	true	false	high
t.co	104.244.42.197	true	false	high
js.arcgis.com	18.67.65.14	true	false	high
www.google.com	142.250.9.99	true	false	high
ara.paa-reporting-advertising.amazon	108.138.85.59	true	false	unknown
gcp.api.sc-gw.com	35.190.43.134	true	false	unknown
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
pixel.tapad.com	34.111.113.62	true	false	high
ad.ipredictive.com	52.45.111.53	true	false	unknown
s.twitter.com	104.244.42.3	true	false	high
ad.doubleclick.net	64.233.185.148	true	false	high
s.amazon-adsystem.com	52.46.151.131	true	false	high
urldefense.com	52.6.56.188	true	false	unknown
sc-static.net	108.139.23.251	true	false	unknown
usps.com	56.0.134.100	true	false	high
d1ykf07e75w7ss.cloudfront.net	18.164.82.201	true	false	high
www.googleoptimize.com	142.250.105.102	true	false	unknown
kds-pixel.kargo.com	3.225.229.68	true	false	high
dualstack.reddit.map.fastly.net	151.101.65.140	true	false	unknown
getrockerbox.com	172.67.71.65	true	false	unknown
prod.pinterest.global.map.fastly.net	151.101.0.84	true	false	unknown
fast.fonts.net	104.16.40.28	true	false	unknown
reddit.map.fastly.net	151.101.129.140	true	false	unknown
googleads.g.doubleclick.net	142.250.9.154	true	false	high
adserv.mobi	104.21.94.97	true	false	unknown
dualstack.pinterest.map.fastly.net	146.75.32.84	true	false	unknown
td.doubleclick.net	142.251.15.156	true	false	high
trkn.us	23.194.116.39	true	false	unknown
ib.anycast.adnxs.com	68.67.160.186	true	false	high
usc1-gcp-v61.api.sc-gw.com	35.190.43.134	true	false	unknown
pubads46.g.doubleclick.net	142.250.105.157	true	false	high
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
tr.snapchat.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
fl.a.ki	unknown	unknown	false	high
8905209.fls.doubleclick.net	unknown	unknown	false	high
www.usps.com	unknown	unknown	false	high
tools.usps.com	unknown	unknown	false	high
www.redditstatic.com	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
informeddelivery.usps.com	unknown	unknown	false	high
sp.analytics.yahoo.com	unknown	unknown	false	high
dap.digitalgov.gov	unknown	unknown	false	high
w3-reporting-nel.reddit.com	unknown	unknown	false	high
ct.pinterest.com	unknown	unknown	false	high
3976941.fls.doubleclick.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
r.turn.com	unknown	unknown	false	high
resources.digital-cloud-gov.medallia.com	unknown	unknown	false	high
c.amazon-adsystem.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
pubads.g.doubleclick.net	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
s.pinimg.com	unknown	unknown	false	high
storage.cloud.kargo.com	unknown	unknown	false	high
tr6.snapchat.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://t.co/i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30	false		high
https://www.usps.com/test/nav/images/business.svg	false		high
https://www.usps.com/international/go-now.png	false		high
https://tools.usps.com/media/polocator/blue-caret-down.svg	false		high
https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg	false		high
https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css	false		high
https://w3-reporting-nel.reddit.com/reports	false		high
https://www.usps.com/assets/images/home/change_address.svg	false		high
https://www.usps.com/assets/images/home/printcustomsforms.svg	false		high
https://www.usps.com/global-elements/header/images/schedule-redelivery.svg	false		high
https://alb.reddit.com/rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=	false		high
https://getrockerbox.com/assets/xyz.js	false	0%, Virustotal, Browse	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false		high
https://3976941.fls.doubleclick.net/activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	false		high
https://www.usps.com/assets/script/components/scalable-table.js	false		high
https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$	false	0%, Virustotal, Browse	unknown
https://ad.doubleclick.net/activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	false		high
https://kds-pixel.kargo.com/api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=	false		high
https://insight.adsrvr.org/track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=ftfeq77&upv=1.1.0	false		high
https://informeddelivery.usps.com/box/pages/intro/start.action	false		high
https://tools.usps.com/global-elements/header/script/header-init-search.js	false		high
https://tr.snapchat.com/cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=613e6c51-7685-45b8-bef0-5b31957f2f86&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2	false		high
https://t.co/i/adsct?bci=3&eci=2&event_id=3f06b6a6-c579-4dee-a73f-471d8f908c10&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=3c7f72a7-ba5f-47cc-b00f-ce79730b3e32&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30	false		high
https://tools.usps.com/styles/default-styles.css	false		high
https://www.google.com/pagead/1p-user-list/978081151/?random=1713487477500&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlW3764nJGY186F_0zXHR01T9Xi6YNZOpnsJEEAbgTbGgGLq8&random=1689325733&rmt_tld=0&ipr=y	false		high
https://tr6.snapchat.com/p	false		high
https://www.usps.com/assets/css/bootstrap-custom.css	false		high
https://www.usps.com/assets/images/home/free_boxes.svg	false		high
https://www.usps.com/favicon.ico	false		high
https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294	false		high
https://www.usps.com/assets/images/welcome/carousel/apr24-swag.jpg	false		high
https://www.usps.com/global-elements/header/images/utility-header/mailman.svg	false		high
https://www.usps.com/manage/go-now.png	false		high
https://www.usps.com/assets/script/home/megamenu-additions.js	false		high
https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png	false		high
https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL	false	0%, Virustotal, Browse	unknown
https://www.usps.com/assets/images/home/holdmail.svg	false		high
https://www.usps.com/ContentTemplates/common/css/globals/modals.css	false		high
https://www.usps.com/#skipallnav	false		high
https://getrockerbox.com/rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCJuM26aGzYUDFT2xOgUdteENwA%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7597053583434%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1863172012%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=2bc5471e-866f-4918-89f2-3c6d58560ca6&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36	false		unknown
https://tools.usps.com/scripts/libs/bootstrap.min.js	false		high
https://3976941.fls.doubleclick.net/activityi;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm?	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=1989466777.1713487459&jid=2051262266&gjid=1052602915&_gid=1668540185.1713487459&_u=YGDACUABBAAAAGAGqCC~&z=1445488733	false		high
https://www.usps.com/	false		high
https://getrockerbox.com/rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCLi39puGzYUDFXGvOgUdenIGbw%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D2194093973356%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D2031524609%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=8df227c1-3868-4673-9b60-b3e223bd931f&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36	false		unknown
https://sc-static.net/scevent.min.js	false	URL Reputation: safe	unknown
https://informeddelivery.usps.com/	false		high
https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362	false		unknown
https://www.usps.com/assets/script/components/faq.js	false		high
https://ad.doubleclick.net/activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?	false		high
https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff	false		high
https://www.usps.com/assets/images/welcome/carousel/apr24-stamps.jpg	false		high
https://www.usps.com/assets/script/component-guide-init.js	false		high
https://tools.usps.com/media/zipcode-lookup/nav-red-chevron.svg	false		high
https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js	false		high
https://www.facebook.com/tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&rl=&if=false&ts=1713487505556&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487505106&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.youtube.com/usps	chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/business/shipping-consolidators.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_580.2.dr	false	high
https://store.usps.com/store	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_285.2.dr	false	high
https://secure.adnxs.com/px?	chromecache_305.2.dr	false	high
https://www.usps.com/search/results.htm?PNO=1&keyword=Free%20Boxes	chromecache_304.2.dr	false	high
http://github.com/jrburke/requirejs	chromecache_527.2.dr, chromecache_593.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_291.2.dr	false	high
https://faq.usps.com/s/article/Find-USPS-Locations	chromecache_564.2.dr, chromecache_423.2.dr	false	high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_285.2.dr	false	high
http://getbootstrap.com)	chromecache_574.2.dr, chromecache_250.2.dr	false	low
https://www.redditstatic.com/ads/581d359d/pixel.js	chromecache_524.2.dr, chromecache_338.2.dr	false	high
https://www.usps.com/business/manage-mail.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/international/	chromecache_304.2.dr	false	high
https://reg.usps.com/portal/register	chromecache_249.2.dr	false	high
https://www.usps.com/global-elements/header/script/	chromecache_267.2.dr, chromecache_259.2.dr	false	high
https://r.turn.com/r/beacon?b2=A7iCTpQGFU-S2U1J29tcAlrp_3VWRgiabflHnamOnMqfgWyBHra5nbXx39S0t2NAeeCzc	chromecache_234.2.dr	false	high
http://www.amazon.com/b/?&node=7253015011.	chromecache_488.2.dr	false	high
https://emailus.usps.com/s/	chromecache_304.2.dr	false	high
https://reg.usps.com/preferences	chromecache_249.2.dr	false	high
https://store.usps.com/store/results/collector-s-zone/_/N-1j49vgd	chromecache_451.2.dr	false	high
https://www.usps.com/shop/money-orders.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/business/verify-postage.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://store.usps.com/store/results/clothing/gifts/_/N-1yueprwZnnxamr#content	chromecache_445.2.dr	false	high
https://getrockerbox.com/integrations?source=	chromecache_305.2.dr	false	unknown
https://www.usps.com/ship/insurance-extra-services.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://adservice.google.com/ddm/fls/z/dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat	chromecache_234.2.dr	false	high
http://momentjs.com/guides/#/warnings/zone/	chromecache_444.2.dr	false	high
https://about.usps.com/what/government-services/	chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://store.usps.com/store/results/gifts/_/N-nnxamr	chromecache_451.2.dr	false	high
https://html.spec.whatwg.org/#nonce-attributes	chromecache_285.2.dr	false	high
https://jsperf.com/getall-vs-sizzle/2	chromecache_285.2.dr	false	high
https://utility.arcgis.com/sharing/rss	chromecache_444.2.dr	false	high
https://about.usps.com/who/legal/terms-of-use.htm	chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://retail-pi.usps.com/retailpi/actions/index.action	chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://postcalc.usps.com/?country=10440	chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/business/label-broker.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/international/letters.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/international/first-class-package-international-service.htm	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://cfo.usps.com/cfo-web/labelInformation.html	chromecache_334.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_332.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_444.2.dr	false	high
https://gateway.usps.com/	chromecache_583.2.dr, chromecache_445.2.dr, chromecache_249.2.dr, chromecache_370.2.dr, chromecache_451.2.dr, chromecache_404.2.dr, chromecache_304.2.dr	false	high
https://www.usps.com/#organization	chromecache_445.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.0.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
172.217.215.148	unknown	United States	15169	GOOGLEUS	false
74.125.136.148	unknown	United States	15169	GOOGLEUS	false
18.67.65.14	js.arcgis.com	United States	3	MIT-GATEWAYSUS	false
56.0.134.100	usps.com	United States	5774	USPS-001US	false
172.217.215.149	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
152.195.33.23	cs1799.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
52.46.128.147	unknown	United States	16509	AMAZON-02US	false
18.164.82.201	d1ykf07e75w7ss.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.253.124.149	unknown	United States	15169	GOOGLEUS	false
151.101.128.84	unknown	United States	54113	FASTLYUS	false
44.196.185.99	crb.kargo.com	United States	14618	AMAZON-AESUS	false
172.67.71.65	getrockerbox.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.140	unknown	United States	54113	FASTLYUS	false
151.101.65.140	dualstack.reddit.map.fastly.net	United States	54113	FASTLYUS	false
68.67.179.153	unknown	United States	29990	ASN-APPNEXUS	false
68.67.160.186	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
31.13.66.19	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
104.244.42.133	unknown	United States	13414	TWITTERUS	false
173.194.219.149	unknown	United States	15169	GOOGLEUS	false
76.13.32.146	spdc-global.pbp.gysm.yahoodns.net	United States	26101	YAHOO-3US	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
142.251.15.156	td.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
149.88.67.111	hgdffds.cyou	United States	188	SAIC-ASUS	false
142.251.15.157	adservice.google.com	United States	15169	GOOGLEUS	false
54.204.91.195	unknown	United States	14618	AMAZON-AESUS	false
64.233.185.148	ad.doubleclick.net	United States	15169	GOOGLEUS	false
151.101.12.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
31.13.65.36	unknown	Ireland	32934	FACEBOOKUS	false
34.199.195.87	unknown	United States	14618	AMAZON-AESUS	false
151.101.64.84	unknown	United States	54113	FASTLYUS	false
142.250.105.157	pubads46.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.105.154	unknown	United States	15169	GOOGLEUS	false
23.194.116.39	trkn.us	United States	20940	AKAMAI-ASN1EU	false
108.139.23.251	sc-static.net	United States	16509	AMAZON-02US	false
15.197.193.217	insight.adsrvr.org	United States	7430	TANDEMUS	false
64.233.185.156	unknown	United States	15169	GOOGLEUS	false
52.6.56.188	urldefense.com	United States	14618	AMAZON-AESUS	false
64.233.176.155	unknown	United States	15169	GOOGLEUS	false
3.225.229.68	kds-pixel.kargo.com	United States	14618	AMAZON-AESUS	false
146.75.32.84	dualstack.pinterest.map.fastly.net	Sweden	30051	SCCGOVUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
142.250.9.99	www.google.com	United States	15169	GOOGLEUS	false
142.250.9.154	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.15.148	unknown	United States	15169	GOOGLEUS	false
142.251.15.149	unknown	United States	15169	GOOGLEUS	false
104.21.94.97	adserv.mobi	United States	13335	CLOUDFLARENETUS	false
142.250.105.102	www.googleoptimize.com	United States	15169	GOOGLEUS	false
35.190.43.134	gcp.api.sc-gw.com	United States	15169	GOOGLEUS	false
104.244.42.197	t.co	United States	13414	TWITTERUS	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
172.253.124.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
64.233.177.104	unknown	United States	15169	GOOGLEUS	false
108.138.85.59	ara.paa-reporting-advertising.amazon	United States	16509	AMAZON-02US	false
3.163.80.95	unknown	United States	16509	AMAZON-02US	false
52.46.151.131	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
108.156.154.126	dg2iu7dxxehbo.cloudfront.net	United States	16509	AMAZON-02US	false
52.45.111.53	ad.ipredictive.com	United States	14618	AMAZON-AESUS	false
3.161.136.111	d27f3qgc9anoq2.cloudfront.net	United States	16509	AMAZON-02US	false
173.222.249.67	unknown	United States	20940	AKAMAI-ASN1EU	false
151.101.129.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
64.233.176.105	unknown	United States	15169	GOOGLEUS	false
104.16.40.28	fast.fonts.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428490
Start date and time:	2024-04-19 02:43:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hgdffds.cyou/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@34/675@183/67
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.usps.com/globals/site-index.htm Browse: https://www.usps.com/#endnav Browse: https://www.usps.com/#skipallnav Browse: https://tools.usps.com/find-location.htm Browse: https://www.usps.com/help/contact-us.htm Browse: https://informeddelivery.usps.com/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 108.177.122.102, 108.177.122.138, 108.177.122.101, 108.177.122.100, 108.177.122.113, 108.177.122.139, 64.233.176.84, 172.253.124.94, 34.104.35.123, 142.251.15.97, 13.85.23.86, 74.125.136.101, 74.125.136.100, 74.125.136.113, 74.125.136.138, 74.125.136.139, 74.125.136.102, 72.21.81.240, 184.30.115.237, 20.3.187.198, 13.107.21.237, 204.79.197.237, 23.54.168.9, 23.54.168.25, 192.229.211.108, 142.251.15.100, 142.251.15.101, 142.251.15.102, 142.251.15.138, 142.251.15.113, 142.251.15.139, 69.194.242.12, 13.107.42.14, 23.34.82.84, 23.34.82.83, 20.242.39.171, 142.251.15.95, 142.250.105.95, 74.125.136.95, 173.194.219.95, 142.250.9.95, 172.217.215.95, 172.253.124.95, 74.125.138.95, 64.233.177.95, 64.233.176.95, 64.233.185.95, 64.233.185.94, 172.217.215.113, 172.217.215.100, 172.217.215.101, 172.217.215.139, 172.217.215.138, 172.217.215.102
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, storage.cloud.kargo.com.akamaized.net, l-0005.l-msedge.net, r.turn.com.akadns.net, a1830.d.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, 2-01-37d2-0018.cdx.cedexis.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, bat.bing.com, update.googleapis.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, 2-01-37d2-0020.cdx.cedexis.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, resources.digital-cloud-gov.medallia.com.edgekey.net, fe3cr.delivery.mp.microsoft.com, e15080.a.akamaiedge.ne
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 663, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47821
Entropy (8bit):	7.977160407981964
Encrypted:	false
SSDEEP:	768:IsXQi+zKWOvyHTnj6Ds45thc9KXqWqG/Wq6SHTaoxtic/1II8ML7KibbEeJulFNz:dYH2gre4WP6KDW+d0cdH8biUVDNz
MD5:	FE382DBA3C7717AF1168ADFAD79C8484
SHA1:	37816F1DE78FFE6E14461A01DD76490C59FCC08B
SHA-256:	0CF2992A5671948D6BE121494AF9A3D12277A0B2AE002B6CEC4850DBA3F685B0
SHA-512:	4D7FEFCF1B26A051DF1894B7E1414A95DA0F93EB9B7493914BED4BDDFE412BD804233168F3BEB0742764A334F22556654ACD40E4B8E5C993C60473DB05C03F99
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/id_mockups-2.png
Preview:	.PNG........IHDR..............aV....pHYs..........&.?.. .IDATx...}t..?......(i.@..8.S-z8.ld.%$...=.....=......H...:..4q.i..:6q...&.Jq.9m....,ljh.q...'....D&^.....gF.G.......K...H..>.~...(. ""..n...Q.c.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8f......~y..@D.q....h..Q...(..y............X...5..(9....x_......s...R...~.......`@$..w............6'.0X......P.Pp,...E.p.y..T.]b2.0o..6..(..@@...'q.....A....Gq.......y4.m.w36X..d...z./Z..f..............={.'O...'...p..I..A.M_.......8gT..w.n@(H.W.p.B\r.%...K..1...A... ....o...io3.Q.f3.f...u.]..(//....dd.'N...o...'N.e.].vutt.I.......J.M..)o...K..Y\\........>. +m&".....f......\..Zo...^..u......y.@.B......:X....!.$.qH.....+..2..U .@ww7^~.e..~.F".Q...`.Zq.u...OA. ..N.8....BA....fA.K.Lr.E....%.\..vpp.{..Aww..K..h&.;w.n..f.t.M...U.....^. ..O!.07e..YSP.2<&..E..E.P]].......={.....ID...8W.^...r.......o...............9hj..L.....P..\|@?H.......]]].

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1456
Entropy (8bit):	7.0245803751655105
Encrypted:	false
SSDEEP:	24:ojX1hJIwWwjx82lY2T3oVYNWMa1oW/yJ3VYHWG17opWIGXtkDMEisqqY5G4m4z9h:ykNNn2kWBUOJ3Wt7iBFu5xm4z9L5vUk
MD5:	410956805D5701E87299CFF412827E1A
SHA1:	5DE9A390649DFC12E3D6DF431140D499AD8ABD67
SHA-256:	6E727DBF5B0F4A3EC76762E445AD2C5CB750F7DE41AFB8B0342F903124D09826
SHA-512:	84CE9E5B113DFB743A0F9A96EB9F527987A925F4E93AC8C113C34E06E4BC16A7063582320A454DDAE5451547F5A6D82B4C01BCA06E71CB4BB73B249EAEBCF2C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............rP6.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9C4417A83D6A11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:9C4417A93D6A11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417A63D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:9C4417A73D6A11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..ym....IDATx...K.Q..g^.)..K]D.AX....(..;j.r&".\.E....pU+..4....T..~....6.&+&3.0jz..F....<........so<......p..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 70588, version 1.0
Category:	downloaded
Size (bytes):	70588
Entropy (8bit):	7.9896587023120755
Encrypted:	false
SSDEEP:	1536:UMVtGjRx/IMNbsWZthhCtBVkOXkEPtkc6nZIKLUNF0N:WROMNbsihG5XkatqnZzLUNeN
MD5:	071C48540FD727A032C53CE511EEA442
SHA1:	2FADBF8A560C6138C89D991D230ACACE5256B15C
SHA-256:	B51210361680DC35FE3FB44EE63B68651C29D35AE292554CDF9BB567F4AA576E
SHA-512:	35D079481210F8E86779DD05666AA5BEE926982DA1AB9B4C703C45F68242453FFC0D7BEB7919EE95E198DB05D96FF69761014F4607C21B1D5B50D04F69F0CEAB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/9a2e4855-380f-477f-950e-d98e8db54eac.woff
Preview:	wOFF..............{T...............+........OS/2...X...V...`..).cmap...........t.8..cvt .......D...D.O..fpgm.......8........gasp...4.........!..glyf...D...`..-./^.Ihead......6...6.@0.hhea.......!...$.>.ahmtx..............3.kern............=.6.loca.......%......S.maxp....... ... ....name......."...~}b;.post........... ...2prep............%...x.c`f..8.......).....B3.1.1.100q.03..K......./.(.....R....>..b8.\|.......cba:........>..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....5.d.(.[.j.v.-.:.p.?.(.T.v.:.5.p.....A.......S...y.............,..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	5.795180952103608
Encrypted:	false
SSDEEP:	48:NOiDITryfRN87cp5yMh55RN8gbg1fe4wz90vIPCJIb2fAmQpwa8VY82XuhfMSjGC:DDcryfyS5yMh55tbgInZunThVYLuhT
MD5:	EA10CE8A2DD1041D897AF4EAE9186664
SHA1:	51152181F2056D533FF4BFC611BC9E12892F9C3A
SHA-256:	4262FD311EDD6F0754CC1512D1697A28F33D5B8F827250B58825086F3FB22A8E
SHA-512:	648675DEAA0E12085200E90B1981F4DA8D593BDFC757E80D2AFF8ED6CB8D6A4DD0665581A678C90BE0C57FB0440BE438026FB485D029921902861FADFF6B13FF
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( function() {. if (typeof TTDUniversalPixelApi === 'function') {. var universalPixelApi = new TTDUniversalPixelApi();. universalPixelApi.init("v62w3xt", ["f2bxyaw"], "https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjL

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1037)
Category:	downloaded
Size (bytes):	5249
Entropy (8bit):	5.574315286648827
Encrypted:	false
SSDEEP:	96:1nkOpv/gLr9pvJgLtqS5yMmqAD0rNgmThVFZwnvMK5EMKjOJxFQgInZur0DozdM:1kOl/gLr9lJgLtJdE0pzTrFQvB5EBjEq
MD5:	4ECCDBF213906F9C2AF17A245BC5C423
SHA1:	A67730F37955B997D5A0BC49FEDD920C5E3268A1
SHA-256:	16D016D5F4CA13820F729AA98F0256A693CE8D4045478D82A79298CCCA0CA15B
SHA-512:	51F8CDD32098C50CB7932FADA6550808B8FA789EF1C6C7880DD33B3A335E00E6EDC3DEBBE1C3DB423FB2EA621125F448B2F0C0D8C7E5CF67A5A2241AFB2C0701
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script type='text/javascript' src='//adserv.mobi/adsmovilUtil.js?v=1'></script>.<script type="text/javascript">. adsmovil.trackLandingpage();.</script><script type='text/javascript' src='//adserv.mobi/adsmovilUtil.js?v=1'></script>.<script type='text/javascript'>.adsmovil.callConversion("https://peornia-comargers.icu/conversion.gif?cid={click_id}&et=landingpage");.</script><script>. (function() {. var a = String(Math.random()) * 10000000000000;. new Image().src = 'https://pubads.g.doubleclick.net/activity;xsp=4720112;ord='+ a +'?';. })();.</script>.<noscript>. <img src='https://pubads.g.doubleclick.net/activity;xsp=4720112;ord=1?' width=1 height=1 border=0>.</noscript><script>. (function() {. var a = String(Math.random()) * 10000000000000;. new Image().src = 'https://pubads.g.doubleclick.n

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2552
Entropy (8bit):	4.795851335551723
Encrypted:	false
SSDEEP:	48:czAuf36SGo2uuzJg3RpzGTpEEptnGJQ3gshZ6QrPjxJvYgd5lgak6L7KfKe:vufK6uJgTUEEjGe3gsh9rP7QS5lgaxGn
MD5:	5C5579A50964D4972D1954BFF4EE232D
SHA1:	C78B384713CF7A8A5515A54F17C6E70EBDDE98FC
SHA-256:	C12815F27ECDFD09B2920C1EEA21AE7ABB8E107349D6BB8B39707A0CD9A3E591
SHA-512:	3694C68BCDD136FCA9507445AE06556A7CD524F9AEA4B6EC53849E72A935306171B7F0A1A198EBAD37E5AAAC0FF219B69653141C95D32DF5BAC97B98824AED4E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 131.2 111.2" style="enable-background:new 0 0 131.2 111.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;stroke:#333366;stroke-width:2;stroke-miterlimit:10;}...st1{fill:#333366;stroke:#333366;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M42.5,92.3H10.1v-65h26.3v11.1c0,1.7,1.3,3,3,3h22.1c1.7,0,3-1.3,3-3V27.3h28v18l6.1,0.3l1.9,0.1V24.2...c0-0.9-0.3-1.9-0.9-2.6L83.9,3.2c-0.8-0.9-1.9-1.4-3.1-1.4h-59c-1.2,0-2.3,0.5-3.1,1.4L3,21.7c-0.6,0.7-0.9,1.6-0.9,2.6v72.1...c0,2.2,1.8,4,4,4h40.1C44.7,97.9,43.4,95.2,42.5,92.3z M79,9.8l9.8,11.6H64L62.1,9.8H79z M45.8,9.8H56l1.9,11.4H43.2L45.8,9.8z... M42.4,27.5h16.1v7.8H42.4V27.5z M23.6,9.8h16.1L37,21.3H13.8L23.6,9.8z"/>..<path class="st0" d="M70.3,55.1

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	downloaded
Size (bytes):	112800
Entropy (8bit):	7.979338429847193
Encrypted:	false
SSDEEP:	3072:4lmRJ5SUznTH7/JaCs0DzpSZ0bkabHao0z/j/oR7:0QvvTrcsW0ka2z7/O7
MD5:	268F52A4473ABDB8115801939C31456C
SHA1:	9A3D75AAA6EA34703397F20641F5052770DF17EF
SHA-256:	08C36F4BF2CE9CEAE3E7AED291D52F0E9F335398F41DC7CC89E6AA4ACAFF5C18
SHA-512:	49ECED3393BD0FAEAFEE8EFCF9D9BAC1AC15E658ECE3721D1F7027464A377352854FCCEB756B5EC025E803254F1AFBB03DEF42ECEA8333ABB5EFBFA77E7AF137
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/pp-cedarwood.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 991x225, components 3
Category:	dropped
Size (bytes):	30285
Entropy (8bit):	7.965816842802094
Encrypted:	false
SSDEEP:	384:w0Fpj1P70fqHHsKJ6QRGaW+2EpS8jnCmzc6GHzyR72vKV0k5KAdevJid:woj1P7UPQRYEpTCK/GH+72yZTgvJid
MD5:	D8038E289D658A845596FAE323E1D628
SHA1:	929283582DD53EAEDBBD99479B360CAEFD782CA1
SHA-256:	05DB6A0A34804A3B49FA898956A669B6496D4F1A67118BED95775B67A3641EF5
SHA-512:	A3E4712DC739049B3FE482E000C89ADC5F0A086D16A85795EBC564DEA1891B063AB2F496AA4E5446EA07F9C44FC986C2E0631DF1C92AB2E18124C77F1200EE36
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:4ACC107DF6F711E9A6899C204A4492DD" xmpMM:DocumentID="xmp.did:4ACC107EF6F711E9A6899C204A4492DD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7A96A86F6F311E9A6899C204A4492DD" stRef:documentID="xmp.did:4ACC107CF6F711E9A6899C204A4492DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (334)
Category:	downloaded
Size (bytes):	87557
Entropy (8bit):	4.732753397680594
Encrypted:	false
SSDEEP:	1536:X1BDsJsBs5s7Xz120AqvfUD/Jaas5szXzQh0EMH+z7oTwaU:X1BDsJsBs5sDz120AGfUD/Jaas5sLzQX
MD5:	B0B1A86F3E57C5401DD19DF59559C7F2
SHA1:	1336B45E45573BB7869192AB7BA7BAC4317373B8
SHA-256:	14EAEB5D887969545FA6E2F3A6616CD9A6431298337611E9663E947E798869DD
SHA-512:	DF33426DE3AF95892554D4C9FB2D20C0C53EB261E930581D0C20E2D850E9B9CBAB24582BC98350476AE3CE30777BEF97FF97D604126741F691CC99322607EE68
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/polo/po-locator-ajax.js
Preview:	// AJAX Functions for POLO.var poLocationData = {};.var poPageData = [];.var isZipSearch = true;.var isAddressSearch = false;.var isPassportApptSearch = false;.var isPassportPhotoSearch = false;.var isPassportWalkinSearch = false;.var serviceCodes = {.. "BULKMAILACCEPT": "Bulk Mail Acceptance",. "BUSINESS": "Retail",. "GXG": "Global Express Guaranteed",. "LASTCOLLECTION": "Last Collection",. "LOBBY": "Lobby",. "POBACCESS": "PO Box Access",. "PICKUPACCOUNTABLE": "Pickup Services",. "POBDELIVERY": "PO Box Delivery",. "PASSPORTPHOTO": "Photo Appointment",. "PASSPORTAPPT": "Passport Appointment",. "PASSPORTWLK": "Passport Walk-In",. "APC": "Self-Service Kiosk",. "CALLREFERRAL" : "Call Referral",. "CARRIERCALLREFERRAL" : "Carrier Call Referral",. "SPCBUSINESS": "Special"..};..var onSiteServiceCodes = {. "ALTCOLTAXDAY": "",. "ALTRTLTAXDAY": "",. "BUSINESS": "Retail",. "APC": "Self-Service Kiosk",. "BRMACCTBAL": "Business Reply Mail"

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487495013&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4007
Entropy (8bit):	7.761828960398776
Encrypted:	false
SSDEEP:	96:rZ/I09Da01l+gmkyTt6Hk8nTTaFP841IWEj5Whyxw:rS0tKg9E05TaPBOWENWhyxw
MD5:	A40CFEA8FD27BE68BA76CBA652FCFCDF
SHA1:	18A78217DCE2CC5D1AB3CB54144878DBFB34C9F8
SHA-256:	E1CAAC24624AC8C5AAD46F92D972B1F1F292D90E61F9267A0EB447C6C2C76073
SHA-512:	7CA6316488C26337EADF03AA209934690EEB62E72AB2B12E0B529A5D2F33878AA893BC3097E128831616E6712BF2F10A461A486E2E4F58A2C87DBD402A1C65DF
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/zipcode-lookup/navigation-divider.png
Preview:	.PNG........IHDR.......2.....l......EiCCPICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9., +.....3...!.[..b@q..S.(R.jJ.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/favicon.ico
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/youtube_logo.png
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 626x277, components 3
Category:	downloaded
Size (bytes):	40507
Entropy (8bit):	7.944440377781344
Encrypted:	false
SSDEEP:	768:9/X7aiPxfgiS1d0mdZgztbfKgfV4jHKllkU6+yLj7uP9moKx/gm:9/egxS1dXWztfKsV47K3w+y/7uPzKx/x
MD5:	2636DF66D869E58AF2EE447AC7D53861
SHA1:	A6659397D1EC30D01A1FA178905C8B358DD30B8F
SHA-256:	D8E22E9E128007E03604465A44445B16A508EBE964747A466543D3B0D2A2CD17
SHA-512:	9571307CF15F5269919C458C0231F7FD9C2DC50C6F9277F079E7BC76B13D28521FB1AC9E8258CEEAD892C4D5351DAA38ECE4BA342E459C81F4B37D7978DA02C1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/supplies-dotcom8.jpg
Preview:	......Exif..II*.................Ducky.......P.....uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F3F706D8B7A11E98D82907679A821AC" xmpMM:DocumentID="xmp.did:BD7165A5EFE111EAB63896AF6BA545A7" xmpMM:InstanceID="xmp.iid:BD7165A4EFE111EAB63896AF6BA545A7" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2019681AD64711EA8DAA86F8C09A34DD" stRef:documentID="xmp.did:2019681BD64711EA8DAA86F8C09A34DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	98412
Entropy (8bit):	7.963762182600066
Encrypted:	false
SSDEEP:	1536:45sh0NQ0NjcX+aemW2P2CdzMnP0V3EpFkQPOod1eMzApvbtVibrNzbaslVu8koq2:4ahSpUeEzQPhhkpztVErEs3ucqmnwfA
MD5:	3C638BEFC7B6A75C2E3E540D5DC06E45
SHA1:	ABC603B4E3E28CB3F86B4868A4337456AAEB9370
SHA-256:	1F3B08D27591A755F7C339147307C9113C46DD7DFAC752E463864B82DAE10EB0
SHA-512:	7304C22488E05380A510E92D09B6EC264C91D25C517C4DA889BEB4BCE16D38A2402FE23F8551A8C431BF78048FC71A44368BF14E70AE1B05FCD5E244838397A6
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 34
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	5.876279499401526
Encrypted:	false
SSDEEP:	6:wvpRimsloM5NcFelVl5K/CnlGl+dAHqBJH:gpUlhRw/QMkdQGH
MD5:	1D286FA7B2A8B52CD9C56265A44E0B28
SHA1:	5BF16C199106556FA290E24833E31C745EBDAE5D
SHA-256:	D99EDA8435DC3777B6B06C691F1D55CDBC7D61E61C644BE140ACD60ACF8358A9
SHA-512:	86452ECB212E5FB262C71416A92361A5C86B66D2B5B9B0EB89A89DB7EEC63BE676A451D9C6A9E164C4B501D905E7A478EB2948A8F3E4CBA4722F2BE1EDEA5E1B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_pipe.gif
Preview:	GIF89a..".................................................................................................................................................................................................!.......,......"...9@...x..*Zr...J)P. .D>0..p1.8....2.H..e.`d...j.O..Z.%.{jA.;

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10379
Entropy (8bit):	5.360773136060479
Encrypted:	false
SSDEEP:	192:uzgyBVGVhf0AhxmySG8AxlDRw+8ilib61oXMeZ1ja3wlpZgowXw89/vtCNw0wFw5:eroasnR/wlpZdcF0pas
MD5:	08A569482E1DBEA1551C6A50C1F43547
SHA1:	C3D67A3EDEEAD66FD84F097DAA372B3E07D5C38E
SHA-256:	34881CE55F5559EA4A839C6B54D8901A01747AE970450BED5CFF67E3881304F3
SHA-512:	68A4DF497E579B541D33CBE28F4A6694D8CF759BD743B54E51212D1397721FAAADD8C403B43D7DFCA1040D07C2CCBE18A86C9629AFCA4E71597DC7512FAC3F84
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/script/ge-login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var pfslHost = "pfsl.usps.com"..var lowEnv = false;....// Get current URL..var currentPage = cleanURL(document.URL);..var currentPageIn=currentPage;..var hostname = cleanURL(document.location.hostname);..if (!appID) {...var appID = "Phoenix";..} else if (appID=="ATG") {...currentPage="https://"+storeHost+"/store";...currentPageIn="https://"+storeHost+document.location.pathname+document.location.search;...currentPageIn=prepURL(currentPageIn);..}..if (document.location.pathname.indexOf("holdmail")!=-1){...currentPageIn="https://"+storeHost+"/holdmail/";..}..if (document.location.pathname.indexOf("redelivery")!=-1) {...currentPageIn="https://"+toolsHost+"/redelivery.htm";..}..if (document.location.pathname.indexOf("pse")!=-1) {...currentPageIn="https://"+storeHost+"/store/pse/";..}..if (do

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3944), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	78828
Entropy (8bit):	5.160748774231795
Encrypted:	false
SSDEEP:	1536:IM/Qpea/dD/OvLF1+DW9kpeUacKnq5jmO8xlc4XiCyjIr2t9F7HC:jqbcctQ
MD5:	F5467288D6F1830B53A094527AE9940A
SHA1:	718AB5BF2CE042AF523F8C7DE46D598286649C50
SHA-256:	2FFA8CA295F5AD8512BD3273EB9C6A0DEA91DCAAF8812A9A132C76A4DEB6D2B5
SHA-512:	F29D4BF9B611A6E0603664857C523C65A77B4EFE9E19703554CA31155947BF652CCDF346B2B726F6DFAD6E5B931546AF2032D8C98A2B49A3CA56ADE5D3785F4A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/manage/informed-delivery.htm
Preview:	<!DOCTYPE html>..<html>..<head>..<META http-equiv="Content-Type" content="text/html; charset=UTF-8">..<title>Informed Delivery - Mail & Package Notifications \| USPS</title>.. ls:begin[stylesheet]-->..<link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[meta-keywords]-->..<meta name="keywords" content="informed delivery, mail preview, daily digest, preview images, notifications, package updates, tracking status, mail reminders, package dashboard">.. ls:end[meta-keywords]-->.. ls:begin[meta-description]-->..<meta name="description" content="Informed Delivery is a free service from USPS that shows you preview images of incoming mail, plus status updates about your incoming and outbound packages. Get notifications in a morning Daily Digest email, or at any time from the dashboard using your smartphone, computer, or USPS Mobile app.">.. ls:end[meta-description]-->.. ls:begin[custom-meta-data]-->..<

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36812)
Category:	downloaded
Size (bytes):	36866
Entropy (8bit):	5.199264587934188
Encrypted:	false
SSDEEP:	768:zgzTUCtrvm+TZNUSvvZNIRS9/STIfRFFXyYPvY36ICgiPoyG:UUCtI8/bnPvY2giPoyG
MD5:	F58E9B93E0BC15AEF0FF861883F67A71
SHA1:	361CFC0361349B24C938104B1F0464F8772462CE
SHA-256:	3E3AFF916A447FF65FA08000BB26BE862EEEF280EE35C608B13EFB53E5F84B3A
SHA-512:	A411D36F6062A9643B5D83F7107F72C24D1BB45DB6F959913350BDAAEFEB04EA7AC66D0C5473043F4D954D42D57B73FD848C3355A0FAF30755CD950F26A6ABEF
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/libs/bootstrap.min.js
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). */.if("undefined"==typeof jQuery){throw new Error("Bootstrap's JavaScript requires jQuery")}+function(d){var c=d.fn.jquery.split(" ")[0].split(".");if(c[0]<2&&c[1]<9\|\|1==c[0]&&9==c[1]&&c[2]<1\|\|c[0]>3){throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}}(jQuery),+function(d){function c(){var f=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var g in e){if(void 0!==f.style[g]){return{end:e[g]}}}return !1}d.fn.emulateTransitionEnd=function(a){var h=!1,g=this;d(this).one("bsTransitionEnd",function(){h=!0});var f=function(){h\|\|d(g).trigger(d.support.transition.end)};return setTimeout(f,a),this},d(function(){d.support.transition=c(),d.support.transition&&(d.event.special.bsTransitionEnd={bindType:d.support.transition.end,delegateType:d.support.transiti

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	881
Entropy (8bit):	7.541232984254318
Encrypted:	false
SSDEEP:	24:D6MHwez8VvjhCcBLr20apQ5DB5T6w3I+UomeruO:D6T+8VvjhCcBLrhapiDjGwY+UM6O
MD5:	A16F3B8FA698822BEF01225ECB914AF2
SHA1:	E914D479A960D46DF96464A42A74E63943527BD9
SHA-256:	AD33AE91B030F7E84A22120A2469FA993F13F7C6005FFDF96AD29CDA7AFF6350
SHA-512:	7CF8706B5A6C1D7659DC3CE4681C44122E6BFE5191EE22F1FE167826E16B2BDCC4563E752F4D91F0D91B6F090609F2EA340FB516B9D0BFC195EA6E94A6AD9E52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&.................gAMA......a....8eXIfMM........i...........................&..................~V....IDATX..MOSA..O...j.+..Q...$5............&a!.p.E.KXkX. ...T.....U..=..m..........;s.s..I.....#...V+....p..A/8...x............P..O.._....$A.'..e........1o1.....oh.........4..X.}...] ........./...Q..].........S....dd.C.4....GeO...!6;34..0.,...'..(23.(G_.3..0#..`...e$..J.e..............%.Ua..TTWWU..UC!U.....V.0#.PP..T.Q.`P..s#.1..:...dT..U....{....c........X}.....K{ `wD.~%$.9$.....H:.vH../(.7...+.v..rVVDfgE...g.)Ea?\..!......Y_...C:..L...'.R...+..P..fE..Eb..+t..-....V..rY$..YZ...l...}f.y..G.....*.\|.......<.~_.../p.MaX....p.q.5.!y.K..T.....%>...?<J..o.>..E.Ab..Zz.C..}.p.,..h.P.._.9.@...w...V54.~.......l.:..PrOe..~..^.6..n.zM..5..........x..[(-....'...I..6.R.F...~`N.gQg.........(.u.............?C.3...o!....IEND.B`.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/schedule_pickup.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/schedule-redelivery.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 142, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20334
Entropy (8bit):	7.948243778721977
Encrypted:	false
SSDEEP:	384:rAnxKfUtnZYQv/L5cd+2gM7s8nafjMI9XKwXcKFbdeYk7rwsK3PbiJC5ZwukQYsX:UxPnZYQ3Vcd+TM7sRMIxKwsK+YaEsWJ/
MD5:	D0DAD9004BAE0DF70B06B75557B1DF62
SHA1:	4A080764DE6B97902413F5C836432A30DA348517
SHA-256:	2FF8048AB175ABF501E134D00A973CA31A7B0DE09C2777EAB0A2C9DC07CA0289
SHA-512:	13C3A4B49FF26BC73FAF663DEF3D2AA764410233163ADBD987F20D01C6880D6AF84B3A89E254330398F1FAEE05BAA777D8BE70FB11C27DDBCEC62E24F727F540
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ship/go-now.png
Preview:	.PNG........IHDR.............D.V.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:E28027FAD49711E8BD48AFE4CEA2DE6F" xmpMM:InstanceID="xmp.iid:22fe2074-b7c4-4968-a067-5ddc0ec06b94" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-11-08T10:38:29-05:00" xmp:ModifyDate="2019-11-08T10:39:17-05:00" xmp:Metadata

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487505360&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm
Preview:	{}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.028268227589132
Encrypted:	false
SSDEEP:	24:rpRp1EANTMM+AeXQTMoAeR1nBejv3TUeX/eX4RHUTMEqBYoAylwT:dn1aMgPi/nErTz2iRxM
MD5:	D8CB563907E68E9649948C6F521EFE60
SHA1:	F5B7CF8123929DB8162A2AF51D07DD11C21FBAC3
SHA-256:	FD1E9EADB5698C1BC534EF8A75303B3B67F5E1AB7D1B217B27B09DA42AA5036A
SHA-512:	0C183CE2FA99910BBC54DB6E87579B8AB7C4B9840B327CFAC6FDA8975F9317CF8FFBD02175BB62FEE674F9FF4FAFBF3FF255E600818837CCF93519AFAA78E52C
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/script/header-init-search.js
Preview:	var USPSGlobals = USPSGlobals \|\| {};..USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/lib/script",.. context: "global"..}), USPSGlobals.Require.requireHeader = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/header/script/",.. context: "header",.. paths: {.. jquery: "https://www.usps.com/global-elements/footer/script/jquery-3.5.1",.. "require-jquery": "https://www.usps.com/global-elements/lib/script/require-jquery",.. helpers: "https://www.usps.com/global-elements/lib/script/helpers".. },.. waitSeconds: 30..}), USPSGlobals.Require.requireHeader(["require", "require-jquery", "helpers","search-fe"], function(e, t, n, r) {.. var i = function() {.. var t = function() {};.. t().. }()..});

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "OS/2", 26 names, Macintosh, Part of the digitally encoded machine readable outline data for producing the Typefaces provided
Category:	downloaded
Size (bytes):	132108
Entropy (8bit):	5.46626477858863
Encrypted:	false
SSDEEP:	3072:fWzQSOdwTtW2oy5BC9xXZ2O7YTlMZAIbmdzF:fWzLTVBC9Z4sDAImBF
MD5:	C7D7D1136A4A6D39A82705577B9EC629
SHA1:	34E7FD0D8BAB0562F7A278C2D700A39AA3CA9174
SHA-256:	98101790F684988E62347B180B399DE64DF469D41F181F91EFD27EE926AD7760
SHA-512:	5F58F3F7D1CF93C9A75B9FB97D8AEFBBF572ACB966051D2E9B21DD732AAB505DAA82344F311F03CA92AF7DB38EC27514B2659CA492CB9DBADE0A690DA94B1FCD
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf
Preview:	...........pOS/2..+........`cmap.8.....\...tcvt .C.........Hfpgm............gasp............glyf}..n........head.Z1y.......6hhea.^.........$hmtx .8....$....kern.......<....loca............maxp........... name\|hN....<...~post...2....... prepI.......................X...K...X...^.2.6................P. J........LINO............................. . .................h...V.@.......~.+.7.I.~.................. . . . " & 0 : D .!.!"!&!."."."."."."."."+"H"`"e%............ .....9.L.................. . . . & 0 9 D .!.!"!&!."."."."."."."."+"H"`"d%......................%.{.z.l.........;.8.7.6.3.."....L.>.;.4.a.^.V.U.S.P.M.A.%......s.r...........................................................................................K.2.7.o.X...D.h.U.7.o...D.2.Z.K.....:.......J.....................".....,K...PX....Y......D......_^-..., EiD..`-...,...!-..., F..%FRX#Y . .Id. F had..%F hadRX#e.Y/ ..SXi ..TX!.@Y.i ..TX!.@eYY:-..., F..%FRX#.Y F jad..%F jadRX#.Y/.-...,K ..&PXQX..D..@DY.!! E..PX..D.!YY-..., E

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4480
Entropy (8bit):	4.413594266486805
Encrypted:	false
SSDEEP:	96:CHd8i8ESxZy5UCwJdQcqcKJ2D5jVzirv0by+V8irJeahbys:6itl6UvLKJuVMvqVRMy
MD5:	9888B7ECE5D0C00DD43C81335AC511AB
SHA1:	3BB167CB12C04FB550EEDCAD655D2E993C01B64F
SHA-256:	7966B96F123DF0307390AE916F521FA20FCFD15EE0AEBA751FCB399E440FDA9D
SHA-512:	4F85152C026027ACABA295AE83461CB8673855F30294BC0FC4E4849049981403B47391AF467C06FBA6B33DACAEFE5480D3E52BDFE0962462F078A6D1F945CC4E
Malicious:	false
Reputation:	low
URL:	https://adserv.mobi/adsmovilUtil.js?v=1
Preview:	.. (function(adsmovil, $, undefined) {.... function setCookie(cname, cvalue, exdays, domain) {.. var d = new Date();.. d.setTime(d.getTime() + (exdays2460601000));.. var expires = "expires="+d.toUTCString();.. if(domain){.. document.cookie = cname + "=" + cvalue + ";domain=" + domain + "; Path=/; " + expires;.. }else{.. document.cookie = cname + "=" + cvalue + "; Path=/; " + expires;.. }.. .. }.... function delete_cookie(name) {.. document.cookie = name +'=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT;';.. }.... function getCookie(cname) {.. var name = cname + "=";.. var ca = document.cookie.split(';');.... for(var i=0; i<ca.length; i++) {.. var c = ca[i];.. while (c.charAt(0)==' ') c = c.substring(1);.. if (c.indexOf(name) == 0) return c.substring(n

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	downloaded
Size (bytes):	123985
Entropy (8bit):	7.973603263546903
Encrypted:	false
SSDEEP:	3072:4At9E/zxhecTLB6oQL280D1hUCr9PBcuC/sda0c:lE/zxhecTl6oQL2dbUQap/ca0c
MD5:	A8F7D8E3325AAC0EDC8C51C151D980FC
SHA1:	B90447CF89AC91390C9DC52B4F3719161AE606F2
SHA-256:	C6846109092A0F90903D5E683274116680005A67E2CA274967BBF72CBFA7C51A
SHA-512:	5C036F704B356FA47CB2A6EC4106EB117C89947A9519E78CE65B8C4FBA12E1B3AE1964990C95A5C518411DD968F389F51BF8F858B09378C4D47C9904873F9EE4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-stamps.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	4.94544014004298
Encrypted:	false
SSDEEP:	48:sxWbgJPABPcJ09JseJel9yl47fFfeU2pYdEdfTz5+MOEei:sWuAB1ntJEYqWUxdmfvVOli
MD5:	F7337D7D3B1B1AF555348038D684BC08
SHA1:	0063EBB65EBEC0CD39E3D060D71CFE25398E41E2
SHA-256:	8C84EFD0A5E9BB67A1ECC895C6AB1FFE3731CF0664D1502D95234B0521CFB797
SHA-512:	7A6EB41B3023167D0F29A38DE85F203D34ADDD69EEE2172F01E60C74823BBD5341336E14FD70DD583CF309F09FD6788D4FF94124617A507EF6385C8B8ED96ED8
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><clipPath id="clip-path" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="389.35" width="20.62" height="2.75"/></clipPath><clipPath id="clip-path-2" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="403.35" width="17" height="2.75"/></clipPath></defs><rect class="cls-1" x="27.54" y="57.33" width="20.62" height="2.75"/><g class="cls-2"><rect class="cls-1" x="26.54" y="56.33" width="22.62" height="4.75"/></g><path class="cls-1" d="M656.46,396.35v2.75h24.89c.34-.93.72-1.85,1.15-2.75Z" transform="translate(-628.92 -332.02)"/><rect class="cls-1" x="27.54" y="71.33" width="17" height="2.75"/><g class="cls-3"><rect class="cls-1" x="26.54" y="70.33" width="19" height="4.75"/></g><path class="cls-1"

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1800x400, components 3
Category:	downloaded
Size (bytes):	119371
Entropy (8bit):	7.980381346945774
Encrypted:	false
SSDEEP:	3072:4XyTpTvr3fb7fG+bEvWr9qYuKSWhmJqAiY2XuNVffAJ:1Tprvb7e7WZlWWhmbi7c4J
MD5:	830B5F10EA0A4092A90F9413F0680E34
SHA1:	B6FF894A43C0FC2D1235FB46996F743618408876
SHA-256:	19FB2CB552CA54971A44E2FFB13057C52D035025F5518122FB605DFB4BC85AC3
SHA-512:	C6F864AA1A9398A2F4A4E1DD52582F0DCD12419E0858A304581344AD8227DF1851F69B9B96D68CDB73068D8121968D3F3701223D53458AFB7A76FC54933A2C3F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/premium/id-phoneblur.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.028268227589132
Encrypted:	false
SSDEEP:	24:rpRp1EANTMM+AeXQTMoAeR1nBejv3TUeX/eX4RHUTMEqBYoAylwT:dn1aMgPi/nErTz2iRxM
MD5:	D8CB563907E68E9649948C6F521EFE60
SHA1:	F5B7CF8123929DB8162A2AF51D07DD11C21FBAC3
SHA-256:	FD1E9EADB5698C1BC534EF8A75303B3B67F5E1AB7D1B217B27B09DA42AA5036A
SHA-512:	0C183CE2FA99910BBC54DB6E87579B8AB7C4B9840B327CFAC6FDA8975F9317CF8FFBD02175BB62FEE674F9FF4FAFBF3FF255E600818837CCF93519AFAA78E52C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/header-init-search.js
Preview:	var USPSGlobals = USPSGlobals \|\| {};..USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/lib/script",.. context: "global"..}), USPSGlobals.Require.requireHeader = USPSRequireNS.require.config({.. baseUrl: "https://www.usps.com/global-elements/header/script/",.. context: "header",.. paths: {.. jquery: "https://www.usps.com/global-elements/footer/script/jquery-3.5.1",.. "require-jquery": "https://www.usps.com/global-elements/lib/script/require-jquery",.. helpers: "https://www.usps.com/global-elements/lib/script/helpers".. },.. waitSeconds: 30..}), USPSGlobals.Require.requireHeader(["require", "require-jquery", "helpers","search-fe"], function(e, t, n, r) {.. var i = function() {.. var t = function() {};.. t().. }()..});

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454814460294955
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPU:ttlWBZ7O0bvQQGArHu5GKn8
MD5:	ED4FA4EB31641234901881C752E61024
SHA1:	DBD32C0D8D3E063329D7A27E24499E63804A94FB
SHA-256:	85F407912384186334577F65BF6BB88045BD96F5222D7C696CC71303D65C826A
SHA-512:	E3ABF742E5AC3175A0DCD9799FB29EFFCFCB1B6BE294D10449421A77C9EC6A0FC12855566E9761150E38BDD0CEA1D369E4984C9EF618D9F7B212CBCE88EC4A8B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238), with no line terminators
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	5.843160842703429
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08iI/xQSWK9AjM6:wsbSUtJfxrqLWWWdV6j1GIp0x
MD5:	3AC7EFF036C203F93C74766D62D1098F
SHA1:	6E5685012BB576622BF42AB9E9CE889655C7B621
SHA-256:	D2FD759B172860309E5122E9794644287C3211EBF6EA444520D9F67590DB1191
SHA-512:	272461A4C4EC1E53576AE8C6CC1A099D249D657CBACE6096EA50E9580937FECCFB84458B842AA13070980B710EA5D1C7CBCCAAA37B38F8E2C97F5E38749E146B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487482897&cv=11&fst=1713487482897&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/script/jquery-3.5.1.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615
Preview:	{}

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/hamburger.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 974x413, components 3
Category:	downloaded
Size (bytes):	102287
Entropy (8bit):	7.909989435764711
Encrypted:	false
SSDEEP:	3072:A4huzgk9Wa8z1G2f3NJndPikTwIr32xkutxR:5u/ga8zQ2PNFdPikTl2q03
MD5:	006BD76F4FF52059B17C314BA086DD18
SHA1:	9C580ED423728CD6FBCCF759AB8E937FC08C4F11
SHA-256:	442CCF40C76C60C5A1C70C5EEFD5FC14130AF91AFB43AE6305B54763ACDE241A
SHA-512:	50AE46A64AFD94B10C5C253B06D8A115E0D33175C82CE96FD55B2FECA195E6C85D6CE1D8189F3031C4ED58D5280AA540B76A3C26383F0A26B3B1CFF56A4DE4BD
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/id_hero.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i..............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................=............?...OSIJz.J.(...(...(...(...(...+....?h..Q..>'...Z[\...N.&bY$..6V....^....28.}7.O.....W...b.....h..\|G.6.u=WU.t`..Op..g,....s..F.kz8%Z.L._...f..... ....d./.]B.,~u...0.y......d....Z. .~/...?..._.?.I/../...S._.-em.7..Q......P..2d........_.,..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/chinese_characters.gif
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	546
Entropy (8bit):	4.943111740565621
Encrypted:	false
SSDEEP:	12:t4/KYpxjRPi1NnrIKsJKAzqJVc2oKoSLKoSLk2ok2rJSLJSL1GuoVVb8UVg:t4LLjRP6NRsJK1mw2A64GuIVb8Mg
MD5:	37C94E8DE8729BE2B0B9833BAFA28F3B
SHA1:	C675396F6D65666DD6047B6E92CBD5429556DBAC
SHA-256:	B95F434286744E3DBAF5BC56F41D4CE2640DA3038461502F7AC243A5931E9435
SHA-512:	89C1E44E0DF997865698D87C7C43D0A16EFC6925B2924F203E75C36ED12B231BC73FCEB0A4113BB933E7A3F90586C9F24EFC9185904F3BC7961BC08662907EAB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938">. <defs>. <style>. .cls-1 {. fill: #343466;. fill-rule: evenodd;. }. </style>. </defs>. <path d="M-0.000,49.937 L-0.000,43.344 L67.000,43.344 L67.000,49.937 L-0.000,49.937 ZM-0.000,21.344 L67.000,21.344 L67.000,27.906 L-0.000,27.906 L-0.000,21.344 ZM-0.000,-0.000 L67.000,-0.000 L67.000,6.594 L-0.000,6.594 L-0.000,-0.000 Z" class="cls-1"/>.</svg>.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8026
Entropy (8bit):	7.908922983825871
Encrypted:	false
SSDEEP:	192:r0IjWvjdbeMsSpaYukMMX7wsjXqaD0Act/nt1BXINooBmd3:JjWvBTsS47kMMNjXxW/WBmF
MD5:	49754396635190A6532DD376ACC76EE1
SHA1:	526DF243E2ADBF5719B082C5E04190ED40209CCD
SHA-256:	0962CC2915393132882747BF55B069572324019764AF92EC02D5D0249BFDFF99
SHA-512:	11EC8C42F385C16F32230BE791A79562DA7E154D1F624920093EEF345693D574BC8DEDF2024F4633B0D8D24FDCF187E1E6191024FF8D546C1EC93B7105FF5A08
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/manage/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:07828012246811E8B1A59F4166EA9B6B" xmpMM:InstanceID="xmp.iid:07828011246811E8B1A59F4166EA9B6B" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:f425a6e4-329c-4799-8d88-af7935edefe3" stRef:documentID="adobe:docid:photoshop:cdee8da3-ed4a-0846-96ea-aad89bc53531"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>].qu...oIDATx..]..c.u.M.(

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	6.790694000685623
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfu:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenW
MD5:	D68E763C825DC0E388929AE1B375CE18
SHA1:	7951A43BBFB08FD742224ADA280913D1897B89AB
SHA-256:	25CF0F0CE42F8ACD9EA6FACC223F54105C7FD0CCE63FB7BB5D83E6600100ACBD
SHA-512:	1E146E2631A4F3BD091905CCC10ED1054700349648CD52AAD24EAEEEDFF0FAC4B44B6212284A6D0855942FF16308C66402ECB895E68EF1C66DCD496973043CDB
Malicious:	false
Reputation:	low
URL:	https://ad.ipredictive.com/d/track/cvt/pixel?acct_id=17037&cache_buster=[timestamp]
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1456
Entropy (8bit):	7.0245803751655105
Encrypted:	false
SSDEEP:	24:ojX1hJIwWwjx82lY2T3oVYNWMa1oW/yJ3VYHWG17opWIGXtkDMEisqqY5G4m4z9h:ykNNn2kWBUOJ3Wt7iBFu5xm4z9L5vUk
MD5:	410956805D5701E87299CFF412827E1A
SHA1:	5DE9A390649DFC12E3D6DF431140D499AD8ABD67
SHA-256:	6E727DBF5B0F4A3EC76762E445AD2C5CB750F7DE41AFB8B0342F903124D09826
SHA-512:	84CE9E5B113DFB743A0F9A96EB9F527987A925F4E93AC8C113C34E06E4BC16A7063582320A454DDAE5451547F5A6D82B4C01BCA06E71CB4BB73B249EAEBCF2C2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/utility_languages.png
Preview:	.PNG........IHDR.............rP6.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:9C4417A83D6A11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:9C4417A93D6A11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417A63D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:9C4417A73D6A11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..ym....IDATx...K.Q..g^.)..K]D.AX....(..;j.r&".\.E....pU+..4....T..~....6.&+&3.0jz..F....<........so<......p..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2165)
Category:	downloaded
Size (bytes):	198906
Entropy (8bit):	5.525007668077657
Encrypted:	false
SSDEEP:	3072:LIAZVNSNcMzszPIRy81jCBPIrTWRdSPElfh6St2nBsLqxs4A:8AFMgzPjgOfh6St+aqxst
MD5:	7C1920AA3CC8CF03C4C568F2B73C4096
SHA1:	C6B923E9F19CEF2FC8E187953834EA8A493D2B4F
SHA-256:	3FA83536075340DD4EE9424A3AA2128AB72B1282D123C4BE6D279C4D311C42CF
SHA-512:	03C87A67176E97B7421BBF07091457428F7668774439CF2DDBF66C8E5DF950991C95267F8F6810432D33F2027BC027FECD6699C289291A2DA55C5CDDFEC9EC1F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-3976941&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}..,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ea=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"o

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 844x457, components 3
Category:	dropped
Size (bytes):	93266
Entropy (8bit):	7.9390640972756215
Encrypted:	false
SSDEEP:	1536:R85so3upe6O7lpOdnm8DoGJt1IPgzx03gJsuM/dFrrlYTnrU/11tq99D:C57+pelX+nbNJneSx03gwrMnrG1Ly
MD5:	972ECBDF4A686275BFE61A7E7A1AB877
SHA1:	F9C81C51FCF7C69121DDC53ADA9D309A0588A231
SHA-256:	CDFD97B1CC3AD2F4EF7E8A01915808CE36EF17491C4CF099690B5CB457BB6A85
SHA-512:	FCB2FCD4813B5E5E112E3F6D2A337E318708C6A677895BA23C6C5C17CD2E7537CA263958CA67415F8338D4FC12AE03F77F5E64D0547F826C5F93D98E456AD88B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................L...................8Photoshop 3.0.8BIM........8BIM.%..................B~........L.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................5............?......$....q!........k.5x..f...'..j..+.]u}N.H.S.?..........E..{t/dq.....S.@L...V N;S.8...{.._.'.H....]..@@..Z..\..@...a\|<:...5SW.t..iS...V.v.d.iX""(.fbp...X.Z...).mb....._......./<.....^?....r........o..;...0n.ma.5.N8>X...~U.h~...RO.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	285314
Entropy (8bit):	5.053808917632283
Encrypted:	false
SSDEEP:	6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV
MD5:	12E87D2F3A4C8B347AB13A0764D420A3
SHA1:	4BE715E11048C057FDF2EE0FBBFAD4DBF3504C55
SHA-256:	78A85ACA2F0B110C29E0D2B137E09F0A1FB7A8E554B499F740D6744DC8962CFE
SHA-512:	FA4D699E582DE05D47F0BEEDDF3F79A37FCA3BEA3BF083447174DB9E8250FC5D95A835615A86A256697F3841EFF47B1583151A556F886E264F50941F17F63167
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/libs/jquery3.min.js
Preview:	/!. jQuery JavaScript Library v3.7.1. * https://jquery.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2023-08-28T13:37Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket trac-14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factory( w );....};..} else {...factory( global

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487477144&url=https%3A%2F%2Fwww.usps.com%2F%23endnav
Preview:	{}

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/facebook_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/footer/images/footer-logo.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57791), with CRLF line terminators
Category:	downloaded
Size (bytes):	58078
Entropy (8bit):	5.248934854412323
Encrypted:	false
SSDEEP:	768:BwYyDyKAmHVaS3m3Dqp0NwCkXDtdFDLmTV+miDNJcJiQMRqyPiYtB6UvcCg8YGxV:BwTKktDLmTF8yJL45XtHjoGL
MD5:	0A958254DB529F99F475080FE2A6DCDB
SHA1:	EEBC17246F2BEDA813DD3372593CC54A152F9CB4
SHA-256:	3BCD802E9F77849E7C1E93C87279FBBB04D45949D2BE79B03566CEACDE29B158
SHA-512:	327BF409CDD167171A300EF7F95FAC5CBC802320B2872EA845EC434FF7987A21CB0F0346A8EB3CB891447B98E2E622C3D721BC295BF4F26E763659DBB8A09940
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/bootstrap.js
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */..!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t=t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,function(t,g,u){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function s(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function l(o){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{},e=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(e=e.concat(Object.getOwnPropertySymbols(r).filter(function(t){return Object.getOwnPropertyDescr

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487504527
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/business/go-now.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1800x400, components 3
Category:	dropped
Size (bytes):	119371
Entropy (8bit):	7.980381346945774
Encrypted:	false
SSDEEP:	3072:4XyTpTvr3fb7fG+bEvWr9qYuKSWhmJqAiY2XuNVffAJ:1Tprvb7e7WZlWWhmbi7c4J
MD5:	830B5F10EA0A4092A90F9413F0680E34
SHA1:	B6FF894A43C0FC2D1235FB46996F743618408876
SHA-256:	19FB2CB552CA54971A44E2FFB13057C52D035025F5518122FB605DFB4BC85AC3
SHA-512:	C6F864AA1A9398A2F4A4E1DD52582F0DCD12419E0858A304581344AD8227DF1851F69B9B96D68CDB73068D8121968D3F3701223D53458AFB7A76FC54933A2C3F
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487460175&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238), with no line terminators
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	5.841538026065013
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08jI3xQSWKOlpt6:wsbSUtJfxrqLWWWdV6j13IhKi
MD5:	EF7BCD21349F1F6378FA96A1367D1159
SHA1:	CFD71C25F29F584BEFF09A630A9C19BF5FC0856A
SHA-256:	6944DCD5B2079D38DC560A9037FF2454B2D97B68AC81FA7329A2ECB8FDE1F451
SHA-512:	AE711CEA34A72650A7C538A601AB3C76E33354CF5BAF4DA49D1739B3CF52D0E41131AD692360F479E64FABE8D6531E3C2D50002FE32C3BC3CB106D41541943C5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487460484&cv=11&fst=1713487460484&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 783x350, components 3
Category:	downloaded
Size (bytes):	38068
Entropy (8bit):	7.966989225744817
Encrypted:	false
SSDEEP:	768:zhuW38ygHgVL2pldrpBeZvW8LwprVFtUyG2ccS2SzrwesWlSGgQ:VuW3jgHgVL2plRes8LOPeyGPcpkrwesI
MD5:	12CC757D99D7464910B2E86053E4C034
SHA1:	BBAF76D8D38BF996B8C2509CE733EB6828335B86
SHA-256:	0C53F6A9A3455DF61F4D2B7CFFCB03DA5437C13A14787AB12504C995E161D600
SHA-512:	8C914D4C43B0CBECC3BB97FED50178A4CDF30DCD605C5E9857599405181520318E2D623F610D70A1D2485ADDA3762F35C7533EE5F068B24A8B7421AB7EC3968F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/help/hero-contact-us.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7031727BA381B08014D23504AD60395C" xmpMM:DocumentID="xmp.did:4D4703D8F5E911E9A6899C204A4492DD" xmpMM:InstanceID="xmp.iid:4D4703D7F5E911E9A6899C204A4492DD" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5b91f439-4da6-425c-b967-e4236643597f" stRef:documentID="adobe:docid:photoshop:388ea588-7ac9-1848-8ee7-bce4f8804ad3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.........................................

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4101), with no line terminators
Category:	downloaded
Size (bytes):	4101
Entropy (8bit):	5.560046581209393
Encrypted:	false
SSDEEP:	96:/2XjHo2SilP5rD02moGkmS6hY3t0wCp9s2ALwQ7a:eMilPFfmo4+7Cpi4Qm
MD5:	2A8D051ABAFD7B1D3F62592455B15F0C
SHA1:	FCF291B4E88C76A5836459AE0C59CBD8246EA0A0
SHA-256:	CA727C9D9C5D3FFA9FC01A2C57D612263A5EF4138DA8D9B8E76E354835882466
SHA-512:	4DE52A5026E9EF873633C3489978627A9C1084099EA7EE5D0874EEE6B7FA664BB98E1A1D49869F947119F0BF67131A27E7CEB2FCD552C10157B9EF12752CFAB9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/static/ct/token_create.js
Preview:	!function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},i.t=function(e,n){if(1&n&&(e=i(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(i.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var r in e)i.d(t,r,function(n){return e[n]}.bind(null,r));return t},i.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return i.d(e,"a",e),e},i.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},i.p="",i(i.s=0)}([function(n,e,t){var r,i,t=t(1);try{r="A3dA86xx3SygInSznfsu98uiaY4VmGo/CaJTGvdsIU5xobyXgN1lb1smNdWPEoeyz54s3L60Kdxmc4VJmUrrIgoAAACVey

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=*;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58690, version 1.0
Category:	downloaded
Size (bytes):	58690
Entropy (8bit):	7.990300789788035
Encrypted:	true
SSDEEP:	1536:ZiIC2RdNz6MiM5bTOdkI7HhsTTVjh1nbAzjKf5pmnuU888888888888888Uv2:1N5POdkIThsTT9h903I5pmnX2
MD5:	A6E2D3921C9EA0FD81897D9AE7A33BA4
SHA1:	BC31969F2FB1926A15CD678B3E573C37A44E5421
SHA-256:	F2E2EF638DD9AAC863F0F6027CEB784CD4C5A14A676BED909C8F2AC4B088D510
SHA-512:	3F8D647F4F157FE0A3D6BDCC4CB8330BB9A8559DD927C073E9C55C36A7F8847B57DCDAB80A310B1A3ADBD07A70FEBB478868E4D5B59EEF1EC192A05269EF94C1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff
Preview:	wOFF.......B...............@.......+........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.C..fpgm.......8........gasp...8............glyf...H........}..nhead.......6...6.Z1yhhea...0...!...$.^..hmtx...T........ .8.kern...,............loca...,............maxp...,... ... ....name...L...)...~\|hN.post...x....... ...2prep............I..x.c`f.c..........................X.@....a}.......x...)..LL_..0.`>.p..g..1.2.bP.B..@..`..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....K.2.7.o.X...D.h.U.7.o...D.2.Z.K.....:.......J....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44445), with CRLF line terminators
Category:	downloaded
Size (bytes):	44447
Entropy (8bit):	4.955724189964028
Encrypted:	false
SSDEEP:	768:Xu077lg3puj1J+FAN3YlWCOwkfaU+2ay0m78e3MmOL2IHl7SGAz2oTqHEuJzZDDy:+sYA9jay0m78e3MZL2CAzfTqHEuFK1uu
MD5:	31AA5C3EBEF1BB2E79CD8DEE20262845
SHA1:	FD9CEB609F4C60E0E8C5561CB933C84A85AF12B7
SHA-256:	65E09EC697225883FB227B54F59A2C421B5AF7A3B4F557770AB15D8934FF44CE
SHA-512:	927E39C17F03851FD52A6A71A1425CEE4DBE62BF4E8AEAF7F17248B9416763AE1AC7DB1120B5F25871D8742DD091293118C875B0000EEF06B83013B49AFDEA94
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/css/megamenu-v4.css
Preview:	.global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big,.global--navigation blockquote,.global--navigation canvas,.global--navigation caption,.global--navigation center,.global--navigation cite,.global--navigation code,.global--navigation dd,.global--navigation del,.global--navigation details,.global--navigation dfn,.global--navigation div,.global--navigation dl,.global--navigation dt,.global--navigation em,.global--navigation embed,.global--navigation fieldset,.global--navigation figcaption,.global--navigation footer,.global--navigation form,.global--navigation h1,.global--navigation h2,.global--navigation h3,.global--navigation h4,.global--navigation h5,.global--navigation h6,.global--navigation header,.global--navigation hgroup,.global--navigation i,.global--navigation iframe,.global--n

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2242), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	133453
Entropy (8bit):	5.2630898680080795
Encrypted:	false
SSDEEP:	1536:es5/epea/dD/OvLF1+DW9kpeUacKn5/VCrVCoxUvaS5/VCrVCorUva7WYQO9LaGp:lYWVCrVCXCeVCrVCbCHNse6/Kc86M
MD5:	900C54EDA957DD927DB9533BD6DB9ECC
SHA1:	83A13901B30822D09ACF5E874883CB774B6F36FF
SHA-256:	971488C3CA789444093DA2EED352F0ACEE8FC5A84793742DE92AD9C74775C449
SHA-512:	F63CE91EDA1ACA805E1283A31B487812B9FE640B1785C5A5E18220A2AE8ADE2AAC51CED38E86265B410A7BE711E6761469E458C650D1AC858ADD90EB421AD339
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/help/contact-us.htm
Preview:	<!DOCTYPE html>..<html>..<head>..<META http-equiv="Content-Type" content="text/html; charset=UTF-8">..<title>Contact Us \| USPS</title>.. ls:begin[stylesheet]-->..<link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[meta-keywords]-->..<meta name="keywords" content="Help, contact, customer service, phone number, address, 1-800, holidays, post office, supplies, closings, tracking">.. ls:end[meta-keywords]-->.. ls:begin[meta-description]-->..<meta name="description" content="Have questions about USPS products and services? Let us help. Call us at one of the numbers provided or send us an email.">.. ls:end[meta-description]-->.. ls:begin[custom-meta-data]-->.. ls:end[custom-meta-data]-->.. ls:begin[meta-vpath]-->..<meta name="vpath" content="">.. ls:end[meta-vpath]-->.. ls:begin[stylesheet]-->..<link type="text/css" href="/ContentTemplates/common/css/customer.css" rel="stylesheet">..<!-

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	50616
Entropy (8bit):	4.206777347868299
Encrypted:	false
SSDEEP:	384:rbaOtNSlMziPyqDJZLnu9cXjAuDCsITHFWe45pubifk3OOJOeZJYotj2+m5l5vM7:rbZtN8Ky/JZLnnXEWukeZulX5q25bvy
MD5:	5F3635ECE4F9CE1BB1538817E920E628
SHA1:	95BEF86056C4CC24E8A21FAB58F39BFBC388A5A5
SHA-256:	D1E8A1F74E308B3A1DBB63107DFD162276E0E00BA0F97FC8B398F8B727C67F82
SHA-512:	19B970BF375D1930B0157BFDF130C9B347839CCCB2B13271036CC2BF5A1319A3380B8183850146BC3742F30A8725D6D0C5D7F51AE29CFCA2DFE45AD9C291766C
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/assets/xyz.js
Preview:	(function(d,w,_RB) {.. var d = d. , w = w. , RB = _RB;.. w.RB = _RB;.. RB.logs = RB.logs \|\| [];.. RB.initErrorHandler = function(err) {. var a = d.createElement("script");. a.type="text/javascript";. a.async=!0;. f=d.getElementsByTagName("script")[0];. f.parentNode.insertBefore(a,f);. a.onload = function() {. RB.bugsnagClient = bugsnag({. apiKey: 'ea41baf0449e82ae968680854e7690eb',. autoNotify: false. });. if (err) RB.bugsnagClient.notify(err);. }. a.src="//d2wy8f7a9ursnm.cloudfront.net/v6/bugsnag.min.js";. }.. var wrapError = function(fn) {. return function() {. try {. return fn.apply(null, arguments). } catch(e) {. RB.bugsnagClient ? RB.bugsnagClient.notify(e) : RB.initErrorHandler(e);. }. }. }.. var wrapErrorObj = function(obj) {. Object.keys(obj).map(function(key) {. if (typeof(obj[key]) === 'function') {. obj[key] = wrapError(obj[key]);. }. }). }... Array.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/x_logo.png
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2097
Entropy (8bit):	5.147089067116786
Encrypted:	false
SSDEEP:	48:ZLXRIBQonerZB64ycTMY1QBBWwMKxN1hDa:ZTR8wbIE12WEk
MD5:	A2B46DE8A265D9A26359B1FF4B08CE68
SHA1:	38E597ADFB52C7C79B6416AE53204F5BE8CF8F50
SHA-256:	AAF7FB19407872FE9FAB82ADAFB5C06C193AA2825CFBE8DC54224626F7BC36E3
SHA-512:	289F8D3C441A66418D8D4D7B3F79210B16639A025D5516BFDB1FC1D2156D1E73C9FC74F577786B50CDADABA0A2E3041AA961849CBBDC21DCE3E2AD4364EC8145
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/tooltips.css
Preview:	/.---------------------------------------------------------------....@filename..tooltips.css....@author...aziz.syed@akqa.com....@description.global tooltips style definitions........Content....1. Tool Tips../...=========== 1. Tool Tips ===========../.....toolIcon{...background:transparent url(/ContentTemplates/common/images/global/buttons/help_icon.gif) no-repeat 0px 0px;...position:relative;...height:15px;...width:15px;...vertical-align:top;...padding: 0 0 2px 0;...z-index:50;..}..../.. * Hack for FF2's bad inline-block support.. /...toolIcon, x:-moz-any-link {display:-moz-inline-box;}...toolIcon, x:-moz-any-link, x:default {display:inline-block;}....a.toolIcon:focus,a.toolIcon:hover{...text-decoration:none;...background-position:0px -20px;..}.....toolTipGroup {.. position: relative;.. height:15px;.. width:15px;..}.....toolTipHolder {...margin: 0;...padding: 0;..}.....toolTipHolder {...position: absolute;...top: -10000px;...left: -10000px;...width: 203px;...color:#2020

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25716), with no line terminators
Category:	downloaded
Size (bytes):	25716
Entropy (8bit):	5.072164565551015
Encrypted:	false
SSDEEP:	384:/tyx6x6JvEKNJ8+nJKGHraKsUnb/zxgxQKKKaKRKqDKAshraazKatA:Ex6x6JvEKNfK+au/xgxQtFGhDsZaavtA
MD5:	54670E3223C51677C8524181DC789C65
SHA1:	D864518D51A056122F0D4567D3FC4BA7F6C6C161
SHA-256:	91BD8714E6A7EF8AFD8412D8F785998CEB8C01951DB63035D28C2EB18582E2C9
SHA-512:	DC73252D2FDD658245AB0855200F821583DFBB063ACCE88FFAF9C6F055E6C5841502F65E9B23D2052AB2D4A3C59843AB998729EDB62C79B873212EE333FD7D9C
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/polo/po-locator.js
Preview:	jQuery(document).ready(function(){var f=window.location.href;if(f.indexOf("?location=")>=0){$(".search-collapse").hide()}var c=jQuery("#post-offices-select").val();$(".bluebox").hide();$(".expressmail").hide();$(".stampBooklet").hide();if(c=="po"){jQuery("#busPo").show();jQuery("#greetPo").show();jQuery("#lbroPo").show();jQuery("#pickupPo").show();jQuery("#philPo").show();jQuery("#anotherType").hide();jQuery("#.stampBooklet").hide();jQuery(".onlyPo").show();jQuery(".allAppPo").hide()}$("#close-addressModal").click(function(){$("#address-modal").hide()});jQuery(".filterPickup").click(function(){jQuery(".error-message").hide();jQuery("#city-state-input").removeClass("errorBorderWithIcon");jQuery("#addressLineOne").removeClass("errorBorderWithIcon");jQuery(".location-icon").removeClass("errorBorderWithIconOnly");jQuery("#cityOrZipCode").removeClass("errorBorder");jQuery("#servicesStateSelect").removeClass("errorBorder");jQuery("#city-state-input").css("border","1px solid #333366");jQuery(

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.600883368028996
Encrypted:	false
SSDEEP:	384:yj8V/gBEp3fNEdDH4YCC4NhwgF/0U+g2upafkEsD24JCL44hNgw/XUYg46pQfeEQ:XvmNYxpTX1Nq3UZ4U6uwkQt2Leick6/g
MD5:	D7DDD1A9F93226BCB014623E718ECCC2
SHA1:	18F23BE2F9056FB5181218AFB416EA3EE469349F
SHA-256:	5471258694667EA515A700CAC301DE114AACDC3FA0FC36176B7FA0F2B7A105FA
SHA-512:	B5C89F97376B9043261DF2EEDA813EDF500C2FC6FACA32F4455603E57F98F17CBF8A81CEC14C61ADCCC5FC8ADB8ECD676B2E71F38A64DEDA2F5E6264088495A2
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487512834&cv=11&fst=1713487512834&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&hn=www.googleadservices.com&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3xC3vA!2sZklLmg!3sAAptDV6aa2St"],"userBiddingSignals":[["481529751","

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4777), with no line terminators
Category:	downloaded
Size (bytes):	4777
Entropy (8bit):	5.434966429442297
Encrypted:	false
SSDEEP:	96:9WsFpRR6+6Y6yHuwCp0yXALwNLMpn02MGkdt6zex1pecbt:9++2y7CpRNyfMKz6wcbt
MD5:	157038E34123CC34939C37EF460356F4
SHA1:	BC65C9C0071A0D483A78FF7D5ABE5F2500B265C1
SHA-256:	62E7CB03E8F65CEB4F43A5A56A3B9C3950158FAE3FEA85699E3F4C68672F4C2F
SHA-512:	0A7B0A1B0F4AB0CF153F2B231649296475DCA6307583D455A682D904E07DC931A9F5EDA676564DCB8303584481CE67971157FF9E134055146D2EE71C4F64FD55
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/core.js
Preview:	!function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"u",{value:!0})},r.t=function(e,n){if(1&n&&(e=r(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.u)return e;var t=Object.create(null);if(r.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)r.d(t,i,function(n){return e[n]}.bind(null,i));return t},r.n=function(n){var e=n&&n.u?function(){return n.default}:function(){return n};return r.d(e,"a",e),e},r.o=function(n,e){return Object.prototype.hasOwnProperty.call(n,e)},r.p="",r(r.s=2)}([function(n,e){function t(n,e){return function(n){if(Array.isArray(n))return n}(n)\|\|function(n,e){var t=null==n?null:"undefined"!=typ

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=informeddelivery
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/international/go-now.png
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 663, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	93542
Entropy (8bit):	7.987098520006324
Encrypted:	false
SSDEEP:	1536:uaYJBYyCFo3AAwjghvl+FzrfOq7KYT4I7B1KIe87iJB/4yMpdOx:uxX1BBw0tl2zbOq7dXKSE+Ppdi
MD5:	D514875ABB77A464EDBBBFE1154AE5FC
SHA1:	9528625EE96F117B3CB5FF8B7CC2D64275FE53D2
SHA-256:	62C2E27A69C8849E549A5FE33ADB52D564B77F9DD6334DEE90C93423329D180B
SHA-512:	B524AB202941D9EFD344F75579DA523B954A6A5CCF6616C3D78C1992938AF76AC13E78B6D87097F903030D0EF3EA27F4D0D9DC606C91BC6DE4E105B8A30D3BF6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............aV....pHYs..........&.?.. .IDATx...y\|L.....d.7.......D(ZZ-W..V..t.jk..V....h..m...EU..vAJ"....E.e2...1.#.e2......l.=s..w9.t:.B.!.(.Y].@.!...$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#,..w.....u].!.......u]...J...u.......0.....].PB.a.t .H........,.@...!!!~....8..D!../.}pF......u[..G........D....-....5......NNN8::.lA....W.\Q~OJJ"??....233....>8.....k}w.eQ@..F.5....ooo<<<... .B.u.j5III$%%q.........(k.... .^..{,..X...I...<<<h.9-Z.Pj...&33.+W.....L?t.P..Y.!.....ooo...=z..m..O.333..........U...X....V.....,..:...>.E..J@ZYY.Z/::..OVVV..Y.!jR@@....m..m.az....s..9.?.kp..K...]?@.......CR.trr.].v.o....+W........:tH.Q.qO....g......<s..g.!>>...t....n..2,.I......O...K,...MXX....%.T...^.....A.....4hP.y....8p.3g.....>0..b1k.]..E}.K(6h...^.z.h....$,,.u..I@.!.....;v,m.U.gffr..i"##.7....CCC#.5.........8C.!....u..._.B.q....`....9R.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (565), with no line terminators
Category:	downloaded
Size (bytes):	565
Entropy (8bit):	5.013395369899308
Encrypted:	false
SSDEEP:	12:hR2zGkAIrR/+RRa2OXnlEceA9uJ33+SGf6bGEo3G1ONOI:hR26arh+R8xXeclk+h6vo2qOI
MD5:	433CBAC690542626F503B4269A8DA12A
SHA1:	3E810BC4ABACCF42AC5E4B0B939D63C03711BBD9
SHA-256:	F83B1A3EA61AD62E47FAD82DE5495A2547E2F12E591AD8108050538C566AE1E3
SHA-512:	569B3D704F2A979D16624064ABD3B97F38EEA3C9A5F3F09D31C9B83D62C360717F6F66EE44A6B53686760421A57D7EB4ABD54904556B105B05AA81D5850F34B9
Malicious:	false
Reputation:	low
URL:	https://ct.pinterest.com/ct.html
Preview:	<!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore") {window.localStorage.setItem(event.data.key, event.data.value);}} catch (error) {}}, false);window.addEventListener("load", (event) => {try {window.parent.postMessage({ key: "_epik_localstore", value: window.localStorage.getItem("_epik_localstore") }, "*")} catch (error) {}}, false);</script></body></html>

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (556), with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	86747
Entropy (8bit):	5.18161050209953
Encrypted:	false
SSDEEP:	1536:O2h88jQy9Qy9SQyYQywQyM/lnCtyenQVX6UDFLRKMBQyoXQC+X12QmXjQd:OYsyey9dyDy7y4FtKRyhC+lRmzQd
MD5:	BAD35E6B35A339AB50DA3584B92A30A1
SHA1:	5880489815B69566767CDD4AC55894ED24174242
SHA-256:	2E0A0A65CF2B7F81D22D21EE62321DC9F823B6F1C7128C3879850C53A63281D9
SHA-512:	BAF6560AEAA299EC330BB753CED861A51CED3081ED4D86285613F9FB410FBF2AB22FC2E654371EFB6B34AC804DDCC84BD123E19A7A4C7638FEC3404406AE2026
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/components/components.css
Preview:	/..SCSS variables are information about icon's compiled state, stored under its original file name.....icon-home {.. width: $icon-home-width;..}....The large array-like variables contain all information about a single icon..$icon-home: x y offset_x offset_y width height total_width total_height image_path;../../..The provided mixins are intended to be used with the array-like variables.....icon-home {.. @include sprite-width($icon-home);..}.....icon-email {.. @include sprite($icon-email);..}../../* line 1, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss /...section-wrap {.. border-top: 1px solid #e8e8e8;.. overflow: hidden;.. zoom: 1;.. padding-top: 50px;..}../* line 6, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss /...section-wrap:first-child {.. border-top: 0;.. padding-top: 0;..}..../ line 12, ../../../../workspace/assets/styles/components/structure/_structure-tablet.scss */...col--half-tablet .col {.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/images/utility-header/mailman.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65319), with CRLF line terminators
Category:	downloaded
Size (bytes):	175676
Entropy (8bit):	5.162455477571088
Encrypted:	false
SSDEEP:	1536:M/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26gk:M/Riz7G3q3SYiLENM6HN26L
MD5:	C58857FBCAAD6FFCAB3980D6E734BC26
SHA1:	694C14275C98E9AAB6F6F9B04C721F38BF53E509
SHA-256:	7178C9D58C62BEA201FCB6D6988DADC8DF62CA9301F5AA9A9F942EAB4F5880E5
SHA-512:	AD5681C91013405357B9160D370DFFDC9FA4E046138EAD0F339E72F788A8B72AE81538BB78BF7FD5A21E92445F5271563684C0AE9D958EECDB2D0919EA0A3C7D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/globals/bootstrap.min.css
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors.. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-si

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	5.165513438405942
Encrypted:	false
SSDEEP:	24:oML+xFreUR5lea9wk6zeC0V4SheF1zih4Ie2N6jy:oJxslaNC0/AF1eyvjy
MD5:	847CC8BD91110FF714275C5A29FBD404
SHA1:	CFF690CC070F9539CC1C325ED150B819018E8DF7
SHA-256:	A33554BD04B3364C1E47B719799AE0DF426BB17F9C8EC422BB346227534EBDBD
SHA-512:	F77AE53ADF26B92B34F7BC45893B6CAA63B9AD4FD10338B6162AAE5D283475D9D0BC0BECC46E35EC0F4273888DC44FF772535DA72914EFA569788498E5DF05D2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/home/megamenu-additions.js
Preview:	var USPS = USPS \|\| {};..USPS.Require = USPS.Require \|\| {};..document.addEventListener('touchstart', {passive: true});..global_elements_jq(document).ready(function($){...$('.international-addition img').attr('alt',' ');....a=$('.international-addition a').html()+"<span class=\"visuallyhidden\">Use our online scheduler to make a passport appointment. Schedule Today.</span>";...$('.international-addition a').html(a);.....$('.shop-addition img').attr('alt',' ');....a=$('.shop-addition a').html()+"<span class=\"visuallyhidden\">Shop Forever Stamps. Shop now.</span>";...$('.shop-addition a').html(a);.....$('.business-addition img').attr('alt',' ');....a=$('.business-addition a').html()+"<span class=\"visuallyhidden\">Grow your business with Every Door Direct Mail. Try EDDM now.</span>";...$('.business-addition a').html(a);.....$('.manage-addition img').attr('alt',' ');....a=$('.manage-addition a').html()+"<span class=\"visuallyhidden\">See what\'s coming to your mailbox using Informed Delive

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958
Preview:	{}

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6175
Entropy (8bit):	5.033434161707406
Encrypted:	false
SSDEEP:	96:EekDlnD9r/SL5LNC0/1OGyqOvKZ6xTpxGPSDHY7U9Yib4aX2Kp04VLvf8F1Ih2Kx:bkB9pRhvP3qAifWpNvf8FKh2Kx
MD5:	484DC697137DA8CD45F5B67E20DDDEAB
SHA1:	DF2C5AC15AB5229EF14FDBE17166D6732EB92DD6
SHA-256:	6AFF11555C595B217372EDF5B6CDDD6257C84DB3EBBF321CC8E8CC735ECBF97B
SHA-512:	1E3EF8F7BBD09FD887A5FB84C58BE49CE3555E036B612B9C3E9FC83DD8C29D9E42EE1CC2CDEB8826C93CE9B52FC287C57AAF635045A98DE7B36F9BA5ECED2A6C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/customer.css
Preview:	/Enter User Defined CSS for TinyMCE Styles Drop Down /.....Test-Bold {font-weight:bold}...Test-Italic {font-style:italic}...Test-Red-Text {color:red}...Test-Large-Text {font-size:200%}........html {..font-size:62.5% !important;..}..#skip-nav {.. background: transparent;.. color: #fff;.. font-size: 13px;.. font-size: 1.3rem;.. height: 1px;.. height: 0.1rem;.. line-height: 34px;.. line-height: 3.4rem;.. overflow: hidden;.. position: absolute;.. text-align: center;.. text-decoration: none;.. -moz-transition: height 200ms ease-out,background 200ms linear;.. -ms-transition: height 200ms ease-out,background 200ms linear;.. -webkit-transition: height 200ms ease-out,background 200ms linear;.. -webkit-transition-property: height, background;.. -webkit-transition-duration: 200ms, 200ms;.. -webkit-transition-timing-function: ease-out, linear;.. -webkit-transition-delay: initial, initial;.. transition: height 200ms ease-out,background 200ms linear;.. transition-property: hei

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/logo-sb.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/free_boxes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	dropped
Size (bytes):	112800
Entropy (8bit):	7.979338429847193
Encrypted:	false
SSDEEP:	3072:4lmRJ5SUznTH7/JaCs0DzpSZ0bkabHao0z/j/oR7:0QvvTrcsW0ka2z7/O7
MD5:	268F52A4473ABDB8115801939C31456C
SHA1:	9A3D75AAA6EA34703397F20641F5052770DF17EF
SHA-256:	08C36F4BF2CE9CEAE3E7AED291D52F0E9F335398F41DC7CC89E6AA4ACAFF5C18
SHA-512:	49ECED3393BD0FAEAFEE8EFCF9D9BAC1AC15E658ECE3721D1F7027464A377352854FCCEB756B5EC025E803254F1AFBB03DEF42ECEA8333ABB5EFBFA77E7AF137
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.320613286535976
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nS7FHX7k8fwPaLmjpDk7XpHsq81OvC0NAFr:2d3ATLf3SJLk2vmjy7ZHsj1OJAFr
MD5:	B991E236D3185C493DDEA451D194CA55
SHA1:	72D3B4849305C8B4F3AB878DE6AC2E5A671240B8
SHA-256:	4D5EACCF69EF620820F05B358F6C22EA891752D2BF2915EB6C630029C525F0D9
SHA-512:	F609AAB87B17E4F2B74E435FD83760FFDF97563222D5B275D3C9DC4D8875058F6E496A8F1EE3F6D8696D8A8D12950C78E6D3D30E3AC2005CF5B993307259970C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 72 72" style="enable-background:new 0 0 72 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#218648;}.</style>.<g>..<path class="st0" d="M53.7,38.8c-1.8,11.1-11.5,19.6-23.1,19.6C17.7,58.4,7.2,47.9,7.2,35c0-12.9,10.5-23.4,23.4-23.4...c6.5,0,12.4,2.7,16.7,6.9l4.4-3.6c-5.3-5.5-12.8-9-21-9C14.5,6,1.5,19,1.5,35c0,16,13.1,29,29.1,29s29.1-13,29.1-29...c0-0.4,0-0.8,0-1.2L53.7,38.8z"/>..<path class="st0" d="M70,12.5c-1.8-2.1-5-2.4-7.2-0.6L33.2,36.5l-8.7-8.7c-2-2-5.2-2-7.2,0c-2,2-2,5.2,0,7.2l15.3,15.2l36.7-30.6...C71.5,17.8,71.8,14.6,70,12.5z"/>.</g>.</svg>.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	4.278351811711312
Encrypted:	false
SSDEEP:	3:YmJzsuBRW/ELrCHY:Ym36ELrEY
MD5:	F1376CCE484B45CD63EA0E41EB9341BE
SHA1:	496FBCAEFB00FED37D5AF57CD0F54FF6F3BA733F
SHA-256:	1DEFC1222A443B0AD7549F38130214CD284CAEA1C8A00562B0FACD570D8F2EF0
SHA-512:	D5919CC3FBFE0DC2CDCF19F45872B71C7C47D00A1EADCE8EA449944F14956EAB83BA9398D3E0E2858EDB65345EEF51C7E3F6C2D58C63BC353977CC490B51A77A
Malicious:	false
Reputation:	low
Preview:	{"ClientIPAddress":"81.181.57.52"}

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	36187
Entropy (8bit):	5.037817904976037
Encrypted:	false
SSDEEP:	768:lrRp5VrrCYXuy6odDaCKXXYIyQcmXPOvLF1+D9mDGCBQLkUujpeUY:lrjea/dDyOvLF1+DWmujpeUY
MD5:	BF29E10A88E092356B7A1B239DC49288
SHA1:	8936A542E227D210356B430FB7C9A2E6585B3320
SHA-256:	A5CAAA5777D35C41A984F51DC6CAFC3252656BC333A88D5973A963463CCB856F
SHA-512:	3D89D8715ED5508136B90D8069ED44514A63F187F5B33889ED205E05A8ECFB962BC8FBC5AA1C8664F9AEC358EF2480085AEBD28369CDDA8D11F27E6A3F9100D0
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/POLOCATOR-header.htm
Preview:	<link href="/global-elements/header/css/megamenu-v4.css" type="text/css" rel="stylesheet"> <style>.. body{min-width:0!important;overflow-x:hidden;}.. a{text-decoration:none;}.. ../* alert styles start /../ ..@media (min-width: 958px){.global--navigation~.g-alert, .g-alert~.g-alert, .g-alert {..margin-bottom: 20px;.. margin-top: 0;...}.. div#g-navigation {.. margin-bottom: 0;..}..}.... ...hidden-galert {.. position: absolute;.. left: -10000px;.. top: auto;.. width: 1px;.. height: 1px;.. overflow: hidden;..}..@media (max-width: 958px) {...g-alert p br { display:none;}..}......@media (max-width: 958px){...g-alert+.g-alert {.. margin-top: 0;..}..}.... /..../ end alert styles/....../ correcting alert bar on mobile */....@media (max-width: 958px){.. .g-alert.expand {.. top: 0;..}.. .g-alert.expand:after {.. content: '';.. display: inline-block;.. height: 20px;.. width: 20px;.. position: relative;.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	5.454183883395629
Encrypted:	false
SSDEEP:	12:TMHdPhfMi/nzVm5/KYccELNNhHHymhdhkPxWkpI:2dRMAoLPELLhHaPxlu
MD5:	10748A273EC4D5A4BB4376A47BE3A3BF
SHA1:	ACE6FF951394B7E04218B83F6B1AE85EA7837FE2
SHA-256:	D2097D21CCD9AC48D30D4CEEC62564043BE82968EFC9FE4D939BD32880788983
SHA-512:	1909017A655E611A93F0AE208735AEB6FAB77217BE75FD2DF31B6CCA11E9E6AB633925027D87E3C3CAF85602993F08736844C146A70904E9FF7F14CCD6C1668E
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/zipcode-lookup/nav-red-chevron.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" viewBox="0 0 162 162" style="enable-background:new 0 0 162 162;" xml:space="preserve">.<style type="text/css">...st0{fill:#E71921;}.</style>.<g>..<g>...<path class="st0" d="M81,117.8L34.4,71.2c-3.9-3.9-3.9-10.2,0-14.1c3.9-3.9,10.2-3.9,14.1,0L81,89.5L113.5,57....c3.9-3.9,10.2-3.9,14.1,0c3.9,3.9,3.9,10.2,0,14.1L81,117.8z"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	36187
Entropy (8bit):	5.037817904976037
Encrypted:	false
SSDEEP:	768:lrRp5VrrCYXuy6odDaCKXXYIyQcmXPOvLF1+D9mDGCBQLkUujpeUY:lrjea/dDyOvLF1+DWmujpeUY
MD5:	BF29E10A88E092356B7A1B239DC49288
SHA1:	8936A542E227D210356B430FB7C9A2E6585B3320
SHA-256:	A5CAAA5777D35C41A984F51DC6CAFC3252656BC333A88D5973A963463CCB856F
SHA-512:	3D89D8715ED5508136B90D8069ED44514A63F187F5B33889ED205E05A8ECFB962BC8FBC5AA1C8664F9AEC358EF2480085AEBD28369CDDA8D11F27E6A3F9100D0
Malicious:	false
Reputation:	low
Preview:	<link href="/global-elements/header/css/megamenu-v4.css" type="text/css" rel="stylesheet"> <style>.. body{min-width:0!important;overflow-x:hidden;}.. a{text-decoration:none;}.. ../* alert styles start /../ ..@media (min-width: 958px){.global--navigation~.g-alert, .g-alert~.g-alert, .g-alert {..margin-bottom: 20px;.. margin-top: 0;...}.. div#g-navigation {.. margin-bottom: 0;..}..}.... ...hidden-galert {.. position: absolute;.. left: -10000px;.. top: auto;.. width: 1px;.. height: 1px;.. overflow: hidden;..}..@media (max-width: 958px) {...g-alert p br { display:none;}..}......@media (max-width: 958px){...g-alert+.g-alert {.. margin-top: 0;..}..}.... /..../ end alert styles/....../ correcting alert bar on mobile */....@media (max-width: 958px){.. .g-alert.expand {.. top: 0;..}.. .g-alert.expand:after {.. content: '';.. display: inline-block;.. height: 20px;.. width: 20px;.. position: relative;.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65316)
Category:	downloaded
Size (bytes):	686690
Entropy (8bit):	5.468646579824246
Encrypted:	false
SSDEEP:	6144:qaTRbalmUsjWpflAFRgz11ko+fK6St+aqx7uIOxVi:qOalmUoWHOi1bU57j
MD5:	E92E8D671DFA0C217641517CD02B48BE
SHA1:	F12384E26D4EEA1A370D12A528257CC43F2F55F9
SHA-256:	6EB78E7F920A3EE2AFA527E8A4DAB776FEC9E4B16FEC366BC31BE0F3EDA9FC46
SHA-512:	5AADAECC2F72C217759C7B9243214A3BBE7BBB552F59CEE6A25F1A0E82CA26EE41EE646E269505E6787879135521E468C37FFE3F967A67BDD7381CFB6384B5BA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-MVCC8H
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"669",. . "macros":[{"function":"__aev","vtp_setDefaultValue":false,"vtp_stripWww":false,"vtp_varType":"URL","vtp_component":"HOST"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return ",["escape",["macro",1],8,16],".match(\/[^.]*\\.[^.]{2,3}(?:\\.[^.]{2,3})?$\/)[0]})();"]},{"function":"__jsm","vtp_javascript":["template","(function(){return-1!==",["escape",["macro",0],8,16],".indexOf(",["escape",["macro",2],8,16],")?!0:!1})();"]},{"function":"__e"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enabl

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1307
Entropy (8bit):	6.862900930794217
Encrypted:	false
SSDEEP:	24:E1hJIwWwjx82lY2T3oVeMaf/yJ3VYmNvWGYIGofc5ByAkXMvcz2fROB:KkNNn2klTJ3WmN3nfcjkwRO
MD5:	3500D365CD94527C71FE9C70D5CDA435
SHA1:	0C7BEDE628D74CEFAF5FCE1B675C0CE3C72C78C9
SHA-256:	34B28A24C5414DAB68A15BE6613536D905FAF33FBF1AED8EE4702CAA60BE9BCA
SHA-512:	F8EDFD39A3E6402D2A546DEB0368297969C7AF02A61185D156E3158CAA1246AD2CCC19A523623185E1EB9F957DA3D026EF6751DCD6C13EBBDFB4D8ED16990FC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:8F605BC93D9E11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:8F605BCA3D9E11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417AA3D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:8F605BC83D9E11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+..M....IDATx..O(.a.....(../.._9Q..l.S.k&......9m....8H..\(n.....R".sp.}.9.i..k..4.....}.}fB.i...qt..!<...8

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=*;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13400), with no line terminators
Category:	downloaded
Size (bytes):	13400
Entropy (8bit):	4.929938929744303
Encrypted:	false
SSDEEP:	384:MM3i+31wPKu0LZ+5Cy/WfXWLc/Tk71mvIrKPlxQ8XxEAq/:MMS+31Ru0LPy/WfXWLc/I71mvIrKPlpI
MD5:	B62E27B15837B70E7DAB99846AC90AB3
SHA1:	9A49415C5E47149A5324705EAF78B4B68CE10EDF
SHA-256:	50764694EE2DA70F2D3CE0E8340ECA39B9E2760D293B47E4355C690A4769E781
SHA-512:	2000C6428FE6A0FF72D2F1AA37741F3DDC939CD50F4D748B3D3A1679BEE44FFB39756E6DDD95A59FEF19A55A43A2E0092790EA2A43B3E689443006DB253DAD53
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/megamenu-v3.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c(".search--wrapper-hidden,.mobile-search").removeClass("active"),c(".global--navigation nav,.mobile-hamburger").toggleClass("active")}),c(".mobile-search").on("touch click",function(e){e.preventDefault(),c(".global--navigation nav,.mobile-hamburger").removeClass("active"),c(".search--wrapper-hidden,.mobile-search").toggleClass("active")}),c(window).on("load resize",function(e){c("input").is(":focus")\|\|(c(window).width()<959?(c("nav ul.nav-list li a").off("touch click"),c("nav ul.nav-list li").off("touch click"),c(".g-alert").off("touch click"),c(".g-alert").on("touch click",function(e){e.preventDefault(),c(this).toggleClass("expand")}),c(".g-alert a").on("touch click",function(e){return window.open(c(this).attr("href")),!1}),c(".menuhe

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2856
Entropy (8bit):	4.725252942380169
Encrypted:	false
SSDEEP:	48:c6gl8I12aunClTabiwqVOkxWsDE47Yffsm2r0B0f9Ye7Ic:Ql12auzqVFzE4Asm1B0fD
MD5:	E5D424B115D186F75CD843D09D213EA4
SHA1:	69CDFD8A24E4E64835A3E3D8FEF674EAB51041A3
SHA-256:	BA12156B6049E394DEB91B6B29677D2DDE4B388DD5E5DDAD736D7F535D107404
SHA-512:	D60FEF40F434021F5097B1D71D37013C7D9951BEA397C62C9E7DA7477B4AE6631C1538D01C0958E675E66D02A29802A8D1649119A8DB4C548686FA0F35B147B9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="21px" viewBox="0 0 20 21" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/compass</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Desktop-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Results-Page---hover-result" transform="translate(-612.000000, -392.000000)" fill="#333366">. <g id="Form-fields" transform="translate(113.000000, 360.000000)">. <g id="Current-location" transform="translate(430.000000, 31.000000)">. <g id="Icons/compass" transform="translate(69.000000, 1.000000)">. <g>. <path d="M10,3.77312727 C6.356875,3.77312727 3.393125,6.79012727 3.393125,10.5001273 C3.393125,14.2082182 6.356875,17.2271273 10,17.227127

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 663, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47821
Entropy (8bit):	7.977160407981964
Encrypted:	false
SSDEEP:	768:IsXQi+zKWOvyHTnj6Ds45thc9KXqWqG/Wq6SHTaoxtic/1II8ML7KibbEeJulFNz:dYH2gre4WP6KDW+d0cdH8biUVDNz
MD5:	FE382DBA3C7717AF1168ADFAD79C8484
SHA1:	37816F1DE78FFE6E14461A01DD76490C59FCC08B
SHA-256:	0CF2992A5671948D6BE121494AF9A3D12277A0B2AE002B6CEC4850DBA3F685B0
SHA-512:	4D7FEFCF1B26A051DF1894B7E1414A95DA0F93EB9B7493914BED4BDDFE412BD804233168F3BEB0742764A334F22556654ACD40E4B8E5C993C60473DB05C03F99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............aV....pHYs..........&.?.. .IDATx...}t..?......(i.@..8.S-z8.ld.%$...=.....=......H...:..4q.i..:6q...&.Jq.9m....,ljh.q...'....D&^.....gF.G.......K...H..>.~...(. ""..n...Q.c.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8.,....`.$""......(..K"".8f......~y..@D.q....h..Q...(..y............X...5..(9....x_......s...R...~.......`@$..w............6'.0X......P.Pp,...E.p.y..T.]b2.0o..6..(..@@...'q.....A....Gq.......y4.m.w36X..d...z./Z..f..............={.'O...'...p..I..A.M_.......8gT..w.n@(H.W.p.B\r.%...K..1...A... ....o...io3.Q.f3.f...u.]..(//....dd.'N...o...'N.e.].vutt.I.......J.M..)o...K..Y\\........>. +m&".....f......\..Zo...^..u......y.@.B......:X....!.$.qH.....+..2..U .@ww7^~.e..~.F".Q...`.Zq.u...OA. ..N.8....BA....fA.K.Lr.E....%.\..vpp.{..Aww..K..h&.;w.n..f.t.M...U.....^. ..O!.07e..YSP.2<&..E..E.P]].......={.....ID...8W.^...r.......o...............9hj..L.....P..\|@?H.......]]].

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	dropped
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 300
Category:	downloaded
Size (bytes):	661
Entropy (8bit):	6.281263227489541
Encrypted:	false
SSDEEP:	12:pYiu5hypkcwGK2H0N4R+j2ymrIx9cAjj9qEjN9JspuSVbUTHGIGb:XurcwGK2HGkG2ymrT89hhXspu+Uk
MD5:	004B01A391B1C3C5C3BE3573D3AFC4A2
SHA1:	D6D354CDEC293D046723C2878C4460C17C564534
SHA-256:	AAA73B9D228AA041ABC298F87D9D23E9AF8836F3DB045F04EAE62211D5DFF32A
SHA-512:	5944EB8F28886CC5152637D3D000110B426A5C8840ED100B0E831E45E58F560BFA401814087100CEFD4A9F5D41B7FD022DC9A3BC8678E926FC04E310BC9D686D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/sprites/sprite_arrows.gif
Preview:	GIF89a..,..M.z................B@A5.....M............WUV...................................................lkl...............................f..r..www...............................wuv.........xxx.....................................................................................................................................................................................!.....M.,......,....1..M..7...M.C..=............................95.................*+.M.B......E..I..........@!...D.....)..2................,.....(.hq.....(.........qa..#.,1.....3..q`.......(......c.....8.x....:`.db.D...6. @...J...I...X.j....`.....;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262253
Entropy (8bit):	5.567154224712791
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIET8A9CBPIrTWR4YESfhmpt2nBsLqbyHXDeltzvsXshNQ:CBcAFMgzFe8c0fhmpt+aqbyHXDelJsXZ
MD5:	2D4EFA34B7F09921D0EA4285E19749C2
SHA1:	C2B99E5FF375862E2A7A7B298932DEA950E30AC3
SHA-256:	78D2C28E57243452DF3DF21E926426C68B2BA08359BA2EA258EBEE67E1C8A461
SHA-512:	58EEE370268B73EB764CC629ADC9C26518B5759ACA406C35FD3FF6028A134344611B7280E7828DBD0F8F703C145286F502257DBF5B04BEDBD30E165FCAF1FB9C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1309), with no line terminators
Category:	downloaded
Size (bytes):	1309
Entropy (8bit):	5.121766355091043
Encrypted:	false
SSDEEP:	24:LDYlA2PJteXGX2yzFmgdmNR5UyInD0a+fcYuspAVNSGgl0fDcokI:LgAoJI2XhhmgqGL+k3w7Bl0rcs
MD5:	58194D729B7F996AC1CFBE9BBCBE53E7
SHA1:	502814F53FFD8512605BFF57C40F82B19368EE5A
SHA-256:	AC199D682B74E25BE4703B83514715C666711AC0E579B28D3C216E84D37169DA
SHA-512:	AAA2CA617F7FE9697F2EC5DD05137B98E0C2F2F5E39B2A104EFC0EBA45234EA71810D7D019C32497428D3409290DBA7C97653214CAE089F2EF878BE9A4B65531
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/component-guide-init.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.componentGuide=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"components",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min","magnific-popup":"/assets/script/lib/jquery.magnific-popup"},shim:{jquery:{exports:"$"}},waitSeconds:30}),USPS.Require.componentGuide(["jquery","components/faq","components/tips","components/tabs","components/learn-more","components/scalable-table","components/video-player","magnific-popup"],function(e,t,n,r,i,s,o){var u=function(){var a=function(){f()},f=function(){var a=e(".tips-component"),f=e(".faq-component"),l=e(".vertical-tabs"),c=e(".horizontal-tabs"),h=e(".learn-more"),p=e(".scalable-table"),d=e(".lightbox-image"),v=e(".video--section");c.each(function(e,t){new r(t,{type:"horizontal"})}),a.each(function(e,t){new n(t,{})}),f.each(function(e,n){new t(n,{})}),l.each(function(e,t){new r(t,{type:"vertical"})}),h.each(function(e,t){new i(t,{})}),p.each(function(e,t){

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 34
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.173794838194766
Encrypted:	false
SSDEEP:	3:C3Updr/7/l4EuokE9WlE:GKdrPuoOlE
MD5:	DA47A28BAEAEF3A8FEA7BDAF82150121
SHA1:	49F36F3803545262DA55A005DDE44DAD977F2547
SHA-256:	C04590AF8138779E0BBF0BE532CC9BF3E49BE1CFF64FA12F3FC8B4C30E92D42E
SHA-512:	BF7EF0C22319AA4428A0705AAC99CAD7F98AC05F6A045436BFC7344BD981A5A53F55BBA92446737FA1F2DECD3C58794DADA83102718B9711373E1268E832B3A7
Malicious:	false
Reputation:	low
Preview:	GIF89a.."................!.......,......"......0........;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 626x277, components 3
Category:	dropped
Size (bytes):	40507
Entropy (8bit):	7.944440377781344
Encrypted:	false
SSDEEP:	768:9/X7aiPxfgiS1d0mdZgztbfKgfV4jHKllkU6+yLj7uP9moKx/gm:9/egxS1dXWztfKsV47K3w+y/7uPzKx/x
MD5:	2636DF66D869E58AF2EE447AC7D53861
SHA1:	A6659397D1EC30D01A1FA178905C8B358DD30B8F
SHA-256:	D8E22E9E128007E03604465A44445B16A508EBE964747A466543D3B0D2A2CD17
SHA-512:	9571307CF15F5269919C458C0231F7FD9C2DC50C6F9277F079E7BC76B13D28521FB1AC9E8258CEEAD892C4D5351DAA38ECE4BA342E459C81F4B37D7978DA02C1
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....uhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2F3F706D8B7A11E98D82907679A821AC" xmpMM:DocumentID="xmp.did:BD7165A5EFE111EAB63896AF6BA545A7" xmpMM:InstanceID="xmp.iid:BD7165A4EFE111EAB63896AF6BA545A7" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2019681AD64711EA8DAA86F8C09A34DD" stRef:documentID="xmp.did:2019681BD64711EA8DAA86F8C09A34DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.......................................................

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 668x450, components 3
Category:	downloaded
Size (bytes):	78087
Entropy (8bit):	7.956931799882443
Encrypted:	false
SSDEEP:	1536:Ef5rofarKjeQEKx3PCcLvfP8UZKJbjbapO987zU2fpMEXm5c/s4c/aj2B:/falkKgbZO/ba09YU8pMEXQ
MD5:	122A72AAFFEFF096E9C9F48F03CE5E62
SHA1:	193867AD14795F465AB37CA3E650DF9E77C3665E
SHA-256:	0D439DA076748E9194B3669D10C6050C6CF16CD6094BCADCE9F6FD011D946F51
SHA-512:	B70ACC9259CA1D27C08D034C976D8B24BAB0379257863874E2DB2536C3376EE89B2FB9275F6CAA21595877B9630C1AB36C017EC6AD781D9B450567142ADE17C2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/po-boxes-box.jpg
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?.....qud...mU..;.].....<BY..2.....]......4~...-.2I...y'..j.....f_....Y*j.6....O...[.._[Y.z......]7.u..,"....T.x...h.....?.........n..O?.x.....7.6..(..=jTR......N...t}.F...5....I.v..W......^......c..+..Y..w ..\|..&..Y...]..

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/stamps.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 625x369, components 3
Category:	downloaded
Size (bytes):	80590
Entropy (8bit):	7.909730869176718
Encrypted:	false
SSDEEP:	1536:BUP8aZB9ESVgisDZLbBEv0xxqnRDNLA2UbhEN7IbIvqRfYE7LjqLY63t:iP8aZBszDZLlEWxMDNLshENoTx63t
MD5:	89290E907DBF0C6A6958437661C32B2F
SHA1:	E5AB9191586787B66C711FD8B69D341A3ABDC534
SHA-256:	608D030DB0B9386B9AA0B657659079CD62E1BE78DEEECC56DF2D0AAE01A1F20A
SHA-512:	A39216B275DD2E86DBDF8D59D661B6145BBCEC7328CFDD1E77B79148EFFF5DF4A97A4D7DC1B85F0FBCD25CD7814B8F20573F38A358F75B0630F62D9B05981A53
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/busy-person-red-shirt.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................q...........q.......8Photoshop 3.0.8BIM........8BIM.%..................B~......q.q.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................(............?..?.h.?...Vr2<g.u........6.g. p..3......'..X.......8OS[i.ol...1_-.A.V?G...{u.4s1 ....E.p..P}x.)...o...K...m.>T.f.v..u>.U.#v.o..Z._..^...C.. ......`...m...a....eF..\|..*M^....$}.i......=+.?qa.2.pq.....?yg.........:f....(>..8..uyb

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6585
Entropy (8bit):	4.362931093231967
Encrypted:	false
SSDEEP:	96:S2o3k54EMHEN6/ULAS+dQm3hd6n4j/Dj5Hk+NZM6cNZj/GiQIK2o/Y9b38gY0y7Y:TocoDSkrRlHhNu6cNZj/7f0Y2XX9u
MD5:	07A8878CD48900CF342750F815DD6968
SHA1:	DA178186F842BF213ADA32238259374449B13E33
SHA-256:	F87846519485DCF9C195D8F1449DA4FEB1E250E4FB2D6ADA71EE7386589FE05B
SHA-512:	633634E70EFC24EF159331202474C11DCDC7737C74434F531FA53ECADAA6A975AEF667127E4ED4EBC0DAE3D6EBB7A042018EF5D7E4930BBFF800E252EC16E424
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/polocator/map-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="23px" viewBox="0 0 18 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/PO Locations</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Mobile-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Mobile----Listing-page---list-view" transform="translate(-243.000000, -327.000000)" fill="#333366">. <g id="List-/-Map-toggle" transform="translate(65.000000, 327.000000)">. <g id="Map" transform="translate(178.000000, 0.000000)">. <g id="Icons/PO-Locations">. <g id="location">. <path d="M9.01167315,11.3283582 C10.6692607,11.3283582 12,10.0164295 12,8.41044776 C12,6.80446604 10.6459144,5.49253731 9.01167315,5.49253731 C7.3540856,5.49253

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3837
Entropy (8bit):	4.691925507500563
Encrypted:	false
SSDEEP:	96:vvfEBNBo+HPRWJ41a9DcIwvNAmvggCC/HCU4YvurOnu6QoAaxQ:fEto+HZ2yayIw6m43mCYvurwDQoACQ
MD5:	1F922E6A0D278D2A227DF986AE0A140E
SHA1:	16D43FA00BB24D2EFAED9FFC4159151DA6514661
SHA-256:	D4B1467883DA6F1F1B37FD6704D89014B5CF8F3FFEBBCFA7BA758906057A0746
SHA-512:	71FDF3C114BB7DD4F4522CD6BBAED09A4191CB59A9FC3C3E50D6859C8267506319B8168599DC2452289E9807521B11EF88594A9BC767B4FF42E8D6FC7FC40E09
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/images/schedule-redelivery.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 73.4 101.7" style="enable-background:new 0 0 73.4 101.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<g>......<path class="st0" d="M33.8,61.6H21.6c-0.9,0-1.7-0.7-1.7-1.7v-9.1c0-0.9,0.7-1.7,1.7-1.7h12.2c0.9,0,1.7,0.7,1.7,1.7v9.1.......C35.4,60.8,34.7,61.6,33.8,61.6z M23.2,58.2h8.9v-5.8h-8.9V58.2z"/>.....</g>.....<g>......<path class="st0" d="M33.7,52.5H21.6c-0.5,0-1-0.2-1.3-0.6s-0.4-0.9-0.3-1.4l2.2-9.1c0.2-0.8,0.9-1.3,1.6-1.3h7.7.......c0.8,0,1.4,0.5,1.6,1.3l2.2,9.1c0.1,0.5,0,1-0.3,1.4S34.2,52.5,33.7,52.5z M23.7,49.1h7.9l-1.4-5.8h-5.1L23.7,49.1z"/>.....</g>.....<g>......<path class="st0" d="M52.8,52.5H3.1c-0.9,0-1.7-0.7-1.7-1.7s0.7-1.7,1.7-1.7h49.7c0.9,0,1.7,

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	562
Entropy (8bit):	5.354120046143594
Encrypted:	false
SSDEEP:	6:TMVBdbjhTdgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nWsjqMSq6jHzhVNUbWNkbGZ:TMHdPhRi/nzVJ/KYf3nWA+HzN8hCXVRn
MD5:	EDFD0894AEEF9388AA4FEA8EC845D66C
SHA1:	ACBB5EA89B4AFCC8DD1685CA4E87B418DA3FA65F
SHA-256:	BB8DAD575651FE0ABA30620551DF7329F038ADABCFC137C92F6C4EF9246F9F59
SHA-512:	2945D3892AA896345A1E0F3066F75F69A6BB28C7296631DBD26A6609647CB0F729D99297C8CFAAAFA25210439486F67C8BB75935767B97F122C28E0F42A6AAF4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 31 18" style="enable-background:new 0 0 31 18;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M15.5,18L0.5,2.7c-0.6-0.6-0.6-1.6,0-2.3c0.6-0.6,1.6-0.6,2.2,0l12.8,13l12.8-13c0.6-0.6,1.6-0.6,2.2,0..c0.6,0.6,0.6,1.6,0,2.3L15.5,18"/>.</svg>.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.601677923539398
Encrypted:	false
SSDEEP:	384:yj8V/gBIp3fNEdDH4YCC4NhwgF/0U0g8kpgfuE6DQ47Cp4OhTgq/ZUYg4XpQfeEV:nvmNYxpTX1Dg9m7uys0qnQt2Leick6wY
MD5:	40FDB25624581EA916D63A631CDD492A
SHA1:	FC4A813543B6C29B437F87D9AFA9445318C3FF5A
SHA-256:	D8F2BD686DB2088127D4D808F221C71F41DDE278B445023DEFF712743D2CEF41
SHA-512:	7EC95396477D0B859BE6540A02237FECBF2AF1B5E6C044AB35B94A37F7E790DFAB0355ACC4568CF72586144A361A240B473B8EB7E1E5BA9BA05919652526B045
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3xC3vA!2sZklLiQ!3sAAptDV6ygPgb"],"userBiddingSignals":[["806463764","

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1868
Entropy (8bit):	7.8158330742823585
Encrypted:	false
SSDEEP:	48:z69zQCaqPnBfQJojCB13a+d+ZkjkeLQ41vzdXyqvY:z69zHNQmCB59+izLp19Bg
MD5:	FAF96640D528E8993847299C5EE78FC2
SHA1:	8985CDA5234FDCA8E85198D360CDF177D572D2BB
SHA-256:	A0644683AD365AAFBBE2F13AEF41C1F36F42F5C64E36CDBBF6A3E1A7A2EB803C
SHA-512:	3C00A274654F2DFB118A4F62A6F3FEA69D85AC1991B78E811E492375F1A3D6388438ECB3772442DDE9E86146DD5CEF8F96BE4A9076CD7D90F2A20D09680CD0B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..XYlTe.>...l].6..`....<. ...B$......F(.&6Q..Q".._....DIxQ...k\|...X.....N...{..3..wf..x..{._..................^.(.r..L.AX).A&..d.b.>.u=..il.b.l&4m.~Ri.].~..Y..`..&b@!y..R)...v&.....#S.H....1....X....5[]..ze."D.....!D.....t.Y.w..?.........:...+Z:H.N.C.l...).._i.... ........4.OE.5.9.b.......`..A..M.L........c..,.}.Uk}X."+8..<...X..&6...l..}.DnN.2.X.;.G...2.+..P.#.k..\.oFP(.MC.<.v.b..2#.X..6..b.*....G!...O..j6.5.?.....l.U..YS.Z..4...h.)6.t#.PB.4Oj.\.X_.j3.Tp.,.......2".5;Me..G.).&..-5T].v.....).i......Q.<."K....G.......@.Y.n..i.....K.!..EQM._.......BP............X..w...[...).y.2.u.H...[LW.R.1.0_.....].d".4P.....\|\`...m....0..>.f......h.....j.0.s..kmM.&e.#n.-6..4..Y..0S.\.e..;..........'.l.+8.j..Kf}.`.M....+./.:.hAc~..C.....w".F&......2.ZKhMf#..k...f8.ne.%..w.......t+.!=\|.K........b....^.&.[5V.....XQ.,..m....3.\V;...9..".W.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487460218&url=https%3A%2F%2Fwww.usps.com%2F
Preview:	{}

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	6997
Entropy (8bit):	5.2870856460993085
Encrypted:	false
SSDEEP:	192:xHQJxiJY2XjIzv+FbUdC+8u1qEUXG6e6jE0ul0t9Y3IBIbJIp2IrdqIqhI1cI843:xHQJxiJY2XjI7+ew+8uUZG6e6jE0M0tX
MD5:	8828E0C7744699A36FD2DF3D80C30719
SHA1:	A8EB403AA38EF969FC932C7F56319E40C4ACE8D7
SHA-256:	BF3F4C09E344DAB4DDDE2343815C46385B9A7EE2D3B59AB69B5D8298EB679BDC
SHA-512:	926F7C77F5D7D01A0656F7533480ECF7AF941C627A8D8CC649AB437DB1408DF10A78E3F04827433BEF287EC44FFCAF1740F0A460A19061255F2A9DB48DAB6AA6
Malicious:	false
Reputation:	low
Preview:	....<div id="global-footer--wrap" class="global-footer--wrap">..<link type="text/css" rel="stylesheet" href="/global-elements/footer/css/main-sb.css">..<link type="text/css" rel="stylesheet" href="/global-elements/footer/css/footer-sb.css">......... [if lte IE 8]>.....<link href="/global-elements/footer/css/main.ie.sb.css" rel="stylesheet" type="text/css" />.....<link href="/global-elements/footer/css/footer.ie.sb.css" rel="stylesheet" type="text/css" />.....<![endif]-->.... Styles to eliminate left nav -->....<style>.......page--left-nav .content {.. margin-left: 0;.. padding-left: 30px;..}...left-nav {...display:none;..}..</style>.... END Styles to eliminate left nav -->....<script type="text/javascript">....var MTIProjectId='f3e4655b-fd06-4b8b-8a25-01c859692612';....(function() {.....var mtiTracking = document.createElement('script');.....mtiTracking.type='text/javascript';.....mtiTracking.async='true';.....mtiTracking.src=('https:'==document.location.protocol?'http

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487472902&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm
Preview:	{}

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1701
Entropy (8bit):	5.019835948893838
Encrypted:	false
SSDEEP:	24:ZVbddI7ORzQtxN0uAKzfl1tQJAXfETcf5pNnxxAMN1lMNTQDp:ZV2gaOuAAMAPEqpxdN12NTQDp
MD5:	73421BB670290A96F15CCB3B93FDFCBC
SHA1:	981F49671F75FDACF6DA48296FD22C8EC3892400
SHA-256:	63A9D1C016BB4FFE062A704F167F26F8FAB8624077C7EB037AC121BD682263E9
SHA-512:	8B3E559E5F7819087052087C91703906EDA0762580D031AA771F3C81456BA4E8FFD0CF02FB32EF18A58207ECC82D62269BD832BA2C271FA3601F4BAE00CF34F2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/links.css
Preview:	/.---------------------------------------------------------------....@filename..links.css....@author...aziz.syed@akqa.com....@description.links global style definitions........Content....1. Links../...=========== 1 Links ===========..*/..a{...color:#2f6fa9;...text-decoration:underline;..}....a.primary,..a.standard,..a.tertiary{...font-size:12px;..}..a.primary{...font-weight:bold;...color:#2f6fa9;...text-decoration:none;..}..a.standard{...color:#2f6fa9;..}..a.tertiary{...color:#999;..}..a.standard,..a.tertiary{...text-decoration:underline;..}..a.primary:focus,..a.standard:focus,..a.tertiary:focus,..a.primary:hover,..a.standard:hover,..a.tertiary:hover{...color:#656565;..}..a.info-icon,..a.info-icon-end{...background:transparent url(/ContentTemplates/common/images/global/icons/info_tooltip_icon.gif) no-repeat 0px 0px;...line-height:16px;...display:block;...text-indent:20px;...text-decoration:none;..}..a.info-icon:focus,..a.info-icon-end:focus,..a.info-icon:hover,..a.info-icon-end:hover

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.601371213740748
Encrypted:	false
SSDEEP:	384:yj8V/gBsp3fNEdDH4YCC4NhwgF/0U0g8rpgfuE6DQ47Cp4OhTgq/ZUYg4ApQfeEl:TvmNYxpTX14g9m7uys0qYQt2Leick6R/
MD5:	81F2F72D0B383A584C1C7F0488DEAB3C
SHA1:	B917AE6C7782CB3C21CAB8132B9102814372F6E5
SHA-256:	677A469354ED0F1CCC833F676DDD3BEC0C71141ABBF610AAAE3EBCF55E776E3C
SHA-512:	15C1F1F82AB0C94D6FE49B7F6E8DC2F19D559D9D97ECCC37B6A4196D40FCA7EAEB0CD20BA7B8D4A3952542C02EAF6E0A2629446052AB05A200C01152050029BD
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487473009&cv=11&fst=1713487473009&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3xC3vA!2sZklLcg!3sAAptDV6iYuPz"],"userBiddingSignals":[["806463764","

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	562
Entropy (8bit):	5.354120046143594
Encrypted:	false
SSDEEP:	6:TMVBdbjhTdgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nWsjqMSq6jHzhVNUbWNkbGZ:TMHdPhRi/nzVJ/KYf3nWA+HzN8hCXVRn
MD5:	EDFD0894AEEF9388AA4FEA8EC845D66C
SHA1:	ACBB5EA89B4AFCC8DD1685CA4E87B418DA3FA65F
SHA-256:	BB8DAD575651FE0ABA30620551DF7329F038ADABCFC137C92F6C4EF9246F9F59
SHA-512:	2945D3892AA896345A1E0F3066F75F69A6BB28C7296631DBD26A6609647CB0F729D99297C8CFAAAFA25210439486F67C8BB75935767B97F122C28E0F42A6AAF4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 31 18" style="enable-background:new 0 0 31 18;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M15.5,18L0.5,2.7c-0.6-0.6-0.6-1.6,0-2.3c0.6-0.6,1.6-0.6,2.2,0l12.8,13l12.8-13c0.6-0.6,1.6-0.6,2.2,0..c0.6,0.6,0.6,1.6,0,2.3L15.5,18"/>.</svg>.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (650), with no line terminators
Category:	downloaded
Size (bytes):	650
Entropy (8bit):	5.384152767330336
Encrypted:	false
SSDEEP:	12:sDs/lojvYcOI99h4J7r1Zbr6YB2LUwOS7YEw6okzoRWF3U0xQJUSeGy4zg+C/:QYcOI97upxr6Y3xSEaoXRWNBx6U1GlzK
MD5:	32DD789522CC6923C80141FCF5D3A614
SHA1:	366B7E3FD63176E559D8B8C5F59BE6FD3388CF5A
SHA-256:	5C3C9DF8B8F0A80F863C53DEC5CBCA7DEDBDCC7697C6C6359520950774653960
SHA-512:	B3F46AD28DC9F531C2D417099D1D63919CC35DE478887847AE84B370C238CAAB993A72C59AC001DDBF4B556BD69D7E9CCB2A7C08B3D685412A33A1EF354D3CBE
Malicious:	false
Reputation:	low
URL:	https://fast.fonts.net/t/trackingCode.js
Preview:	eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]\|\|e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('4 7=g.b;4 2=3.p(\'r\');2.9=\'a/5\';2.c=\'d\';2.e=(\'6:\'==3.u.h?\'6:\':\'i:\')+\'//j.k.l/t/1.5?m=n&o=\'+7;(3.8(\'q\')[0]\|\|3.8(\'s\')[0]).f(2);',31,31,'\|\|mtiTracking\|document\|var\|css\|https\|projectId\|getElementsByTagName\|type\|text\|MTIProjectId\|rel\|stylesheet\|href\|appendChild\|window\|protocol\|http\|fast\|fonts\|net\|apiType\|css\|projectid\|createElement\|head\|link\|body\|\|location'.split('\|'),0,{}))

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6585
Entropy (8bit):	4.362931093231967
Encrypted:	false
SSDEEP:	96:S2o3k54EMHEN6/ULAS+dQm3hd6n4j/Dj5Hk+NZM6cNZj/GiQIK2o/Y9b38gY0y7Y:TocoDSkrRlHhNu6cNZj/7f0Y2XX9u
MD5:	07A8878CD48900CF342750F815DD6968
SHA1:	DA178186F842BF213ADA32238259374449B13E33
SHA-256:	F87846519485DCF9C195D8F1449DA4FEB1E250E4FB2D6ADA71EE7386589FE05B
SHA-512:	633634E70EFC24EF159331202474C11DCDC7737C74434F531FA53ECADAA6A975AEF667127E4ED4EBC0DAE3D6EBB7A042018EF5D7E4930BBFF800E252EC16E424
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="18px" height="23px" viewBox="0 0 18 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/PO Locations</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Mobile-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Mobile----Listing-page---list-view" transform="translate(-243.000000, -327.000000)" fill="#333366">. <g id="List-/-Map-toggle" transform="translate(65.000000, 327.000000)">. <g id="Map" transform="translate(178.000000, 0.000000)">. <g id="Icons/PO-Locations">. <g id="location">. <path d="M9.01167315,11.3283582 C10.6692607,11.3283582 12,10.0164295 12,8.41044776 C12,6.80446604 10.6459144,5.49253731 9.01167315,5.49253731 C7.3540856,5.49253

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1121
Entropy (8bit):	5.174262414442916
Encrypted:	false
SSDEEP:	24:2dzAQLf3SBTNtfwjrBGtAfwjrBWqVhxgaKjr7DqsVFm:czAgf3SBBtS8ASsQhxgaoesbm
MD5:	9105CFA1479096038365D18BEB23CB1F
SHA1:	648C5B01118CF059EEDE56D9DAE1713AB26D965C
SHA-256:	B2728704F99E68B8EDFA2B8EFCB1F40E77D3ABD5F6F04388C9A09232B1711043
SHA-512:	ABDEF81B6534A3F845F0EA1734EB237205DB8A9DAD9BF6F7A76D4F37C5A3D7B9A75B1ADD57CF9312D183B5817DD99DF41D2F251D38AB32432F7FBB2401252C17
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 75.8 86.7" style="enable-background:new 0 0 75.8 86.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M4.6,26.2h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.6C0.9,24.5,2.6,26.2,4.6,26.2z"/>..<path class="st0" d="M4.6,46.9h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.7C0.9,45.2,2.6,46.9,4.6,46.9z"/>..<path class="st0" d="M66.9,0.8H13.4c-4.4,0-8,3.6-8,8v7.8h8V8.9h34.4V33l5.6-5.6L59,33V8.8h7.9v69.1H13.5V67.6h1.1...c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2c0-3.4-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5H4.6c-2,0-3.7,1.6-3.7

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "OS/2", 26 names, Macintosh, Part of the digitally encoded machine readable outline data for producing the Typefaces provided
Category:	downloaded
Size (bytes):	103904
Entropy (8bit):	5.685417455415068
Encrypted:	false
SSDEEP:	3072:0WQCyHpAkYkokOs/8rv4wQh/EZh+bzs9eJq:0WQBWFuOGirSbzaeU
MD5:	0CF330171691B81401116FCE320E0556
SHA1:	1DF5ABB8F9577372533144B075E7EEF1EA6B45D7
SHA-256:	F7BEDB9F92F3227EA9AA51213F117670B61E94BECFBFBBB72CBEF5FA8F6D5933
SHA-512:	446AB207926643330066F9DB536463F8FCC4359888B74B8855DF15719F64EE41DAFB01246966A1E566174CA3F6571ED05E1C2D28CEA77AA828F6390F6E976555
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf
Preview:	...........pOS/2..-........`cmap.8.....\...tcvt ...........@fpgm............gasp............glyf.{4.......Ihhead.\2...O`...6hhea.o....O....$hmtxI.-...O.....kern......U....Lloca. ....s ....maxp......y<... name..j-..y\...rpost...2....... prep...............).........X...K...X...^.2.6................P. J........LINO............................. . .................h...V.@.......~.+.7.I.~.................. . . . " & 0 : D .!.!"!&!."."."."."."."."+"H"`"e%............ .....9.L.................. . . . & 0 9 D .!.!"!&!."."."."."."."."+"H"`"d%......................%.{.z.l.........;.8.7.6.3.."....L.>.;.4.a.^.V.U.S.P.M.A.%......s.r...........................................................................................k.u.H.A.P.4.....Z...4.k.....J.......S.....................".....,K...PX....Y......D......_^-..., EiD..`-...,...!-..., F..%FRX#Y . .Id. F had..%F hadRX#e.Y/ ..SXi ..TX!.@Y.i ..TX!.@eYY:-..., F..%FRX#.Y F jad..%F jadRX#.Y/.-...,K ..&PXQX..D..@DY.!! E..PX..D.!YY-..., EiD..` E

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 64, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1950
Entropy (8bit):	7.377152003290462
Encrypted:	false
SSDEEP:	24:Bg1hfvWwjx82lY2T3iVSgyJ3VwWvG8xQ6qPQrkEqqYNQVJkY0cgQqdWLKWszrFoV:sANn2ecJ3LuD8YNQVJk3cgp1L2NhL7AM
MD5:	E71831CE09557543F536D8FD046F3888
SHA1:	0EE46DC7D5B18C30AF23DDACDFA9244F530A3299
SHA-256:	CB37096768DCF9C6B8E58257CAA4457FAB323636774F65A12DB017BBB2639F18
SHA-512:	2D6769F4010FAFDE089352FF921ADC20F73ABCAD67B0F5FE1F0D9BCECDBDA1DB371F32A2374D2BBEA4BEB006354D732B1DAF2CC02C012841F935381E65459218
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/polocator/backtop.png
Preview:	.PNG........IHDR...9...@...../WH.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:70AFA61CD4C511E79ABBCE470FBE2C79" xmpMM:DocumentID="xmp.did:70AFA61DD4C511E79ABBCE470FBE2C79"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:70AFA61AD4C511E79ABBCE470FBE2C79" stRef:documentID="xmp.did:70AFA61BD4C511E79ABBCE470FBE2C79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>U..x....IDATx.b...?...L.C..%...Y....:..Q...u..n.u.[.l43...E@.d.j...7mz.......Tq.M....8ab......3...@.Pp0...;..T.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 8 x 300
Category:	dropped
Size (bytes):	661
Entropy (8bit):	6.281263227489541
Encrypted:	false
SSDEEP:	12:pYiu5hypkcwGK2H0N4R+j2ymrIx9cAjj9qEjN9JspuSVbUTHGIGb:XurcwGK2HGkG2ymrT89hhXspu+Uk
MD5:	004B01A391B1C3C5C3BE3573D3AFC4A2
SHA1:	D6D354CDEC293D046723C2878C4460C17C564534
SHA-256:	AAA73B9D228AA041ABC298F87D9D23E9AF8836F3DB045F04EAE62211D5DFF32A
SHA-512:	5944EB8F28886CC5152637D3D000110B426A5C8840ED100B0E831E45E58F560BFA401814087100CEFD4A9F5D41B7FD022DC9A3BC8678E926FC04E310BC9D686D
Malicious:	false
Reputation:	low
Preview:	GIF89a..,..M.z................B@A5.....M............WUV...................................................lkl...............................f..r..www...............................wuv.........xxx.....................................................................................................................................................................................!.....M.,......,....1..M..7...M.C..=............................95.................*+.M.B......E..I..........@!...D.....)..2................,.....(.hq.....(.........qa..#.,1.....3..q`.......(......c.....8.x....:`.db.D...6. @...J...I...X.j....`.....;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=*;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 844x457, components 3
Category:	downloaded
Size (bytes):	93266
Entropy (8bit):	7.9390640972756215
Encrypted:	false
SSDEEP:	1536:R85so3upe6O7lpOdnm8DoGJt1IPgzx03gJsuM/dFrrlYTnrU/11tq99D:C57+pelX+nbNJneSx03gwrMnrG1Ly
MD5:	972ECBDF4A686275BFE61A7E7A1AB877
SHA1:	F9C81C51FCF7C69121DDC53ADA9D309A0588A231
SHA-256:	CDFD97B1CC3AD2F4EF7E8A01915808CE36EF17491C4CF099690B5CB457BB6A85
SHA-512:	FCB2FCD4813B5E5E112E3F6D2A337E318708C6A677895BA23C6C5C17CD2E7537CA263958CA67415F8338D4FC12AE03F77F5E64D0547F826C5F93D98E456AD88B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/package-image.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................L...................8Photoshop 3.0.8BIM........8BIM.%..................B~........L.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................5............?......$....q!........k.5x..f...'..j..+.]u}N.H.S.?..........E..{t/dq.....S.@L...V N;S.8...{.._.'.H....]..@@..Z..\..@...a\|<:...5SW.t..iS...V.v.d.iX""(.fbp...X.Z...).mb....._......./<.....^?....r........o..;...0n.ma.5.N8>X...~U.h~...RO.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1103
Entropy (8bit):	5.082955748392748
Encrypted:	false
SSDEEP:	12:TMHdw45i/nzVQNq/KYIg3cDONbKXHHH0WlRuW+NsNz6ZeeIkjabWC2jWBWtlUUp:2dD5A2NqLIgsDeonH0Qgt+FBDbWaMUE
MD5:	2E722B55BB31B83042310FBF5B45128D
SHA1:	CB6CD5C99C06BA8C04C7795DEA4D13241EAAA045
SHA-256:	0B68E5B64999AB2E6D137A1886410CC9E8BED0B3863AACD838A3EB008F2BB516
SHA-512:	F25901D38E1434CE28ABD7EC55F203EB6CA82C868BD884D9F912AB007FDABA94FF02921C86CF3D262B3A57B87516E147FAEB60776A1AC72532FCAB189197BBC9
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<path class="st0" d="M99,13.9V1H86.9c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H57.3c0,3.9-3.1,7-7,7.1c-3.9,0-7-3.2-7-7.1H27.9...c0,3.9-3.2,7.1-7.1,7.1c-3.9,0-7.1-3.2-7.1-7.1H1v12.9c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1v13.7c3.9,0,7,3.2,7,7.1...C8,52.8,4.9,56,1,56v0.3v13.5V70c3.9,0,7,3.2,7,7.1c0,3.9-3.1,7.1-7,7.1V99h12.8c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1h15.4...c0-3.9,3.1-7,7-7.1c3.9,0,7,3.2,7,7.1h15.4c0-3.9,3.2-7.1,7.1-7.1c3.9,0,7.1,3.2,7.1,7.1H99V84.2c-3.9,0-7.1-3.2-7.1-7.1...c0-3.9,3.2-7.1,7.1-7.1v-0.3V56.3V56c-3.9,0-7.1-3.2-7.1-7.1c0-3.9,3.2-7.1,7.1-7.1

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487477011
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 625x369, components 3
Category:	dropped
Size (bytes):	80590
Entropy (8bit):	7.909730869176718
Encrypted:	false
SSDEEP:	1536:BUP8aZB9ESVgisDZLbBEv0xxqnRDNLA2UbhEN7IbIvqRfYE7LjqLY63t:iP8aZBszDZLlEWxMDNLshENoTx63t
MD5:	89290E907DBF0C6A6958437661C32B2F
SHA1:	E5AB9191586787B66C711FD8B69D341A3ABDC534
SHA-256:	608D030DB0B9386B9AA0B657659079CD62E1BE78DEEECC56DF2D0AAE01A1F20A
SHA-512:	A39216B275DD2E86DBDF8D59D661B6145BBCEC7328CFDD1E77B79148EFFF5DF4A97A4D7DC1B85F0FBCD25CD7814B8F20573F38A358F75B0630F62D9B05981A53
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...........................q...........q.......8Photoshop 3.0.8BIM........8BIM.%..................B~......q.q.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................(............?..?.h.?...Vr2<g.u........6.g. p..3......'..X.......8OS[i.ol...1_-.A.V?G...{u.4s1 ....E.p..P}x.)...o...K...m.>T.f.v..u>.U.#v.o..Z._..^...C.. ......`...m...a....eF..\|..*M^....$}.i......=+.?qa.2.pq.....?yg.........:f....(>..8..uyb

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 34
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.173794838194766
Encrypted:	false
SSDEEP:	3:C3Updr/7/l4EuokE9WlE:GKdrPuoOlE
MD5:	DA47A28BAEAEF3A8FEA7BDAF82150121
SHA1:	49F36F3803545262DA55A005DDE44DAD977F2547
SHA-256:	C04590AF8138779E0BBF0BE532CC9BF3E49BE1CFF64FA12F3FC8B4C30E92D42E
SHA-512:	BF7EF0C22319AA4428A0705AAC99CAD7F98AC05F6A045436BFC7344BD981A5A53F55BBA92446737FA1F2DECD3C58794DADA83102718B9711373E1268E832B3A7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_sm_pipe.gif
Preview:	GIF89a.."................!.......,......"......0........;

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	5.8025882393175285
Encrypted:	false
SSDEEP:	96:DDcryfyS5yMh55tbgInZunThVYLuh2co+:fcGfBhjtMUKTrYLuhB
MD5:	FE4CBFECF0C1D3E4B34271625B310C3C
SHA1:	7805ECB971F750379BE514229A95E8207628B0D2
SHA-256:	A7EB7BC08D6DB5B84F2A8B8E750E9B6E3BDD80BD6F926D56AFD0901C3B8144F9
SHA-512:	8C9820C5A07A33DDC97109C608D43EFECC6A61FD3B7E89C4B3E4C26A153993943D2FCFA13C6D91D6614E3F293F9E86E0327AFD7C3E28AC0CFA6212D2DA206D8C
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( function() {. if (typeof TTDUniversalPixelApi === 'function') {. var universalPixelApi = new TTDUniversalPixelApi();. universalPixelApi.init("v62w3xt", ["f2bxyaw"], "https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjL

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 102, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	6.008353781899314
Encrypted:	false
SSDEEP:	3:yionv//thPlEZtlHRg9RthwkBDsTBZt0aRSaQmwEK6QjevoHc86x5DTU5k6qHlVo:6v/lhPgxRgjnDspxTQmwr6QjL886x5PK
MD5:	53C79701060D3641D0E856AD99F0D07A
SHA1:	753919AB47F7F4F409819D3445E6CE78280B4F3B
SHA-256:	F603CA1572C9C8451191B5DD31340205E4ED3BCAA4A4F014379BD0733D92FC21
SHA-512:	539CD82E8D4EEE2042F321262F530832F405ED2A2AA3B67EBF7355ECFF1A5B7FA5D7C48DCCA948CE85003C70D87A727122BDD0F96B426F89087238DDFB7FD546
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_bkg.png
Preview:	.PNG........IHDR.......f.......l<....tEXtSoftware.Adobe ImageReadyq.e<...QIDATx.bz..=......?......a.h....:...........~..e.,....vT7.............hTs.b....0.i)z..`......IEND.B`.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8795)
Category:	downloaded
Size (bytes):	8796
Entropy (8bit):	5.485222342795602
Encrypted:	false
SSDEEP:	96:ehJhWbXOuTuAPwNnNengM8T2Te7u7f6+q4Trjl1ocYXocKg4u98Ea6hDEfcyFloW:dSlJiRJGXr98IhDEfcjxACA
MD5:	FF67EAC943614EF903C2E84419A60F4C
SHA1:	565109B98747417724DAFA5462A731C692178381
SHA-256:	0863D2C590D46AD4B990232414EEF23349EE4316AC4CCBF6F4618329539FB65A
SHA-512:	12D1FD9B2CA31FE7DB2D8474BBCCF310F922CC447DF716CBA43720520CAC8C906A3ADA2DEBBFC10E9B94020BE7339F11473B1573DCB88C1C5702BAF1408B8477
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/footer/css/main-sb.css
Preview:	@font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb335665f88") format("svg"),url("https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff") format("woff"),url("https://www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf") format("truetype")}@font-face{font-family:"HelveticaNeueW01-77BdCn 692722";src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix");src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/d90b3358-e1e2-4abb-ba96-356983a54c22.svg#d90b3358-e1e2-4abb-ba96-356983a54c22") format("svg"),url("https://www.usps.com/asse

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3179), with CRLF line terminators
Category:	downloaded
Size (bytes):	3181
Entropy (8bit):	4.981532397736361
Encrypted:	false
SSDEEP:	48:OocqIQCwocCpEpiGWV20kA7/K65sFp5sFZd5sF75sF6XHFzyAhI:OocPQnocCpVGWV2Fi/K4azaVaFaqluX
MD5:	0466C7414C19B685BAFE055BCD1D9D7B
SHA1:	29EB107CA7C4DE31AAF2A9DF8D9C8294D2C234AE
SHA-256:	CCAEBFD542FBA2C3AF8D9397E265345E7C7BEC22C7C94F190EF7047E38479830
SHA-512:	D4162CBA8B07656B5004846386DEDD0ADE78BB3655974D12D54370230BE659C7BF618AAAF7CB5C5D26D07F61ACB746202EB7A7BF988FE8F92FD496AFEB0B85B7
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/footer-sb.css
Preview:	.global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 250ms ease;-webkit-transition:left 250ms ease;transition:left 250ms ease}.global-footer--wrap {margin:0;padding:0;border:0}.global-footer--wrap ,.global-footer--wrap :before,.global-footer--wrap :after{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box}.global-footer{margin:0 auto;max-width:1024px;position:relative}.global-footer--navigation{margin:30px 0 0}.global-footer--navigation-category{color:#202020;display:inline-block;font-size:11px;font-size:1.1rem;font-family:"HelveticaNeueW02-75Bold","Helvetica Neue",Helvetica,Arial,sans-serif;line-height:20px;margin:0 0 30px;text-transform:uppercase;vertical-align:top;width:24.4%}.global-footer--navigation-options{list-style:none;text-transform:none}.global-f

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1121
Entropy (8bit):	5.174262414442916
Encrypted:	false
SSDEEP:	24:2dzAQLf3SBTNtfwjrBGtAfwjrBWqVhxgaKjr7DqsVFm:czAgf3SBBtS8ASsQhxgaoesbm
MD5:	9105CFA1479096038365D18BEB23CB1F
SHA1:	648C5B01118CF059EEDE56D9DAE1713AB26D965C
SHA-256:	B2728704F99E68B8EDFA2B8EFCB1F40E77D3ABD5F6F04388C9A09232B1711043
SHA-512:	ABDEF81B6534A3F845F0EA1734EB237205DB8A9DAD9BF6F7A76D4F37C5A3D7B9A75B1ADD57CF9312D183B5817DD99DF41D2F251D38AB32432F7FBB2401252C17
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/collectors.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 75.8 86.7" style="enable-background:new 0 0 75.8 86.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M4.6,26.2h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.6C0.9,24.5,2.6,26.2,4.6,26.2z"/>..<path class="st0" d="M4.6,46.9h0.9v11h8v-11h1.1c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2s-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5...H4.6c-2,0-3.7,1.6-3.7,3.7C0.9,45.2,2.6,46.9,4.6,46.9z"/>..<path class="st0" d="M66.9,0.8H13.4c-4.4,0-8,3.6-8,8v7.8h8V8.9h34.4V33l5.6-5.6L59,33V8.8h7.9v69.1H13.5V67.6h1.1...c1.1,1.6,3,2.6,5.1,2.6c3.4,0,6.2-2.8,6.2-6.2c0-3.4-2.8-6.2-6.2-6.2c-2,0-3.8,1-5,2.5H4.6c-2,0-3.7,1.6-3.7

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2449), with no line terminators
Category:	downloaded
Size (bytes):	2449
Entropy (8bit):	4.911920819252327
Encrypted:	false
SSDEEP:	48:cOeIZuRzhmlkllFgKl+qqg/Lxx/mnLYsx:vN219W
MD5:	E8FE46EA7B4D034EFAA46EB26762DAE5
SHA1:	541C7E0424E2FE28C35043312D6D381BD2172F47
SHA-256:	7481EE4AFA2771109BD30E56FAB25C7899A270B73A50FD8E75EAD6D5AFC27E9B
SHA-512:	275330421D1ED883284BFD2CC1EB1226641E4617AD4CE27BE1310417F7CEA5D04884C5531A5D091F81852B119F7F40A34B0CE4741A9A9F520139D27221587A98
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/tips.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".tips-component--see-all-link",i),r.collapseAllLink=e(".tips-component--collapse-all-link",i),r.toggleAllToggle=e(".tips-component--header .tips-component--toggle-button",i),r.allTips=e(".tips-component--tip-content",i),r.allBlocks=e(".tips-component--tip-wrap",i),r.allTitles=e(".tips-component--tip-title",i),r.allContent=e(".tips-component--tip-content",i),r.hiddenText=e(".expanded-text",i),r.allToggles=e(".tips-component--tip-wrap .tips-component--toggle-button",i)},a=function(){r.collapseAllLink.on("click",c),r.seeAllLink.on("click",l),r.allTitles.on("click",f),r.allToggles.on("click",f),r.allTitles.keypress(function(e){if(e.which===13)return f(e),!1})},f=function(n){n.stopPropagation();var r=e(n.currentTarget).parent(),i=e(".tips-component--toggle-button",r);i.hasClass("open")?v(r):d(r)},l=function(t){t.pre

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (904), with no line terminators
Category:	downloaded
Size (bytes):	904
Entropy (8bit):	5.0858674950376574
Encrypted:	false
SSDEEP:	24:fkBxpQpL8OtNTy5jBQpz1T7MzKabTI8TLNiXp0c60dDlb:cqhHdydBs7g/BTwZ5b
MD5:	1151374A56190F94E7B4BD45C6CEFAA4
SHA1:	A66886920541480CAE234A5474E7A9F9876EA636
SHA-256:	5028B8B5AC9C8DFF2E22FD12579D3E38F522705BA3B8DD63B072B15C88782B53
SHA-512:	6650EDFFD9EABFBC25311C485ACAA47CC3438CD0B5A2E91932CAF4C52FBB0524F6A2F09E3A12F69AF6308A6EF5E98E77937FA40CB4BC9A02351A74BA5CE0803A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/learn-more.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=!1,s=function(){o(),u()},o=function(){r.container=e(t),r.trigger=e("[href=#"+t.id+"]"),r.learnMoreSection=e(".learn-more--content",r.container),r.allLearnMore=e(".learn-more--content"),r.allLearnMoreLinks=e(".learn-more--link")},u=function(){r.trigger.on("click",a)},a=function(n){n.preventDefault();var s=e(this),o=s.find("span").html(),u=0,a=r.allLearnMoreLinks.length;r.learnMoreSection.hasClass("open")?i=!0:i=!1,r.allLearnMore.slideUp(400).removeClass("open");for(;u<a;u++){var f=e(r.allLearnMoreLinks[u]);f.html('Show Details<span class="visuallyhidden"> for '+f.attr("data-title")+"</span>")}i\|\|(r.learnMoreSection.slideDown(400).addClass("open"),s.html('Hide Details<span class="visuallyhidden">'+o+"</span>")),setTimeout(function(){e("body").addClass("paint").removeClass("paint")},401)};return s(),{init:s}};return t});

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2264), with no line terminators
Category:	downloaded
Size (bytes):	2264
Entropy (8bit):	5.8520257908213615
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08eIPxQY1K06:wsbSUtJfxrqLWWWdV6j1iIZE
MD5:	0F5DBA5FB6131EDEBF842A897B77D3E1
SHA1:	01DDD3925E26E087510A5E6A2B202CC9FB7C2C0F
SHA-256:	9660A45EA1E469B7350C44AB55C477B447E2AA2A35F7DAAE7B729A77B10BF451
SHA-512:	4ED307A2F2888839B94588BEB8D31B6B6AEFAC149C457B3CCFF9A2B6452453CE48BAC79D54DA10622B877E7395E74C21890743576F532132E651F5FF9AE1A405
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487505235&cv=11&fst=1713487505235&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&hn=www.googleadservices.com&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2062
Entropy (8bit):	4.888546158271634
Encrypted:	false
SSDEEP:	24:eXFZJq8ankmRohW22bF8Au2BH39My/Fcj9HCiyKdOMg5Ot+MlUpFQ+02Ui:e9qO5h2Xdh2RiDUg8t+MmpFQvi
MD5:	684F2C208F8893496BAFBF6F2089F214
SHA1:	BA29DA057608B74F453E5F54E0DF834FAAEA50D2
SHA-256:	A46CB286C28D772BA9F5C6F5536ED13B76D17338DC627F88EC5AB2769A2AE917
SHA-512:	CFAA3AF4E812B894D328B32EBB491711D4BE0011BC670F915AD41F6CCABF75574597675596A611992D2C171D23EF8D02CFF880CD53438815CDF97DAA6A9A4C27
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/reset.css
Preview:	/.. Styling for html elements accross all major browsers is reset.../....html, body, ul, ol, dl, li, dt, dd, h1, h2, h3, h4, h5, h6, pre, form, p, blockquote, fieldset, input, iframe, table, tr, th, td, caption {.. padding: 0;.. margin: 0;.. font-family:Arial;..}..:focus{.. outline:0;..}..:link, :visited {.. text-decoration: none;..}..ul, ol {.. list-style: none;..}...scrollInterior ul {.. list-style: disc outside none !important;.. padding-left: 15px !important;..}...scrollInterior ol {.. list-style: decimal outside none !important;.. padding-left: 22px !important;..}..h1, h2, h3, h4, h5, h6, pre, code, p {.. font-size: 1em;.. line-height: 1;..}..a img, :link img, :visited img {.. border: none;..}..table {.. border-collapse: collapse;.. border-spacing: 0;..}..address {.. font-style: normal;..}..sup { .. position: relative;.. top: -3px;.. vertical-align: top;..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8721
Entropy (8bit):	4.289483546265149
Encrypted:	false
SSDEEP:	96:aM5Vmloq5WIiXnlDDqAdSm6LuqV8Kg8ecRuRa:aM5Vixi1D2AdSXLuqprecb
MD5:	CDF0D5587B144E3FC9CCFF1159445664
SHA1:	24BFB47FEB86D8097BC6838DF596838C92D49294
SHA-256:	1917DA206D7308727B7ABD5B46AC330757527914EE101258C6364D0AF409313C
SHA-512:	FEE03BD10CE5646E5D37DB77DA72D46951FBC4C833350B8C78EFC7010A933647D46ED706826D0613FDA11E8FB6FF5EC8B143A854B5EB3E3D155409A414E8929C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/widgets/select-box.css
Preview:	/.. =========== 11. Drop Downs ===========../...select-wrapper{.. font-size:12px;.. height: 28px;.. font-weight:normal;.. color:#2f6fa9;.. position:relative;...font-weight: bolder;..}...dj_safari .select-wrapper{.. height:29px;..}....select-wrapper select{.. .height:0;.. }.. .select-wrapper .select-options{.. position:absolute;.. top:0px;.. display:none;.. left:0px;.. }.... .select-wrapper ul,.. .select-wrapper ul.select-ul,.. #main .select-wrapper ul,.. #main .select-wrapper ul.select-ul{.. .width:100%;.....background:white;.....overflow-y:auto;.....overflow-x:hidden;.. ..margin:0px;.. ..list-style:none;.. }.. .select-wrapper .select-small ul,.. .select-wrapper .select-small ul.select-ul{.. background:#ebebeb;.. }.. .select-wrapper li,.. .select-wrapper li.select-li{.. width:100%;.. height:auto;..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	103601
Entropy (8bit):	4.994596424282955
Encrypted:	false
SSDEEP:	1536:VZG9q1rjea/dDyOvLF1+DWmujpeUkyumT72l8D2Zr3f7Tr/sLLMPkCZorWXJqXi2:hRT72lYggIkCZorqxs
MD5:	692091C0AD882D8F4F09F076B9C31BE0
SHA1:	1950AF6E902485132106A92C3C9CF3CA55964F3C
SHA-256:	D9B63C0DEE04E8077E0192DA59149AEB312ABF60BC5D6579D4C568B0FDF51740
SHA-512:	2E1B8BAF907ED7F2619783E55830F851D0B58B6AA1BE0601C9CA8AC7F4EA35122E17A3B5D0AD62F3CCD5DB7DEFC6D00C5B7079F150EDEB5A152D7779164B037B
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/find-location.htm
Preview:	<!doctype html>.<html lang="en">.<script>..function includeHTML() {...var z, i, elmnt, file, xhttp;.../loop through a collection of all HTML elements:/...z = document.getElementsByTagName("");...for (i = 0; i < z.length; i++) {....elmnt = z[i];..../search for elements with a certain atrribute:/....file = elmnt.getAttribute("w3-include-html");....if (file) {...../make an HTTP request using the attribute value as the file name:/.....xhttp = new XMLHttpRequest();.....xhttp.onreadystatechange = function() {......if (this.readyState == 4) {.......if (this.status == 200) {........elmnt.innerHTML = this.responseText;.......}.......if (this.status == 404) {........elmnt.innerHTML = "Page not found.";.......}......./remove the attribute, and call this function once more:/.......elmnt.removeAttribute("w3-include-html");.......includeHTML();......}.....}.....xhttp.open("GET", file, true);.....xhttp.send();...../exit the function:*/.....return;....}...}..};..</script>....<head>..<meta ch

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1066
Entropy (8bit):	5.38079811024499
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGb3mS4xtr3u9BcbdqNR1ArkkjF:cFA2NuVsNHM3WtnRqNREvR
MD5:	DC788E0D1E8C7D9463A99882E622730C
SHA1:	A079D9612A9C119A9419B620D9DCFC141DD7E011
SHA-256:	A3F1DFAB56DE547E28606E3E2150167339BE6A35C8385486066924874D14DF47
SHA-512:	8973AF220D55ADC70CB208AB64D2D916BF66D3A69F448F7B6028A75319A98A40ACCF3D5D6F17F3964366974A5707B74B4FDD9F45EE41F376952C0BC4740611D4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M99,21.9L86.9,8.8c-0.7-0.8-1.7-1.2-2.8-1.2H37.1c-1.1,0-2.1,0.4-2.8,1.2L22.2,21.9c-0.7,0.7-1,1.6-1,2.6V45.....h7.6V26.6h24h14.8c0,0,0,0,0,0H73v12.3l6.8,3.6l7.3-3.6V26.6h5.3v51.8H65.9V86h30.3c2.1,0,3.8-1.7,3.8-3.8V24.5.....C100,23.5,99.6,22.6,99,21.9z M51.3,22.5H32.1l6.7-7.3H53L51.3,22.5z M55.4,22.5l1.7-7h6.3l1.7,7H55.4z M69.3,22.5l-1.8-7.3h14.9.....l6.7,7.3H69.3z"/>...</g>...<path class="st0" d="M58.4,49.6H2.9c-1.6,0-2.9,1.3-2.9,2.9v37.1c0,1.6,1.3,2.9,2.9,2.9h55.5c1.6,0,2.9-1.3,2.9-2.9V52.5....C61.3,50.9,60,49.6,58.4,49.6z M55.5,86.7H5.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ara.paa-reporting-advertising.amazon/aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025
Preview:	{}

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1006
Entropy (8bit):	5.232282735286602
Encrypted:	false
SSDEEP:	24:2dzATLf3UX7mXYTNkeEhgmyhTkTx3Qx7FEEZiP6Fx1f0Qz8:czAvf3UX7mXYBkRWmye93a7FEdPQf0Qo
MD5:	DF6FCAB6C4CAF86E8A1401A4FC36F885
SHA1:	860352CEA6899553CB4E7111097B35BD007C65E7
SHA-256:	986EBC6C0F0C4B5BDB2513352DBBF3F501A36ABD1DCD0C17A9C215EFD95191A7
SHA-512:	E263C5714A2BEFAC6DDDB15F1A2C4DDB3BEE22FDEF7DC05BA6794E6A0DB9EB8245E23E5742DE1E1F2EFCBCF07A4911138E36DFA06AECF0D826C955B836F07A0C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/gifts.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28.4 32.4" style="enable-background:new 0 0 28.4 32.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M26.7,9.9H1.6c-0.8,0-1.4,0.6-1.4,1.4v7.1c0,0.8,0.6,1.4,1.4,1.4h0.6v10.6c0,0.8,0.6,1.4,1.4,1.4h21.1..c0.8,0,1.4-0.6,1.4-1.4V19.8h0.6c0.8,0,1.4-0.6,1.4-1.4v-7.1C28.2,10.5,27.5,9.9,26.7,9.9z M12.2,29.9h-8v-10h8V29.9z M12.2,17.9..h-10v-6h10V17.9z M24.2,29.9h-8v-10h8V29.9z M26.2,17.9h-10v-6h10V17.9z"/>.<path class="st0" d="M9.2,8.5h10c2.5,0,5-0.5,5-4c0-2.2-1-4-4-4c-4,0-6,3-6,3s-2-3-6-3c-3,0-4,1.8-4,4C4.2,8,6.7,8.5,9.2,8.5z.. M16.2,4.5c1-1,2.4-2,3.5-2c1.4,0,1.5,1,1.5,2c0,1.8-0.6,2-2,2h-3V4.5z M8.7,2.5c1.2,0,2.5,1,3.5,2v2h-3c-1.4,0-2-0.2-2-2..C7.2,3.5,7.3,2.5,8.7,2.5z"/>.<

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6371
Entropy (8bit):	5.052295466732961
Encrypted:	false
SSDEEP:	192:rQYfSKRxWS/Z4O1OCbF6xtGi0PddO0XX2mdudi:rQu6xtG7
MD5:	ADCEFD7182F8BFEF107EFD3CF48E3D36
SHA1:	6B12F07DBE4E3F57258EAFFFA0155800C1FE35BA
SHA-256:	1B60408F18DE4D1C62DD5705C4EC9A01F08E4579D5D2CD4001E2B7DCBC08CB7C
SHA-512:	11723F502F6C23ED8B64C1D1B7170CD5EC1C1613E5C7B5228365FF2625A500634AE58B1E6261D1F75BB036123E08B3427173CE73FE157737FDB2CACED5BCF2ED
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/widgets/modal-box.css
Preview:	..#modal-box_overlay {...position: fixed;...z-index: 10000;...top: 0px;...left: 0px;...height: 100%;...width: 100%;...background-color: #000;...filter: alpha(opacity=40);...-moz-opacity: 0.40;...opacity: 0.40; ...background:#000;}.....#modal-box_overlay-progress{...position: fixed;...z-index: 10001;...top: 0px;...left: 0px;...height: 100%;...width: 100%;...filter: alpha(opacity=40);...-moz-opacity: 0.40;...opacity: 0.40; ...background:url(/ContentTemplates/common/images/global/modal/crt_rem_trans_dot_ani_whiteback.gif) no-repeat scroll center center;}......modal-box {...width: 400px;...position: absolute;...z-index: 10002; }.......modal-box #dialog-buttons{....height:26px;}.........modal-box #dialog-buttons .button-link{.....margin-right:12px}.........modal-box #dialog-buttons .last{.....margin-right:0;}.......modal-box p{....margin-bottom:10px;}.. ....modal-box .modal-box-header { }.. .....modal-box .modal-box-header .modal-box-header-left { background: url(/ContentTemplates/common/i

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/activity;xsp=4720112;ord=8141934891179.658?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/package-intercept.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 700x280, components 3
Category:	dropped
Size (bytes):	123985
Entropy (8bit):	7.973603263546903
Encrypted:	false
SSDEEP:	3072:4At9E/zxhecTLB6oQL280D1hUCr9PBcuC/sda0c:lE/zxhecTl6oQL2dbUQap/ca0c
MD5:	A8F7D8E3325AAC0EDC8C51C151D980FC
SHA1:	B90447CF89AC91390C9DC52B4F3719161AE606F2
SHA-256:	C6846109092A0F90903D5E683274116680005A67E2CA274967BBF72CBFA7C51A
SHA-512:	5C036F704B356FA47CB2A6EC4106EB117C89947A9519E78CE65B8C4FBA12E1B3AE1964990C95A5C518411DD968F389F51BF8F858B09378C4D47C9904873F9EE4
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	downloaded
Size (bytes):	54835
Entropy (8bit):	7.979298884295904
Encrypted:	false
SSDEEP:	1536:zBE9ZwPmBL7qdIAUq7H+Te81O73MKpfHxRZmCoOSyhL1Ht2:dcKPmd7oeTe81O7ttR2CZRhpN2
MD5:	53557107BF8D8DCB515A35D61A8472C1
SHA1:	B511E52EEAC06A72633091AFC9714D6A78887D35
SHA-256:	269F42CC561BFB2D1AF8F072A9221CA0EE4D1332202B6AB1F06BA11F4A1CAAD3
SHA-512:	6FD34B693F027884B7FDF66D80C8CA517C40811E26D19A73EC8ED4B74500DAF39C73C99E5F5243985C01E3D32CFA68A9F5DC82D2550676D475F52B4FC3BD9DCC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/featured-small-biz-10.jpg
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D3A135B0A4E1CA160AA3DF717034797A" xmpMM:DocumentID="xmp.did:C5F0DB372C8F11EBA68E8D892F2B3CE2" xmpMM:InstanceID="xmp.iid:C5F0DB362C8F11EBA68E8D892F2B3CE2" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:fbb75605-e818-4ef3-bde5-771fdfcc85d1" stRef:documentID="adobe:docid:photoshop:102f031b-d679-6042-8ae4-6846d2a906c3"/> <dc:creator> <rdf:Seq> <rdf:li>belchonock</rdf:li> </rdf:Seq> </dc:cre

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.477177401325001
Encrypted:	false
SSDEEP:	3:YifDM/tVxLvKGE2KC/W3NRz:YiQ/xLST29W3Nl
MD5:	433F54BA01640C50B1DA2F936D5F5BD1
SHA1:	78F92959C3B72DD6B6665F85C9B9F27326B6DAEE
SHA-256:	D2220EB5207A488EFAD68DD7AB4240BA5A5FE09C65876DCDF755C60C2053B136
SHA-512:	02CABF353FC6F1459308A9D21D57652D46630ED6FB4C07BC83BF92321EDF4C36A11EE2CE92E86E4F5F0D17A303A06F2C30EB2F23E4287C10D46AC90F4F8BC9C8
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/UspsToolsRestServices/rest/POLocator/getglossarylinks
Preview:	{"GLOSSARY":"https://usps.com/locator/glossary.htm"}

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3557
Entropy (8bit):	4.759489560192935
Encrypted:	false
SSDEEP:	48:cFA+fEqupt2QAUyVNb7508j5/tMHJkHLSfnNicnrmiHLsC6pr+TpxuFq:L+ffuOQAUyVNbeyM8SflT4mpYFq
MD5:	0418F7120DC6CDD1D7AA0F8219EC9AF2
SHA1:	3BB6C6EDEE3CC1C072117795611E2F67383CDC44
SHA-256:	4B5AAF0DC8F59E71849219FAE0A225AEB3914BEBCC363753F22B5713627B0094
SHA-512:	6855388D57536E6FD93BB8A3F966099B4B0C0B02AB57B7EFA0F0993109EE0A49FC0CD9ECED1C97D8BC0642EE2E4A5793A7A8D796B566B3A92966C09A239A2E9C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 390 47" style="enable-background:new 0 0 390 47;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#333366;}....st2{fill-rule:evenodd;clip-rule:evenodd;fill:#333366;}..</style>..<polygon class="st0" points="66.3,47.2 76.3,0 10,0 0,47.2 "/>..<path class="st1" d="M49.3,9.9c7.7,1.8,7.9,3.7,7.9,3.7c5,0,6.3,0,7.2,0.9c2.9,2.7-2,9.3-2,9.3C61.8,24.2,6.6,45.8,6.6,45.8h58.1...L74,1.9H11.6C11.6,1.9,48.4,9.7,49.3,9.9"/>..<path class="st1" d="M55,16.3c-0.8,0.4-3.2,0.8-4,0.9c-0.8,0.1-1.2,0.1-1.2,0.3c0,0.3,1.1,0.2,1.5,0.2c1.8,0,8.9-0.5,10.6-0.2...c1.3,0.2-0.2,2.8-0.6,4.4c-0.1,0.6,0.3,0.3,0.5,0c0.5-0.8,1.9-3.4,2-4.4c0.2-2-1.2-2.3-3.6-2.3h-3.7c-0.3,0-0.4,0.1-0.5,0.3...C55.7,15.8,55.2,16.1,55,16.3"/

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2264), with no line terminators
Category:	downloaded
Size (bytes):	2264
Entropy (8bit):	5.261938173492137
Encrypted:	false
SSDEEP:	48:ctZ2wyq03m2B9AQtNiWpAihZbRmQSoYTWrKqBGru/U2+lueBwt+:sEmMBtYAAihVRmQSoJuvu/U2H2
MD5:	F7F70265F5CF47386622E433317412CB
SHA1:	E1B28284E51C848685C7EA6D19FF551284C58E8A
SHA-256:	766A3DFB7DAB82AF4FAE555132F7FDBACB7D167F17015FBB23C9591DAAAF698B
SHA-512:	683F77683FF3E270B034AF71D23B8174CE918C30DFC69530BB8B5DB02D71814B1611F21D4A3DEA439DC6540FBF4A1EC9483E67969BB4735B21AA82C0806AD351
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/search-fe.js
Preview:	USPSRequireNS.define(["require-jquery"],function(e){USPSGlobals.Require.requireGlobals(["resize-manager"],function(a){var t={},o=function(){n(),r()},n=function(){t.body=e("body"),t.search=e(".search"),t.searchToggle=e(".global-header--search-button"),t.searchWrap=e(".global-header--search-wrapper"),t.searchTrack=e(".search--track")},r=function(){a.addCallback(d),t.search.on("submit",c),t.searchToggle.on("touchstart click",s),t.searchTrack.on("touchstart click",function(e){e.stopPropagation()}),Modernizr.touch&&a.isTablet()&&t.searchTrack.attr("aria-hidden","true")},c=function(){var a=e(this),t=e(".search--track-input",a).val();t=t.replace(/zip/gi, "ZIP");return i(t)?(t.replace(/ /g,""),setTimeout(function(){window.top.location="https://tools.usps.com/go/TrackConfirmAction?qtc_tLabels1="+t},100)):""!==t?setTimeout(function(){endecaURL="www.usps.com",-1==document.location.hostname.indexOf("local")&&-1==document.location.hostname.indexOf("dusps")&&-1==document.location.hostname.indexOf("d

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/images/package-intercept.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 670x450, components 3
Category:	dropped
Size (bytes):	54835
Entropy (8bit):	7.979298884295904
Encrypted:	false
SSDEEP:	1536:zBE9ZwPmBL7qdIAUq7H+Te81O73MKpfHxRZmCoOSyhL1Ht2:dcKPmd7oeTe81O7ttR2CZRhpN2
MD5:	53557107BF8D8DCB515A35D61A8472C1
SHA1:	B511E52EEAC06A72633091AFC9714D6A78887D35
SHA-256:	269F42CC561BFB2D1AF8F072A9221CA0EE4D1332202B6AB1F06BA11F4A1CAAD3
SHA-512:	6FD34B693F027884B7FDF66D80C8CA517C40811E26D19A73EC8ED4B74500DAF39C73C99E5F5243985C01E3D32CFA68A9F5DC82D2550676D475F52B4FC3BD9DCC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky..............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="D3A135B0A4E1CA160AA3DF717034797A" xmpMM:DocumentID="xmp.did:C5F0DB372C8F11EBA68E8D892F2B3CE2" xmpMM:InstanceID="xmp.iid:C5F0DB362C8F11EBA68E8D892F2B3CE2" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:fbb75605-e818-4ef3-bde5-771fdfcc85d1" stRef:documentID="adobe:docid:photoshop:102f031b-d679-6042-8ae4-6846d2a906c3"/> <dc:creator> <rdf:Seq> <rdf:li>belchonock</rdf:li> </rdf:Seq> </dc:cre

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1078
Entropy (8bit):	4.971945345627749
Encrypted:	false
SSDEEP:	24:t417zjf6849XQiIxgkOyX233O8WA80ln9AhzOpuNwv:C76846gUiOSznuw
MD5:	375ED61778C1A49C8D1EA21F31748719
SHA1:	476785AA7126FBD9DCAA3BCE84B57C3C120BD5A4
SHA-256:	23EDD9AC5DBA678E1E5F97F2397A69D295E257C4A56E462C686557246081FFA2
SHA-512:	95BF09502D010279C6F54AF65977CAEFBE0F7250FE03E0AD5592BE2DE86B31AA01281A01F064119261C07E2047C0D3DD006BE6F946E9F2F521DA881072A200DC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/featured_clicknship.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0,0,62.8,0H22.35A11.33,11.33,0,0,0,11,11.32v9.85H7.32A7.34,7.34,0,0,0,0,28.48V51A7.34,7.34,0,0,0,7.32,58.3h3.57V74.14A11.48,11.48,0,0,0,22.35,85.6H62.8A11.47,11.47,0,0,0,74.26,74.14V58.3h3.58A7.33,7.33,0,0,0,85.16,51V28.48A7.34,7.34,0,0,0,77.84,21.17ZM19,11.32A3.32,3.32,0,0,1,22.35,8H62.8a3.32,3.32,0,0,1,3.32,3.32v9.85H19ZM66,58.3V74.14a3.17,3.17,0,0,1-3.17,3.17H22.35a3.17,3.17,0,0,1-3.17-3.17V46.21H66ZM64.19,35.9a3.49,3.49,0,1,1,3.49-3.49A3.49,3.49,0,0,1,64.19,35.9Zm11.36,0A3.49,3.49,0,1,1,79,32.42,3.49,3.49,0,0,1,75.55,35.9Z"/><rect class="cls-1" x="29.14" y="53.84" width="2.8" height="18.89"/><rect class="cls-1" x="35.87" y="53.84" width="2.52" height="18.89"/><rect class="cls-1" x="42.42" y="53.84" width="5.86" height="18.89"/><rect

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	631
Entropy (8bit):	6.790694000685623
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfu:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenW
MD5:	D68E763C825DC0E388929AE1B375CE18
SHA1:	7951A43BBFB08FD742224ADA280913D1897B89AB
SHA-256:	25CF0F0CE42F8ACD9EA6FACC223F54105C7FD0CCE63FB7BB5D83E6600100ACBD
SHA-512:	1E146E2631A4F3BD091905CCC10ED1054700349648CD52AAD24EAEEEDFF0FAC4B44B6212284A6D0855942FF16308C66402ECB895E68EF1C66DCD496973043CDB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 48 x 525
Category:	downloaded
Size (bytes):	1604
Entropy (8bit):	7.798724253896392
Encrypted:	false
SSDEEP:	24:l10GcVC/v7yOx3okfT0DweVk1R+THymQEiE31T2W3+G09ymTJHwuRab:l1uEH7VNokmNVeR+THyIn4ONMFq1b
MD5:	96F1E590DDA6A1C9015CF229D3B5C7A5
SHA1:	8685CACD2315D200BCFCAD0684EABBE22F73FA10
SHA-256:	E68AB8B5FB42C11EE98CA8E32342FBD52733EA0C27766637386E45F4249B2DFC
SHA-512:	25B397C9C38EC15F17CCCD6815E5E4C487CF1FD6B8F7E8620AE1D54B21A542F1A8D2D33435CBD60717E4AF3F5B627EC7380D80AB954021FEE1148730DD329BA5
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif
Preview:	GIF89a0......................................................................................................!.......,....0....... .di.h:.l.p,.ma.x..\|....pH,..A.r.l:....@.Z..v[.x..xL....z.n...\|N.....~.........uf...^........................j*&j..p..i$4$i....+,....-#h.o..."..6B6....n....@...@..,#.m.....J...J......l.....".k.........e[.O.>~...tf...G..ABX`\.w...k.q.#...\.@.CG#..N..2e..%..+..K4.h...M.9.-h.&......(..@.I-9`.......8P.....^.<...Fe.VJ.v......ln.v...+ao^.v.....p[.j..U,.q(. ...r'.0o..3Y..A..=.ta.Q'V..uc.aG.=.ve.qg..wg.......g....~\y....m..9t.k.W.......C..=.t...S._..u...c.=.v...s...w....g.s..T.[.J.....".s.]..].n.Nw.U...M..P......r(...h..........(....h..........)`...8...2......t!..SbI.....".(.....q...'....+.../....3.Y..7..;...?....C.Z..GB)....5..I.Y".MR...Q....KZ.J.2Z%.Wr...[zz&.i....m....q..(............Y..............Z....&.k..v.m..^.j..Zn..~ZS....m....n...m............\...../...l...2....B...R,...bl...r..............

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.702910079649726
Encrypted:	false
SSDEEP:	3:YjFtl88LGByfKwzSvpGqD4:YBtW8kyiwFE4
MD5:	9D48ED4D187CDC6DF2394EFBA46321AF
SHA1:	A3C7059BB0DC0188A2C77021055F2167D4F9D26E
SHA-256:	9C87ECB0FF1DF2469F7E3FC9B49CE6C0BD1CF76FACB8A48674B5A69B80833C1F
SHA-512:	7C34B7A6FD700EC7DF9B9C6A75F3348650EF4BAA31B6A33E5BC3E95DAAAB1816A060532A49221F80679E7DCDE1124E3CF1A50FD6A50AF02F4B000D6BA1709F5F
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/UspsToolsRestServices/rest/POLocator/getfaqlinks
Preview:	{"FAQ":"https://faq.usps.com/s/article/Find-USPS-Locations"}

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 227 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22133
Entropy (8bit):	7.97544701409239
Encrypted:	false
SSDEEP:	384:9AzTSOdQKmM4eaey/ZYBLL4d6DAVBtfRVXPru+Rp:9hKD4H2u6cVBtfnKsp
MD5:	22AB573E325C944450873345437B0887
SHA1:	0446E4D20C824D38EF4D427CF7E025C8F034F11A
SHA-256:	D8573E3E13B1FB40173EA39D5E7FC1B935AE1239B9CA37AC3D7FEDF3D966F4ED
SHA-512:	EDBBA383F9FFB0E645B0371441E1B6FC13B44E525E7519B61CD9CD5F43AE40D5F280CDA65758C25742F3BC3A0798D072B57B7BDA0C8B7E8B4313BF2E0BC1205A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............._.......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:2BB666330E7C11E89526D7483380CC56" xmpMM:InstanceID="xmp.iid:2BB666320E7C11E89526D7483380CC56" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b89285d2-e1e1-4021-a10f-f46ca9dca1c0" stRef:documentID="adobe:docid:photoshop:ebbf514e-a5ec-2344-99f6-7777a6920c57"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..m..R.IDATx..}.\|T.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.600997961818278
Encrypted:	false
SSDEEP:	384:yj8V0g8qpgfuE6DQ47Cp4OhTgq/ZUYg4IpQfeEKDg4rCZ4+hDg6/JU+g2opafkEe:Rg9m7uys0qIQt2Leick64q3UZ4U6uwMJ
MD5:	381D44A542CDF4B4C5E196C207BC5312
SHA1:	0F397491F64D31A7DB219BE687E3BC0397D9F46A
SHA-256:	B911FF5A4702996D16D17A2A67965A0DAE985DEA7439894DF407562BC27D59BB
SHA-512:	0CF878E6F302CD05A29E8626FF812B110A24FE33DA18E576CBF0E8861F87BD5835A68C0875666CE84FB9DBFADB9EDCE490D4FC795158BE3A8CE39D996B7E340F
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487482897&cv=11&fst=1713487482897&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sTQtn_w!2sZklLfA!3sAAptDV754TMz"],"userBiddingSignals":[["806463764","68

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/footer/script/jquery-3.5.1.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57727
Entropy (8bit):	5.325279855145622
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYmog8hf8Ep:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyTo
MD5:	A21EFAD6603850BBDFEC77CE3CB61661
SHA1:	60E7A23532E1BF109C14B63CC3A3EFDDC4E7B3AF
SHA-256:	31A914C92C74F2B8151D921AAF7F5B00C9A7C1959D53F4762DA34D85FE9C184E
SHA-512:	4EC885A932107362D663935335FE65FE4C5F815DEDDB958522ADB69B7248AFF5B6AB5D92F701BBD6642B34E6A0DA2D7DAFC2403211E319F664BE572F5734A7DF
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/533374513433337?v=2.9.154&r=stable&domain=tools.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	5.279084412534843
Encrypted:	false
SSDEEP:	24:2dzAfoLfsSWTNl88JfL6tE8BIno5CeOgo1U63d7VL6tvgf/yZ:czAfofsSWBlHL6tEqhUBS6N7VL6tYfq
MD5:	0D366834F312798111EBE3990766F8F4
SHA1:	E3CE708BF0B0B1924156674ACA900898D407331C
SHA-256:	DA2E0F69EB8EA4AA9FFE45C2AD6D330EB7922E0E14F8AACA4E577BE0FB8B4BEA
SHA-512:	95D855A18FD122BA724ED38E03103731B684647B1128C548CE440BAE0D6596B65457CC77CD000079299D300E274416BCE08613FAC00FAB308962EA4EEAAD86D1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/business.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="._xBA__x2264__x201E__x5F_1".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 74.3 62.6".. style="enable-background:new 0 0 74.3 62.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<path class="st0" d="M67.9,34.8v19.4c0,1.1-0.9,2-2,2H8.2c-1.1,0-2-0.9-2-2V34.8c-3.4,0-5.6-0.8-6.2-2.4v23.8....c0,3.4,2.8,6.2,6.2,6.2h61.7c3.4,0,6.2-2.8,6.2-6.2V32.4C73.1,34.2,70.7,34.8,67.9,34.8z"/>..</g>..<path class="st0" d="M41,27.5h-7.9c-1.4,0-2.4,1.3-2.4,3.1V32v2v3.9c0,1.8,1,3.1,2.4,3.1h7.8c1.2,0,2.4-1.1,2.4-3.1V34v-2v-1.4...C43.4,28.6,42.2,27.5,41,27.5z M39.5,32v5.1h-5V34l0,0v-2.7h5V32L39.5,32z"/>..<g>...<path class="st0" d="M47-0.1H27.1c-3.1,0-5.7,2.6-5.7,5.7v0.7v4.4h4.2V6.3V5.6c0-0.8,0.7-1.5,1.5-1.5h20c0.8,0,1.5,0.7,1.5,1.5....v0.7v4.4h4.2V6.3V5.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10379
Entropy (8bit):	5.360773136060479
Encrypted:	false
SSDEEP:	192:uzgyBVGVhf0AhxmySG8AxlDRw+8ilib61oXMeZ1ja3wlpZgowXw89/vtCNw0wFw5:eroasnR/wlpZdcF0pas
MD5:	08A569482E1DBEA1551C6A50C1F43547
SHA1:	C3D67A3EDEEAD66FD84F097DAA372B3E07D5C38E
SHA-256:	34881CE55F5559EA4A839C6B54D8901A01747AE970450BED5CFF67E3881304F3
SHA-512:	68A4DF497E579B541D33CBE28F4A6694D8CF759BD743B54E51212D1397721FAAADD8C403B43D7DFCA1040D07C2CCBE18A86C9629AFCA4E71597DC7512FAC3F84
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/script/ge-login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var pfslHost = "pfsl.usps.com"..var lowEnv = false;....// Get current URL..var currentPage = cleanURL(document.URL);..var currentPageIn=currentPage;..var hostname = cleanURL(document.location.hostname);..if (!appID) {...var appID = "Phoenix";..} else if (appID=="ATG") {...currentPage="https://"+storeHost+"/store";...currentPageIn="https://"+storeHost+document.location.pathname+document.location.search;...currentPageIn=prepURL(currentPageIn);..}..if (document.location.pathname.indexOf("holdmail")!=-1){...currentPageIn="https://"+storeHost+"/holdmail/";..}..if (document.location.pathname.indexOf("redelivery")!=-1) {...currentPageIn="https://"+toolsHost+"/redelivery.htm";..}..if (document.location.pathname.indexOf("pse")!=-1) {...currentPageIn="https://"+storeHost+"/store/pse/";..}..if (do

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	downloaded
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/chinese_characters.gif
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27992)
Category:	downloaded
Size (bytes):	45523
Entropy (8bit):	5.502483696040155
Encrypted:	false
SSDEEP:	768:lIemaocDN2Blc2ni5KGalPu+JB/Ofns3/Fh3dm6JZIv:l75SlGglPu6cPs3/Fh3dm6JZo
MD5:	264BAE03F1D598BCA141E0840046B194
SHA1:	721F3A0714D44E5CB641FC99AD12B955130A88E3
SHA-256:	F563AEC552103867ADCB967E41B1699C9D15E1AA257C7A210F70F5CD71E6A0EF
SHA-512:	24337F15E27020FBA4E0B8E23823511898B50F419047AE3ED77EF7F96A954AFA5E6BF2F2B12E1CFC0ED9291129354E287DF33F022CD39A9FA4F5AAE80F1C0BB6
Malicious:	false
Reputation:	low
URL:	https://sc-static.net/scevent.min.js
Preview:	/** Snapchat Pixel SDK */.!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,r,e){return new(r\|\|(r=Promise))((function(i,o){function a(t){try{u(e.next(t))}catch(t){o(t)}}function c(t){try{u(e.throw(t))}catch(t){o(t)}}function u(t){var n;t.done?i(t.value):(n=t.value,n instanceof r?n:new r((function(t){t(n)}))).then(a,c)}u((e=e.apply(t,n\|\|[])).next())}))}function r(t,n){var r,e,i,o,a={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(u){return function(c){if(r)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(a=0)),a;)try{if(r=1,e&&(i=2&c[0]?e.return:c[0]?e.throw\|\|((i=e.return)&&i.call(e),0):e.nex

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	downloaded
Size (bytes):	8111
Entropy (8bit):	5.065376036545514
Encrypted:	false
SSDEEP:	192:d/qHTmTrqMdmF9Zcu+v9Tzxlbz06e1gWGXrDexk04SwTU2Ay3:d/qIJdmF9Zcu+vVzxlX0zGXHexk04S+L
MD5:	499F729D37C977973D7264CC74D103B7
SHA1:	0939A0C570B288D30895D51F96213F208AD6C371
SHA-256:	B12BAD0160177100E8E11D27346741BAC412F17CF3F3942265AADD4950C8A412
SHA-512:	E4A62704088F86D006321DF3DD47D71DB67C8DA758FC14706547D48C33120905D70A401D8C7D7ABA29C7E0AA7534FA03ACAF9FE583345C3EC58A7CCFAEE022CD
Malicious:	false
Reputation:	low
URL:	https://js.arcgis.com/4.11/dojo/nls/dojo_en-us.js
Preview:	//>>built.define({"esri/nls/common":{about:"About",add:"Add",all:"All",apply:"Apply",auth:{logOut:"Log Out",signIn:"Sign In"},back:"Back",cancel:"Cancel",change:"Change",clear:"Clear",close:"Close",collapse:"Collapse",configure:"Configure",control:{pause:"Pause",play:"Play",resume:"Resume",stop:"Stop"},copy:"Copy",create:"Create",cut:"Cut","delete":"Delete",details:"Details",done:"Done",edit:"Edit",error:"Error",esri:"Esri",exit:"Exit",expand:"Expand",fieldsSummary:"List of attributes and values",find:"Find",.form:{no:"No",ok:"OK",password:"Password",submit:"Submit",username:"Username",yes:"Yes"},help:"Help",home:"Home",info:"Info",information:"Information",layer:"Layer",loading:"Loading",maximize:"Maximize",menu:"Menu",more:"More",none:"None",open:"Open",pagination:{first:"First",last:"Last",next:"Next",page:"Page",pageText:"{index} of {total}",previous:"Previous"},paste:"Paste",percent:"{percent}%",preview:"Preview",print:"Print",publish:"Publish",redo:"Redo",refresh:"Refresh",remove

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.949547470614601
Encrypted:	false
SSDEEP:	3:DuENBnPtTizEasgddO8k0kL62:DuE3PtTiApgddOW2
MD5:	BE18C20AAED791F1692F2AF3B53CAF7E
SHA1:	4D34995ED56B1C1EBA8F72292984B9069508310C
SHA-256:	63FDAF6B8CFE2FBB4E91D2A1FB26418FD7DED01B7A615622EA94B112C11CE5B7
SHA-512:	6955EEA3D92C8C1BD8AE92A727CEED3DF636122AF65FE51C2AC8B9E572B06C8E1149FDB4271A1D9F4DC86934780D2E799F139C976076938FC7C6E6E9C736AC1B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAk61G-p-oTmlhIFDRWE2-ASBQ1izxPQEgUNS4hZpBIFDZFhlU4SBQ2RYZVO?alt=proto
Preview:	CjkKBw0VhNvgGgAKBw1izxPQGgAKCw1LiFmkGgQIIxgBCgsNkWGVThoECAkYAQoLDZFhlU4aBAgJGAE=

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/utility-header/mailman.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	473
Entropy (8bit):	4.828304232881718
Encrypted:	false
SSDEEP:	12:YCnyDfslxAkIPMjHjX08mH1H9TJkngZzDm:Y9DfwxtIPMbjk82PJbzi
MD5:	98AB78547F4B373ADA65D28627AC4E25
SHA1:	CED157F986FD68169C9C3415396C4D1EE3EE823C
SHA-256:	4E5564C4787CB9E42CC2C6D2178796919184E5972233508648C3A089B72B2A26
SHA-512:	57D92FB013C958DE63848DAD06E0C52032416BC360F54A96EF3D1B121896CBEB67B63F52D2788F1B7CE88131222A8CF32FC83ACEB1210AECDB8F2FABF945C997
Malicious:	false
Reputation:	low
Preview:	{"PFSR":"https://www.usps.com/manage/forward.htm","SAP":"https://tools.usps.com/schedule-pickup-steps.htm","REDELIVERY":"https://redelivery.usps.com/redelivery/","CNS":"https://cns.usps.com","MEDIA":"https://about.usps.com/newsroom/national-releases/welcome.htm#national-media-contacts","PostalExplorer":"https://pe.usps.gov/","ECOM":"https://www.usps.com/buy-stamps.htm","POBOL":"https://www.usps.com/manage/po-boxes.htm","PostalInspection":"https://www.uspis.gov/report"}

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2856
Entropy (8bit):	4.725252942380169
Encrypted:	false
SSDEEP:	48:c6gl8I12aunClTabiwqVOkxWsDE47Yffsm2r0B0f9Ye7Ic:Ql12auzqVFzE4Asm1B0fD
MD5:	E5D424B115D186F75CD843D09D213EA4
SHA1:	69CDFD8A24E4E64835A3E3D8FEF674EAB51041A3
SHA-256:	BA12156B6049E394DEB91B6B29677D2DDE4B388DD5E5DDAD736D7F535D107404
SHA-512:	D60FEF40F434021F5097B1D71D37013C7D9951BEA397C62C9E7DA7477B4AE6631C1538D01C0958E675E66D02A29802A8D1649119A8DB4C548686FA0F35B147B9
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/polocator/compass.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="20px" height="21px" viewBox="0 0 20 21" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/compass</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Desktop-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Results-Page---hover-result" transform="translate(-612.000000, -392.000000)" fill="#333366">. <g id="Form-fields" transform="translate(113.000000, 360.000000)">. <g id="Current-location" transform="translate(430.000000, 31.000000)">. <g id="Icons/compass" transform="translate(69.000000, 1.000000)">. <g>. <path d="M10,3.77312727 C6.356875,3.77312727 3.393125,6.79012727 3.393125,10.5001273 C3.393125,14.2082182 6.356875,17.2271273 10,17.227127

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487482608
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 51685, version 1.0
Category:	downloaded
Size (bytes):	51685
Entropy (8bit):	7.9896700805739025
Encrypted:	false
SSDEEP:	1536:BX9dRjLEqvmCEPq9offjUe8ZGeHIXOptaFTbQGFvq3s:BdjCCEPq9iwtHaFTVKs
MD5:	A93E96BE336C174933E68EF61D56E0D3
SHA1:	48F7A75A367904FF4A9A79689A508E29EDDA462C
SHA-256:	CC469406025B7CE0913CDEFC664007CD0FC46BC66A740DC7AFF67CC041BCCDE0
SHA-512:	3BDD3533A6EB40E0BBE2A3E68E597B6D40969EC18257FDCB2A2CF06668961DEAC22DF830D40DE1DC01B5B1CED068D0BD936F7805F1AB47464291F36DCB121876
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff
Preview:	wOFF...............................,........OS/2...X...V...`..+.cmap...........t.8..cvt .......H...H.k.cfpgm.......8........gasp...8............glyf...H......w..Z.hhead...,...6...6.#..hhea...d...!...$.E..hmtx............2.4.kern...t...>...X.D..loca.............U8.maxp....... ... ...Lname.......-.....j.post........... ...2prep...........nU..x.c`f.b..........................X.@....a}.......x...)..LL..s3.`..p..g..1.2.bP.B..D..c..x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....Z.l.A..d.....f...<.r.<....}...P.Z.f.......A.......~................x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`*..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x.

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1246962
Entropy (8bit):	5.434378722637881
Encrypted:	false
SSDEEP:	24576:Aca3SslB7d4FDqTc/kj/FPQ/Te4/F7iDzuMuPqoFA2jdgEHFJCD0oF6SZNThpoow:nasFDqTc/kj/FPQ/Te4/F7iDzuMuPqob
MD5:	9AC096251DF1304B7610AEEB71834EA4
SHA1:	24A5307D85D0F05BD75C0700F37A923ABDBBCF27
SHA-256:	7CBAB0B8E60CBE31B5ED978E5F2F5DC0885393B188794F71FA81B793E2E78F1A
SHA-512:	B2940FFBCF83A1702667EBA3CD93B1E4A0FF6D74C3435A94540ED51F4306EA2F27F788037C4DE0969DB1DCE42E2740F595A8DA6947A31318CD3F7BDFD2A02111
Malicious:	false
Reputation:	low
URL:	https://js.arcgis.com/4.11/dojo/dojo.js
Preview:	// All material copyright ESRI, All Rights Reserved, unless otherwise specified...// See https://js.arcgis.com/4.11/esri/copyright.txt for details...//>>built.(function(b,e){var m,d=function(){return"undefined"!==typeof v&&"function"!==typeof v?v:"undefined"!==typeof window?window:"undefined"!==typeof self?self:this}(),k=function(){},l=function(a){for(var c in a)return 0;return 1},h={}.toString,a=function(a){return"[object Function]"==h.call(a)},c=function(a){return"[object String]"==h.call(a)},f=function(a){return"[object Array]"==h.call(a)},n=function(a,c){if(a)for(var f=0;f<a.length;)c(a[f++])},g=function(a,c){for(var f in c)a[f]=c[f];return a},q=function(a,.c){return g(Error(a),{src:"dojoLoader",info:c})},p=1,t=function(){return"_"+p++},r=function(a,c,f){return Ea(a,c,f,0,r)},v=d,u=v.document,z=u&&u.createElement("DiV"),y=r.has=function(c){return a(x[c])?x[c]=x[c](v,u,z):x[c]},x=y.cache=e.hasCache;a(b)&&(b=b(d));y.add=function(a,c,f,g){(void 0===x[a]\|\|g)&&(x[a]=c);return f&&y(a)};y

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1522), with CRLF line terminators
Category:	downloaded
Size (bytes):	92635
Entropy (8bit):	5.192136461456298
Encrypted:	false
SSDEEP:	1536:/SHza/dDyOvLF1+D8ukpeUgpj7iisCE5UFk7yeN4liXiCHjIa2t9F7g/t:ZTCEY9eLB
MD5:	AF81FDC622DED5F17D1EA12D15079315
SHA1:	B2024297D7E725036D1E0F1CE657623B28FB612B
SHA-256:	9136150E8F5986B539E11E6112A5D1837C6BFDBE1F595FC8998A4FE03B3330DE
SHA-512:	91631B3B263CA5574980E4915E59665A6CD0B6488D4106A83062C08488E1F473D995F5E53D58964DB5F60CF3A615B51873A83119589605B58F5C1EBCEBCFF2FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/
Preview:	<!DOCTYPE html>..<html lang="en">...<head>... <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script>....<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">....<meta http-equiv="X-UA-Compatible" content="IE=edge">....<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">....<title>Welcome \| USPS</title>....<meta name="twitter:card" content="summary" /> ....<meta name="twitter:site" content="@USPS" /> ....<meta name="twitter:title" content="Welcome \| USPS" /> ....<meta name="twitter:description" content="Welcome to USPS.com. Track packages, pay and print postage with Click-N-Ship, schedule free package pickups, look up ZIP Codes, calculate postage prices, and find everything you need for sending mail and shipping packages." /> ....<meta name="twitter:image" content="https://www.usps.com/assets/images/welcome/usps-homepage.jpg" /> ....<meta property="og:url" content="https://www.usps.c

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543), with CRLF line terminators
Category:	downloaded
Size (bytes):	12670
Entropy (8bit):	5.334231186269264
Encrypted:	false
SSDEEP:	384:eP1ASw4p5ACbUWCbUAsXcXsmDxMZMeMRM0pG1/y610y:eP1ASwMNJN10y
MD5:	75C250864C79C06616870C68D668DDD8
SHA1:	C976670A8D0AAA4C014AC467E6A7D9C2F039B7B4
SHA-256:	424C02A40371BCC1373E7C3D8A189F850A4667246F2C9EDD68970A57C5645BD2
SHA-512:	9D903351778ACCDF7C36F9277D0C32221D0DEE1B6EFAE2774F58763464D1FEEDEB83F99A3AA849771728F7FA7DE068ABF8081C3CE904EF44B4D53F5091245C57
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/scripts/login.js
Preview:	// Define Variables..var isUserLoggedIn = false;..var first;..var profileLang;....var regHost = "reg.usps.com";..var toolsHost = "tools.usps.com";..var storeHost = "store.usps.com";..var catStore = "";..var lowEnv = false;....if ((document.location.hostname.indexOf("intpx") != -1) \|\| (document.location.hostname.indexOf("qusps") != -1) \|\| (document.location.hostname.indexOf("stage") != -1)) {...// CAT...regHost = "catpx-custreg.usps.com";...toolsHost = "cat-tools.usps.com";...storeHost = "ecom-cat.usps.com";...catStore = "-cat";...lowEnv = true;..} else if (document.location.hostname.indexOf("tusps") != -1) {...// SIT...regHost = "sitpx-custreg.usps.com";...toolsHost = "sit-tools.usps.com";...storeHost = "ecom-sit-int.usps.com";...catStore = "-sit";...lowEnv = true;..} else if (document.location.hostname.indexOf("dusps") != -1) {...// DEV...regHost = "devpx-custreg.usps.com";...toolsHost = "dev-tools.usps.com";...storeHost = "ecom-dev.usps.com";...catStore = "-dev";...lowEnv = true;..}.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487482777&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 990x225, components 3
Category:	dropped
Size (bytes):	70249
Entropy (8bit):	7.923588917830898
Encrypted:	false
SSDEEP:	1536:vJVaZq+ejbq4Bws+XfyKhQSigYG41dJ2KOpzDz3LS/Tri:W/s+4Bws+XfJhQqsCKO5Dz3LAi
MD5:	A9A3543812D53D07453A6C5553C0DAB7
SHA1:	AAB5D95A4F59405EFAE13F8C1A8FDA7BB71CFA2B
SHA-256:	7B74657E8F5A05B614D00DC1720B966E6EDF4CD1655A560C6D8109498ED670F9
SHA-512:	601F9880949F40413F81791C79D095B8BC612F40D5F73C6C58EE2185ADAAF3D7765186EFA14CA991AD752C57E7924C8E864B162146F502458D9E53EBB06231F3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i..............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................>............?.....h.=.._..E...K...."....f....$.'.k..~......<P........>.....>../...P.?.......ZIL.Z....R."./........./...S?fk.....+]E.3.....^E..R:r..k.......wR...&oZ%..e..7.....#.o...T..@.gC...1^..o.^....w..N-^..D1.z..@e>... .Z..W\..ma..z..5.4.}...V

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (337), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68321
Entropy (8bit):	5.109622609384898
Encrypted:	false
SSDEEP:	1536:Xz/spea/dD/OvLF1+DW9kpeUacKnvuzYSfz10qPV7XiCyjIr2t9F7HsX:T+/dGS
MD5:	03355B647C254206C4E310DA0DB19F7A
SHA1:	EE35D5AAA142784DA299256D725FA708AE427E41
SHA-256:	7F020F3D5553FC8305B3438A4BD8FE98B1ACDB231EBE288D7CFEA6E730171DBA
SHA-512:	9895B869CFF6F9C6004BB8FEAE2DE221601AD75026A4F58277A83D791D8D600470441CD1855405C237BDC999962CBCC50EBA7EA1E074CEF7C7D25F7EF73D72BF
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/globals/site-index.htm
Preview:	<!DOCTYPE html>..<html>..<head>..<META http-equiv="Content-Type" content="text/html; charset=UTF-8">..<title>Site Index \| USPS</title>.. ls:begin[stylesheet]-->..<link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[meta-keywords]-->..<meta name="keywords" content="USPS, Postal Service, Site Index, Site Map, United States Postal Service, Business Services, Shipping Services, Mailing Services, Extra Services">.. ls:end[meta-keywords]-->.. ls:begin[meta-description]-->..<meta name="description" content="Find it fast using the USPS.com site index.">.. ls:end[meta-description]-->.. ls:begin[custom-meta-data]-->.. ls:end[custom-meta-data]-->.. ls:begin[meta-vpath]-->..<meta name="vpath" content="">.. ls:end[meta-vpath]-->.. ls:begin[stylesheet]-->..<link type="text/css" href="/ContentTemplates/common/css/customer.css" rel="stylesheet">.. ls:end[stylesheet]-->.. ls:begin[stylesheet]

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	57727
Entropy (8bit):	5.325279855145622
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5d1uYMxBMYUYNQj+DYfq5j1jYY8Z02LKVYKYLyYmog8hf8Ep:RJeUwT7ltMHM9eEqJ1UTZ02LKVlEyTo
MD5:	A21EFAD6603850BBDFEC77CE3CB61661
SHA1:	60E7A23532E1BF109C14B63CC3A3EFDDC4E7B3AF
SHA-256:	31A914C92C74F2B8151D921AAF7F5B00C9A7C1959D53F4762DA34D85FE9C184E
SHA-512:	4EC885A932107362D663935335FE65FE4C5F815DEDDB958522ADB69B7248AFF5B6AB5D92F701BBD6642B34E6A0DA2D7DAFC2403211E319F664BE572F5734A7DF
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	34
Entropy (8bit):	4.278351811711312
Encrypted:	false
SSDEEP:	3:YmJzsuBRW/ELrCHY:Ym36ELrEY
MD5:	F1376CCE484B45CD63EA0E41EB9341BE
SHA1:	496FBCAEFB00FED37D5AF57CD0F54FF6F3BA733F
SHA-256:	1DEFC1222A443B0AD7549F38130214CD284CAEA1C8A00562B0FACD570D8F2EF0
SHA-512:	D5919CC3FBFE0DC2CDCF19F45872B71C7C47D00A1EADCE8EA449944F14956EAB83BA9398D3E0E2858EDB65345EEF51C7E3F6C2D58C63BC353977CC490B51A77A
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/UspsToolsRestServices/rest/security/ipAddress
Preview:	{"ClientIPAddress":"81.181.57.52"}

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 991x225, components 3
Category:	downloaded
Size (bytes):	30285
Entropy (8bit):	7.965816842802094
Encrypted:	false
SSDEEP:	384:w0Fpj1P70fqHHsKJ6QRGaW+2EpS8jnCmzc6GHzyR72vKV0k5KAdevJid:woj1P7UPQRYEpTCK/GH+72yZTgvJid
MD5:	D8038E289D658A845596FAE323E1D628
SHA1:	929283582DD53EAEDBBD99479B360CAEFD782CA1
SHA-256:	05DB6A0A34804A3B49FA898956A669B6496D4F1A67118BED95775B67A3641EF5
SHA-512:	A3E4712DC739049B3FE482E000C89ADC5F0A086D16A85795EBC564DEA1891B063AB2F496AA4E5446EA07F9C44FC986C2E0631DF1C92AB2E18124C77F1200EE36
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/help/hero-contact-us-mobile.jpg
Preview:	......JFIF.....d.d......Ducky.......<.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:4ACC107DF6F711E9A6899C204A4492DD" xmpMM:DocumentID="xmp.did:4ACC107EF6F711E9A6899C204A4492DD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B7A96A86F6F311E9A6899C204A4492DD" stRef:documentID="xmp.did:4ACC107CF6F711E9A6899C204A4492DD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/activity;xsp=4722620;ord=5358144498511.728?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 210 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19969
Entropy (8bit):	7.974418708945245
Encrypted:	false
SSDEEP:	384:ieX2kZZIPmqbRpqZqqYbukfJ+wIfe5h9o8U9+ABfl1rqqR17ziLFaqt+gC:imMmkW4PR+NfuhU9Tv14+5
MD5:	6311EF7A60F86D77AA48FCC48A675A31
SHA1:	96BC8B2FE87B126FFBF0D7B7AD8419661CB6BD9C
SHA-256:	70D715475FB0A4756FC65C50CBB2CF0CA15F7311EFC6C54B18E045E6AB202251
SHA-512:	2B275D008AABE54F15D005DEE130537480BFFE8828EB48F314768D789E0E752D3C4E4BAC146E22279D60FEF076842AE35C2A12B5E097AFA7EDA68BF5B316A3F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6fd77a10-676f-44f6-a353-407f8f859d5b" xmpMM:DocumentID="xmp.did:B5519ED4FFAD11EA8D9F92B8E2216427" xmpMM:InstanceID="xmp.iid:FB7EF9CEFF9E11EA8D9F92B8E2216427" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1f9aba67-8608-49e6-966a-f221699fb559" stRef:documentID="adobe:docid:photoshop:ec73a57f-b17f-3441-b389-2df662d8c14b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>c.....J.IDATx...x..

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	5.279084412534843
Encrypted:	false
SSDEEP:	24:2dzAfoLfsSWTNl88JfL6tE8BIno5CeOgo1U63d7VL6tvgf/yZ:czAfofsSWBlHL6tEqhUBS6N7VL6tYfq
MD5:	0D366834F312798111EBE3990766F8F4
SHA1:	E3CE708BF0B0B1924156674ACA900898D407331C
SHA-256:	DA2E0F69EB8EA4AA9FFE45C2AD6D330EB7922E0E14F8AACA4E577BE0FB8B4BEA
SHA-512:	95D855A18FD122BA724ED38E03103731B684647B1128C548CE440BAE0D6596B65457CC77CD000079299D300E274416BCE08613FAC00FAB308962EA4EEAAD86D1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="._xBA__x2264__x201E__x5F_1".. xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 74.3 62.6".. style="enable-background:new 0 0 74.3 62.6;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<path class="st0" d="M67.9,34.8v19.4c0,1.1-0.9,2-2,2H8.2c-1.1,0-2-0.9-2-2V34.8c-3.4,0-5.6-0.8-6.2-2.4v23.8....c0,3.4,2.8,6.2,6.2,6.2h61.7c3.4,0,6.2-2.8,6.2-6.2V32.4C73.1,34.2,70.7,34.8,67.9,34.8z"/>..</g>..<path class="st0" d="M41,27.5h-7.9c-1.4,0-2.4,1.3-2.4,3.1V32v2v3.9c0,1.8,1,3.1,2.4,3.1h7.8c1.2,0,2.4-1.1,2.4-3.1V34v-2v-1.4...C43.4,28.6,42.2,27.5,41,27.5z M39.5,32v5.1h-5V34l0,0v-2.7h5V32L39.5,32z"/>..<g>...<path class="st0" d="M47-0.1H27.1c-3.1,0-5.7,2.6-5.7,5.7v0.7v4.4h4.2V6.3V5.6c0-0.8,0.7-1.5,1.5-1.5h20c0.8,0,1.5,0.7,1.5,1.5....v0.7v4.4h4.2V6.3V5.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/location.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2060
Entropy (8bit):	5.054976872538715
Encrypted:	false
SSDEEP:	48:cFA+fEt9OMYAkN4gfJf7q4gfJfyK49gcPO3Lxv+ipXMQU:L+fQng4MO4M5vz8QU
MD5:	F8AD388B3E39B860C97DE0029AE98A21
SHA1:	9B032EF4EF4100DDA1BA44BE4836E6956B11387C
SHA-256:	9685D6241F41AC71741D0EE9B242779F640CD3B1E64BB9BBCFB8798C5BE503B2
SHA-512:	046772635E6EA587AAA4B4DEF7DB1DCDD02219633E57763FCABECA6C999442981D5311434FB82F97AFC63B0869E2086958AB139EA8E1A5C7BF115FEE4C1D1900
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/logo_mobile.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 53.8 28.3" style="enable-background:new 0 0 53.8 28.3;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#243E8F;}....st2{fill:#333366;}..</style>..<g>...<g>....<g>.....<polygon class="st0" points="42.4,27.7 48.1,0.8 10.6,0.8 4.9,27.7 ..."/>....</g>....<g>.....<g>......<g>.......<path class="st1" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>......<g>.......<path class="st2" d="M11.4,1.9c0,0,20.9,4.3,21.3,4.4C37.4,7.1,37.3,8,37.3,8c3.4,0,3.8,0.1,4.4,0.6c1.8,1.5-1.1,5.8-1.1,5.8........C40.1,14.8,9.1,26.7,9.1,26.7h32.5l5.3-25H11.4L11.4,1.9z"/>......</g>

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (406), with no line terminators
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.857591442160839
Encrypted:	false
SSDEEP:	12:pzFkBxL56NiZAA8+gAyZ3DQbFAJE3SmmiaU7zuza:fkBxL56N53+grZzNECmmi//u+
MD5:	083CC1C71E1AC534541D2C8F2F4BB0BA
SHA1:	8436E1C786D998B56E0E80855E4320B357850524
SHA-256:	000647AF0E1592C4918CDB40F50B42F148462C0725E8FF85EAF8804FFFD1430E
SHA-512:	FB8A3BE12430D557B2C950F2CA3C987D2FCDE02F401015753B9F51160E336444C305D79E3FAE48FA2A9CE275A20429C63A758737AE6FC0380D380CC981D0DF7A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/video-player.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=function(){s(),o()},s=function(){var i=e(t);r.component=i,r.videoPoster=e(".video--poster",i),r.playButton=e(".video--play-button",i)},o=function(){r.videoPoster.one("click",function(e){e.preventDefault(),r.videoPoster.addClass("fade-out"),r.playButton.attr("aria-hidden",!0),r.component.addClass("video--open")})};i()};return t});

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	289197
Entropy (8bit):	5.5713554020383675
Encrypted:	false
SSDEEP:	3072:AoG4lgKVAZVNSNcMzszFeIbT8yjCBPIrTWRsYESfhmpt2nBsLqGynXDeltzvsX6v:e4fAFMgzFe1Y0fhmpt+aqGynXDelJsXk
MD5:	CD020A93FFAAA21DEE0D77865ED88EDD
SHA1:	35410F2C01FABE20585E9F43ADA9BF5298441000
SHA-256:	DE56CD3217BB22F7B2E63EA70BDBF20A96F95956219038A28DDE763DB706BCD9
SHA-512:	B1564D238B788D34AC7224E642F5192D38641E8A6CF2DE0F4F62926621C02B8076AFD8F2620904C029FF62BE0008A010DCCAA8ED72CFCC1899A5D4BE00B673BF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-3NXP3C8S9V&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"9",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","usps\\.com","uspsdelivers\\.com","uspsconnect\\.com","uspsmailjourney\\.com","usps\\.gov"],"tag_id":105},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","usps\\.com","uspsdelivers\\.com","delivercheer\\.com","irresistiblemail\\.com","deliveringinnovation\\.com","uspscalendar\\.com","paypal\\.com","usps\\.gov","uspsmailjourney\\.com","uspsconnect\\.com","uspsoperationsanta\\.com"],"tag_id":107},{"function":"__ogt_dma","priority":14,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":108},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map",

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/change_address.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487512423&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm
Preview:	{}

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 39, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1357
Entropy (8bit):	7.71397161998703
Encrypted:	false
SSDEEP:	24:F6fO6dzuu2zAi80a6pGcInnIiPVy4QwWu5LEtOzSFAhcrBLCf7:F6fO6x+r86plInJxQwmFu7
MD5:	C336E62B9E9B76389389B47A63C27E09
SHA1:	165C5DCF3AFFEA495056A64CDE0D8787CD98919F
SHA-256:	C9D73BC5A038E0C018279D6DC59BDBF842C424BDFB822C1CD7E44130FC0D4608
SHA-512:	7A5D7CA4162F9539D9BEED2F67016A306BE984FFBBDC2229895D279E88BABDC112FBDFA2FF0F34A8C81CB4BDAABA84C5CFDE97B4E52A1778BC62CAA02ED9FFDA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...&...'.....ca:.....gAMA......a....8eXIfMM........i...........................&...........'.....Z+.....IDATX...[..U...NieIx. .8..IQ..y....".T....H.L.]T.A0I..BP...zQSdx..&.....`..V...f.=.v/[-.........N.....?...r....l.^.u.............n.2...;.>?#.f;8.......ZI..+..O.v.?..{a...t.......<=KI...Ys.7.v..E;.<.l.2.Im&}Q...0.,T>...U....^{b.$...u.....SY.`=.60. ..d.3.}0..B..>........}...4z.`..&..H.RE30....9.2k.5?.......#.%../..e...".s..@..NZ..b..?.!.\|\..h....<na.z..!@W..d9e.$.@:y..r.}...j..9...1v.9s..-I[]...O&v...k .y.t....].Tu..q.\...Q?..#0.b9.0)O......b:..r...TK(..]./-Th...g.n..h.Yi...NAzW.v.<.. ..n...!.C.=...0.b]M.U.~.~+.O....<zwP.7./.Xs...0.....L.D...x..n.....o......iwU8(..nJ..N~..b...j:.h.Y3.y...3p2...q.....b5U....Z.#.......<&n.Q.u.......;....A,o.M..f.-.4.)....vpb..\...%s....dh.&0.W.....;..5.b2~.X.C...&.&..A..'g\....^..u......Z....._67...l?.....v..........\....Yep.b.6Bz+..M..#&.#Y...G.U.%...}.}C..A..(...J..&..=..I.u}...Q....g....A..h.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://storage.cloud.kargo.com/kds/configs/8005988f.json
Preview:	{}.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386)
Category:	downloaded
Size (bytes):	224402
Entropy (8bit):	5.531943645539379
Encrypted:	false
SSDEEP:	3072:8OAZVNSNcMzszPIna8f9CBPIrTWR6cP/IRlfh6St2nBsLqrCQFQoXQ:dAFMgzPdXozfh6St+aqrCQFC
MD5:	B26C1A24B81EEF441C77505F0790B965
SHA1:	5D2BE168038C90D4A0262AA296E7619C07B72337
SHA-256:	C145477BD39EB00AD96D8DE7F4E1F0D874B5DB3095CCFF71B7DA0ED5A27630E1
SHA-512:	D294A82A374C46EB1D00753DE588F668CDF268C71EEDFFA871237882F923B46435FE0FB711E54D465D1EE96341B85E3114BD662D6E96D419C93E3E5F3A7230C7
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-978081151
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__rep","vtp_containerId":"AW-978081151","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_pre_auto_pii","vtp_instanceDestinationId":"AW-978081151","tag_id":3},{"function":"__ogt_conv_def","vtp_matchingRules":"[\"and\",[\"contains\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"www.uspsdelivers.com\/contact_details\/what-was-the-result-of-your-last-shipping-audit\/?sgf=1\"],[\"startsWith\",[\"variable\",\"pageLocation\",[\"map\",\"stripProtocol\",true]],\"www.uspsdelivers.com\"]]","vtp_conversionLabel":"rUryCL2l8swDEP-qsdID","vtp_instanceDestinationId":"AW-978081151","tag_id":5}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1,2]]

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	52
Entropy (8bit):	4.477177401325001
Encrypted:	false
SSDEEP:	3:YifDM/tVxLvKGE2KC/W3NRz:YiQ/xLST29W3Nl
MD5:	433F54BA01640C50B1DA2F936D5F5BD1
SHA1:	78F92959C3B72DD6B6665F85C9B9F27326B6DAEE
SHA-256:	D2220EB5207A488EFAD68DD7AB4240BA5A5FE09C65876DCDF755C60C2053B136
SHA-512:	02CABF353FC6F1459308A9D21D57652D46630ED6FB4C07BC83BF92321EDF4C36A11EE2CE92E86E4F5F0D17A303A06F2C30EB2F23E4287C10D46AC90F4F8BC9C8
Malicious:	false
Reputation:	low
Preview:	{"GLOSSARY":"https://usps.com/locator/glossary.htm"}

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	5.0925676282458525
Encrypted:	false
SSDEEP:	48:cFA2NuVqHMTYZWQZLf3XzR92AmStJV0zn9pM+XMOrNnIX1E:L0uVqsULZjTRfmS69pM+XMOxIFE
MD5:	2FB7B372AEA93502CA192E5A633D1AA1
SHA1:	CE358703CCE32B2176CF6EC94E17341CB6F93F03
SHA-256:	58AD849F3EA489D0B2EE4F0DD1E4FD0B613A5248FD6B127A4479646CE4735593
SHA-512:	8362BF47DC62595F31F0FDDB223D2EE13C212BA0F2D3DC90C7CD64A22E29E0FF88FC963A60944C2FA756EA10F544C32435498C64CCAC641E09E2E9DF6CB712FB
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/tracking.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="-448.5 228.8 139 121.8" style="enable-background:new -448.5 228.8 139 121.8;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M-388.4,320.2h-28.4v-64.1h24.2v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.1v19.4.......c3.6,1.3,7,3.2,10,5.6v-27.7c0-1.3-0.5-2.5-1.3-3.4l-16.3-17.6c-0.9-1-2.3-1.6-3.7-1.6h-52.1c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6.......c-0.9,0.9-1.3,2.1-1.3,3.4v71.9c0,2.8,2.2,5,5,5h38.6C-385.5,327.2-387.2,323.8-388.4,320.2z M-355.7,240.8l9.2,10h-21.4.......l-2.4-10C-370.3,240.8-355.7,240.8-355.7,240.8z M-384.2,241.3h8.5l2.3,9.5h-13.1L-384.2,241.3z M-387.3,256.1h14.6v9.5h-14.6.......V256.1z M-403.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (552), with CRLF line terminators
Category:	downloaded
Size (bytes):	28851
Entropy (8bit):	5.771311912057063
Encrypted:	false
SSDEEP:	768:B3v464PbyVqrYtdQ52pnbrwSmCsslOFFct0DMWbM/AR:Bf464PbyVqrYtdQcbrwSmCsQOrDMrM
MD5:	26433217E805A89CF41ADAC58221316E
SHA1:	BBF155E3C6D673D127021EF9B669338A5D9F3C24
SHA-256:	07AE623F7D42C8707E43608A6A946B0806C4753193CC29E89A296A7585556EBB
SHA-512:	6849E1896CCBA102880DD535BF3FB430F082E3CB12D4A649D038D673F31D85050B0781A416639BB38FBE669787D48CB655771097CF6F052A290250BC0D4CF35E
Malicious:	false
Reputation:	low
URL:	https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=USPS
Preview:	var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:"",URL_PROTOCOL:location.protocol,USE_MAIN_CUSTOM_DIMENSIONS:!0,MAIN_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",MAIN_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",MAIN_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",MAIN_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",..MAIN_SITE_PLATFORM_CUSTOM_DIMENSION_SLOT:"dimension5",MAIN_SCRIPT_SOURCE_URL_CUSTOM_DIMENSION_SLOT:"dimension6",MAIN_URL_PROTOCOL_CUSTOM_DIMENSION_SLOT:"dimension7",MAIN_INTERACTION_TYPE_CUSTOM_DIMENSION_SLOT:"dimension8",USE_PARALLEL_CUSTOM_DIMENSIONS:!1,PARALLEL_AGENCY_CUSTOM_DIMENSION_SLOT:"dimension1",PARALLEL_SUBAGENCY_CUSTOM_DIMENSION_SLOT:"dimension2",PARALLEL_CODEVERSION_CUSTOM_DIMENSION_SLOT:"dimension3",PARALLEL_SITE_TOPIC_CUSTOM_DIMENSION_SLOT:"dimension4",PARALLE

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65319), with CRLF line terminators
Category:	downloaded
Size (bytes):	155764
Entropy (8bit):	5.066642470765085
Encrypted:	false
SSDEEP:	1536:M/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN264:M/Riz7G3q3SYiLENM6HN264
MD5:	8FE70898895271DDC62823321011273A
SHA1:	60F0159744E3B554A45DA027F9E7FAA992AED71A
SHA-256:	AE576713BC196098F7438DEDE6FF1F835A23291C32B745AD7E6FB6DB809A719B
SHA-512:	A37D9F7728554BB6C241D68303E0F09BD427F061A681CF61BDDDF1DDA40A0C77C10E3E0BF8E58F1D31C1AF14DF7E5941C26EE53B065E35454EA8CDFFB47392EE
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/bootstrap.css
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors.. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-si

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	5.0158771166375935
Encrypted:	false
SSDEEP:	3:qQgfjg5anvEVUxRTvABd3zI0/UBdM/Qftf22HhJzWLKjUSHJb4CNw1B:qQQjgYkedA/3zI+UX3ULA1Hx4CNw1B
MD5:	2C39ECCCD050F597BB7BC612C8EE9D26
SHA1:	20B0F60C777CA8DCDB52389A133F42BFCBCC42C0
SHA-256:	9704ABF2C5A43D5A594F6E2A6A3819EAA2A93ECE7C59BAD24A921FAB3787F59A
SHA-512:	1972D29708C5BD290C8B4BABDB28F6082B3B96D186E799C99D8794B6DE8FE3AF5BDD1D9A6BC951CE14B0CDECD8FEBCEF4A89C4774BAA88E2CF210C0320DBEE05
Malicious:	false
Reputation:	low
URL:	https://tr.snapchat.com/config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850
Preview:	!function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16091
Entropy (8bit):	5.1527963616562245
Encrypted:	false
SSDEEP:	384:0smQx3cVYqZVlIlE5k+H4VviRi4kFAFLLF:0sDtcVY4P5k+Hhi4EAFLLF
MD5:	EE5E684540682D94C790DEA0AA5F930C
SHA1:	702D90AAB1EF761A656FC06317234BB2C2486C8A
SHA-256:	6C05C3BA3468273D8F29DCB27EA2E8948AD79F361C92F8F0BF0C0D2869699BA8
SHA-512:	24B2C46AEC1982E73D31B216A69B6718219B8902EB4E15953F7260AB28E2A36FE0FE10C350A5971F70F931CCD06B507A605E91B20D2836FA786EE1AFF5D77DE2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/qt-modals.css
Preview:	/.---------------------------------------------------------------....@filename..qt-modals.css....@author...aziz.syed@akqa.com....@description.quick tools modals style definitions........Content....1. Quick Tools Modals....2. PO Locator Modal....3. Caclulate Price Modal../...=========== 1. Quick Tools Modals ===========../...quick-zip-tmp #modalHeaderH2{.....background: transparent url(/ContentTemplates/common/images/global/quicktools/ZIP_icon.png) 0 10px no-repeat;.....padding-bottom:6px !important;.....padding-left:30px !important;}../.quick-zip { color:#333; padding-top:25px !important; }/...quick-zip { color:#333; }....quick-zip .select-wrapper .select-options{height:28px;}....quick-zip .select-wrapper .select-frame{top:-206px;}.......quick-zip #qzerror-box {....font-size:11px;}....quick-zip #qzerror-box{....font-weight:bold;....margin-left:0px;..../padding-bottom:18px;/....position:relative;}....quick-zip #qzerror-box .icn{....background:url("/ContentTemplates/common/image

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487477132&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2267), with no line terminators
Category:	downloaded
Size (bytes):	2267
Entropy (8bit):	5.84979287273297
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08iI6XxQKRT0Kk6:wsbSUtJfxrqLWWWdV6j12IylRZ
MD5:	3B5B3A80C8A4836E94E100353A045B6A
SHA1:	E37C8969FDCD8B5D1CE53020E920489491A4475F
SHA-256:	618FC244E8EACBBE99929E38921C4F6003E6D664E09B154937AABA0EB9E10C28
SHA-512:	951405F4119E94CEDCCF99F78E54E0E9A99C89C653E3531DA7E99045E36DB044B5C40E32E32615C75014A77EE626E3EB7F791BF213E2D4526E45FA9971BE1933
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487473009&cv=11&fst=1713487473009&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	124901
Entropy (8bit):	5.535289857774602
Encrypted:	false
SSDEEP:	3072:MOatFVkZHzd5YlD0aOJp+4d/dmEL83C74PXRDBW:MUHzd5g2jLFI3C76XRc
MD5:	9571F0BB37B9F4F1550382CDBCC2C313
SHA1:	3EA7DA2B043BAC7B0A043DB61D2C9FD2B78AB08A
SHA-256:	6D649C0846386FAC40C84212D1FC236977847761AEC7A35B7C3ECE86D8C58ABD
SHA-512:	5B230AC81CE469798E7ECF8BCC5534B76D090518B410723347645B2A49B4375D4699B4B72DD9CA674C80D9341D9F809A63359B329DD4C6113A7AF06F3E060837
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"49",. . "macros":[{"function":"__e"},{"function":"__dee"}],. "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenForMutations":false,"tag_id":6},{"function":"__asprv","tag_id":7}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":["macro",1]},{"function":"_eq","arg0":["macro",0],"arg1":"optimize.callback"}],. "rules":[[["if",0],["add",0]],[["if",1],["add",1]]].},."runtime":[ .]...........};...var ba,ea=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global],c=0;c<b.length;++c){var d=b[c];if(d&

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2104), with no line terminators
Category:	downloaded
Size (bytes):	2104
Entropy (8bit):	5.105467457196061
Encrypted:	false
SSDEEP:	48:cFZ2K/muPu5zFIgTQN3m8W4fFAl/pGETeeyIqhMJKEga/I1Iq4l6f5:sAK/muGxMN3JWOGl/zHgawOtl6h
MD5:	637EDCA4B3D02123FBC6D2FC59E831EB
SHA1:	D5547335B8F1120DCB036A5D9BB76C136E7AC68F
SHA-256:	169BE8FA1720A56349AB9365F4AC5B081E700B6209928AFF2A48C623A368A401
SHA-512:	E535F10A13DF2E5CAA444B05C2E82F70261C27DD3DF32F4B20FF6C7E8B20135B1171CB98C9AF8A1672DB615E51D652C85B46607A09A7705791C8EE2B6746B555
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/scalable-table.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s,o,u,a,f,l,c={offset:15,columnMinWidth:75,columnMaxWidth:150},h=function(){e.extend(c,n),p(),v(),b(),d()},p=function(){i.component=e(t),i.columns=e("th, td",i.component),i.scrollingContainer=e(".scalable-table-scrolling-container",i.component),i.headerColumn=e(".scalable-table-header-column",i.component),i.content=e(".scalable-table-content",i.component),i.rightArrow=e(".scalable-table-right-arrow",i.component),i.leftArrow=e(".scalable-table-left-arrow",i.component)},d=function(){r.addCallback(E),i.scrollingContainer.on("scroll",y),i.rightArrow.on("click",w),i.leftArrow.on("click",w)},v=function(){i.component.is(":visible")?u=i.component.width():m(!0,!1),a=i.component.find("tr:first-child() th").length,s=Math.floor(u/c.columnMinWidth),f=u/s,l=f+c.offset,o=Math.floor(u/l),i.columns.css({"min-width":l+"px","max-width":l+"px"}),i.scrollingContainer.cs

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 663, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	93542
Entropy (8bit):	7.987098520006324
Encrypted:	false
SSDEEP:	1536:uaYJBYyCFo3AAwjghvl+FzrfOq7KYT4I7B1KIe87iJB/4yMpdOx:uxX1BBw0tl2zbOq7dXKSE+Ppdi
MD5:	D514875ABB77A464EDBBBFE1154AE5FC
SHA1:	9528625EE96F117B3CB5FF8B7CC2D64275FE53D2
SHA-256:	62C2E27A69C8849E549A5FE33ADB52D564B77F9DD6334DEE90C93423329D180B
SHA-512:	B524AB202941D9EFD344F75579DA523B954A6A5CCF6616C3D78C1992938AF76AC13E78B6D87097F903030D0EF3EA27F4D0D9DC606C91BC6DE4E105B8A30D3BF6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/id_mockups-3.png
Preview:	.PNG........IHDR..............aV....pHYs..........&.?.. .IDATx...y\|L.....d.7.......D(ZZ-W..V..t.jk..V....h..m...EU..vAJ"....E.e2...1.#.e2......l.=s..w9.t:.B.!.(.Y].@.!...$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#$,..B.#,..w.....u].!.......u]...J...u.......0.....].PB.a.t .H........,.@...!!!~....8..D!../.}pF......u[..G........D....-....5......NNN8::.lA....W.\Q~OJJ"??....233....>8.....k}w.eQ@..F.5....ooo<<<... .B.u.j5III$%%q.........(k.... .^..{,..X...I...<<<h.9-Z.Pj...&33.+W.....L?t.P..Y.!.....ooo...=z..m..O.333..........U...X....V.....,..:...>.E..J@ZYY.Z/::..OVVV..Y.!jR@@....m..m.az....s..9.?.kp..K...]?@.......CR.trr.].v.o....+W........:tH.Q.qO....g......<s..g.!>>...t....n..2,.I......O...K,...MXX....%.T...^.....A.....4hP.y....8p.3g.....>0..b1k.]..E}.K(6h...^.z.h....$,,.u..I@.!.....;v,m.U.gffr..i"##.7....CCC#.5.........8C.!....u..._.B.q....`....9R.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	5.3418082693072595
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nojHzNFLiiQUOqQUOHXPlEhM:2d3ATLf36TNFFQgQ9XPlV
MD5:	D85E71E5218D4464FE55AA786B29B0DF
SHA1:	3E7B370874022D561E0FCFBE0E9332E822A48523
SHA-256:	4EFFA9948EDE5C52F8A8F23BD3E4F05262725E1DA0D22B61ACA4DB3EE0629A70
SHA-512:	4E447DD2D87A10B7B609A5A3DBC56964953A9F0BC91F722ECF87A8825DE7D454C506F7CD6EFE13422E151EE737FEDBE896782B091FE7071DD0A13551857653F5
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/component-guide/blue-caret.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 6 11" style="enable-background:new 0 0 6 11;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M0.5,11c-0.1,0-0.3-0.1-0.4-0.2c-0.2-0.2-0.2-0.6,0-0.8l4.3-4.5L0.2,1c-0.2-0.2-0.2-0.6,0-0.8...c0.2-0.2,0.5-0.2,0.8,0L6,5.5l-5.1,5.3C0.8,10.9,0.7,11,0.5,11"/>.</g>.</svg>.

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13400), with no line terminators
Category:	downloaded
Size (bytes):	13400
Entropy (8bit):	4.929938929744303
Encrypted:	false
SSDEEP:	384:MM3i+31wPKu0LZ+5Cy/WfXWLc/Tk71mvIrKPlxQ8XxEAq/:MMS+31Ru0LPy/WfXWLc/I71mvIrKPlpI
MD5:	B62E27B15837B70E7DAB99846AC90AB3
SHA1:	9A49415C5E47149A5324705EAF78B4B68CE10EDF
SHA-256:	50764694EE2DA70F2D3CE0E8340ECA39B9E2760D293B47E4355C690A4769E781
SHA-512:	2000C6428FE6A0FF72D2F1AA37741F3DDC939CD50F4D748B3D3A1679BEE44FFB39756E6DDD95A59FEF19A55A43A2E0092790EA2A43B3E689443006DB253DAD53
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/script/megamenu-v3.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c(".search--wrapper-hidden,.mobile-search").removeClass("active"),c(".global--navigation nav,.mobile-hamburger").toggleClass("active")}),c(".mobile-search").on("touch click",function(e){e.preventDefault(),c(".global--navigation nav,.mobile-hamburger").removeClass("active"),c(".search--wrapper-hidden,.mobile-search").toggleClass("active")}),c(window).on("load resize",function(e){c("input").is(":focus")\|\|(c(window).width()<959?(c("nav ul.nav-list li a").off("touch click"),c("nav ul.nav-list li").off("touch click"),c(".g-alert").off("touch click"),c(".g-alert").on("touch click",function(e){e.preventDefault(),c(this).toggleClass("expand")}),c(".g-alert a").on("touch click",function(e){return window.open(c(this).attr("href")),!1}),c(".menuhe

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.289681277871087
Encrypted:	false
SSDEEP:	1536:/jExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:/Yh8eip3huuf6IidlrvakdtQ47GKl
MD5:	9AC39DC31635A363E377EDA0F6FBE03F
SHA1:	29FA5AD995E9EC866ECE1D3D0B698FC556580EEE
SHA-256:	9A2723C21FB1B7DFF0E2AA5DC6BE24A9670220A17AE21F70FDBC602D1F8ACD38
SHA-512:	0799AE01799707B444FCA518C3AF9B91FDA40D0A2C114E84BC52BD1F756B5E0D60F6FD239F04BD4D5BC37B6CDBF02D299185CD62410F2A514A7B3BD4D60B49FC
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487504636&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 195 x 167, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19481
Entropy (8bit):	7.9795025138047775
Encrypted:	false
SSDEEP:	384:U0w1ilGWYW1Wlp/LDIBkF++U1Io4woDtCH9BU39GtY:UOeWob/IaF++UqmEtYUNAY
MD5:	2DE2FDD02C6B6D71E73E331544C6A5EE
SHA1:	83902E3BDE44BA9F0A8AEDF4B74BA34A4821DDEA
SHA-256:	E0E7DBE39381B4D75660B091499377FA1962DC194370B09470E9B80D19526F07
SHA-512:	798D308D59ABD451D839799A3908EA12618C52F128DEE12A89F4FD87B7AA42B929D5ED7DB9BB88F6D9479F34841A85A0D9A36E95CA2CAE29D05C1AE86F3BB870
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/store/go-now.png
Preview:	.PNG........IHDR....................IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O......:..L..$R.

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4678
Entropy (8bit):	4.954569458612852
Encrypted:	false
SSDEEP:	96:IzhCj3NM3NtEjD2x8Jeu5l2t8JeRD9e2u28JeEmq2N2cl2PsE210k2tA2tZ202NH:IzEDKEn2q32WUE2u2Y6q2N2U2Pn2112e
MD5:	51619D5BE620E900399C19D76299FB35
SHA1:	25FE87F0828F8C254C4BF5D56F8155C098B88269
SHA-256:	CEDF5F5CCC60CCCCC08540AD742054EF866AF25BCBCF2DE1511B780EB089B0F5
SHA-512:	B2B2FDADA1BAFE9A1445822FF9D2880ACBAF3844C21233EDA2E8BD02105D0DA85ABF3A0112F5C3D90331D3644D47666A0281DB7766F53EBAB497C3F46B9574F4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/elements.css
Preview:	/* line 5, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss /.html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed,.figure, figcaption, footer, header, hgroup,.menu, nav, output, ruby, section, summary,.time, mark, audio, video {. margin: 0;. padding: 0;. border: 0;. font: inherit;. font-size: 100%;. vertical-align: baseline;.}../ line 22, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss /.html {. line-height: 1;.}../ line 24, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scs

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13094)
Category:	downloaded
Size (bytes):	13289
Entropy (8bit):	5.2902385071652605
Encrypted:	false
SSDEEP:	192:qYC8Ej/DX7Vj6zXapp2nDUyyguq5f4sPe6FU2mFnRyPsRkoXrD577tlLCPEV0KhC:qY27wrapp7yyg7W92Jgh7tFoEV/5lapB
MD5:	3D13EF41AA477D7E1EC276886B9E0EC5
SHA1:	D71D858F4341CFF90E67125A6B6AA4DB10950EA5
SHA-256:	B68EFCCAE861D874C91F6607E469061F716801E4B3849E0E2CDE0DC1B60EE9A6
SHA-512:	ECBD1C4304D8B3A61852A4A5DF52C7F455AFF5A5B5DB2C4F97A67F5BE691F079C937BF162005A36DDBC0F0E9F6DB7483F9640DF8AD390CD6426755A8FB33D79C
Malicious:	false
Reputation:	low
URL:	https://c.amazon-adsystem.com/aat/amzn.js
Preview:	/* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */.this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";var e,t,n,r,o,s,a={nameLength:256,valueLength:1e3,eventNameLengthWarning:"Event name is longer than 256 characters.",parameterNameLengthWarning:"Length of parameter name exceeds 256 characters.",parameterValueLengthWarning:"Length of parameter value exceeds 1000 characters.",parameterKeyLengthWarning:"Length of parameter key exceeds 256 characters.",AIP_TOKEN_COOKIE_NAME:"aatToken",AIP_TOKEN_URL_QUERY_PARAM_NAME:"amznToken",NO_CONSENT_COOKIE_NAME:"AMZN-NoCookieConsent"};function i(){if(r)return n;r=1;const o=a,{checkCookieExists:s,getCookieValue:i}=t?e:(t=1,e={checkCookieExists:function(e){return document.cookie.split(";").some((t=>t.trim().startsWith(e)))},getCookieValue:function(e){return document.cookie.split(";").find((t=>t.trim().

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2217
Entropy (8bit):	4.685783065646044
Encrypted:	false
SSDEEP:	48:czAuf3CBnRO02tVVdpuktDwJXZU6ViJ/EoJt9WI:vufSBnE02tV7cktDwJX+aiJ/fJuI
MD5:	EF48CE62CB3D361E1D8B2938C40E71DD
SHA1:	F2C96AC70AAB81500FA0D12F5AB61F07B79B8A54
SHA-256:	893B5448CDDE44B4DB29800AEED45E278B1E640EA4585A5F4A5E4725E64BAE84
SHA-512:	47042309BD5680845E3EAE1D70EAD0BD0586FD91FE9DBA8209727BB38CA205944C96399C47183B4814C235D6DD16096686B86FD04B4C1CBE42A6F0E43BD1B1E6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 88 126.5" style="enable-background:new 0 0 88 126.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<path class="st0" d="M33.8,59.4c-0.1-0.1-0.1-0.2-0.2-0.3c-0.3-0.6-0.7-1.1-1.2-1.6c-1.5-1.6-3.2-2.6-5.4-2.8......c-1.1-0.1-2.2,0.1-3.2,0.8c-1.8,1.3-2.6,3.1-2.5,5.3c0,1,0.2,1.9,0.5,2.8c0.5,1.6,1.3,3.2,2.1,4.6c1.2,2,2.5,3.9,4,5.8......c1.7,2.1,3.5,4.1,5.4,6c0.1,0.1,0.2,0.2,0.3,0.3c0.2-0.1,0.4-0.2,0.6-0.4c1.7-1,3.3-2.2,4.8-3.5s3-2.7,4.2-4.4......c1-1.3,1.8-2.7,2.3-4.2c0.5-1.6,0.6-3.3,0.2-4.9c-0.4-1.4-1.2-2.7-2.2-3.8c-1.6-1.7-3.5-2.4-5.8-2.2c-1.6,0.1-2.9,0.9-3.9,2.1......C33.9,59.2,33.9,59.3,33.8,59.4z"/>....</g>....<g>.....<path class="st0" d="M33.8,57.7c0.1-0.1,0.1

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56120
Entropy (8bit):	5.081056424633529
Encrypted:	false
SSDEEP:	1536:/KsB9Al7ud6Nkw2RUEPw268uUrkUvq37wPymNRG:CsB9Al7udOkw2RUEPw268uUgUvq37wPa
MD5:	24E41D059724473EC6D097FF568C0191
SHA1:	CC03B4F0D4C75B078836D17808BF9D4B7A76A339
SHA-256:	00AE0D4354743FC1364AACD5CFC60DDCB98A60290DEE3DA57EB88D3138F6AB67
SHA-512:	5D05F34010E195693698ECB019FE53494A52A3873BF34A55782CDB99638F4BC74A38A7276328AAA50E0750C356F65B04AAA1F8A850D4608545182B718D96E3CC
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/styles/po-locator.css
Preview:	/*******************************************/../********** PO Locator CSS ***********/../*******************************************/..h5 + p {..padding-top: 14px;.}...visuallyhidden {..border: 0;..clip: rect(0 0 0 0);..height: 1px;..margin: -1px;..overflow: hidden;..padding: 0;..position: absolute;..width: 1px;.}...negaterowindent.{. margin-left: -15px !important;.}...specialMessage.{. font-weight: bold;. color: red !important;. .}...specialMesDis {..padding-top: 10px !important;. margin-left: -17px;. padding-bottom: 10px;.}...popupMap{..padding-bottom: 30px !important;. padding-top: 10px;..padding-left: 0px;. margin-left: 1px;.}...specialHoursLine {..display: block !important;..margin-top: 20px !important;.}...specialHoursLineDisabled {..display: none !important;.}...po-location .faq-wrapper {..z-index: 0;. padding-top: 40px;. padding-bottom: 60px;. text-align: center;.}...faq-location {. padding-top: 20px;. font-size: 16px !importan

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/search.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487512390&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487472640
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1465
Entropy (8bit):	5.346019832566101
Encrypted:	false
SSDEEP:	24:2dD5ATLfELhl0PHI9rhfqA8c6XnSRNZEDzKY5CuLodWIQEJv0nXueKuj:cFAvfELhl0/I9rYAwGNZgDL0en+uj
MD5:	ACE472E478185D5F5ECD18C7D821EFF7
SHA1:	C4C97892E41D3DD838912C42FD7A7B212F671D1B
SHA-256:	C8B13B10E28B6B420151DB578831A416B7C1805D7672EEB57E69DC697FDA1E27
SHA-512:	517C5B50D10B05F9EDC0DA3EA1A0124F254F2277FE2647D3C6F9C9E81445DAA922175623593A67C244CB4369B57DC76BF676D9149CF522AA06AC6CF86CB4D3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 96.8 93" style="enable-background:new 0 0 96.8 93;" xml:space="preserve">..<style type="text/css">....st0{fill:none;stroke:#333366;stroke-width:8;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}....st1{fill:#333366;}..</style>..<g id="Original_Artwork">...<g>....<path class="st0" d="M64,17.2C76.9,30,76.9,50.8,64,63.6c-12.8,12.8-33.6,12.8-46.3,0C4.9,50.8,4.9,30,17.7,17.2.....C30.5,4.4,51.2,4.4,64,17.2z"/>...</g>...<path class="st1" d="M88.3,90.2L62.1,68.9c-2.2-1.9-2.5-5.3-0.6-7.5c1.9-2.2,5.3-2.5,7.5-0.6c0.2,0.2,0.4,0.4,0.6,0.6l21.4,26.1....c0.7,0.8,0.6,2-0.2,2.6C90,90.8,89,90.7,88.3,90.2"/>..</g>..<g id="USPS_x5F_Blue_x5F_295C">...<path class="st1" d="M90.9,87.5L70.4,62.4c10.7-14.4,9.6-34.9-3.5-48c-6.9-6.9-16.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2323), with no line terminators
Category:	downloaded
Size (bytes):	2323
Entropy (8bit):	5.854678643371993
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt085IyxQP6uOKU6:wsbSUtJfxrqLWWWdV6j11Ig0
MD5:	E5493D5D85D9820B26817C931FDBEBF2
SHA1:	CF62779432E3E8B50018DACA65B74A02C28F4AA9
SHA-256:	C2AFD12CEA9D3F9A5992484AE5E16ED9BB4A8E424692B8FDC8804789F4D8EFB2
SHA-512:	3B054C203AAD555FD57C8F4A3D1EC30CB2156E4F4E1BD991D9BC7EFD770E14C401A22D2C99EB92E204DF9A2B7BB9278793C056E10080573147899F9867C708BA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487512834&cv=11&fst=1713487512834&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&hn=www.googleadservices.com&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2552
Entropy (8bit):	4.795851335551723
Encrypted:	false
SSDEEP:	48:czAuf36SGo2uuzJg3RpzGTpEEptnGJQ3gshZ6QrPjxJvYgd5lgak6L7KfKe:vufK6uJgTUEEjGe3gsh9rP7QS5lgaxGn
MD5:	5C5579A50964D4972D1954BFF4EE232D
SHA1:	C78B384713CF7A8A5515A54F17C6E70EBDDE98FC
SHA-256:	C12815F27ECDFD09B2920C1EEA21AE7ABB8E107349D6BB8B39707A0CD9A3E591
SHA-512:	3694C68BCDD136FCA9507445AE06556A7CD524F9AEA4B6EC53849E72A935306171B7F0A1A198EBAD37E5AAAC0FF219B69653141C95D32DF5BAC97B98824AED4E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/shipping-supplies.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 131.2 111.2" style="enable-background:new 0 0 131.2 111.2;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;stroke:#333366;stroke-width:2;stroke-miterlimit:10;}...st1{fill:#333366;stroke:#333366;stroke-miterlimit:10;}.</style>.<g>..<path class="st0" d="M42.5,92.3H10.1v-65h26.3v11.1c0,1.7,1.3,3,3,3h22.1c1.7,0,3-1.3,3-3V27.3h28v18l6.1,0.3l1.9,0.1V24.2...c0-0.9-0.3-1.9-0.9-2.6L83.9,3.2c-0.8-0.9-1.9-1.4-3.1-1.4h-59c-1.2,0-2.3,0.5-3.1,1.4L3,21.7c-0.6,0.7-0.9,1.6-0.9,2.6v72.1...c0,2.2,1.8,4,4,4h40.1C44.7,97.9,43.4,95.2,42.5,92.3z M79,9.8l9.8,11.6H64L62.1,9.8H79z M45.8,9.8H56l1.9,11.4H43.2L45.8,9.8z... M42.4,27.5h16.1v7.8H42.4V27.5z M23.6,9.8h16.1L37,21.3H13.8L23.6,9.8z"/>..<path class="st0" d="M70.3,55.1

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 800 x 272
Category:	dropped
Size (bytes):	8471
Entropy (8bit):	7.92054423319505
Encrypted:	false
SSDEEP:	192:kiWno1o0oCwfXgwa6G5L/TPIhd+HxhwpXvNCGhM0:3QLHfXgwu5P2duxhwpXlCGhM0
MD5:	4E7D7BD16B5D9EEBAE6981CAB2C0EF44
SHA1:	F3EC76DF944FA285490DD69AE778F261BAD766A9
SHA-256:	76C1BCF02803AD799E99D2F813783EDBDC656F7BB3143E0115C0FE0F9D3E3B82
SHA-512:	C77662ED1F3D6AB3D6A56631619C8625619F0299C10BC904EEA2FC2CD78365891DD40560C7A358E5361171E67E9A0796E39C4413B87EF194104B6B198E9CCA70
Malicious:	false
Reputation:	low
Preview:	GIF89a .........pppKJK...Z................>..xxx...... ..u.......j.....;;;.....n........{....]]]......YYY???.............SSS......\|\|\|...111...ssswww...S..D..{..y..#"#...WVWPOP9.......))).....}...................................................................................................I...~..v.".....ihi...L..+..444---%..DDDddd...bab............877(...v.lll......AAA......<..4..m..oooC...L..9...w.HGH.../..:..E..~~~...[..V...v..y...F..`..S...}....L........>...@..0//...,u....>..D..g.....e.....Z.....I..T...v.........O.....F..@..C..U.....:..y..J..........6....4v.B.......`.....A....."i.7..'n.<..D.....r..)........l..D.......B..4....8.........}.lkl...G..k...................uuu...dcc[..... ~.GGHo........H......e..L..R..X.................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487495045&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm
Preview:	{}

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.107984934897844
Encrypted:	false
SSDEEP:	48:cFASUMNnMCEVtERKb/v+xWj50aEn1TIlraQTZMLHq0hk5yNSwpP+:Lh4M9vnqbI91gp2MNrl+
MD5:	3955E49630DEB78CC1212BA20D83BAFC
SHA1:	881BA502127D57C48784703683869ABF4C8E28D8
SHA-256:	B84842A014070D9363A46638E512476260162014C9BDE4BCCA7A9ADE4177EA12
SHA-512:	95E49D8C1C5B200E0D85DAE402DC926187693A2307E6848A6D680F7AC2CF0B6B7A824158D0FD1D9DB0F3956E533E9464A86DA4F92BEB0C3D84B394DB6A57F33C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:none;}....st1{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<g>.......<g>........<path class="st0" d="M75.6,46.9h8.1l-33.9-38L37.5,23.4v-4.2H28v15L15.8,46.9H24v32.3h17.4V58.9h14.1v5"/>........<path class="st1" d="M55.5,63.9v-5H41.4v20.3H24V46.9h-8.1L28,34.1v-15h9.5v4.2L49.8,8.9l33.9,38h-8.1v8.3.........c2.9,0.2,5.7,0.8,8.4,2v-1.9c3.2-0.1,6.1-2,7.4-5c1.4-3,0.8-6.6-1.4-9.1l-34-38c-1.6-1.8-3.9-2.8-6.3-2.8c0,0-0.1,0-0.1,0.........c-2.4,0-4.8,1.1-6.3,3l-6.1,7.3H28c-4.7,0-8.4,3.8-8.4,8.4v11.6L9.7,41.1c-2.3,2.4-3,6-1.7,9.1c1.3,3,4.2,5,7.5,5.1v23.9.........c0,4.7,3.8,8.4,8.4,8.4h27.3c-0.9-2.6-1.

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44445), with CRLF line terminators
Category:	downloaded
Size (bytes):	44447
Entropy (8bit):	4.955724189964028
Encrypted:	false
SSDEEP:	768:Xu077lg3puj1J+FAN3YlWCOwkfaU+2ay0m78e3MmOL2IHl7SGAz2oTqHEuJzZDDy:+sYA9jay0m78e3MZL2CAzfTqHEuFK1uu
MD5:	31AA5C3EBEF1BB2E79CD8DEE20262845
SHA1:	FD9CEB609F4C60E0E8C5561CB933C84A85AF12B7
SHA-256:	65E09EC697225883FB227B54F59A2C421B5AF7A3B4F557770AB15D8934FF44CE
SHA-512:	927E39C17F03851FD52A6A71A1425CEE4DBE62BF4E8AEAF7F17248B9416763AE1AC7DB1120B5F25871D8742DD091293118C875B0000EEF06B83013B49AFDEA94
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/header/css/megamenu-v4.css
Preview:	.global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big,.global--navigation blockquote,.global--navigation canvas,.global--navigation caption,.global--navigation center,.global--navigation cite,.global--navigation code,.global--navigation dd,.global--navigation del,.global--navigation details,.global--navigation dfn,.global--navigation div,.global--navigation dl,.global--navigation dt,.global--navigation em,.global--navigation embed,.global--navigation fieldset,.global--navigation figcaption,.global--navigation footer,.global--navigation form,.global--navigation h1,.global--navigation h2,.global--navigation h3,.global--navigation h4,.global--navigation h5,.global--navigation h6,.global--navigation header,.global--navigation hgroup,.global--navigation i,.global--navigation iframe,.global--n

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/header/images/icon-personalize-stamped-envelopes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:cyprwis&fmt=3
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.601792583439656
Encrypted:	false
SSDEEP:	384:yj8V/gyNp3fNEdDH4YCC4NhwgF/0UYgzLpQfeEKDg4rCZ4+hDg6/JU0gHSpgfuEp:bvmNYxpTX1PQt2Leick6lg9m7uys0qJ3
MD5:	3144B066093A1EBCBF400F34463CA12C
SHA1:	490D00C6B00324EA2FF684643F8A58BF2948003A
SHA-256:	6B202BD0494A490602D5A6F7C14ED00D49AF3B76D21C75B91F4332CC4E8FCC82
SHA-512:	0A03B6884EFFFD80500BF6BA30794C5FDF75FB1D11D657C32295843D159A5E11CB6DA01A2BE3F4716AB48BCFC7CDDB81DF235A6BC000FD55003493A940844EB8
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487460484&cv=11&fst=1713487460484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=95328113","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3xC3vA!2sZklLZg!3sAAptDV5AGAIb"],"userBiddingSignals":[["377238866","

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 661, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54212
Entropy (8bit):	7.9728193816058335
Encrypted:	false
SSDEEP:	1536:ACOqvk/BG8/l9a4b+i1iLOE24gD3WmQAlcnAanUvZXuywg:AJqvABG8/O4bL1iCENgD+jnAOUUA
MD5:	233DA4E855F4939F869263AD8970186E
SHA1:	230803470829107C3ABCDB6985ADBA6BC738DDD2
SHA-256:	3513D7547C6F744BBE41ED4AE97B1D20C64B082C57519D848A692815EC840ABB
SHA-512:	D8CF74878879FE83B5EB30D32D71F7FAC7E1876280A88A9F095D59E551682F9C0018AA1997D1340F56AD61C96DE45070319EC0EDD02DA2073E226E4538880745
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/id_mockups-1.png
Preview:	.PNG........IHDR..............n.]....pHYs..........&.?.. .IDATx...w\|M....Wv$2....b.H..%...Z....J}..-5..R.+U.._....D..I.P..1....9.?.{.+!.. ...q..=....{..g..1P..!..B<.aQ.@.!.(.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..90......l......B<C...w`Q..eg.(JQ..X.....g....EU&!..p ,.+......+...$$X>......\|.r...ey...........oo.-N.R..c.'/O.&..........333...133......+..y...Irr2..n.R..............>.[B.e..9.l.S...qrr....{{{..B.WVdd$..<....DDD<+.....KJj.m...^^^.h......P.zuU.....3.........e....Sh!.x..7....:u..>KJJ..n...[\.~....7.....q......,......F...[W...9y.$......+._X!.(....8::.ysj.M....(DFFr.....#4AsII...t.\|.$g.i....=nnn...`jj..}pp0{......:u.P...E...f..].l............O..30.Un.}%.evA.n..W/K....?{........B-..B.g...].v...:.3...K...........i.R...m.K.4h.n..h.B...`.....H..B.\h...w..7.T....p.....xoo.uEP...J..'.[g...*U.D...t...'Y.\|.4..!D>9::2z.h...3..~`..4....'#\........:.4.....b.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	4.9820714220534335
Encrypted:	false
SSDEEP:	3:CKBfNenKPdMhaTINqTGdn:Cglr6lqTe
MD5:	499BDDE118BCC145842BF295877645AC
SHA1:	22723EA54194F297685365A3F967BFC3B10E9623
SHA-256:	0544E2E1AF12535B98F13FDEF72B8D6E29FAF59873167FFA3B97140F01FC8809
SHA-512:	2DBA154469FA0ACCC38461ED4FDE96A279F0305F07DF5C1C308F8A6229CEEA2A042621E1AA6D73E5F829B257C8CC662E0C5926348E05157FAE519833335CFE0C
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/jpuid?jsonp=RB.jsonPUID
Preview:	RB.jsonPUID({"rbuid":"rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36"}).

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487458951
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	4.7647254545399695
Encrypted:	false
SSDEEP:	3:p23xQLFkMVXcYCLGFfQRCpAML+mK1RNdI:pzFkMVKLkt+91RN+
MD5:	EA38E8196B75D9720BC3902D6D735130
SHA1:	165284464C58D7F213C1211F2C433873299E4527
SHA-256:	CDBF334E8E860AAF1665D2AC56113F51F1FF304B63CFF897BEB969C8DD5597D9
SHA-512:	72D45499ACB16AB463AC7D93368F349ABBF3DE6A6BC93719527AD160731213F0E10F4ED7A5627A00FD14D9F8F2988D7FFAB115B6BE5CAFA25C77D0E25F239707
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/require-jquery.js
Preview:	USPSRequireNS.define(["jquery"],function(){return jQuery.noConflict(!0)});

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	5.064383085599273
Encrypted:	false
SSDEEP:	48:7VtUpN2/WsVuaEJRbDWfBKyCaEGqfLaEiiOqaEwaENrt0dXFzx/:AN7dKJPqf8iOT0dR9
MD5:	B60628830A1D34363F98C9443B856555
SHA1:	BA386FDD91D2DB7FB6749982CAA78BEF59028077
SHA-256:	68482663E769A15815D142D88F7A4D8105C02FE2BD37A9899A019B518F17A2B3
SHA-512:	7E87EE73897DCC780023CF2D719209974522DC9C0DA9A117C8B688965275C098FD7DFD8B339E8A7E05BA4B50EA19973885843FB0BE8B082E968F1E66F5BBFE7B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/scripts/OneLinkUsps.js
Preview:	//..// OneLink() method for USPS site. Coded for staging and live sites...//..// History:..// arivard :: 10-Aug-2011 :: created....//----------------------------------------------------------------------..function kDebug (sMessage)..//----------------------------------------------------------------------..{...//alert (sMessage); //-- uncomment this line to debug logic....} // kDebug....//----------------------------------------------------------------------..function OneLink (sLanguage, /optional/sHostname)..//----------------------------------------------------------------------..{...sRedirectTo = sHostname; // by default.....if (!sHostname) {....// if hostname is not passed in, use the current location:....sHostname = document.location.hostname;...}......// is we are already on a translated domain: en-, zh- or en-...if (sHostname.match (/^[ze][hsn][-]/))...{....var sExistingLang = sHostname.slice(0,sHostname.indexOf("-"));....kDebug ("existing lang = " + sExistingLang);....

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17584)
Category:	downloaded
Size (bytes):	17585
Entropy (8bit):	5.227198474332325
Encrypted:	false
SSDEEP:	192:tdUnqK2Ils6WOmXoNIpMI8xQAuxwRo3NdPXOWVrD3PT7iO5xfg0yy3n5TpFUEKCP:tYL66eXoHMaRorPXHVrJJnhpiy3gtc
MD5:	69648FFA0E24777FD6C09273C1DA6B0E
SHA1:	B4A3604DAFA2560C9504FF52AFF06D2172FDFDDA
SHA-256:	CC0A16B9CC4DC240BCECF6D80B11432787E455E26E7463872DA2C343B21976C0
SHA-512:	9E45FAB78CDAC270B6C1F607DBCF3E9EC438C2429A91740C25B0E332743DE703935B65B6300FD78B0EFBFCDBDE7CE28308C5EDBB4B9B6AA6EB833633CBFC6746
Malicious:	false
Reputation:	low
URL:	https://storage.cloud.kargo.com/kds/kds-events.min.js
Preview:	(()=>{"use strict";var t=function(){this.FromKargoAd=!1,this.KrakenBidID=null,this.PegasusBidContext=null,this.PegasusBidID=null,this.KrakenBidID=i("krg_imp_id"),this.KrakenBidID&&this.KrakenBidID.length<=38&&this.KrakenBidID.length>=36\|\|(this.KrakenBidID=null),this.PegasusBidContext=i("krg_ctx"),this.PegasusBidContext\|\|(this.PegasusBidContext=i("krg_p_ctx")),this.PegasusBidID=i("krg_p_id"),(this.KrakenBidID\|\|this.PegasusBidContext\|\|this.PegasusBidID)&&(this.FromKargoAd=!0),i("utm_source")&&"kargo"==i("utm_source").toLowerCase()&&(this.FromKargoAd=!0),i("krg_src")&&(this.FromKargoAd=!0)};function i(t){var i=new URLSearchParams(window.location.search);if(i.get(t))return i.get(t);var e=new RegExp("".concat(t,"=([\\w-=]+)"));if(window.location.hash.includes(t)){var n=window.location.hash.match(e);if(n)return n[1]}return null}var e=function(){return e=Object.assign\|\|function(t){for(var i,e=1,n=arguments.length;e<n;e++)for(var r in i=arguments[e])Object.prototype.hasOwnProperty.call(i,r)&&(

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2586
Entropy (8bit):	4.585693095892307
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMkr7OpIhd0Lc6XS2xmpzO0Bse6Tr7hsKDWo6Ir4WPkE8q2exrgVcQL:L0uVYshU0Lc6XozEeor7CgWoLr4qkEc7
MD5:	9B913BC84D41EC1C78DA5889D36E1431
SHA1:	21B0075C9EC43A7EC769DDE1D1EC8149B0686C0F
SHA-256:	87D11356A8F76EF3AF3C6D46BC4958CF3746E9A5B69E81D1DF952B274319F539
SHA-512:	9333175BF716DD95A42F1742E611EEFA2962B3B8CD4A67535E7897DEC4B401299CB0D79A0C17BF1EE10CACF8CE1C10E9C61EB91682AB97AD3BC3C201AB8A2D88
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M50,50.9c7.1,0,12.8-5.8,12.8-12.9c0-7.1-5.8-12.9-12.8-12.9c-7.1,0-12.9,5.7-12.9,12.9......C37.1,45.1,42.9,50.9,50,50.9z"/>....</g>...</g>...<g>....<g>.....<path class="st0" d="M50,100l-3-2.4c-1.2-0.9-2.3-1.9-3.3-2.8c-2.1-1.8-4.2-3.8-6.2-5.8c-4.2-4.1-8-8.5-11.3-12.9......c-7.8-10.5-12.5-20.7-14-30.6c-0.2-1.1-0.3-2-0.4-2.8c0-0.3-0.1-0.7-0.1-1l0-0.4l-0.2-5l0.2-0.2c0-1,0.1-2.2,0.3-3.4......c0.2-1.6,0.5-2.9,0.8-4.1c0.6-2.4,1.5-4.9,2.9-7.8c1.1-2.3,2.6-4.5,4.6-7l0.2-0.2c2.2-2.5,4.1-4.3,6-5.8l0.2-0.1......c0.9-0.7,2-1.5,3.3-2.2c1.1-0.7

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1133
Entropy (8bit):	4.887351854092952
Encrypted:	false
SSDEEP:	24:EhGAmI+3yqcxHbwbBEXRb7BEzirVMCTXplfvHVpMLpnq/LIlMk3xHWhg6nqTkvLO:aY3yzYuFrVv5p1aLJaaxHrtoC
MD5:	5C56BE7D9529952B52D9733B1A01AD61
SHA1:	CE49BF25BA12FF232E372E284F4776E3E7AFDA5F
SHA-256:	F823628595E886F2E279E5A40621D6BDB2C47512A8B29F4556ED450018B7C7DA
SHA-512:	E5DA2BAB56E7B62905F613E6E98985EAA19D9C92212CD0ABF58FFF047437505AD035DE3B1A42B4DE02A8256773A6DE4E6292B88A039B37BC457A3DDD31A93A7F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/welcome/welcome.js
Preview:	./* when user goes to a new slide focus on that slide /... ....$('.carouselslide').on('slid.bs.carousel', function (e) {.....$('.carousel-item').removeAttr('tabindex');.....$('.carousel-item').attr('aria-hidden', 'true');.....$('.carousel-item.active').attr('tabindex', '0');.....$('.carousel-item.active').attr('aria-hidden', 'false');.....$('.carousel-indicators li').attr('aria-checked','false');.....$('.carousel-indicators li.active').attr('aria-checked','true');.....$('.carousel-item.active').focus();....})........ .. / Add active class so that arrow doesn't dissappear after it fades in /.. ..setTimeout(function(){......if (($(window).scrollTop()<$(window).height().2)) {.......$('.false-arrow.opt3').addClass('active');......} else {.......$('.false-arrow.opt3').addClass('fadeaway');......}.....}, 800);..../* when user scrolls fade the arrow away */.....$(window).scroll(function(){......if ($(this).scrollTop()) {.......if ($('.false-arrow.opt3').hasClass('active

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.603882157619576
Encrypted:	false
SSDEEP:	384:yj8V0g8KpgfuE6DQ47Cp4OhTgq/ZU/gB6p3fNEdDH4YCC4NhwgF/0U+g2+pafkEi:Rg9m7uys0qwvmNYxpTX1Zq3UZ4U6uw7A
MD5:	70334FE3C8FBC89ED427AB99AB7827E5
SHA1:	5736AB910B29EA8B485C4AFCCF5415234D31227F
SHA-256:	C6ECADDB51501C11E239718694F87BBA1C44A23222230DBCA4CE2E7ADA339258
SHA-512:	E0CD3D75A39059FBCCF3E096A4B59683A7CEF4BF56D172909D4B17A8869B513460196637FDCD0200554EFC9D3810C67C2BD795A9EAA864AA8D3001BB51AA38D1
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487505235&cv=11&fst=1713487505235&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&hn=www.googleadservices.com&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sTQtn_w!2sZklLkw!3sAAptDV6EYKaE"],"userBiddingSignals":[["481529751","80

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	55179
Entropy (8bit):	7.924643088030909
Encrypted:	false
SSDEEP:	1536:4m9koO4LhgRHqkxfVocdKMkh/M0pri7WEc4V1D:4Mkolh1MfEe0prFUl
MD5:	7B29DE5BED8001EA03B5D3DE99516090
SHA1:	50F39287F023E8FA46FB1189C88D2AE6B4474061
SHA-256:	BA681C87D547769342E976B5D1FA00E5E53D22178CA6BDC1E6B86E6732CA4167
SHA-512:	7C6A14FC2717001439FC481593B944A1DCF794098FA8F8CE8EC09D2010BA294915B3B2CB99129F025CB7A60081E78E9E426ACB693C3916DB868BD2BA7C8FEF3E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-swag.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1861
Entropy (8bit):	7.779859366249404
Encrypted:	false
SSDEEP:	48:Q6MU601+/EiV+m7KpnPEJxPEW/4+F4+qxlDB+UR:Q6MU6bsiczQxMW/dEld+UR
MD5:	C1634DCB297AB2B319DE76A86F3FF7D9
SHA1:	0BD0A8531E9207AF913FBB02E48198C308BE839A
SHA-256:	34CA4B653EAC19324221E6987AFAA76C010F107BFA49D984F7814AA458CB8D92
SHA-512:	5FAF0B50B957C2BA6677EEDA54B7B7F272001AF09A3E9F3FDDC250F60FFE83A1C635C226B262F05F1ED177905D090CBAB4DF30BE9165421A5599CBE1155E3E37
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/threads_logo.png
Preview:	.PNG........IHDR...&...,.............gAMA......a....8eXIfMM........i...........................&...........,...........IDATX...i..U..5w.....Q.-.EMMA\.6.3.[(.m5.D.He.R...)"...f...iY...Yf...\..........9...{....S.^.u.CJah.......p.v.&X...J..'.......p....nt.....N.7^.O\.........nb.:H[.v.n'xu.a3.\|c...z@..'..9...=..#.c.o....2....p...c...0..Cgh.. ...$..N....B\|.S\|..`.4.bu..>......xn...K...@...G....&......4..@....K..h.....B]j$.m.xs..vI.....Na.....!Cb....w.+.M.....P....$.1...@Kh...^.}....5..^.......o]..,.$...w......m...~.....$..x#...$<-.]o....v..z..S.........r../A..".T...a....2...&t.-'K.....x./...}7H.i(..A..yQ.!.^O....S..x..n.l.=T.z ...M.m!Ich4q...a.d...;,...^W.F..L.n...7.).R0x..._.0..t......8..L..gvkG...........^.8Y...xQ..U..{..ej0...'..a~.\|}.A.......'.t....F..h.-.$KKJ..A..a.#_......3..W5.........Ii.n.(..Wz.\K.C.....d....f.U.Z.@.p..H[.t3.^...1...e..g::Q..f.0.6..a.L.2H=..............Xz...K].e-e..S..[w.9`.9..AA.......ver].K......ch.=.a.1.j

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	613
Entropy (8bit):	5.454183883395629
Encrypted:	false
SSDEEP:	12:TMHdPhfMi/nzVm5/KYccELNNhHHymhdhkPxWkpI:2dRMAoLPELLhHaPxlu
MD5:	10748A273EC4D5A4BB4376A47BE3A3BF
SHA1:	ACE6FF951394B7E04218B83F6B1AE85EA7837FE2
SHA-256:	D2097D21CCD9AC48D30D4CEEC62564043BE82968EFC9FE4D939BD32880788983
SHA-512:	1909017A655E611A93F0AE208735AEB6FAB77217BE75FD2DF31B6CCA11E9E6AB633925027D87E3C3CAF85602993F08736844C146A70904E9FF7F14CCD6C1668E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px".. y="0px" viewBox="0 0 162 162" style="enable-background:new 0 0 162 162;" xml:space="preserve">.<style type="text/css">...st0{fill:#E71921;}.</style>.<g>..<g>...<path class="st0" d="M81,117.8L34.4,71.2c-3.9-3.9-3.9-10.2,0-14.1c3.9-3.9,10.2-3.9,14.1,0L81,89.5L113.5,57....c3.9-3.9,10.2-3.9,14.1,0c3.9,3.9,3.9,10.2,0,14.1L81,117.8z"/>..</g>.</g>.</svg>.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1273)
Category:	downloaded
Size (bytes):	3080
Entropy (8bit):	5.794125713923267
Encrypted:	false
SSDEEP:	48:NOiDITryfRN87cp5yMh55RN8gbg1fe4wz90vIPCJIb2fAmQpwa8VY82Xuhf370GC:DDcryfyS5yMh55tbgInZunThVYLuhvk
MD5:	3745850B93BFD4572FEF85BB091B27AD
SHA1:	7F17EF38B93B408B63F537AD717463A4CB19056D
SHA-256:	D16F22F6E3340AD70C902D0A2DFBA1E0F0A31A97CAF3C048E482ED4BF964B9ED
SHA-512:	108D67A5730DE322769837AD2C58C57C754F015B931502130B7D4D438A62E0EBEA8F72BA484798666A91895D47F714A7B3E164A6D88F459CD8DDC2E3487B6E1A
Malicious:	false
Reputation:	low
URL:	https://3976941.fls.doubleclick.net/activityi;dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ " type="text/javascript"></script>. <script type="text/javascript">. ttd_dom_ready( function() {. if (typeof TTDUniversalPixelApi === 'function') {. var universalPixelApi = new TTDUniversalPixelApi();. universalPixelApi.init("v62w3xt", ["f2bxyaw"], "https://urldefense.com/v3/__https://insight.adsrvr.org/track/up__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjL

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.7092327439724695
Encrypted:	false
SSDEEP:	3:YTyLV/VffcB+xNVcSLQzRE9LduUBjd4:YWLV94iDLQmpddB4
MD5:	5143820DAEB644938735D6B28C0059E7
SHA1:	22316BB57B4FA755662FD6F5FB7F749B21AC32A1
SHA-256:	740BB313221BDA5543B6FBE0BCE3DD276CC70C4FD9AA0BAE9D46B149406BECF5
SHA-512:	ABABBC2935D02EF31FA6FD14F56CF781BA8015A0DBCF8AB05CC7CFECBCABCA4B2B4E37B5B0BBE0341948DA7902613F4BC7EEA1C1FB8E9D142B3EC1D61084FBA6
Malicious:	false
Reputation:	low
Preview:	{"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4007
Entropy (8bit):	7.761828960398776
Encrypted:	false
SSDEEP:	96:rZ/I09Da01l+gmkyTt6Hk8nTTaFP841IWEj5Whyxw:rS0tKg9E05TaPBOWENWhyxw
MD5:	A40CFEA8FD27BE68BA76CBA652FCFCDF
SHA1:	18A78217DCE2CC5D1AB3CB54144878DBFB34C9F8
SHA-256:	E1CAAC24624AC8C5AAD46F92D972B1F1F292D90E61F9267A0EB447C6C2C76073
SHA-512:	7CA6316488C26337EADF03AA209934690EEB62E72AB2B12E0B529A5D2F33878AA893BC3097E128831616E6712BF2F10A461A486E2E4F58A2C87DBD402A1C65DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.....l......EiCCPICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9., +.....3...!.[..b@q..S.(R.jJ.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm?
Preview:	<html></html>

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17192)
Category:	downloaded
Size (bytes):	17423
Entropy (8bit):	5.227415277419737
Encrypted:	false
SSDEEP:	384:Ekh4TtpqsBojXi8Vq5EJN+bcTxHFED/5y13t3UoBtliGIHrXyVtMrveb8POe6Y+:V2bqooDi8SeEbEHFEDhy13t3vXxEyDMY
MD5:	16E572A4F80526DF4BC3CC7FF056A9A8
SHA1:	F23B5C2FD52E855245E3D2586CD911051561E64C
SHA-256:	75237772A7BC8C6EAADBE642BE69503335C5842AF8981688250A8D4F0F61C377
SHA-512:	8AE4B57782C5A5A6CE2190D8C02901AD83B24CA9FA1E2427C8B6CB5981D98146C9A6E2E4B7F77ADF954198D540ADE5F5FEDA0FFE919356338CC56B67EF40A26B
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/lib/script/requirejs/require.js
Preview:	/** . vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */..var USPSRequireNS;(function(){if(!USPSRequireNS\|\|!USPSRequireNS.requirejs){USPSRequireNS?require=USPSRequireNS:USPSRequireNS={};var requirejs,require,define;(function(global){function isFunction(e){return ostring.call(e)==="[object Function]"}function isArray(e){return ostring.call(e)==="[object Array]"}function each(e,t){if(e){var n;for(n=0;n<e.length;n+=1)if(e[n]&&t(e[n],n,e))break}}function eachReverse(e,t){if(e){var n;for(n=e.length-1;n>-1;n-=1)if(e[n]&&t(e[n],n,e))break}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var n;for(n in e)if(hasProp(e,n)&&t(e[n],n))break}function mixin(e,t,n,r){return t&&eachProp(t,function(t,i){if(n\|\|!hasProp(e,i))r&&typeof t=="object"&&t&&!isArray(t)&&!isF

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2834
Entropy (8bit):	7.870974779174701
Encrypted:	false
SSDEEP:	48:z6XMGjPopKxSxUHrCEscOMNuooPi/8brdejcgH6NLnxZtgLv8LhCraR39H:z6XHiKsUmEsBPsC+otgLvahCW39H
MD5:	0DF7D729DFACA5128E527AB2E5A331DE
SHA1:	B3C91CEF7BAF2784B5A94A00EEBE32EE65EE201D
SHA-256:	51CF5C07C22FC839C460A34C42A4F75086AF35461EA3F57482EAB5187A86BC96
SHA-512:	48AA27C7606C83A3A60A1EE6E3C9B7FB2591A151E78913E0BB02E252C530914D3A0C476C3E6007EA09A247398A9136E9FF9E06CB1C2FBB75AC2A8D54382E270E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/instagram_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..Xk.U..^k.s....f..xu.4.a@J....F;.%...?5u.4}dh...%->...m..4...$.c)QJi..j.AM.1T....y\..}..>..:.C...m.d..{...o.k...L.....+..^..>.v..q..&.l.u).4E..Fy...1..(..\<=...S...U...V\.O:...2.Sd.OE...sj......+...&....G.k..Y.a.1)....>9d.....;....1.....3.zD....F.F.E..c......Y..\|..\|1.9...X..a....C..8.....0.......x.g...Ki$W...s.H.5.w.....&.X.U..C....@.......,....{C.z.!.Z".`...dJx...?.Qx..a...8..\.S...A.y..E[V...Q`.Aq..MDf1+{..Y.....cL..............7..\...rm1s.D..../.l...F..Q...S.g.../..].-H...(.`......HU....a..Z`6..te...JR~..{.[....>.z5ev..>..`..E.lF.S.,V.9]..l..[......-?..@..z.OY....k...p~.{W.w.;DQW.0...R..p..Lm....T5i....5v..;4..0.v.9}l..=.W.?PrU.U.Z.$.~......[...!.X..r.^n.I.._:..{z...'F.w.J.^)+..W....0Y.\.sZ]....-......'.wC...SP.]..}..w..1.`...;...;Ge`..R...b.PY..9p.8'e......zfH..N,....p.T....)$2.R.....tX......Y.'..'.K...pd..-.~.c.X.{.F.

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 57 x 64, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1950
Entropy (8bit):	7.377152003290462
Encrypted:	false
SSDEEP:	24:Bg1hfvWwjx82lY2T3iVSgyJ3VwWvG8xQ6qPQrkEqqYNQVJkY0cgQqdWLKWszrFoV:sANn2ecJ3LuD8YNQVJk3cgp1L2NhL7AM
MD5:	E71831CE09557543F536D8FD046F3888
SHA1:	0EE46DC7D5B18C30AF23DDACDFA9244F530A3299
SHA-256:	CB37096768DCF9C6B8E58257CAA4457FAB323636774F65A12DB017BBB2639F18
SHA-512:	2D6769F4010FAFDE089352FF921ADC20F73ABCAD67B0F5FE1F0D9BCECDBDA1DB371F32A2374D2BBEA4BEB006354D732B1DAF2CC02C012841F935381E65459218
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...9...@...../WH.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)" xmpMM:InstanceID="xmp.iid:70AFA61CD4C511E79ABBCE470FBE2C79" xmpMM:DocumentID="xmp.did:70AFA61DD4C511E79ABBCE470FBE2C79"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:70AFA61AD4C511E79ABBCE470FBE2C79" stRef:documentID="xmp.did:70AFA61BD4C511E79ABBCE470FBE2C79"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>U..x....IDATx.b...?...L.C..%...Y....:..Q...u..n.u.[.l43...E@.d.j...7mz.......Tq.M....8ab......3...@.Pp0...;..T.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2238), with no line terminators
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	5.856033419155638
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08cI3oxQSWKC6:wsbSUtJfxrqLWWWdV6j1wISZ
MD5:	663B4E02728C99F5C79C05F6FEF606F5
SHA1:	1B28F4A26C628821ECE3DAD6F4DB13E80A81FD9B
SHA-256:	6BE21E23B188AF81BB4C575FA2D76A02AF7DEFDBACA5D48F6CA77984C494C81F
SHA-512:	D7D87CDC411F04C7989699BEBCE8E9C6FBC58FB26E6302869AA169F914220D30AF7911FAA31668069F7413EA8BBC6AA7AC50E38AA5F188B9AA1001679EDEF9EA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487477500&cv=11&fst=1713487477500&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49790), with no line terminators
Category:	downloaded
Size (bytes):	49790
Entropy (8bit):	5.577874957489914
Encrypted:	false
SSDEEP:	768:wDjM+SHcxOQFCCqaLYdO73Iy4sMc7XIT1:wnM9IOrOIy4soT1
MD5:	4A85E934113E0AA582A90CF32FEDD880
SHA1:	D1EDC8F7771E0F201CE6A7B5A672BD04C8E82EDD
SHA-256:	C595320EC1682B8E1502E96E1216A03582EA7162F22D1683E66CA0CA40605777
SHA-512:	1A52763F1228676D7F081CDB0474968D58E5B63B2FE84651AF31ACC1C19359E958AC6E3C4C566A8F46BCC5B38464B2122FD2BCE247A813F1FB69E4B3A6D33E94
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/libs/moment.min.js
Preview:	!function(d,c){"object"==typeof exports&&"undefined"!=typeof module?module.exports=c():"function"==typeof define&&define.amd?define(c):d.moment=c()}(this,function(){function e5(){return b7.apply(null,arguments)}function e3(b){b7=b}function e1(b){return b instanceof Array\|\|"[object Array]"===Object.prototype.toString.call(b)}function eZ(b){return null!=b&&"[object Object]"===Object.prototype.toString.call(b)}function eX(d){var c;for(c in d){return !1}return !0}function eV(b){return"number"==typeof b\|\|"[object Number]"===Object.prototype.toString.call(b)}function eU(b){return b instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(b)}function eS(f,e){var h,g=[];for(h=0;h<f.length;++h){g.push(e(f[h],h))}return g}function eR(d,c){return Object.prototype.hasOwnProperty.call(d,c)}function eQ(e,d){for(var f in d){eR(d,f)&&(e[f]=d[f])}return eR(d,"toString")&&(e.toString=d.toString),eR(d,"valueOf")&&(e.valueOf=d.valueOf),e}function eP(f,e,h,g){return bC(f,e,h,g,!0).utc()}function e

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=*;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10291
Entropy (8bit):	4.416944708176675
Encrypted:	false
SSDEEP:	96:ZfBjgcxZKFu/PJGfGOi8fsQORbMruCJ0y:XjguguJWKsUCT0y
MD5:	4D6E9F5F24A5D9AEC64D39B867CAD890
SHA1:	29F3AC2225872CB7B3B01450762820943350D710
SHA-256:	97B16B9F172577EC2517229343B013F6716386FA8B927D6C339345BEC662B973
SHA-512:	698F71B81D8AC04C92B89F6DFF99110D49926FC3C8D5F7CA84FECFB0419D513735CF3DADDE711E67803201DFB98567DD90072C5AEEBF022AC245B1F2BD2F6732
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/button-styles.css
Preview:	/.---------------------------------------------------------------....@filename..button-styles.css....@author...aziz.syed@akqa.com....@description.buttonss global style definitions........Content....1. Buttons../...=========== 1 Buttons ===========../../.. * Large text box.. /..div.input-text-lg span {...height:27px;..}..div.input-text-lg span.input-cap-left {...background-position: 0px 0px;..}..div.input-text-lg span.input-field {...background-repeat: repeat-x;...background-position: 0px -32px;..}..div.input-text-lg span.input-cap-right {...background-position: 0px -64px;..}..div.input-text-lg input{.. margin: 7px 3px 0;...height:14px;..}...dj_ie7 div.input-text-lg input{...margin-top:5px;..}..../.. * Large text box w/ bold border.. */..div.input-text-lg.too-long span.input-cap-left {...background-position: 0px -168px;..}..div.input-text-lg.too-long span.input-field {...background-repeat: repeat-x;...background-position: 0px -200px;..}..div.input-text-lg.too-long span.input-ca

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 34
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.876279499401526
Encrypted:	false
SSDEEP:	6:wvpRimsloM5NcFelVl5K/CnlGl+dAHqBJH:gpUlhRw/QMkdQGH
MD5:	1D286FA7B2A8B52CD9C56265A44E0B28
SHA1:	5BF16C199106556FA290E24833E31C745EBDAE5D
SHA-256:	D99EDA8435DC3777B6B06C691F1D55CDBC7D61E61C644BE140ACD60ACF8358A9
SHA-512:	86452ECB212E5FB262C71416A92361A5C86B66D2B5B9B0EB89A89DB7EEC63BE676A451D9C6A9E164C4B501D905E7A478EB2948A8F3E4CBA4722F2BE1EDEA5E1B
Malicious:	false
Reputation:	low
Preview:	GIF89a..".................................................................................................................................................................................................!.......,......"...9@...x..*Zr...J)P. .D>0..p1.8....2.H..e.`d...j.O..Z.%.{jA.;

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F?
Preview:	<html></html>

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2535
Entropy (8bit):	4.94544014004298
Encrypted:	false
SSDEEP:	48:sxWbgJPABPcJ09JseJel9yl47fFfeU2pYdEdfTz5+MOEei:sWuAB1ntJEYqWUxdmfvVOli
MD5:	F7337D7D3B1B1AF555348038D684BC08
SHA1:	0063EBB65EBEC0CD39E3D060D71CFE25398E41E2
SHA-256:	8C84EFD0A5E9BB67A1ECC895C6AB1FFE3731CF0664D1502D95234B0521CFB797
SHA-512:	7A6EB41B3023167D0F29A38DE85F203D34ADDD69EEE2172F01E60C74823BBD5341336E14FD70DD583CF309F09FD6788D4FF94124617A507EF6385C8B8ED96ED8
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/printcustomsforms.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><clipPath id="clip-path" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="389.35" width="20.62" height="2.75"/></clipPath><clipPath id="clip-path-2" transform="translate(-628.92 -332.02)"><rect class="cls-1" x="656.46" y="403.35" width="17" height="2.75"/></clipPath></defs><rect class="cls-1" x="27.54" y="57.33" width="20.62" height="2.75"/><g class="cls-2"><rect class="cls-1" x="26.54" y="56.33" width="22.62" height="4.75"/></g><path class="cls-1" d="M656.46,396.35v2.75h24.89c.34-.93.72-1.85,1.15-2.75Z" transform="translate(-628.92 -332.02)"/><rect class="cls-1" x="27.54" y="71.33" width="17" height="2.75"/><g class="cls-3"><rect class="cls-1" x="26.54" y="70.33" width="19" height="4.75"/></g><path class="cls-1"

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28255
Entropy (8bit):	5.163440981851425
Encrypted:	false
SSDEEP:	384:ORhVDUV+Sw0FKrUQ/yj1W5+y/8C+p5/PC0pfRGtBaHp9aQ:ORh5UkSw0FcUQT5uC+p58/89aQ
MD5:	37D25CA3E365511BDBC7ECEEF2288B84
SHA1:	62D2E54FBD00C42D6DAD82A735E37E92C1D7B651
SHA-256:	95DB3553D078A2F46B475D396C2E07DC1933B6E5433658BB9BAD71E8EED93CCC
SHA-512:	883B97721EF2C16EC66E39F2A838D6986B2232F6D18D17B86782999226A067209AF625AA31D4DF53BC005E09142A56DCB6AF99057106439D511A76B5E9F0E06F
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/welcome/welcome-styles.css
Preview:	/* FONT STYLES / ..body {...font-size:16px;..}..::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /...color: #000000;.. opacity: 1; / Firefox /..}....:-ms-input-placeholder { / Internet Explorer 10-11 /...color: #000000;.. }....::-ms-input-placeholder { / Microsoft Edge /...color: #000000;..}....input#home-input, input.form-control::placeholder {...color: #000000;..}..input#home-input::placeholder, input.form-control::placeholder {...color: #000000;..}..h2,h1 {.../font-size:3.0rem;...line-height:3.25rem;/...font-size: 32px;...line-height:36px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;...color:#333366;..}..h3 {.../font-size: 2.25rem;*/...font-size:22px;...line-height: 24px;...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;.. color:#333366;....}..p {...line-height:22px;...font-size:16px;...font-family: "HelveticaNeueW02-55Roma", "Helvetica Neue", Helvetica, Arial, sans-serif;...c

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5326
Entropy (8bit):	5.014199483319042
Encrypted:	false
SSDEEP:	96:ZvsMWmzPbCkmWWr9+fUcdhkecjxrqhi56m4qv9heiqvDWuhcdWxhC8hcmoMjIhFL:NsMvb+HMBhkdxehism4mheimWuGWxc8U
MD5:	18B1052B7E301A57EE5805DD9AF70D8F
SHA1:	9E6FF41353798773474192CFF7788786E420DC9E
SHA-256:	686EAC49F1849FF94E7311D7A888A71EBB522D97179F96ACC2B66B8CFC55B3BD
SHA-512:	169299F381142BB10D30F831EFF3DDA8832D01D1F50706AB4067AB88A74FB3876A89019E880D6B04953156DB8CC9B4E116C0CE603ED7E768B20F03E736105265
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/modals.css
Preview:	/.---------------------------------------------------------------....@filename..modals.css....@author...aziz.syed@akqa.com....@description.global modals style definitions........Content....1. Modals....2. Product Added Modals../...=========== 8. Modal ===========..*/....div.force-modal-close{...display:none;..}..#modals{...position:absolute;...z-index:10000;...top:0px;...left:0px;...display:none;...min-width:960px;..}...#lightbox-background{....position:absolute;....z-index:10001;....top:0px;....left:0px;....height:500px;....width:700px;...}...#modal-positioner{....margin:0 auto;....position:relative;....z-index:10002;...}....#modal-window{.....position:absolute;.....z-index:10003;....}.....#modal-window-inner{.....}...........#modal-window-inner div{.......position:absolute;......}..........#modal-corner-tl{.......background:transparent url(/ContentTemplates/common/images/global/modal/popup_top_l_corner.png) no-repeat 0px 0px;.......height:38px;.......width:9px;.......top:0px;......

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/footer-logo.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	5.2661065369779845
Encrypted:	false
SSDEEP:	24:2dD5AnLMDeonHGbJ9qE3BOaw5k5U4H6IJxHjtIdbRcwtDcORw:cFALMNHMJBOhS5Uq1xDtIZ7tPC
MD5:	E30AAB66BAD715F4FEF4B6C42F8490D2
SHA1:	40BE7A560B0687CF57C7EF0C0600CA08203A680C
SHA-256:	AA6FF55C203834F667CBB01CEDB0D409FF3B8F1B5A4DE8C89A79B2E7034A8001
SHA-512:	C3E0F4F6A9DE3CF3073761FEF539F861ADBA80387644403CF405055986EA4563DF7B847984841DE41ED23DD2CE38AF535376D50752AE63A4C80D622CD58E2F4C
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/find_zip.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M20,46.9l9.3-10.4h-9v-4.3h16v3.7L27,46.2h9.3v4.3H20V46.9z"/>.....<path class="st0" d="M39.6,32.1h5.1v18.5h-5.1V32.1z"/>.....<path class="st0" d="M49.7,32.1h7.9c4.7,0,7.7,2.4,7.7,6.5v0.1c0,4.4-3.4,6.7-7.9,6.7h-2.5v5.3h-5.1V32.1z M57.2,41.3......c1.8,0,2.9-1,2.9-2.4v-0.1c0-1.6-1.1-2.4-3-2.4h-2.4v4.9H57.2z"/>....</g>....<path class="st0" d="M98.8,95.7L75.6,67.3C87.7,51,86.4,27.8,71.6,13C63.8,5.2,53.3,0.9,42.2,0.9S20.7,5.2,12.8,13.....C5,20.9,0.7,31.3,0.7,42.4C0.7,53.5,5,64,12.9,71.8C20.7,79.7,31.1,84,42.2,84c9.2,0,17.9-3,25.1-8.4l28.6,2

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	downloaded
Size (bytes):	98412
Entropy (8bit):	7.963762182600066
Encrypted:	false
SSDEEP:	1536:45sh0NQ0NjcX+aemW2P2CdzMnP0V3EpFkQPOod1eMzApvbtVibrNzbaslVu8koq2:4ahSpUeEzQPhhkpztVErEs3ucqmnwfA
MD5:	3C638BEFC7B6A75C2E3E540D5DC06E45
SHA1:	ABC603B4E3E28CB3F86B4868A4337456AAEB9370
SHA-256:	1F3B08D27591A755F7C339147307C9113C46DD7DFAC752E463864B82DAE10EB0
SHA-512:	7304C22488E05380A510E92D09B6EC264C91D25C517C4DA889BEB4BCE16D38A2402FE23F8551A8C431BF78048FC71A44368BF14E70AE1B05FCD5E244838397A6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/carousel/apr24-cards.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "main.6192ffb7.js", last modified: Tue Apr 16 00:18:16 2024, from Unix, original size modulo 2^32 70341
Category:	downloaded
Size (bytes):	22983
Entropy (8bit):	7.991235543566239
Encrypted:	true
SSDEEP:	384:IKJo7s64B9/CGQHNi/HgjWPA7ZuVH7691O0ynxgrEgIAKJ9zWWpcXVLIT:IKm464B9/oHNif5A70Vb69tynEEgIl91
MD5:	693F1816687516917019537449BD881F
SHA1:	64DDE99EFF4CD12DA671B6F5E497444114340E3B
SHA-256:	15F6FB5999F4A9F6E17045912FDCB177AAF94824C66B6E6FB1A5D4B061BEC5E7
SHA-512:	73F591F3A4786815920714FCA8AB18FD6F19E00586128CFF2384B45383106F00E884C9F3279A48BE9A37EDEC5CA0A3B3F726644AC1C3F7409A6BC56042359AC6
Malicious:	false
Reputation:	low
URL:	https://s.pinimg.com/ct/lib/main.6192ffb7.js
Preview:	.......f..main.6192ffb7.js..\.s...2g..!...,;.......^.t...:.... ....H...~......H.q..66..............$.6#..q.K..v..{.-T3.fL....3q.....}HB....e.......e.h8..k...v...uF.fM.<...[...27..i.?..B&.e@..S.$....?.\..l.p.K..L..n....,./.,..WL.lK.@/3......u@...K../....W..".".._}...........u.B..tQ...%n..Va....B)j...........~g60.=...V........,....}..X.}q..-..3..f.b.&H............ZX..U.9.1.8r....,..b.K...u.z.k....B..^&\|!q..!......7.P.$.1..U.br..y..<.j....Vl.X..GI.bW.Rr.&KE.s.......<R./ ..jYn.L..}f....../g=.....`wZ_.?m...)...7..G.VJVOe5.../...8..../..../...:.....x4....w4:....h[..............gw._c~.N......au.E.....Y...._..U-L..H....\|.%wxq!.wqAW5.C...MAtg........H.........co6b.. k....EpE......z.D..e..V...H.5...]+..4.e..y..~=...y.L.ub.8..-.,...+P!.z...].^.+.Wl-..I=.D...x0.....M..+K..3&O.q..Wj.-.Q...b.d.X.....%... ..-(Cj...^...".E.m6fKTt..t..x..L....S..[d.jT8v..x.....VR%.Sz...{ \|E._]'...MI..C. .~.,....M.......)q..!u.9}(......5Lr..vR.yJ...NJ.!.w@.].....V.~?...{h..?..@

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2476), with no line terminators
Category:	downloaded
Size (bytes):	2476
Entropy (8bit):	4.976190200151306
Encrypted:	false
SSDEEP:	24:fkBx5I5o/Duy0b8J92pJF7J9+DSMIyeRJ+afhmCDIDVB62IUVDVFSAIg2XDKyJTo:cOkMsWdRnhmLzLF184z/ynNTI1pn3Ysx
MD5:	F44D6E241FB7FA2BDB02EA7E3C72F3C6
SHA1:	E47E84A9C4CDB39FAB90556D67B67A9B7BD8B032
SHA-256:	E52AE672F622291EB1A23862F52F9B1ADEACD8262B1155EEE454D468C320D016
SHA-512:	1CE02E951F09C0A5FB0E1421BAE9AA7EEC311894F62CF49867925D6B15931979E17941C600D2C5D136736C61DFA2F091D6CCFB5EC74ECDDDC5076D899D8F8489
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/faq.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".faq-component--see-all-link",i),r.collapseAllLink=e(".faq-component--collapse-all-link",i),r.toggleAllToggle=e(".faq-component--header .faq-component--toggle-button",i),r.allAnswers=e(".faq-component--answer",i),r.allBlocks=e(".faq-component--question-wrap",i),r.allQuestions=e(".faq-component--question",i),r.hiddenText=e(".expanded-text",i),r.allToggles=e(".faq-component--question-wrap .faq-component--toggle-button",i)},a=function(){r.collapseAllLink.on("click",c),r.seeAllLink.on("click",l),r.allQuestions.on("click",f),r.allToggles.on("click",f),r.allQuestions.keypress(function(e){if(e.which===13)return f(e),!1})},f=function(n){n.stopPropagation();var r=e(n.currentTarget).parent(),i=e(".faq-component--toggle-button",r);i.hasClass("open")?v(r):d(r)},l=function(t){t.preventDefault(),t.stopPropagation(),p()},c=fu

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2217
Entropy (8bit):	4.685783065646044
Encrypted:	false
SSDEEP:	48:czAuf3CBnRO02tVVdpuktDwJXZU6ViJ/EoJt9WI:vufSBnE02tV7cktDwJX+aiJ/fJuI
MD5:	EF48CE62CB3D361E1D8B2938C40E71DD
SHA1:	F2C96AC70AAB81500FA0D12F5AB61F07B79B8A54
SHA-256:	893B5448CDDE44B4DB29800AEED45E278B1E640EA4585A5F4A5E4725E64BAE84
SHA-512:	47042309BD5680845E3EAE1D70EAD0BD0586FD91FE9DBA8209727BB38CA205944C96399C47183B4814C235D6DD16096686B86FD04B4C1CBE42A6F0E43BD1B1E6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/test/nav/images/cards-and-envelopes.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 88 126.5" style="enable-background:new 0 0 88 126.5;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<g>...<g>....<g>.....<path class="st0" d="M33.8,59.4c-0.1-0.1-0.1-0.2-0.2-0.3c-0.3-0.6-0.7-1.1-1.2-1.6c-1.5-1.6-3.2-2.6-5.4-2.8......c-1.1-0.1-2.2,0.1-3.2,0.8c-1.8,1.3-2.6,3.1-2.5,5.3c0,1,0.2,1.9,0.5,2.8c0.5,1.6,1.3,3.2,2.1,4.6c1.2,2,2.5,3.9,4,5.8......c1.7,2.1,3.5,4.1,5.4,6c0.1,0.1,0.2,0.2,0.3,0.3c0.2-0.1,0.4-0.2,0.6-0.4c1.7-1,3.3-2.2,4.8-3.5s3-2.7,4.2-4.4......c1-1.3,1.8-2.7,2.3-4.2c0.5-1.6,0.6-3.3,0.2-4.9c-0.4-1.4-1.2-2.7-2.2-3.8c-1.6-1.7-3.5-2.4-5.8-2.2c-1.6,0.1-2.9,0.9-3.9,2.1......C33.9,59.2,33.9,59.3,33.8,59.4z"/>....</g>....<g>.....<path class="st0" d="M33.8,57.7c0.1-0.1,0.1

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	5.354120046143594
Encrypted:	false
SSDEEP:	6:TMVBdbjhTdgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nWsjqMSq6jHzhVNUbWNkbGZ:TMHdPhRi/nzVJ/KYf3nWA+HzN8hCXVRn
MD5:	EDFD0894AEEF9388AA4FEA8EC845D66C
SHA1:	ACBB5EA89B4AFCC8DD1685CA4E87B418DA3FA65F
SHA-256:	BB8DAD575651FE0ABA30620551DF7329F038ADABCFC137C92F6C4EF9246F9F59
SHA-512:	2945D3892AA896345A1E0F3066F75F69A6BB28C7296631DBD26A6609647CB0F729D99297C8CFAAAFA25210439486F67C8BB75935767B97F122C28E0F42A6AAF4
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/polocator/blue-caret-down.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 31 18" style="enable-background:new 0 0 31 18;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M15.5,18L0.5,2.7c-0.6-0.6-0.6-1.6,0-2.3c0.6-0.6,1.6-0.6,2.2,0l12.8,13l12.8-13c0.6-0.6,1.6-0.6,2.2,0..c0.6,0.6,0.6,1.6,0,2.3L15.5,18"/>.</svg>.

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 38 x 38, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2661
Entropy (8bit):	7.884431434717446
Encrypted:	false
SSDEEP:	48:z6VBhExIYXb28MErITNY+K0HQOwSeghxEPlilpDx4mRcbPP/PAtC0Xm3aRMHZK1p:z6eiYKwENlBHQOwSJhxEODWmSLP/PAtP
MD5:	AB2BB230522ACE945882D4A14CBC4EE6
SHA1:	01C09788CFE392030F9F0BA5B1101AC5BEC1E559
SHA-256:	DF8E44E393DB8B45DEB19ACCF47E385123CAE1371CE20E842D28A31DFFB0E335
SHA-512:	F33E3902A9076388D3A7269CC909B5ED32E06557C9CCAD86814336EF1C4EBE9E44CD8AAD87BEC5D613313BAF8D304B2F4E36036E6DA0D7525EFB485091CFE260
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/images/pinterest_logo.png
Preview:	.PNG........IHDR...&...&......=.....gAMA......a....8eXIfMM........i...........................&...........&.....:.a....IDATX..X.p........y@B..."...[.P......S..0N[:..Vj.u...>.Ja.R,X;20......N1E..M..#($..Ox%!......s..e....N.d..=..s.{.....@.Y%WIKLt.Xd.u..z.."O@...".NI..Z..zr..#/.\....\|.1..Fx...eRc..Q.h(2.c..b.\|.tE.e.qL..O..Qd.W.._./`.([L.Y.5n.......<...L...n.B.0..8........].b[F.I..&..v}.E&3.Kb..b.h....-...\_...\|e3\|.....C.8\......(.?..zh...g...X.Qt.p.}@........&3.uG....{....\Q.q.Bb0..f..E7RV.E.;....b..y1..&d ..H.n..r8.8..i..d...x3.,.......y4..J}=....g..<.T..0.].....q2..e.YA@2.0.P#".+..W....t(.2.{.b...z.....2.`..t[....5...@`.B...^......<Y\.A....s.fX....E...$~3 ..!..q._..$.5.T.l.......!..`..#...(:<A.Iwu..w.}..........j.Tv....8..#.0....D.=..s.CH...E._.C`...5z.O.E....;.u.."..9.j.n............h]...Y..z.-%.....M.....%K.._g..[.".G..-..]...9.!t..i...&...K8..IG..3...?....b:.=..5."..zR...#p.C.g^..6...]c9'...Oa!{....H.)4...[..j&/.5y..+@......r..tm...LR.O.C.....y.8Bcl...

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18860), with CRLF line terminators
Category:	downloaded
Size (bytes):	19036
Entropy (8bit):	5.213400178865669
Encrypted:	false
SSDEEP:	384:L+vdXksbdN1izO5GdN7fHw7FInxiviMduz+zQvDHlxGSjkd/9jPTcCen1cnMEAF:S17bd7iq07ftxivbuzGQvBx1jknrTcbr
MD5:	B18556921E79D50BC26A3F42F33F1C16
SHA1:	FBA9AB5F86F2B90933FC6A735DE391E619FA1752
SHA-256:	282539CF8196A5E940746F43F640E02C16B6AF711CF2486D8E08FFCD39E7F9B8
SHA-512:	67B74BAE7B3E157292F54F503C70582E683C4B3D33CB388805EF483CC4BBEE9F71ACA7273C6D91C8EF06795CB3EF39C3EB038FE0A4D85A60ADEEE99CD6FD1910
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/globals/popper.min.js
Preview:	/.. Copyright (C) Federico Zivolo 2017.. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT)... /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=window.getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e\|\|-1!==['HTML','BODY','#document'].indexOf(e.nodeName))return window.document.body;var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:window.document.documentElement}function p(e){var t=e.nodeName;return'BODY'!==t&&('HTML'===t\|\|r

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 102, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	175
Entropy (8bit):	6.008353781899314
Encrypted:	false
SSDEEP:	3:yionv//thPlEZtlHRg9RthwkBDsTBZt0aRSaQmwEK6QjevoHc86x5DTU5k6qHlVo:6v/lhPgxRgjnDspxTQmwr6QjL886x5PK
MD5:	53C79701060D3641D0E856AD99F0D07A
SHA1:	753919AB47F7F4F409819D3445E6CE78280B4F3B
SHA-256:	F603CA1572C9C8451191B5DD31340205E4ED3BCAA4A4F014379BD0733D92FC21
SHA-512:	539CD82E8D4EEE2042F321262F530832F405ED2A2AA3B67EBF7355ECFF1A5B7FA5D7C48DCCA948CE85003C70D87A727122BDD0F96B426F89087238DDFB7FD546
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......f.......l<....tEXtSoftware.Adobe ImageReadyq.e<...QIDATx.bz..=......?......a.h....:...........~..e.,....vT7.............hTs.b....0.i)z..`......IEND.B`.

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2471), with no line terminators
Category:	downloaded
Size (bytes):	2471
Entropy (8bit):	4.938116433252691
Encrypted:	false
SSDEEP:	48:cFZvm723d+17soBDu0jmuwC1nWjCJWjk+cb42lBfQfQLBaovl+LaK7J+cb42lB/F:sJm72+dY0c6WuJZc2J8Bc2jJpL2C1
MD5:	60D17495A964265631CE851EE688D5FD
SHA1:	E4C22708CF917FB3CFF933019754114C123D1C87
SHA-256:	B0E7855B3A3CED63120E1912CC9C886377CEFAAFCD9D454BF79EB40F7F23623C
SHA-512:	D9938EA4880C42C508DDFBFA1DBEFA904412AD718270752C0FB1D9EC5888B9F476B1D744C4F5C0A1A65225F21BFBCB00AA1E463CE1E18DD23C50ED68EC0AD598
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/tabs.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s={type:"horizontal"},o=function(){e.extend(s,n),u(),a(),c(),s.type==="vertical"&&r.isDesktop()&&(i.container.is(":visible")?l():f())},u=function(){i.body=e("body"),i.container=e(t),i.tabId=i.container[0].id,i.tabWrapper=e("."+s.type+"-tabs--wrap",i.container),i.tabSets=e("#"+i.tabId+" ."+s.type+"-tabs--wrap > ol > li"),i.tabLinks=e("."+s.type+"-tabs--tab-link",i.tabSets),i.tabContents=e("."+s.type+"-tabs--tab-content",i.tabSets)},a=function(){r.addCallback(d),i.tabLinks.on("click",p)},f=function(){var t=i.container.parents(".horizontal-tabs--tab-content");t.css({visibility:"hidden",display:"block",width:"auto"}),l(),t.css({visibility:"visible",display:"none",width:"100%"})},l=function(){var n=0,r=i.tabContents.length,s=i.tabWrapper.height();for(;n<r;n++){var o=e(i.tabContents[n]),u=o.height();u>s&&(s=u)}i.tabWrapper.height(s+10+"px")},c=function(){

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	473
Entropy (8bit):	4.828304232881718
Encrypted:	false
SSDEEP:	12:YCnyDfslxAkIPMjHjX08mH1H9TJkngZzDm:Y9DfwxtIPMbjk82PJbzi
MD5:	98AB78547F4B373ADA65D28627AC4E25
SHA1:	CED157F986FD68169C9C3415396C4D1EE3EE823C
SHA-256:	4E5564C4787CB9E42CC2C6D2178796919184E5972233508648C3A089B72B2A26
SHA-512:	57D92FB013C958DE63848DAD06E0C52032416BC360F54A96EF3D1B121896CBEB67B63F52D2788F1B7CE88131222A8CF32FC83ACEB1210AECDB8F2FABF945C997
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/UspsToolsRestServices/rest/POLocator/getOnlineServices
Preview:	{"PFSR":"https://www.usps.com/manage/forward.htm","SAP":"https://tools.usps.com/schedule-pickup-steps.htm","REDELIVERY":"https://redelivery.usps.com/redelivery/","CNS":"https://cns.usps.com","MEDIA":"https://about.usps.com/newsroom/national-releases/welcome.htm#national-media-contacts","PostalExplorer":"https://pe.usps.gov/","ECOM":"https://www.usps.com/buy-stamps.htm","POBOL":"https://www.usps.com/manage/po-boxes.htm","PostalInspection":"https://www.uspis.gov/report"}

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18349)
Category:	downloaded
Size (bytes):	18518
Entropy (8bit):	5.425598654737485
Encrypted:	false
SSDEEP:	384:Kt90/0ukrXCR8giPmaKDaaAXeSwEJms2Ye34wqASWh:KtlfyRfDiw5EP2YDwbL
MD5:	4986DA8BD94F4B69AECB70C72537C50F
SHA1:	41147FA12F46FBB50D6ED50DB0733C77BC726A6B
SHA-256:	DA6B8A35D16600E786B51BDBF9418C926C0509480866398ADD81E893733E620B
SHA-512:	5C253FCD059D94F9ED85C9A18CF52238E06547C97A5583F5A31961CF6D90666625FF81F4115DFF304E23FAF649CE10597C8626A2A380C53E34857221C1C466EC
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/scripts/polo/po-locator-map.js
Preview:	var locationGPS={};var dtFacilitiesList={};var map;var view;var loc;var isLocationSelected;var lastSelectedLocation;var lastExpandedLocation;var isIE=./@cc_on!@/.false\|\|!!document.documentMode;var loctypes={po:" Post Office<sup>.</sup>",buystamps:" National Retailer",CPU:" Contract Postal Unit",collectionbox:" Collection Box",apc:" Self-Service Kiosks",VPO:" Village Post Office<sup>.</sup>",GOPOST:" gopost<sup>.</sup>",ALTLOCATION:" National Retailer"};var parkingType={STREET:" Street Parking Available",LOT:" Lot Parking Available","undefined":"",NONE:""};var locServType={buystamps:" Stamp Booklets Only",ALTLOCATION:" Stamp Booklets Only",po:"",CPU:"",apc:"",GOPOST:"",collectionbox:"",VPO:"","undefined":"",NONE:""};function loadMap(a,b){dtFacilitiesList=a;if(b!=""){getGISDataforZip(b)}}function getGISDataforZip(b){var a="https://geocode.arcgis.com/arcgis/rest/services/World/GeocodeServer/findAddressCandidates?SingleLine="+b+"&f=json&outFields=location&countryCode=US";$.ajax({url

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2754
Entropy (8bit):	5.050188184079083
Encrypted:	false
SSDEEP:	48:Zw/VbifAq4wfVT9Txu/t/d83WPWLJX1hgr8DjsuNG5QyG1eHjE6eL:Zk1ioq4wfVT9Txu/tl83WPWLJX1hu8Dd
MD5:	9ECC6630F522BF4F7F4FF025FB572D29
SHA1:	16F59EEE9D108EA5C6E417E42E7F4A88F479D7C3
SHA-256:	24874F2CAE5564ED2987C8EDF7C6AD712DA9569DCEEE49BAAB43AF56B7A9CA67
SHA-512:	362D00141ADE0A9EED2EA2F40295F44496A54F802EEF0AB7A69CBE4EE79DFE0B1FFDB9B7C855845C57C55F1FBB3E619E9D4BC9BC5A1A669D461D41630EE65AF6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/fonts.css
Preview:	/.-----------------------------------------------------------------------------------....@filename..fonts.jsp (content type = "text/css")....@author...aziz.syed@akqa.com....@description.Style definitions for the global type styles & colors...----------------------------------------------------------------------------------- /...fontStyle1,..h1{...font-size:3.0em;...font-weight:normal;...color:#202020;..}...h1 a{....color:#202020;....text-decoration:none;...}...fontStyle2{...font-size:2.4em;...font-weight:normal;...color:#2f6fa9;..}...fontStyle3{...font-size:1.6em;...font-weight:bold;...color:#202020;..}...fontStyle4{...font-size:0.9em;...font-weight:bold;...color:#717171;...text-transform:uppercase;..}....fontStyle4alt{....color:#757575;...}...fontStyle5{...font-size:0.9em;...font-weight:bold;...color:#2f6fa9;...text-transform:uppercase;..}...fontStyle6{...font-size:1.0em;...font-weight:bold;...color:#717171;...text-transform:uppercase;..}....fontStyle6alt{....color:#757575;...}.

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 692x280, components 3
Category:	dropped
Size (bytes):	55179
Entropy (8bit):	7.924643088030909
Encrypted:	false
SSDEEP:	1536:4m9koO4LhgRHqkxfVocdKMkh/M0pri7WEc4V1D:4Mkolh1MfEe0prFUl
MD5:	7B29DE5BED8001EA03B5D3DE99516090
SHA1:	50F39287F023E8FA46FB1189C88D2AE6B4474061
SHA-256:	BA681C87D547769342E976B5D1FA00E5E53D22178CA6BDC1E6B86E6732CA4167
SHA-512:	7C6A14FC2717001439FC481593B944A1DCF794098FA8F8CE8EC09D2010BA294915B3B2CB99129F025CB7A60081E78E9E426ACB693C3916DB868BD2BA7C8FEF3E
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (408), with no line terminators
Category:	downloaded
Size (bytes):	408
Entropy (8bit):	5.086570908959327
Encrypted:	false
SSDEEP:	12:h9DY37MkzkA2rUyJtIJXUittjM0bV1/CQX1Z:LDYLMzA2rUyJteX1jM0bV1aQX1Z
MD5:	37E481EC5C6728104460FA509F5C40C4
SHA1:	E6A184281992422B95128F19AB8BB70DED7D66F0
SHA-256:	81C3260306362D095DE1C7F8B3CB99C03FD47FD50C5249175DB67B8C170D5150
SHA-512:	7F532CDC6AFDE374B1D7124E4A37AA04C1B15A6597CCBC542630A805D1FC9DB24C3E165753D26AC7E7F84E86073117E5861E78D1FECC90E48CB033EC7F5CFEEA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/utility-bar-init.js
Preview:	var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.requireUtilityBar=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"utility-bar",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min"},shim:{jquery:{exports:"$"}},waitSeconds:30}),USPS.Require.requireUtilityBar(["require","jquery","components/utility-bar"],function(e,t,n){var r=function(){var t=function(){};t()}()});

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 783x350, components 3
Category:	dropped
Size (bytes):	38068
Entropy (8bit):	7.966989225744817
Encrypted:	false
SSDEEP:	768:zhuW38ygHgVL2pldrpBeZvW8LwprVFtUyG2ccS2SzrwesWlSGgQ:VuW3jgHgVL2plRes8LOPeyGPcpkrwesI
MD5:	12CC757D99D7464910B2E86053E4C034
SHA1:	BBAF76D8D38BF996B8C2509CE733EB6828335B86
SHA-256:	0C53F6A9A3455DF61F4D2B7CFFCB03DA5437C13A14787AB12504C995E161D600
SHA-512:	8C914D4C43B0CBECC3BB97FED50178A4CDF30DCD605C5E9857599405181520318E2D623F610D70A1D2485ADDA3762F35C7533EE5F068B24A8B7421AB7EC3968F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7031727BA381B08014D23504AD60395C" xmpMM:DocumentID="xmp.did:4D4703D8F5E911E9A6899C204A4492DD" xmpMM:InstanceID="xmp.iid:4D4703D7F5E911E9A6899C204A4492DD" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5b91f439-4da6-425c-b967-e4236643597f" stRef:documentID="adobe:docid:photoshop:388ea588-7ac9-1848-8ee7-bce4f8804ad3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.........................................

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1661
Entropy (8bit):	4.714703599579227
Encrypted:	false
SSDEEP:	24:2dFmm1LLqFfeaxM2CVgRqFc4mvwmo17t+o1R+oSKpme/lm4g:ckmVuCmKCYjthc
MD5:	CE8F13038D4C78F6631390B9AC40187C
SHA1:	AE5399C82550E133C2CF9E8A75A1C66270333317
SHA-256:	B128092D9EDAC9B68A795731D4A6FC844904DEE3F41C0878D4A0665DD5105427
SHA-512:	67746BA5A94C5678624B3AAAFBE9B989D911EDC1F1192E43F96056EF3B8EF846E3D7F4A8C926A09FB924BFC7D03C9725E3586A46D5E2E94C4057107A7E559C1D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/List view</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Mobile-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Mobile----Listing-page---list-view" transform="translate(-65.000000, -328.000000)" fill="#333366">. <g id="List-/-Map-toggle" transform="translate(65.000000, 327.000000)">. <g id="List">. <g id="Icons/List-view" transform="translate(0.000000, 1.000000)">. <g transform="translate(0.500000, 0.987654)">. <ellipse id="Oval" cx="2.125" cy="2.09876543" rx="1.875" ry="1.85185185"></ellipse>. <ellipse id="Oval" cx="2.125

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "OS/2", 26 names, Macintosh, Part of the digitally encoded machine readable outline data for producing the Typefaces provided
Category:	downloaded
Size (bytes):	115992
Entropy (8bit):	5.567066362331878
Encrypted:	false
SSDEEP:	3072:BWDTO3mc0GcL043Fkfx7V5M2QXyYIpVKBJsTf3gFs:BWDTOoS41s5M2wXIp1D3ge
MD5:	7F4A3911C9666BEA10480C86358F572D
SHA1:	FCD43921588D66D85C08E4894DA96845C9DD164A
SHA-256:	0B444DCDF0D419D417A6EF5A885E42897022216355F9D2873D415F0FA3D07799
SHA-512:	DF633E4271F4021344CE16ECF285323311AEBC4AAA526C136A6B66507D2A1FF52968A48587EEE9BBFF9142AD9EDFA5B15173682CA91D7AAEBC8B9FFB7AFE7F0E
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf
Preview:	...........pOS/2..+........`cmap.8.....\...tcvt .k.c.......Hfpgm............gasp............glyf.Z.h......w.head.#....}....6hhea.E....~,...$hmtx2.4...~P....kern.D.....h...Xloca.U8.........maxp...L....... name.j.........post...2...... prepU........n.............X...K...X...^.2.6................P. J........LINO............................. . .................h...V.@.......~.+.7.I.~.................. . . . " & 0 : D .!.!"!&!."."."."."."."."+"H"`"e%............ .....9.L.................. . . . & 0 9 D .!.!"!&!."."."."."."."."+"H"`"d%......................%.{.z.l.........;.8.7.6.3.."....L.>.;.4.a.^.V.U.S.P.M.A.%......s.r...........................................................................................Z.l.A..d.....f...<.r.<....}...P.Z.f.......A.......~...................,K...PX....Y......D......_^-..., EiD..`-...,...!-..., F..%FRX#Y . .Id. F had..%F hadRX#e.Y/ ..SXi ..TX!.@Y.i ..TX!.@eYY:-..., F..%FRX#.Y F jad..%F jadRX#.Y/.-...,K ..&PXQX..D..@DY.!! E..PX..D.!YY-..., E

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1462), with CRLF line terminators
Category:	downloaded
Size (bytes):	2764
Entropy (8bit):	5.020301420784013
Encrypted:	false
SSDEEP:	48:gUTCkcJwOL1LP76sq7H2VpEB5dKjWcFa8tmCdDVLQFXFAs:NBc+OL1LP76su2VqvdKqchRZV8Vv
MD5:	093DE3978BF0E7FFF8F8E0B5172E00B4
SHA1:	1430C36C48694F688AB7F470F5102A732AA4F606
SHA-256:	B58BE67C2D32606785B1DE7A101DAF82DC1BAB7C4043D1BB7FA5A0562762078D
SHA-512:	327001948EFE710254C561D383C374B02CC2F0A4626EED66D3D2936E57C5B027E6A91111BD7F10A225BDF4A9EBF7561A26438C311227E61BD2C3735568D03CB1
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/welcome/jq.roughly.js
Preview:	window.addEventListener('load', function () {...var counterData, index;.. .counterData = document.getElementsByClassName("roughly");...for (index = 0; index < counterData.length; ++index) {......var startDate .= "November 20, 2023 00:00:00 UTC",.. latestCount = counterData[index].getAttribute("data-start-count"),.. latestDate.= counterData[index].getAttribute("data-start-date"),.. .. ..sd..= Math.round(new Date(startDate).getTime() / 1e3),.....ld..= Math.round(new Date(latestDate).getTime() / 1e3),.. daySec.= 86400; //86400 secs in a day.. ....var days = (ld - sd) / daySec;.. .var ir = (latestCount / days) / daySec;.. .. .counterData[index].setAttribute("data-increase-by", ir);...}...var bind=function(t,e){return function(){return t.apply(e,arguments)}};!function(t){var e;return e=function(){function t(t,e){var s,i,n,a,r,o,u,h,d;this.element=t,this.u

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.702910079649726
Encrypted:	false
SSDEEP:	3:YjFtl88LGByfKwzSvpGqD4:YBtW8kyiwFE4
MD5:	9D48ED4D187CDC6DF2394EFBA46321AF
SHA1:	A3C7059BB0DC0188A2C77021055F2167D4F9D26E
SHA-256:	9C87ECB0FF1DF2469F7E3FC9B49CE6C0BD1CF76FACB8A48674B5A69B80833C1F
SHA-512:	7C34B7A6FD700EC7DF9B9C6A75F3348650EF4BAA31B6A33E5BC3E95DAAAB1816A060532A49221F80679E7DCDE1124E3CF1A50FD6A50AF02F4B000D6BA1709F5F
Malicious:	false
Reputation:	low
Preview:	{"FAQ":"https://faq.usps.com/s/article/Find-USPS-Locations"}

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2262), with no line terminators
Category:	downloaded
Size (bytes):	2262
Entropy (8bit):	5.851240801174059
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08PIMxQLs8KbIs6:wsbSUtJfxrqLWWWdV6j1bImEJ
MD5:	2BB551AB78F59F0B95366E306364EBC2
SHA1:	564FB230FBDF7C169B7296ECFB6642FC62FE5130
SHA-256:	02041E3EAB4423FE22F59D34232C728747A5AFA023B594408A5D06BFEC438BF0
SHA-512:	27B1A8C4674108BE72734EA4C02B802B780947E598303DF12F7DE727C3A8BE593E8882382763CF7CBEB184997FFE0D76919F290E88E8FB14BBA908DAEA0984FA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978081151/?random=1713487495162&cv=11&fst=1713487495162&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 46657, version 1.0
Category:	downloaded
Size (bytes):	46657
Entropy (8bit):	7.988657559309873
Encrypted:	false
SSDEEP:	768:rLCl6g82cavjKflqsY7nrNNkc2tFgPZfVv79dfpaweqfbIT8N3JADxAOW3zITqjG:n3acyKflqVrNqltFgRtv5dxawrcTSADt
MD5:	3BEB1CF49DC702CD4DE8618EEB344DD4
SHA1:	080E1B4DC8B43DDB06961A3490857CDB936A8C2A
SHA-256:	FFD7AF6177837790E2620C429DCE0DA6DC7D18BBDCF87A7ED2C033A03513E947
SHA-512:	008EE624857F9F7DA939719B44E9146177471A9861BEA10C1065C134A2AF888C5D2E151E04EA0A8949738E2F0901EAB33AA5746207F52E6399119E69F4744D63
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff
Preview:	wOFF.......A...............@...............OS/2...X...V...`..-.cmap...........t.8..cvt .......@...@....fpgm.......8........gasp...0............glyf...@......Ih.{4.head.......6...6.\2.hhea.......!...$.o..hmtx...(........I.-.kern...........L....loca...,......... ..maxp...H... ... ....name...h...%...r..j-post........... ...2prep................x.c`f.d.........................9X.@....a}.......x...)..LL...3.`..p..g..1.2.bP.B..L.....x.c```d`.b....... ...... ...P..h...X.8.I..8.I...S.W2.a>. . . .....`.`..FQXQIQMQO.I.M._IHITIJINI[.C)A)U..............Q....h...1..7...+H(.((...b. .\I..)`s........................W./....N.......C.f...j=Tz(.`....v.....O..w?.~......}.;.W..w...r.b."p.......`6....k.u.H.A.P.4.....Z...4.k.....J.......S....................."..x...=K.0...[O..r.".!...;uH..Z.d.....w...d.<n.._L.i..r..pK.<O./...!2s$........G....{~.v.J.R.}.fG.`..$O......n...Y.....Q........%..Z@lX_..E..p..c....a......ve.......J1..aB...\C..0.o.......].=.<.b.....@..v..jk...t..d}.w..x....*o..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2340
Entropy (8bit):	5.0004590372587305
Encrypted:	false
SSDEEP:	24:t4FsNaJKSYghHg+gLsONh1boKS3LWH9/MKR58EtrwLsRW9E8efZjXQSS0MAriY0:UnJKkbgLxPTS3SHxTRtesRsczy0MAA
MD5:	9847E4B43031D75E0729793394DC972F
SHA1:	503C4D874E4F0946D6280E53D4F7EA8D81A2E75E
SHA-256:	5ACD8D5A37EEBB8F4A3E73D46EE6AD381EE284792F90138D667E9D87978F6E67
SHA-512:	47CA395287C63D5EA2DCB59BF870496C31FE43DADC3C6D73D0DEC225FBAEF2F5AE41CA126373D89F217FE8F1EBA63A0215FF943E1F6D08ACC49BA7195A7CBC49
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9">. <defs>. <style>. .cls-1 {. fill: #336;. }. </style>. </defs>. <g id="Group_109" data-name="Group 109" transform="translate(3459 943)">. <g id="Group_104" data-name="Group 104">. <g id="Group_100" data-name="Group 100">. <g id="Group_97" data-name="Group 97">. <path id="Path_61" data-name="Path 61" class="cls-1" d="M12,78.5H7.8a.645.645,0,0,1-.6-.6V74.8a.645.645,0,0,1,.6-.6H12a.645.645,0,0,1,.6.6V78C12.6,78.3,12.4,78.5,12,78.5ZM8.4,77.4h3.1v-2H8.4Z"/>. </g>. <g id="Group_98" data-name="Group 98">. <path id="Path_62" data-name="Path 62" class="cls-1" d="M12,75.4H7.8c-.2,0-.3-.1-.5-.2s-.1-.3-.1-.5L8,71.5a.548.548,0,0,1,.6-.4h2.7a.675.675,0,0,1,.6.4l.8,3.1a.749.749,0,0,1-.1.5A.864.864,0,0,1,12,75.4ZM8.6,74.2h2.7l-.5-2H9.1Z"/>. </g>. <g id="Group_99" data-name="Group 99">. <path id="Path_63" data-name="Path 63" class="cls-1

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	51652
Entropy (8bit):	5.178883310843248
Encrypted:	false
SSDEEP:	768:vX3Ua6jTxIzPO7gg6Db5CMSjlEKsyWk2SKJPh13ilIBjhiD8FPuKR7AIAJjo39MN:vX3Ua6jiKMdYm7oBLl
MD5:	6BACAA677935DA6C6C09848DF305BFD6
SHA1:	1FE3194BED68C90D47286C451EEEDA08D6F9F229
SHA-256:	28249D9F54771E39F1A427ED863CEAD9D33FF495FBDC6E48E52EEA6763FCDB05
SHA-512:	CE672720678202AB511A3E027AE06276AE74761D1B0CC34FB8BF5F9D07E733FA40AE17C6E83A5449DAB440C086E1C116BBFFFC0DD9B0CA709240E1EE95D9373A
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/usps.css
Preview:	./.---------------------------------------------------------------....@filename..usps.css....@author...aziz.syed@akqa.com....@description.Page layout + global style definitions........Contents....1. Page Layout....2. Generic Styles....3. Header....4. Footer....5. Navigation....6. Miscellaneous....7. Quick Tools....8. Left Panel....9. Caps...--------------------------------------------------------------- /..@import url(/ContentTemplates/common/css/globals/widgets/select-box.css);..@import url(/ContentTemplates/common/css/globals/widgets/modal-box.css);..@import url(/ContentTemplates/common/css/globals/text-fields.css);..@import url(/ContentTemplates/common/css/globals/links.css);..@import url(/ContentTemplates/common/css/globals/button-styles.css);..@import url(/ContentTemplates/common/css/globals/modals.css);..@import url(/ContentTemplates/common/css/globals/qt-modals.css);..@import url(/ContentTemplates/common/css/globals/tooltips.css);../*....=========== 1. Page Layout ===========

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 221 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5390
Entropy (8bit):	7.884931645906017
Encrypted:	false
SSDEEP:	96:b2DkoWEj73WsbadwyUhDC3fYfJpIw5Us8hxDc8QiK8Ya86M0g0CHy/nskQLOO4:G/WEj73WUeUdCAfkMUs8hxDqiT38r0Cw
MD5:	CCD62119EAA0E3697F60599487C51AD5
SHA1:	8E44D3123B4CE2005C76A2B8DCF7870058D2A82D
SHA-256:	1CC43A97BE92FDDF0FE4244858F5337C80A8D350CD0AFCD0C4D2004D3FDED0AB
SHA-512:	A0E0EB7291F5C075F864CB3257D0CB2339D5FB3AA59DAA5145BF759EF144C1AF53AA2D08825E8CAAAD45590230B89A81A4FB553230257650E7A4B4C084881D7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:ADE6B1C6FF6911EA8D9F92B8E2216427" xmpMM:DocumentID="xmp.did:ADE6B1C7FF6911EA8D9F92B8E2216427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ADE6B1C4FF6911EA8D9F92B8E2216427" stRef:documentID="xmp.did:ADE6B1C5FF6911EA8D9F92B8E2216427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..c....\|IDATx..\.xOW.?I,!...."$.{H.j....b....*:Z]ta.J?_.S.n.)5.SKQK.!.Hd...%A.. D2..s..<..U..9.w...w.y..{....

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1661
Entropy (8bit):	4.714703599579227
Encrypted:	false
SSDEEP:	24:2dFmm1LLqFfeaxM2CVgRqFc4mvwmo17t+o1R+oSKpme/lm4g:ckmVuCmKCYjthc
MD5:	CE8F13038D4C78F6631390B9AC40187C
SHA1:	AE5399C82550E133C2CF9E8A75A1C66270333317
SHA-256:	B128092D9EDAC9B68A795731D4A6FC844904DEE3F41C0878D4A0665DD5105427
SHA-512:	67746BA5A94C5678624B3AAAFBE9B989D911EDC1F1192E43F96056EF3B8EF846E3D7F4A8C926A09FB924BFC7D03C9725E3586A46D5E2E94C4057107A7E559C1D
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/polocator/list-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com/sketch -->. <title>Icons/List view</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="Mobile-pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Mobile----Listing-page---list-view" transform="translate(-65.000000, -328.000000)" fill="#333366">. <g id="List-/-Map-toggle" transform="translate(65.000000, 327.000000)">. <g id="List">. <g id="Icons/List-view" transform="translate(0.000000, 1.000000)">. <g transform="translate(0.500000, 0.987654)">. <ellipse id="Oval" cx="2.125" cy="2.09876543" rx="1.875" ry="1.85185185"></ellipse>. <ellipse id="Oval" cx="2.125

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://trkn.us/pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487476802
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	downloaded
Size (bytes):	86605
Entropy (8bit):	7.976386525672423
Encrypted:	false
SSDEEP:	1536:4T5wBk3itJsL3yTTDQnQvJlc/CyfXIDv1m/GzNj7f+czNLiOOu/:49wa3Uu3yT3QnQvP0ngv1+YHWckE
MD5:	518F55DB4BAC9AF38CF3224168C5E7C3
SHA1:	13F08859EA26952537E2717798A290F157483EA3
SHA-256:	4AE6F7EB84045F7574521B62322D022BDF5DAF90E675CF7BDCB79DD27AF37409
SHA-512:	2B2D3CCFC0CF379DA84E8F47AD2CD63A02A1F74730BB871272D1E5CA2AC3E4B835866A36E33738A4DFBCDA1B4B264B2F470F375C59161B3825F84CA35A846C92
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/featured/passport-scanner.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086)
Category:	downloaded
Size (bytes):	95921
Entropy (8bit):	5.395590795061247
Encrypted:	false
SSDEEP:	1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzmI:ENMyqhJvN32cBC7M6Whca98Hrl
MD5:	FB6CE399E3E05C48005737E8AE94437D
SHA1:	4DE67539C3047E728710D5958A7730FC04F2F9D2
SHA-256:	61419A9C82B9F4894A9FA8F92684630AB3F85EC69202567BDAC82C5CF11148B9
SHA-512:	FA40D3C4432D50ECC44CB70E80A719B0E5DF728D9CF141FCBDD7772ADD87FF524E1B73CAF12E092ADD9D3A35976E0FFE5115E0769F526959F6AD7FC53DF62AF4
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/jquery/dist/jquery.min.js
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (493)
Category:	downloaded
Size (bytes):	132800
Entropy (8bit):	5.1387590955839295
Encrypted:	false
SSDEEP:	768:jnSx+jAmQoWILH4q3K4ghupCARXDnWYJx+e7ZCTIfrU9sYbV++Pa4ijSJQcZVUkq:jxALnjHMhr7Abfv7HOg/x3TyH
MD5:	77A147237581C4E2766644A6B8B48F11
SHA1:	E80DE5057A5103D01A1E4BE0B39D8793DD07FB4A
SHA-256:	A129183D3D41AE27205E43BD0479D19216C2911A75F86D6851D6439C99C0B1A2
SHA-512:	F57868179EE23A4AE8751DE7430F7D67E4116E1F382638038990F1881DECAE85EB9BFA36158411D7E8D51DB5D1E6F4103CC3121C390A0CFE908D8E8F38FC761D
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/styles/libs/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html {. font-family:sans-serif;. -webkit-text-size-adjust:100%;. -ms-text-size-adjust:100%.}.body {. margin:0.}.article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary {. display:block.}.audio,canvas,progress,video {. display:inline-block;. vertical-align:baseline.}.audio:not([controls]) {. display:none;. height:0.}.[hidden],template {. display:none.}.a {. background-color:transparent.}.a:active,a:hover {. outline:0.}.abbr[title] {. border-bottom:1px dotted.}.b,strong {. font-weight:700.}.dfn {. font-style:italic.}.h1 {. margin:.67em 0;. font-size:2em.}.mark {. color:#000;. background:#ff0.}.small {. font-size:80%.}.sub,sup {. position:relative;. font-size:75%;. line-height:0;. vertical-align:baseline.}.sup {. t

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	262296
Entropy (8bit):	5.56732072872873
Encrypted:	false
SSDEEP:	3072:R0p3LwAZVNSNcMzszFeIEO8AjCBPIrTWR4YESfhmpt2nBsLqwyHXDeltzvsXshNA:CBcAFMgzFe9c0fhmpt+aqwyHXDelJsXV
MD5:	819FE6065E6E01605C0EF67BCBF87EF4
SHA1:	66C32572EF3CCEB3EDC7121AAFEC9BC7C6053493
SHA-256:	F30CE78EFACFDFA5B7ABF82FBB5F02125973169F22B4B81385C46432F9D56EED
SHA-512:	7484FFB7364D8612845D56840E25A6B3BC45AE75C9D696E4C13278E95F052B462890FFA82DAD5A4FA92C2C4D9B5C8B1EE79DF4C797DC58F74A5B98A9BD9A9E91
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CSLL4ZEK4L&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":true,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":true,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":15},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":17},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","v

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	5.320613286535976
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nS7FHX7k8fwPaLmjpDk7XpHsq81OvC0NAFr:2d3ATLf3SJLk2vmjy7ZHsj1OJAFr
MD5:	B991E236D3185C493DDEA451D194CA55
SHA1:	72D3B4849305C8B4F3AB878DE6AC2E5A671240B8
SHA-256:	4D5EACCF69EF620820F05B358F6C22EA891752D2BF2915EB6C630029C525F0D9
SHA-512:	F609AAB87B17E4F2B74E435FD83760FFDF97563222D5B275D3C9DC4D8875058F6E496A8F1EE3F6D8696D8A8D12950C78E6D3D30E3AC2005CF5B993307259970C
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/votebymail/success-checkmark.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 72 72" style="enable-background:new 0 0 72 72;" xml:space="preserve">.<style type="text/css">...st0{fill:#218648;}.</style>.<g>..<path class="st0" d="M53.7,38.8c-1.8,11.1-11.5,19.6-23.1,19.6C17.7,58.4,7.2,47.9,7.2,35c0-12.9,10.5-23.4,23.4-23.4...c6.5,0,12.4,2.7,16.7,6.9l4.4-3.6c-5.3-5.5-12.8-9-21-9C14.5,6,1.5,19,1.5,35c0,16,13.1,29,29.1,29s29.1-13,29.1-29...c0-0.4,0-0.8,0-1.2L53.7,38.8z"/>..<path class="st0" d="M70,12.5c-1.8-2.1-5-2.4-7.2-0.6L33.2,36.5l-8.7-8.7c-2-2-5.2-2-7.2,0c-2,2-2,5.2,0,7.2l15.3,15.2l36.7-30.6...C71.5,17.8,71.8,14.6,70,12.5z"/>.</g>.</svg>.

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 459 x 661, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54212
Entropy (8bit):	7.9728193816058335
Encrypted:	false
SSDEEP:	1536:ACOqvk/BG8/l9a4b+i1iLOE24gD3WmQAlcnAanUvZXuywg:AJqvABG8/O4bL1iCENgD+jnAOUUA
MD5:	233DA4E855F4939F869263AD8970186E
SHA1:	230803470829107C3ABCDB6985ADBA6BC738DDD2
SHA-256:	3513D7547C6F744BBE41ED4AE97B1D20C64B082C57519D848A692815EC840ABB
SHA-512:	D8CF74878879FE83B5EB30D32D71F7FAC7E1876280A88A9F095D59E551682F9C0018AA1997D1340F56AD61C96DE45070319EC0EDD02DA2073E226E4538880745
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............n.]....pHYs..........&.?.. .IDATx...w\|M....Wv$2....b.H..%...Z....J}..-5..R.+U.._....D..I.P..1....9.?.{.+!.. ...q..=....{..g..1P..!..B<.aQ.@.!.(.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..9.`)..B.@...B.....B.!D.$X.!..90......l......B<C...w`Q..eg.(JQ..X.....g....EU&!..p ,.+......+...$$X>......\|.r...ey...........oo.-N.R..c.'/O.&..........333...133......+..y...Irr2..n.R..............>.[B.e..9.l.S...qrr....{{{..B.WVdd$..<....DDD<+.....KJj.m...^^^.h......P.zuU.....3.........e....Sh!.x..7....:u..>KJJ..n...[\.~....7.....q......,......F...[W...9y.$......+._X!.(....8::.ysj.M....(DFFr.....#4AsII...t.\|.$g.i....=nnn...`jj..}pp0{......:u.P...E...f..].l............O..30.Un.}%.evA.n..W/K....?{........B-..B.g...].v...:.3...K...........i.R...m.K.4h.n..h.B...`.....H..B.\h...w..7.T....p.....xoo.uEP...J..'.[g...*U.D...t...'Y.\|.4..!D>9::2z.h...3..~`..4....'#\........:.4.....b.

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6997
Entropy (8bit):	5.2870856460993085
Encrypted:	false
SSDEEP:	192:xHQJxiJY2XjIzv+FbUdC+8u1qEUXG6e6jE0ul0t9Y3IBIbJIp2IrdqIqhI1cI843:xHQJxiJY2XjI7+ew+8uUZG6e6jE0M0tX
MD5:	8828E0C7744699A36FD2DF3D80C30719
SHA1:	A8EB403AA38EF969FC932C7F56319E40C4ACE8D7
SHA-256:	BF3F4C09E344DAB4DDDE2343815C46385B9A7EE2D3B59AB69B5D8298EB679BDC
SHA-512:	926F7C77F5D7D01A0656F7533480ECF7AF941C627A8D8CC649AB437DB1408DF10A78E3F04827433BEF287EC44FFCAF1740F0A460A19061255F2A9DB48DAB6AA6
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/footer/POLOCATOR-footer.htm
Preview:	....<div id="global-footer--wrap" class="global-footer--wrap">..<link type="text/css" rel="stylesheet" href="/global-elements/footer/css/main-sb.css">..<link type="text/css" rel="stylesheet" href="/global-elements/footer/css/footer-sb.css">......... [if lte IE 8]>.....<link href="/global-elements/footer/css/main.ie.sb.css" rel="stylesheet" type="text/css" />.....<link href="/global-elements/footer/css/footer.ie.sb.css" rel="stylesheet" type="text/css" />.....<![endif]-->.... Styles to eliminate left nav -->....<style>.......page--left-nav .content {.. margin-left: 0;.. padding-left: 30px;..}...left-nav {...display:none;..}..</style>.... END Styles to eliminate left nav -->....<script type="text/javascript">....var MTIProjectId='f3e4655b-fd06-4b8b-8a25-01c859692612';....(function() {.....var mtiTracking = document.createElement('script');.....mtiTracking.type='text/javascript';.....mtiTracking.async='true';.....mtiTracking.src=('https:'==document.location.protocol?'http

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1818
Entropy (8bit):	4.993572197370397
Encrypted:	false
SSDEEP:	24:Z7Icb5Id91KfQeYT6G5ihq37kPL37iEu58MJpo2MVG6WAMnE+QVt2V4hEfO9LMQu:Z091ULnZTPc5lS9MnXq9IQu
MD5:	AFF56C53169C7974F6425A26FE29E52A
SHA1:	ABEC50E2C3D40B928D4470B53B5D87D83FD560CB
SHA-256:	43F4403CDB461B4BECC5035EB15CCE19F083459546DAFA6F2C405832D9D75EE9
SHA-512:	C991F2950BAAC08F772C7318098CCAA438C61E400254DC98B1540E38A23E857A27653AF432AFF32B1E7C6FA9F2E540F8378DBCA66F591FC3CFD44ADCCC0D42F6
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/css/globals/text-fields.css
Preview:	/.---------------------------------------------------------------....@filename..text-fields.css....@author...aziz.syed@akqa.com....@description.text fields global style definitions........Content....1. Text fields../....=========== 1. Text fields ===========../../.. * Styled text fields. Container must have the class "input-text-wrapper".. * and one of the variant classes (input-text-lg, input-text-sm, etc.).. */..input.text {.. border:none;.. background:transparent url(/ContentTemplates/common/images/global/blank.gif) repeat;.. color:#636363;.. font-family:Arial;.. font-size:12px;.. padding:0;..}....div.input-text-wrapper {.. display: inline-block;..}....div.input-text-wrapper span.input-dollar-sign{...width:1.3em;...height:27px;...line-height:27px;...float:left;...display:inline-block;..}....div.input-text-wrapper span.input-cap-left,..div.input-text-wrapper span.input-field,..div.input-text-wrapper span.input-cap-right {...float:left;...background-image: url

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 28503
Category:	downloaded
Size (bytes):	8702
Entropy (8bit):	7.977891652767339
Encrypted:	false
SSDEEP:	192:3/lrnDwZkhhO12YDBhSGhyOYgEOIxk+VrvZQOJgFKDUs4j:9DDdfO1KYHghVWOGFeUs4j
MD5:	9A680C8C475D8BBA600D4D87B4FA7EE5
SHA1:	032D074B386A4AA2EB03352ABF7F368BBD1470AE
SHA-256:	35DCE7F030321690BDD9E9D021037F9CCF5BC2FA83D11C11E6FEC4AC8CA3A7B2
SHA-512:	00A0685DE36A61C3991A01330E260DB76EE6E5997CDFD5D7F8BCEE0811E920120AFFA5C3CF48ED8D12E80AC6ABF21E9B2B76E6E470BDFA10B80D104705F1A1FF
Malicious:	false
Reputation:	low
URL:	https://www.redditstatic.com/ads/pixel.js
Preview:	...........;ks.....N8.......).8fcc..g.\,%K.(..G.q\|A....F2N...\|.U.A3.........M.$^.."...%.V..........7eO.>}...ci.U...q..y)...x....C.......d..%...T.2..s.>G..V..J.(.#]..A.&.....U.n\|\..V..?5..,..d.N.bK...N.{...xv~=.t5d....".[[.}.FI..i..pW........ $..#c.%.u.[..E...2R.F..1....p..t....6/1..j.;KL...d...#..b..%...]&$_..8[c..m:E..`..c.....0.Ga....$a..".+Yz......q....,..I.+;Y.M.b.%vy.Q4....h..D....\f.&C..u.`....B.}.<........"c.\...y.2..y.R..._-.P.}.=.T=.8O!.3"....(4..q.W.)]cc.H.;q.:. )..k#.l"<.A.U?H.P..r..q.[.5.8a.om..c.(.{1tR.&^....Qd?.5.4.I.C..%..1..M............B..R..v.}...TN....._.....[....qIlWb.J.fu.#.,....`....v.....RJ.9.D.....K.xsO.....\Ga..).p...B{.Th..}.NS.@...Ig.{.V.$.....c....Jk.........`dU......5..y.........K;.~.n.p...Q..K4.\&.M2....d....P.Q1..x..(..k..J..h.Y..jdj....V\|..DXe...l.....8."..n.4....9E&$.RD.U.).....Z.......^a.YRp....E`sj.;urje.....<Y.I.y.B.DM1..s$G.0...OFA."a`.qi.>..K....lL.X`o.F}.$.`ecK........M....4..,1\|/...C....)..e,q@

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 102
Category:	dropped
Size (bytes):	2173
Entropy (8bit):	7.37907187451763
Encrypted:	false
SSDEEP:	48:S6itvnLpxVfJ3/1DL88APL7LcPqH9H7ODJ:S5tLV1DlAbPH9H7GJ
MD5:	6CFD66ACA15E28ED9E77672FA22604B7
SHA1:	79F78E9167A5853D740486CDAE627034CF2A7085
SHA-256:	DC9835EC6574C8D748F4FE255D01035A7D289F4A8CAAE72A989A32D3973CAECD
SHA-512:	EA92F7A28EDB72E445B93F402B3A642250BFD6500A86021E9523276F839DEC2C373DE15C2A452D5078D445776DE600748CC446121C886E90AC485DD066D7B41D
Malicious:	false
Reputation:	low
Preview:	GIF89a,.f..-.zzzk......iii......QQQ>y.333..................NNNP.....bbbHHH3r........\\\DDD/o..........z....F..YYYKKK7u.]..mmm0p.EEEwwwAAA............................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="uuid:7B5A467BE724DF119A7580743CA6CBF4" xmpMM:DocumentID="xmp.did:4F5C400268DA11E09BA4D328131F6EAA" xmpMM:InstanceID="xmp.iid:4F5C400168DA11E09BA4D328131F6EAA" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5CC2EF5229206811994CAFE9C444B600" stRef:documentID="uuid:7B5A467BE724DF119A7580743CA6CBF4"/> <

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554), with CRLF line terminators
Category:	downloaded
Size (bytes):	34449
Entropy (8bit):	5.297122369876032
Encrypted:	false
SSDEEP:	384:6jUQkv1A607gokbFAnOztkRvtQyVRvVQy9OkRvtQyGbv:6jUQkcbkbFAnM+tQy/VQy9OktQyGr
MD5:	D2EFD4B7E8BEC9873A89A8F45D3EF76B
SHA1:	BC4B89D62EEB5F0C97805C9B28CE4799C8F2E2A3
SHA-256:	223CD49D1CB6F7E32867B2C85CE0CBE1A76D079C3355DD7F7614C6A24BEA4890
SHA-512:	968641BBC05DB1E11C29F8905DD29AE19B91DF10A1B07C21A17BE7212301A92EABBB883FBECBA3242B4ECF1377F9349338C329CD755DA96867BEED5942F920BD
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/css/bootstrap-custom.css
Preview:	.img-bg {.. position: absolute;.. right: 0;.. top: 0;.. position: relative;.. max-height: 100%;.. overflow: hidden;.. min-height: 300px;.. background-repeat: no-repeat;.. background-size: cover;.. background-position: top right;..}...img-bg img {...height:1px;...width:1px;..}...fonts p {.. width: 100%;..}...jumbotron {...background-color:#f7f7f7;..}...container-fluid h1,.jumbotron h1 {...font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;...font-size: 32px;...line-height: 36px;...color:#333366;...margin-top:40px;...margin-bottom:20px;..}...container-fluid h1.inverse,.jumbotron h1.inverse {...margin-top:40px;...margin-bottom:20px;...color:#FFFFFF;...background-color:#333366;..}/...container-fluid h2,.jumbotron h2 {....font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;...font-size: 28px;...line-height: 32px;...color:#333366;...margin-top: 54px;...margin-bottom:24px;.....}/...contai

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1448
Entropy (8bit):	5.046757051531185
Encrypted:	false
SSDEEP:	24:2dD5A2NqLIgsDeonHGbo/WzvyTWsS6JhfGHoxRcM+SnYqEIlu:cFA2NuVsNHMwyuW/63GGwSnYIu
MD5:	4C8F3D7064524311EF86DDD0DED768D1
SHA1:	53CA5F29F603435821D07019CF123E430626F54E
SHA-256:	2D45F10E1A6925E9500A4FB6E0223CE4DDFB492A914472CA8229FA01E3F94AFA
SHA-512:	F1A7B0272DD186E641CA4852744DC0A355731A3AAF7CE2123ADB080E43EB2507CDEE5CA1488E08A5A52D76A11D2CA07D52A39637F07CAC8E2BB58DAFE3ED25F2
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/holdmail.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<g>.....<g>......<path class="st0" d="M70.3,99H29.7L1,70.3V29.7L29.7,1h40.6L99,29.7v40.6L70.3,99z M33.5,89.8h33l23.3-23.3v-33L66.5,10.2h-33.......L10.2,33.5v33L33.5,89.8z"/>.....</g>....</g>...</g>...<path class="st0" d="M69.3,31.7c-0.5-0.5-1.3-0.8-2.1-0.8c0,0,0,0,0,0c-1.1,0-2,0.5-2.3,1.3l-1.5,19.3c-0.1,0.9-0.9,1.4-1.8,1.3....c-0.7-0.1-1.3-0.8-1.3-1.5l1.1-25.5c0-1.7-1.2-3.1-2.8-3.2h0c-1.8,0-2.6,1.5-2.6,3l-0.9,25.5c-0.1,0.9-0.9,1.5-1.7,1.4....c-0.7-0.1-1.3-0.7-1.3-1.5l-0.2-29.8c-0.2-1.5-1.4-2.8-2.8-2.8c0,0,0,0,0,0c-1.7,0-2.5,1.7-2.6,3.4l0.2,28.7c0,0.1,0.1,0

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7024286112944225
Encrypted:	false
SSDEEP:	24:XuUyLjW89Jl3Hc2Q1m7Ub9t6TtIVFmhZz2X+obTHPDFTPLkqwnycw:XUjW8d3Hc2a4U7Ex2XNPF4q+
MD5:	178819CC32A7774822E3550C57CD20AA
SHA1:	C8050EC440E8CC1367A6115934EDC0BF94A0D343
SHA-256:	8565AAA87282F585B8A021EE0E693F662EB179DF62890D01E086CC9F23DEC1D2
SHA-512:	794C0578A7521C093C27A5592AB6F4874742F6DB4C53E9B0B07ACFECABF8575117FF1808FF0F0426594F4981F5933C756647B146B7AC815DECAA9C5FCEC246FA
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/favicon.ico
Preview:	............ .h.......(....... ..... ..............................................................................M...Z$#.b/,.d/-.`.,._-+.b,+.a-+.`-+.`-+.a-+.a-.c.-.V&$............^^.a+._('.g21.k87.h76.h54.i44.i44.i54.g63.k65.c.-......................}.j;:._%%.b,+.h55.i66.f43.g33.g42.g63.a-+.......S...uJJ.................~TS._(.^'&.d20.k74.i63.g53.`,+.......b0..f/..X%$.sKJ..................vt.i87.Z&#.`.+.j75.b-+......._-+.j75.i52.i65..\|\|..cd......................TT.`-+.a+)......._-,.l66.`..``..............uu..\|}...............`41.......c-+.j97.['&..........................................rp.......a+).f30.d30...................................................a55.k;<.o>?..ab..ce..bd..ef..im..tv................qo................................................ur.l<:.b21.\$$................................lj.xLK.f65.^).]('.g21.h64.a/,.............on.xLK.h43.^)'.\'$.`*).e//.i43.j76.k76.g63.k65.c.-.......O...Z# .]'%.`,+.b/..b//.b/..a.,.a-+.`-

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 990x225, components 3
Category:	downloaded
Size (bytes):	70249
Entropy (8bit):	7.923588917830898
Encrypted:	false
SSDEEP:	1536:vJVaZq+ejbq4Bws+XfyKhQSigYG41dJ2KOpzDz3LS/Tri:W/s+4Bws+XfJhQqsCKO5Dz3LAi
MD5:	A9A3543812D53D07453A6C5553C0DAB7
SHA1:	AAB5D95A4F59405EFAE13F8C1A8FDA7BB71CFA2B
SHA-256:	7B74657E8F5A05B614D00DC1720B966E6EDF4CD1655A560C6D8109498ED670F9
SHA-512:	601F9880949F40413F81791C79D095B8BC612F40D5F73C6C58EE2185ADAAF3D7765186EFA14CA991AD752C57E7924C8E864B162146F502458D9E53EBB06231F3
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/business/informed-delivery/id_hero-mobile.jpg
Preview:	......JFIF.....H.H.....@Exif..MM........i..............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................>............?.....h.=.._..E...K...."....f....$.'.k..~......<P........>.....>../...P.?.......ZIL.Z....R."./........./...S?fk.....+]E.3.....^E..R:r..k.......wR...&oZ%..e..7.....#.o...T..@.gC...1^..o.^....w..N-^..D1.z..@e>... .Z..W\..ma..z..5.4.}...V

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	592
Entropy (8bit):	5.3418082693072595
Encrypted:	false
SSDEEP:	12:TMHdPVNi/nzVJ/KYf3nojHzNFLiiQUOqQUOHXPlEhM:2d3ATLf36TNFFQgQ9XPlV
MD5:	D85E71E5218D4464FE55AA786B29B0DF
SHA1:	3E7B370874022D561E0FCFBE0E9332E822A48523
SHA-256:	4EFFA9948EDE5C52F8A8F23BD3E4F05262725E1DA0D22B61ACA4DB3EE0629A70
SHA-512:	4E447DD2D87A10B7B609A5A3DBC56964953A9F0BC91F722ECF87A8825DE7D454C506F7CD6EFE13422E151EE737FEDBE896782B091FE7071DD0A13551857653F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 6 11" style="enable-background:new 0 0 6 11;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<g>..<path class="st0" d="M0.5,11c-0.1,0-0.3-0.1-0.4-0.2c-0.2-0.2-0.2-0.6,0-0.8l4.3-4.5L0.2,1c-0.2-0.2-0.2-0.6,0-0.8...c0.2-0.2,0.5-0.2,0.8,0L6,5.5l-5.1,5.3C0.8,10.9,0.7,11,0.5,11"/>.</g>.</svg>.

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17192)
Category:	downloaded
Size (bytes):	17423
Entropy (8bit):	5.227415277419737
Encrypted:	false
SSDEEP:	384:Ekh4TtpqsBojXi8Vq5EJN+bcTxHFED/5y13t3UoBtliGIHrXyVtMrveb8POe6Y+:V2bqooDi8SeEbEHFEDhy13t3vXxEyDMY
MD5:	16E572A4F80526DF4BC3CC7FF056A9A8
SHA1:	F23B5C2FD52E855245E3D2586CD911051561E64C
SHA-256:	75237772A7BC8C6EAADBE642BE69503335C5842AF8981688250A8D4F0F61C377
SHA-512:	8AE4B57782C5A5A6CE2190D8C02901AD83B24CA9FA1E2427C8B6CB5981D98146C9A6E2E4B7F77ADF954198D540ADE5F5FEDA0FFE919356338CC56B67EF40A26B
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/requirejs/require.js
Preview:	/** . vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */..var USPSRequireNS;(function(){if(!USPSRequireNS\|\|!USPSRequireNS.requirejs){USPSRequireNS?require=USPSRequireNS:USPSRequireNS={};var requirejs,require,define;(function(global){function isFunction(e){return ostring.call(e)==="[object Function]"}function isArray(e){return ostring.call(e)==="[object Array]"}function each(e,t){if(e){var n;for(n=0;n<e.length;n+=1)if(e[n]&&t(e[n],n,e))break}}function eachReverse(e,t){if(e){var n;for(n=e.length-1;n>-1;n-=1)if(e[n]&&t(e[n],n,e))break}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var n;for(n in e)if(hasProp(e,n)&&t(e[n],n))break}function mixin(e,t,n,r){return t&&eachProp(t,function(t,i){if(n\|\|!hasProp(e,i))r&&typeof t=="object"&&t&&!isArray(t)&&!isF

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1006
Entropy (8bit):	5.232282735286602
Encrypted:	false
SSDEEP:	24:2dzATLf3UX7mXYTNkeEhgmyhTkTx3Qx7FEEZiP6Fx1f0Qz8:czAvf3UX7mXYBkRWmye93a7FEdPQf0Qo
MD5:	DF6FCAB6C4CAF86E8A1401A4FC36F885
SHA1:	860352CEA6899553CB4E7111097B35BD007C65E7
SHA-256:	986EBC6C0F0C4B5BDB2513352DBBF3F501A36ABD1DCD0C17A9C215EFD95191A7
SHA-512:	E263C5714A2BEFAC6DDDB15F1A2C4DDB3BEE22FDEF7DC05BA6794E6A0DB9EB8245E23E5742DE1E1F2EFCBCF07A4911138E36DFA06AECF0D826C955B836F07A0C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 28.4 32.4" style="enable-background:new 0 0 28.4 32.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M26.7,9.9H1.6c-0.8,0-1.4,0.6-1.4,1.4v7.1c0,0.8,0.6,1.4,1.4,1.4h0.6v10.6c0,0.8,0.6,1.4,1.4,1.4h21.1..c0.8,0,1.4-0.6,1.4-1.4V19.8h0.6c0.8,0,1.4-0.6,1.4-1.4v-7.1C28.2,10.5,27.5,9.9,26.7,9.9z M12.2,29.9h-8v-10h8V29.9z M12.2,17.9..h-10v-6h10V17.9z M24.2,29.9h-8v-10h8V29.9z M26.2,17.9h-10v-6h10V17.9z"/>.<path class="st0" d="M9.2,8.5h10c2.5,0,5-0.5,5-4c0-2.2-1-4-4-4c-4,0-6,3-6,3s-2-3-6-3c-3,0-4,1.8-4,4C4.2,8,6.7,8.5,9.2,8.5z.. M16.2,4.5c1-1,2.4-2,3.5-2c1.4,0,1.5,1,1.5,2c0,1.8-0.6,2-2,2h-3V4.5z M8.7,2.5c1.2,0,2.5,1,3.5,2v2h-3c-1.4,0-2-0.2-2-2..C7.2,3.5,7.3,2.5,8.7,2.5z"/>.<

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1827
Entropy (8bit):	4.563424183231959
Encrypted:	false
SSDEEP:	48:cfkAvf3yhvCtam5lDtPuxJ02ZsfHl1I2A+:uvfCFCtZD5KJrafHlm2A+
MD5:	1426A5796B4337302EE498D4A9265B38
SHA1:	C3B2B8042EB536D43101C5281D5AAE8244D1E0E1
SHA-256:	87F26B59587D5549F99B77E77519BF17B625C6A693931F54F62ACCAC834E6FF1
SHA-512:	97A82F537981956033E8DA06DDDEC07039A904310D1817998D9F6E8A77FF4F6C1AE59018EDB06EC34776FDA3E9E7BCEACDDC1C0A95ACF2FB2E6DCB7F9C5689BE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">.<style type="text/css">...st0{fill:#343466;}.</style>.<path class="st0" d="M19.7,4.9l-2.5-2.5c-0.3-0.3-0.7-0.3-0.9,0l-2.9,2.9c-0.3,0.3-0.3,0.7,0,0.9L14,6.8c-0.3,0.1-0.2,0.5-0.3,0.5..c-0.1,0-0.2,0-0.2,0c-1.2,0-1.9-0.5-2.9-1.1c-0.5-0.3-1-0.6-1.7-0.9C8.9,7,8.6,8.2,8,9.7c-0.7,1.6-1.8,2.7-2.2,3.1..c-0.4,0.4-0.5,0.5-0.9,0.5c-0.4,0-0.6-0.1-1.5-0.5c-0.9-0.4-1.4-0.8-1.6-1c-0.2-0.2-0.1-0.3,0-0.5c0.1-0.2,0.7-0.8,1.4-1.7..c0.9-1.1,1.6-2.9,1.6-2.9c0.3,0,0.7,0,0.7,0C5.4,7.5,4.6,9.2,4.6,9.2S5,9.4,5.6,9.6c0.6,0.2,1.3,0.3,1.3,0.3S7.3,9.3,7.8,8..c0.4-1.1,0.4-2.9,0.4-2.9l0,0l0-0.4c0,0,0.5,0,0.6-0.1c0.1-0.2,0-0.5,0-0.7c0-0.1,0.1,0,0.2-0.1S8.8,3.2,8.8,3..c0-0.1,0.2-0.

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 48 x 525
Category:	dropped
Size (bytes):	1604
Entropy (8bit):	7.798724253896392
Encrypted:	false
SSDEEP:	24:l10GcVC/v7yOx3okfT0DweVk1R+THymQEiE31T2W3+G09ymTJHwuRab:l1uEH7VNokmNVeR+THyIn4ONMFq1b
MD5:	96F1E590DDA6A1C9015CF229D3B5C7A5
SHA1:	8685CACD2315D200BCFCAD0684EABBE22F73FA10
SHA-256:	E68AB8B5FB42C11EE98CA8E32342FBD52733EA0C27766637386E45F4249B2DFC
SHA-512:	25B397C9C38EC15F17CCCD6815E5E4C487CF1FD6B8F7E8620AE1D54B21A542F1A8D2D33435CBD60717E4AF3F5B627EC7380D80AB954021FEE1148730DD329BA5
Malicious:	false
Reputation:	low
Preview:	GIF89a0......................................................................................................!.......,....0....... .di.h:.l.p,.ma.x..\|....pH,..A.r.l:....@.Z..v[.x..xL....z.n...\|N.....~.........uf...^........................j*&j..p..i$4$i....+,....-#h.o..."..6B6....n....@...@..,#.m.....J...J......l.....".k.........e[.O.>~...tf...G..ABX`\.w...k.q.#...\.@.CG#..N..2e..%..+..K4.h...M.9.-h.&......(..@.I-9`.......8P.....^.<...Fe.VJ.v......ln.v...+ao^.v.....p[.j..U,.q(. ...r'.0o..3Y..A..=.ta.Q'V..uc.aG.=.ve.qg..wg.......g....~\y....m..9t.k.W.......C..=.t...S._..u...c.=.v...s...w....g.s..T.[.J.....".s.]..].n.Nw.U...M..P......r(...h..........(....h..........)`...8...2......t!..SbI.....".(.....q...'....+.../....3.Y..7..;...?....C.Z..GB)....5..I.Y".MR...Q....KZ.J.2Z%.Wr...[zz&.i....m....q..(............Y..............Z....&.k..v.m..^.j..Zn..~ZS....m....n...m............\...../...l...2....B...R,...bl...r..............

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1540
Entropy (8bit):	7.832163693681832
Encrypted:	false
SSDEEP:	24:9Z82jiSiBDHqnvmiVtYySIHHULLd7smB0rTc5n7rBtVA4fFW4GzcQ0zoa:c2ji3HqvmiVHSTLCmB0aApfGzoa
MD5:	DDED8E2E38057EA9183FF095BC2E6CED
SHA1:	E12CE587F18839ED139D59774E5FEF8B793DBFD7
SHA-256:	A3BB919A80DAE6A64CB25FD18E689ACAE58A81737E21ABFBBC851B83C60BF578
SHA-512:	EE0B8DCB4AEDE78441ED1B75931F0F44DDF0E999495166D522ED049342DF37ADFCA33CAA02074AFBE937B72C68410F5349127E97FCFB3FF2F6FEA739D5614441
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/welcome/scroll-red.png
Preview:	.PNG........IHDR...<...<.....:..r....sRGB.........IDATh..[h.U..s.n.kB.4.M".f......Bm........M..AzAA..@.}......o. .[z..B.Kq.4.&{....m2s...;.......Nvgs ..s...7g...9.e.S...#Y..GJ}.dr......$.................c.r.t^`..Wsu...._J.....\|..^A.O..m..3v..]..+D.d..L...Fu..>..^].b.. A.,.x.b.6......u....<..7..8504......5...3v.8.$.L....E%O.K..j.wOJ)G-l....;-...w.]I.u..8;8.........Y=.#.-..hOr..7v.....a]..o4,.L1P,.....zX......8(..1.iu...C,..[.gE..x...U.7).J..Y..\./"^.H$...p....jS..k..toD.8...=L.qP`..bU..q.,...j0h.{.....1;.d...z..h.`{B...p..t..KV..2..K.fx..r..9./';./'e=...j.KE-.F[.0b1..mI......M..-..b.....u..,.01......6.8 ...KN.....5]?..F./fS.p~.b.....4.U...6@3'...i.:.T..6.X.!#...sP...8x...B..7...hv1.7o..m..C.m.g...U..}.\^.`.e.....NS.....l.......=V..%VN...M....r.$.\...&V..-.L...?<...5CV..i.gk$b.......N`.Ue..z.....J...M.../?C..G...G 49...u.Wk!..Z.8._....k..8..eU1.6.7_We..-....8........@<.,@G;..].!...a.!r...@.7..O.a.}\H.}.pp..t.."No>...h....?...7r..;v

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	4.942073163883459
Encrypted:	false
SSDEEP:	24:2dD5AVLfEDeolGbpaqVWyFEmrWRz+QSAP9cGjbKmeThUS77oSl+AVPSk:cFA1fENlMFEmrWkQSu9cGjbKmeNJXlbd
MD5:	D3793852DE4F419211843C1F4C05DDB4
SHA1:	8C7ECCAB4E3865A04553D720C150E4506D8990A0
SHA-256:	7487A4B55D8CB9A837520DCB7EA5E50C915B5797C165F9BF7A7A3F8FE468A0A0
SHA-512:	E80729147244A303950F05E80E79EB98EE3CE49DF9A175EE94F9B924E8725CE8FC8A128C3909E5952990D46102EE4D38FCBC32A679FCCF9FCF03709EB6603740
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/po_box.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill-rule:evenodd;clip-rule:evenodd;fill:#333466;}....st1{fill:#333466;}..</style>..<g>...<g>....<path class="st0" d="M46.9,51.4c0,1.4-0.2,2.6-0.8,3.7c-0.5,0.9-1.1,1.6-1.9,2.1c-0.3,0.2-0.5,0.5-0.5,0.8c0,0.5,0.1,1,0.2,1.5.....c0.2,1.4,0.3,2.7,0.5,4.1c0.1,1.2,0.3,2.3,0.4,3.5c0.1,1.2,0.3,2.3,0.4,3.5c0.1,0.6,0.2,1.3,0.2,1.9c0,0.1,0,0.1,0,0.2.....c0,0.1-0.1,0.2-0.2,0.1c-0.1,0-0.2,0-0.2,0c-2.8-0.7-5.6-1.5-8.4-2.2c-0.1,0-0.1,0-0.2,0c-0.2-0.1-0.3-0.1-0.2-0.4.....c0.1-0.5,0.1-1.1,0.2-1.6c0.2-1.6,0.4-3.2,0.6-4.8c0.2-1.8,0.5-3.6,0.7-5.3c0.1-0.5,0.1-1.1,0.2-1.6c0.1-0.5-0.1-0.9-0.4-1.2.....c-1.5-1.6-2.4-3.5-2.6-5.7c-0.2-

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	4.347691161328113
Encrypted:	false
SSDEEP:	3:CKBrRHMadxWBv:CgVMaeBv
MD5:	BD704719699C2453FD0009EAC80CB86E
SHA1:	69E9772BCA3C433D08BF16A7DC0E848CD158ACC1
SHA-256:	A6E9E1722CFFA254DC5061E3D89FC40A4FAEC0CD7D44819923657D498E8DF822
SHA-512:	9374FB6E51EC60E1BC1A17EAA9757925868B0DC73D45F1C280AF691ED66383B553ECCD61B906F2E65835E6D03C506B0CBE2C94035F0646EAD3C84E385E432F19
Malicious:	false
Reputation:	low
URL:	https://getrockerbox.com/integrations?source=usps
Preview:	RB.jsonPIntegrations({"integrations":[]}).

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	4.9893004818584625
Encrypted:	false
SSDEEP:	48:cFA2NuVsNHMttdWnWWVnW5onWanWFGVnWWLHnWBmnWHVnW9OQnWkc:L0uVYsttwHCgvy2pH4+gsOIG
MD5:	6204F7FB48EF86964B4B1CCE343EBDDE
SHA1:	D60B7E47E22615FDEA2A24E102200090B466B862
SHA-256:	EDBB6A59137018B9A8229184AAC04A2661787564CDF4484229BEE96D7C11E771
SHA-512:	0C79C9F900C6C979345A9DE5F55519C8255ED8C00C35F43E0DFAD241AD767B815E95C97FF44DFCAA245D903587718C69064F98D8D9A17063D862C31E62BFBE99
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/calculate_price.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"... x="0px" y="0px" viewBox="0 0 100 100" style="enable-background:new 0 0 100 100;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<g>....<path class="st0" d="M73.3,99.1H26.7c-7.2,0-13-5.8-13-13V13.9c0-7.2,5.8-13,13-13h46.5c7.2,0,13,5.8,13,13v72.3.....C86.3,93.3,80.4,99.1,73.3,99.1z M26.7,10c-2.1,0-3.8,1.7-3.8,3.8v72.3c0,2.1,1.7,3.8,3.8,3.8h46.5c2.1,0,3.8-1.7,3.8-3.8V13.9.....c0-2.1-1.8-3.8-3.8-3.8H26.7z"/>...</g>...<path class="st0" d="M39.9,76.7c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7C37.8,72,39.9,74.1,39.9,76.7"..../>...<path class="st0" d="M39.9,62.1c0,2.6-2.1,4.7-4.7,4.7c-2.6,0-4.7-2.1-4.7-4.7c0-2.6,2.1-4.7,4.7-4.7....C37.8,57.4,39.9,59.5,39.9,62.1"/>...<path

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1040), with no line terminators
Category:	downloaded
Size (bytes):	1040
Entropy (8bit):	5.156160192967715
Encrypted:	false
SSDEEP:	24:fkcgIDf9BUDjF5WGmRcQUmR4sXsz/BLbWX6S5urmRsZRdWT985sTaZRMwB:c8fgGlbyssdbWqSHWAmGT4t
MD5:	90D8FB00194D91E9DD20281817C285D6
SHA1:	E7E37421B14A39E0D3787988A52A45D27EC3761F
SHA-256:	479B585BB1F3CA011746467C115B58CA0CD6AC62AA68C9D953635B3344953887
SHA-512:	D57E2DFDF3109961597FCE60F576E3460A22A83FBA00432510D53579FD4D8D238046F105AD1B700FE39F13C385D2042781E0897F5F40B978DA38ECFAFF5B7B39
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/resize-manager.js
Preview:	USPSRequireNS.define([],function(){var e=function(){var e={resizeThrottle:50,callbackThrottle:100,breakpoints:[{name:"tablet","min-width":500},{name:"desktop","min-width":959}]},t=[],n=null,r=function(){i(),u(),s(u)},i=function(){var r=null,i=window.innerWidth\|\|document.documentElement.clientWidth;window.onresize=function(){var n=window.innerWidth\|\|document.documentElement.clientWidth;i!=n&&(clearTimeout(r),r=setTimeout(function(){var e=0;for(;e<t.length;e++)o(e)},e.resizeThrottle)),i=n}},s=function(n){t.push(n)},o=function(r){setTimeout(function(){t[r]()},r*e.callbackThrottle)},u=function(){var r=0,i=window.innerWidth\|\|document.documentElement.clientWidth;for(;r<e.breakpoints.length;r++){var s=e.breakpoints[r],o=r+1<e.breakpoints.length?e.breakpoints[r+1]:{name:"ERROR","min-width":1e4};if(i>=s["min-width"]&&i<o["min-width"]){n=s.name;break}}},a=function(){return n},f=function(){return n==="tablet"?!0:!1},l=function(){return n==="desktop"?!0:!1};return r(),{addCallback:s,getBreakpoint:

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (19750), with no line terminators
Category:	downloaded
Size (bytes):	19750
Entropy (8bit):	5.601470265777821
Encrypted:	false
SSDEEP:	384:yj8VYg4NpQfeEKDg4rCZ4+hDg6/JU0g8kpgfuE6DQ47Cp4OhTgq/ZU/gB2p3fNE8:uQt2Leick6Ag9m7uys0qkvmNYxpTX1Ff
MD5:	5E94DCAEA62002013386C3A9AF91CBCE
SHA1:	B744CC7BBC88C4B96825EA312A487AC1E15C123E
SHA-256:	4686D51C8BFA422D4C3A516B151C57764AE26C77D608BCBFCC7142EF3751058A
SHA-512:	D9020A67BBA27B505338306EBE1DBC2B9639098260994EA4BA2183DAE900D848A34444C48DD6CB8ACB4626EC3D9C38C4D3993AD93A6F3B21223246E7BA802971
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978081151?random=1713487477500&cv=11&fst=1713487477500&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7779836061"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1s3GfHvg!2sZklLdw!3sAAptDV7bSGdF"],"userBiddingSignals":[["377238866","68

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1307
Entropy (8bit):	6.862900930794217
Encrypted:	false
SSDEEP:	24:E1hJIwWwjx82lY2T3oVeMaf/yJ3VYmNvWGYIGofc5ByAkXMvcz2fROB:KkNNn2klTJ3WmN3nfcjkwRO
MD5:	3500D365CD94527C71FE9C70D5CDA435
SHA1:	0C7BEDE628D74CEFAF5FCE1B675C0CE3C72C78C9
SHA-256:	34B28A24C5414DAB68A15BE6613536D905FAF33FBF1AED8EE4702CAA60BE9BCA
SHA-512:	F8EDFD39A3E6402D2A546DEB0368297969C7AF02A61185D156E3158CAA1246AD2CCC19A523623185E1EB9F957DA3D026EF6751DCD6C13EBBDFB4D8ED16990FC3
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/images/home/utility_customer_service.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)" xmpMM:InstanceID="xmp.iid:8F605BC93D9E11E68A53F7CAB1B95AF7" xmpMM:DocumentID="xmp.did:8F605BCA3D9E11E68A53F7CAB1B95AF7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9C4417AA3D6A11E68A53F7CAB1B95AF7" stRef:documentID="xmp.did:8F605BC83D9E11E68A53F7CAB1B95AF7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>+..M....IDATx..O(.a.....(../.._9Q..l.S.k&......9m....8H..\(n.....R".sp.}.9.i..k..4.....}.}fB.i...qt..!<...8

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 668x450, components 3
Category:	dropped
Size (bytes):	78087
Entropy (8bit):	7.956931799882443
Encrypted:	false
SSDEEP:	1536:Ef5rofarKjeQEKx3PCcLvfP8UZKJbjbapO987zU2fpMEXm5c/s4c/aj2B:/falkKgbZO/ba09YU8pMEXQ
MD5:	122A72AAFFEFF096E9C9F48F03CE5E62
SHA1:	193867AD14795F465AB37CA3E650DF9E77C3665E
SHA-256:	0D439DA076748E9194B3669D10C6050C6CF16CD6094BCADCE9F6FD011D946F51
SHA-512:	B70ACC9259CA1D27C08D034C976D8B24BAB0379257863874E2DB2536C3376EE89B2FB9275F6CAA21595877B9630C1AB36C017EC6AD781D9B450567142ADE17C2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....LExif..MM........i...........................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C..................................................................................?.....qud...mU..;.].....<BY..2.....]......4~...-.2I...y'..j.....f_....Y*j.6....O...[.._[Y.z......]7.u..,"....T.x...h.....?.........n..O?.x.....7.6..(..=jTR......N...t}.F...5....I.v..W......^......c..+..Y..w ..\|..&..Y...]..

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20915)
Category:	downloaded
Size (bytes):	21045
Entropy (8bit):	5.3006986272139685
Encrypted:	false
SSDEEP:	384:vo2reVRW28ONZJVDf6k92pFsw1ayjFJoQuQnL/CtxFsnbsWQqSbBwEcIi5tLRC:g33vLB2oAbuQnL46nYBiI+LRC
MD5:	34E7DA1594CC0B9A17A3FFD31CFF3659
SHA1:	F477CF7A2D41E3FEC10B7A6F388CDC2AD1137C90
SHA-256:	BB03D3C049264991AEDE291D80E23367722BFDA8C2C6F097E85BE85A46022ECF
SHA-512:	483D6C8D2E715418645F509EADD84BC1D35B955E468D1DC684AE225D70CD3F1460704982F84A512A712F58A4D65FA05EAF527F738AD9FAED29966193369B9D90
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/lib/jquery.magnific-popup.js
Preview:	/! Magnific Popup - v0.9.9 - 2013-12-27. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */..USPSRequireNS.define("magnific-popup",["jquery"],function(e){(function(){var t="Close",n="BeforeClose",r="AfterClose",i="BeforeAppend",s="MarkupParse",o="Open",u="Change",a="mfp",f="."+a,l="mfp-ready",c="mfp-removing",h="mfp-prevent-close",p,d=function(){},v=!!window.jQuery,m,g=e(window),y,b,w,E,S,x=function(e,t){p.ev.on(a+e+f,t)},T=function(t,n,r,i){var s=document.createElement("div");return s.className="mfp-"+t,r&&(s.innerHTML=r),i?n&&n.appendChild(s):(s=e(s),n&&s.appendTo(n)),s},N=function(t,n){p.ev.triggerHandler(a+t,n),p.st.callbacks&&(t=t.charAt(0).toLowerCase()+t.slice(1),p.st.callbacks[t]&&p.st.callbacks[t].apply(p,e.isArray(n)?n:[n]))},C=function(t){if(t!==S\|\|!p.currTemplate.closeBtn)p.currTemplate.closeBtn=e(p.st.closeMarkup.replace("%title%",p.st.tClose)),S=t;return p.currTemplate.closeBtn},k=function(){e.magnificPopup.instance\|\|(p=new d,p.init(),

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	33984
Entropy (8bit):	5.127547364679246
Encrypted:	false
SSDEEP:	384:TsU7r81sF1XSF0L0jXD36qfmatoJizQwWie8peBsAhjKQMw/5PkVZI:TsUHFgF0L0jXDK8KqQXie8peB5PkVZI
MD5:	C2837A722ED4F236A6435686C85BD3C2
SHA1:	92C36C64266B893EA2CA51530B602C196D4EF2EE
SHA-256:	CF941A37A4D63825F17358D1013DB6CD85143AB823F80D86EB5C1619E6A7C00D
SHA-512:	E3DF4D3F09A6026376F45EF7EF5B1E83BD7CBA5753CD81BACE0BD00F4BB19E761E39ECFD7BFC0DCCF737F0E2245107AA383354E875E1E2090B3154E5C8B59326
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/styles/default-styles.css
Preview:	/************* General Elements Styling **************/.html, body {..min-width: 0px !important;.}..h1 {..font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 30px;. color: #333366;. margin: 0;. padding: 0px;.}..h2 {..font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 24px;. color: #333366;. margin: 0;. padding: 0px;.}..h2.normal {..font-family: "HelveticaNeueW02-55Roma","Helvetica Neue",Helvetica,Arial,sans-serif;..font-size: 24px;..color: #333366;.}..h3 {..font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 18px;. color: #333366;. margin: 0;.}..h4 {..font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;. font-size: 16px;. color: #333366;. margin: 0;.}..b, strong, .bold {. font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif;.

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=4321490&time=1713487482818&url=https%3A%2F%2Fwww.usps.com%2F%23skipallnav
Preview:	{}

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8795)
Category:	downloaded
Size (bytes):	8796
Entropy (8bit):	5.485222342795602
Encrypted:	false
SSDEEP:	96:ehJhWbXOuTuAPwNnNengM8T2Te7u7f6+q4Trjl1ocYXocKg4u98Ea6hDEfcyFloW:dSlJiRJGXr98IhDEfcjxACA
MD5:	FF67EAC943614EF903C2E84419A60F4C
SHA1:	565109B98747417724DAFA5462A731C692178381
SHA-256:	0863D2C590D46AD4B990232414EEF23349EE4316AC4CCBF6F4618329539FB65A
SHA-512:	12D1FD9B2CA31FE7DB2D8474BBCCF310F922CC447DF716CBA43720520CAC8C906A3ADA2DEBBFC10E9B94020BE7339F11473B1573DCB88C1C5702BAF1408B8477
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/footer/css/main-sb.css
Preview:	@font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/58ab5075-53ea-46e6-9783-cbb335665f88.svg#58ab5075-53ea-46e6-9783-cbb335665f88") format("svg"),url("https://www.usps.com/assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff") format("woff"),url("https://www.usps.com/assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf") format("truetype")}@font-face{font-family:"HelveticaNeueW01-77BdCn 692722";src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix");src:url("https://www.usps.com/assets/fonts/83d5bc89-af33-46a9-8fe3-15d87784f50e.eot?#iefix") format("eot"),url("https://www.usps.com/assets/fonts/d90b3358-e1e2-4abb-ba96-356983a54c22.svg#d90b3358-e1e2-4abb-ba96-356983a54c22") format("svg"),url("https://www.usps.com/asse

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 974x413, components 3
Category:	dropped
Size (bytes):	102287
Entropy (8bit):	7.909989435764711
Encrypted:	false
SSDEEP:	3072:A4huzgk9Wa8z1G2f3NJndPikTwIr32xkutxR:5u/ga8zQ2PNFdPikTl2q03
MD5:	006BD76F4FF52059B17C314BA086DD18
SHA1:	9C580ED423728CD6FBCCF759AB8E937FC08C4F11
SHA-256:	442CCF40C76C60C5A1C70C5EEFD5FC14130AF91AFB43AE6305B54763ACDE241A
SHA-512:	50AE46A64AFD94B10C5C253B06D8A115E0D33175C82CE96FD55B2FECA195E6C85D6CE1D8189F3031C4ED58D5280AA540B76A3C26383F0A26B3B1CFF56A4DE4BD
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i..............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C......................................................................=............?...OSIJz.J.(...(...(...(...(...+....?h..Q..>'...Z[\...N.&bY$..6V....^....28.}7.O.....W...b.....h..\|G.6.u=WU.t`..Op..g,....s..F.kz8%Z.L._...f..... ....d./.]B.,~u...0.y......d....Z. .~/...?..._.?.I/../...S._.-em.7..Q......P..2d........_.,..

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 675x450, components 3
Category:	dropped
Size (bytes):	86605
Entropy (8bit):	7.976386525672423
Encrypted:	false
SSDEEP:	1536:4T5wBk3itJsL3yTTDQnQvJlc/CyfXIDv1m/GzNj7f+czNLiOOu/:49wa3Uu3yT3QnQvP0ngv1+YHWckE
MD5:	518F55DB4BAC9AF38CF3224168C5E7C3
SHA1:	13F08859EA26952537E2717798A290F157483EA3
SHA-256:	4AE6F7EB84045F7574521B62322D022BDF5DAF90E675CF7BDCB79DD27AF37409
SHA-512:	2B2D3CCFC0CF379DA84E8F47AD2CD63A02A1F74730BB871272D1E5CA2AC3E4B835866A36E33738A4DFBCDA1B4B264B2F470F375C59161B3825F84CA35A846C92
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52735)
Category:	downloaded
Size (bytes):	426974
Entropy (8bit):	5.621526674547751
Encrypted:	false
SSDEEP:	6144:YFHSrzrPrmrPr2rlrVrVrlrTkgbyiCdRCNg7kPdK6s7YbIinJVCR:YFATkPiCdwNg7kVKgS
MD5:	F34E7187B2030CC223ECAA82BF1C2A67
SHA1:	A0DAF7FFECD0EA7DE19354CE70703967A58AB607
SHA-256:	80D7B960402AEFA1A0FE60E1149F2AF3533B892BB6D62E0ADBCDD57EDDC902F9
SHA-512:	D9DD4779D2D867DBCE85822C05D3AB9F7BC5A0331EF4CF9A50E989B14C385E3080F02DFF8B6B5016EA4C739BC95440BF86282FBAD4B6B37345258737AC734007
Malicious:	false
Reputation:	low
URL:	https://resources.digital-cloud-gov.medallia.com/wdcgov/2/onsite/generic1712597535708.js
Preview:	.(function(window){window.MDIGITAL=window.MDIGITAL\|\|{};window.MDIGITAL.version='2.54.1';})(window);window.KAMPYLE_CONSTANT={PLACEHOLDERS:{URL_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLADATA_SRC_PREFIX:'https://resources.digital-cloud-gov.medallia.com/',COOLDATA_API_HOST:'udc-neb.kampyle.com/',USERSNAP_ONPREM_HOST_PREFIX:'https://md-scp.kampyle.com/',USER_AGENT_CLIENT_HINTS_LIST:'["brands", "mobile", "platform", "architecture", "model", "bitness", "platformVersion", "fullVersionList", "wow64", "uaFullVersion"]'},SRC:{OPEN_SANS:'resources/form/FormBuilder/vendor/fonts-googleapis/css/open-sans-v14.css',COOLADATA:'resources/onsite/js/cool-2.1.15.min.js',OOPS:'resources/onsite/images/oops.svg'},FORM_HEIGHT:'450',FORM_WIDTH:'450',COOKIE_EXPIRATION:365,DEVICES:{DESKTOP:'desktop',MOBILE:'mobile',TABLET:'tablet',},FEATURE_VERSIONS:{MOBILE_DYNAMIC_SIZING:2,},TIME_FORMATS:{SECONDS:'seconds',MINUTES:'minutes',HOURS:'hours',DAYS:'days',WEEKS:'weeks',MONTHS:'months',YEARS:'years

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	7.832163693681832
Encrypted:	false
SSDEEP:	24:9Z82jiSiBDHqnvmiVtYySIHHULLd7smB0rTc5n7rBtVA4fFW4GzcQ0zoa:c2ji3HqvmiVHSTLCmB0aApfGzoa
MD5:	DDED8E2E38057EA9183FF095BC2E6CED
SHA1:	E12CE587F18839ED139D59774E5FEF8B793DBFD7
SHA-256:	A3BB919A80DAE6A64CB25FD18E689ACAE58A81737E21ABFBBC851B83C60BF578
SHA-512:	EE0B8DCB4AEDE78441ED1B75931F0F44DDF0E999495166D522ED049342DF37ADFCA33CAA02074AFBE937B72C68410F5349127E97FCFB3FF2F6FEA739D5614441
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sRGB.........IDATh..[h.U..s.n.kB.4.M".f......Bm........M..AzAA..@.}......o. .[z..B.Kq.4.&{....m2s...;.......Nvgs ..s...7g...9.e.S...#Y..GJ}.dr......$.................c.r.t^`..Wsu...._J.....\|..^A.O..m..3v..]..+D.d..L...Fu..>..^].b.. A.,.x.b.6......u....<..7..8504......5...3v.8.$.L....E%O.K..j.wOJ)G-l....;-...w.]I.u..8;8.........Y=.#.-..hOr..7v.....a]..o4,.L1P,.....zX......8(..1.iu...C,..[.gE..x...U.7).J..Y..\./"^.H$...p....jS..k..toD.8...=L.qP`..bU..q.,...j0h.{.....1;.d...z..h.`{B...p..t..KV..2..K.fx..r..9./';./'e=...j.KE-.F[.0b1..mI......M..-..b.....u..,.01......6.8 ...KN.....5]?..F./fS.p~.b.....4.U...6@3'...i.:.T..6.X.!#...sP...8x...B..7...hv1.7o..m..C.m.g...U..}.\^.`.e.....NS.....l.......=V..%VN...M....r.$.\...&V..-.L...?<...5CV..i.gk$b.......N`.Ue..z.....J...M.../?C..G...G 49...u.Wk!..Z.8._....k..8..eU1.6.7_We..-....8........@<.,@G;..].!...a.!r...@.7..O.a.}\H.}.pp..t.."No>...h....?...7r..;v

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 800 x 272
Category:	downloaded
Size (bytes):	8471
Entropy (8bit):	7.92054423319505
Encrypted:	false
SSDEEP:	192:kiWno1o0oCwfXgwa6G5L/TPIhd+HxhwpXvNCGhM0:3QLHfXgwu5P2duxhwpXlCGhM0
MD5:	4E7D7BD16B5D9EEBAE6981CAB2C0EF44
SHA1:	F3EC76DF944FA285490DD69AE778F261BAD766A9
SHA-256:	76C1BCF02803AD799E99D2F813783EDBDC656F7BB3143E0115C0FE0F9D3E3B82
SHA-512:	C77662ED1F3D6AB3D6A56631619C8625619F0299C10BC904EEA2FC2CD78365891DD40560C7A358E5361171E67E9A0796E39C4413B87EF194104B6B198E9CCA70
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/ContentTemplates/common/images/global/header/hdr_icons_roll.gif
Preview:	GIF89a .........pppKJK...Z................>..xxx...... ..u.......j.....;;;.....n........{....]]]......YYY???.............SSS......\|\|\|...111...ssswww...S..D..{..y..#"#...WVWPOP9.......))).....}...................................................................................................I...~..v.".....ihi...L..+..444---%..DDDddd...bab............877(...v.lll......AAA......<..4..m..oooC...L..9...w.HGH.../..:..E..~~~...[..V...v..y...F..`..S...}....L........>...@..0//...,u....>..D..g.....e.....Z.....I..T...v.........O.....F..@..C..U.....:..y..J..........6....4v.B.......`.....A....."i.7..'n.<..D.....r..)........l..D.......B..4....8.........}.lkl...G..k...................uuu...dcc[..... ~.GGHo........H......e..L..R..X.................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/199

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1900), with no line terminators
Category:	downloaded
Size (bytes):	1900
Entropy (8bit):	5.90941188697621
Encrypted:	false
SSDEEP:	48:NON89pLadSpyLdcwV2RQf+33BphsaHca2q:CKpLYuXTfDV
MD5:	ACEF829BE0E5346D99B2289D41BA8CA9
SHA1:	2AD910968B1532219B4E6CFAE3858B63C9C63D89
SHA-256:	294058A26BB44C8743B0D1372CFF40BE9AE676D7DC0EE52F3C9BA7217A29CC5B
SHA-512:	B5EF05B7550F7105ADAA00097289BC4D3B66FE2C8FA04E157A1F91D642E3DEC66EC5D6E66EFFEBC982D0F12E33EEFDEDB780157F85D0F62DC1C2DF804BB14355
Malicious:	false
Reputation:	low
URL:	https://8905209.fls.doubleclick.net/activityi;dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108"/><img src="https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDg5MDUyMDkKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL2RvdWJsZWNsaWNrLm5ldCIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiA0MzU1MTgyNzYxMTY5ODE1MjY5CmN0Y19jb252ZXJzaW9uX2J1Y2tldDogNwphcmNoZXR5cGVfaWQ6IDEKYXJjaGV0eXBlX2lkOiAzCmFyY2hldHlwZV9pZDogNAphcmNoZXR5cGVfaWQ6IDUKYXJjaGV0eXBlX2lkOiA2CmFyY2hldHlwZV9pZDogNwphcmNoZXR5cGVfaWQ6IDgKYXJjaGV0eXBlX2lkOiA5CmFyY2hldHlwZV9pZDogMTAKYXJjaGV0eXBlX2lkOiAxMQphcmNoZXR5cGVfaWQ6IDEyCmFyY2hldHlwZV9pZDogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfa

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (62472)
Category:	downloaded
Size (bytes):	429851
Entropy (8bit):	5.56492099492917
Encrypted:	false
SSDEEP:	3072:NozOufSAZVNSNc6zszPIza8k9CBPIrTWR6/P/IRlfh6St2nBsLqJtQz1mQ:NcsAF6gzPKkozfh6St+aqJtQzt
MD5:	040057F7B537994A0EA4CC0E89BF9648
SHA1:	15C379B5E2D4C117EAE32E46FA1EF94FEB1822BC
SHA-256:	A338CCF405AC8699B9ED3A954E8C7A5BF90F73E8C411D3E9AA59F9F795DF62E7
SHA-512:	C9E4A113FD44780ACF14F79586312566966E7EDF38FE40C1373CA4E87E7DFB7AFBF08A33F6B3DF01A1E5937B3CCB65E1B5B12E992375D85E7DCBB588346701A9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K2FRZL4&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"304",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__c","vtp_value":"3976941"},{"function":"__r"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__t"},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.newUrlFragment","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.oldUrlFragment","vtp_dataLayerVersion":1},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"func

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7250
Entropy (8bit):	5.028805329595342
Encrypted:	false
SSDEEP:	192:fKpujI5r6bOBjIEijIrijI+mjITmjIvmjIaNmjIpjKIAP6bLjIm3zijIaijIsijA:fwujI0bOBjIEijIrijIhjIajIejIaIjY
MD5:	30911D59740DE5A2927A1B1640992C83
SHA1:	835361AACECCF41999C02B1CD88C578CBE87EE25
SHA-256:	6CF75C4AAE36EA17571CD76121AEB8BFE49A9173D54A9F8C90E929F7EB31E1EC
SHA-512:	7BE7C5C97FB4AF949B5D8D93E00036579F94216EA48FA2F9DAFA59602BAAB39530F1A38C0833545D0AA220B4BADDD7E94BFC3B9FCB2AF0E5C0C723E7A486B498
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 26.6 25" style="enable-background:new 0 0 26.6 25;" xml:space="preserve">.<style type="text/css">...st0{fill:none;}...st1{fill:#333366;}...st2{fill:none;stroke:#333366;stroke-width:4;stroke-miterlimit:10;}.</style>.<g id="USPS_MegaMenu_PSE_1_" transform="translate(4522.134 1041.222)">..<g id="Group_533_1_" transform="translate(41.866 68.3)">...<g id="Group_532_1_" transform="translate(0 0)">....<g id="Group_491_1_">.....<g id="Group_486_1_" transform="translate(0.965 1.019)">......<g id="Group_485_1_">.......<g id="Group_484_1_">........<g id="Group_483_1_">.........<path class="st0" d="M-4560.7-1097.2c1-2.3,3.9-1.2,4.4,0.9c2.1-0.8,4.2-1.4,7.1-1.5c3-0.2,5.6-0.9,8.3-0.9l-1.9-10.7..........l-21.1,3.7l2.1,11.8C-4561.6-

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	5.354120046143594
Encrypted:	false
SSDEEP:	6:TMVBdbjhTdgXRxVnzVEn6VWB3qmc4slZKYnic4sf3nWsjqMSq6jHzhVNUbWNkbGZ:TMHdPhRi/nzVJ/KYf3nWA+HzN8hCXVRn
MD5:	EDFD0894AEEF9388AA4FEA8EC845D66C
SHA1:	ACBB5EA89B4AFCC8DD1685CA4E87B418DA3FA65F
SHA-256:	BB8DAD575651FE0ABA30620551DF7329F038ADABCFC137C92F6C4EF9246F9F59
SHA-512:	2945D3892AA896345A1E0F3066F75F69A6BB28C7296631DBD26A6609647CB0F729D99297C8CFAAAFA25210439486F67C8BB75935767B97F122C28E0F42A6AAF4
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/media/zipcode-lookup/blue-caret-down.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 31 18" style="enable-background:new 0 0 31 18;" xml:space="preserve">.<style type="text/css">...st0{fill:#333366;}.</style>.<path class="st0" d="M15.5,18L0.5,2.7c-0.6-0.6-0.6-1.6,0-2.3c0.6-0.6,1.6-0.6,2.2,0l12.8,13l12.8-13c0.6-0.6,1.6-0.6,2.2,0..c0.6,0.6,0.6,1.6,0,2.3L15.5,18"/>.</svg>.

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (695), with no line terminators
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	4.935433026459156
Encrypted:	false
SSDEEP:	12:pzFkbDx1XY9Au3j0Au7HpQk1656N54A2ULDX6TzHbXX6TgnKMR6TOPXIglaX3EIq:fkbDx1XY9Au3j0Au7HpQk1656NOArHXs
MD5:	5372347B4F98F60B33579180EF6A3567
SHA1:	02064F1641C40B35C14A0DA9EE310DE54FF76CD5
SHA-256:	7FA317B049ED33139394313ABA29F27B7F11A226270BF10CE1C26D674C0177E4
SHA-512:	EADD1CE2E874B7D3BF7E8CA3A600FE3A8524AD67E0B4A67E4990244261E1B0DD53578EC1DF077E510A9E4E66672FF1845D3075A6C9AD391277B19B8302502D6D
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/global-elements/lib/script/helpers.js
Preview:	USPSRequireNS.define(["require-jquery"],function(e){var t=function(){var t="placeholder"in document.createElement("input"),n="placeholder"in document.createElement("textarea"),r=function(){e(document).ready(function(){i()})},i=function(){s(),o()},s=function(){var i=e("input[type!=submit], textarea");if(!t\|\|!n)t\|\|(i.on("focus",function(){var t=e(this),n=t.val();n===t.attr("placeholder")&&t.val("")}),i.on("blur",function(){var t=e(this),n=t.val();n===""&&t.val(t.attr("placeholder"))}),i.trigger("blur"))},o=function(){if(!Modernizr.svg){var n=e(".svg-image"),r=0;for(;r<n.length;r++){var i=e(n[r]).attr("data-fallback");e(n[r]).attr("src",i)}}};return r(),{pollyfillElements:i}}();return t});

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11084)
Category:	downloaded
Size (bytes):	11261
Entropy (8bit):	5.338022901927331
Encrypted:	false
SSDEEP:	192:ezMdVO7MRftBRCzHYxqG1uTyKVOlzEf7jQLJZMYWABl8xAfW:eYdVqMTCjYxqG1uTulAfXQLJRNCxA+
MD5:	66E83C4165A234CDDA478A9C55CB90DB
SHA1:	22E9211030A1F612EF4ACD010185181BDE967307
SHA-256:	779AB662607B48249E86F3C27E9EAFFF4BBC808B48899A439D5CD9B2C78F99E6
SHA-512:	53AF98E7D8596ECAF5C1440E95E09696074C8EC0D3E3B84547DFF8C5EB8DB746A568AEBF2624920811B8640267B53C90698110CE05DEE17B148CE18A02113F3F
Malicious:	false
Reputation:	low
URL:	https://tools.usps.com/global-elements/lib/script/modernizr/modernizr.js
Preview:	/!. Modernizr v2.8.3. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. */.window.Modernizr=function(a,b,c){function d(a){t.cssText=a}function e(a,b){return d(x.join(a+";")+(b\|\|""))}function f(a,b){return typeof a===b}function g(a,b){return!!~(""+a).indexOf(b)}function h(a,b){for(var d in a){var e=a[d];if(!g(e,"-")&&t[e]!==c)return"pfx"==b?e:!0}return!1}function i(a,b,d){for(var e in a){var g=b[a[e]];if(g!==c)return d===!1?a[e]:f(g,"function")?g.bind(d\|\|b):g}return!1}function j(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+z.join(d+" ")+d).split(" ");return f(b,"string")\|\|f(b,"undefined")?h(e,b):(e=(a+" "+A.join(d+" ")+d).split(" "),i(e,b,c))}function k(){o.input=function(c){for(var d=0,e=c.length;e>d;d++)E[c[d]]=!!(c[d]in u);return E.list&&(E.list=!(!b.createElement("datalist")\|\|!a.HTMLDataListElement)),E}("autocomplete autofocus list placeholder max min multiple pattern

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://alb.reddit.com/snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487512337
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1775
Entropy (8bit):	5.0328336639533315
Encrypted:	false
SSDEEP:	48:cFALX/IHHhYyQHkXXEGNoCa4UaMYcGb/f1EMHNCq3cpPmF:LLXAHGRHMSJ4p3DCq3cpA
MD5:	D627861A77E755DA093CAE9B4DB00B7B
SHA1:	FC5AC7D6BC6BF06F53B399848BE232B35AA2C5B1
SHA-256:	2A5E1FDC8E264327BE71C3063CC6BF1DD8A618576310A5D26DC31BA8D6F83616
SHA-512:	C232E3D98C5E6497245821435A55EF3BCD9829C878C51FD9DDED6700598B45880D174692C489C2021F1172F5CCD00B0FD7479C385AC12CD72A7A9D323166EF63
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"... y="0px" viewBox="-437.8 222.2 117.7 117.7" style="enable-background:new -437.8 222.2 117.7 117.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#333366;}..</style>..<g>...<path class="st0" d="M-387.6,320.6h-28.7v-64.2h24.3v12.2c0,1.5,1.2,2.7,2.7,2.7h19.9c1.5,0,2.7-1.2,2.7-2.7v-12.2h25.2v18.9....c3.6,1.3,7,3.2,10,5.6v-27.3c0-1.3-0.5-2.5-1.3-3.4l-16.4-17.6c-1-1-2.3-1.6-3.7-1.6h-52.2c-1.4,0-2.7,0.6-3.7,1.6l-16.2,17.6....c-0.9,0.9-1.3,2.1-1.3,3.4v72c0,2.8,2.2,5,5,5h39.1C-384.5,327.6-386.3,324.2-387.6,320.6z M-355.1,241l9.2,10h-21.4l-2.4-10....H-355.1z M-383.7,241.5h8.5l2.3,9.5H-386L-383.7,241.5z M-386.7,256.4h14.6v9.5h-14.6V256.4z M-402.9,241h13.9l-2.4,10h-20.7....L-402.9,241z"/>...<g>....<g>.....<g>......<g>......

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1800), with no line terminators
Category:	downloaded
Size (bytes):	1800
Entropy (8bit):	4.929106826900858
Encrypted:	false
SSDEEP:	48:cGApyNwcpBmZYk2xP0TjeqwgAyhKqIKYvYkXn9:CyNPpBmfTLwttvj9
MD5:	F3BAD0F0625BD99F9C9366A61A368026
SHA1:	EBDD535A7A4349DBB0AE26267EECEB109846F40E
SHA-256:	211FE8AAB721E19F2AF0872228B28635C738B7B30AE225F1CF5BA72A9D188E1B
SHA-512:	2BC0E59178622FDF04BA152FD31F9BFDAD2023C57FB027C6A581C7BD4B3C53952A8FB76D1AA8626D9852CD72F1FE83AAF178E9C69F2C56689737D6164C0E7161
Malicious:	false
Reputation:	low
URL:	https://www.usps.com/assets/script/components/utility-bar.js
Preview:	USPSRequireNS.define(["jquery"],function(e){var t=function(){var t={},n=function(){r(),i(),f()},r=function(){t.utilityBar=e("#utility-bar"),t.languageTool=e("#nav-tool-multilingual",t.utilityBar),t.languageToolLink=e(".anchor, .multi-link",t.languageTool),t.languageToolContent=e(".nav-window",t.languageTool),t.loginTool=e("#nav-tool-login",t.utilityBar),t.loginToolLink=e("a, input",t.loginTool),t.loginToolContent=e(".nav-window",t.loginTool),t.loginForm=e("#login-form"),t.buttonSubmit=e("#btn-header-hidden-input-signin"),t.buttonLogin=e("#btn-header-input-signin"),t.tUsername=e("#input-username"),t.tPassword=e("#input-password"),t.errorMessage=e("#login-error-message")},i=function(){t.languageTool.hover(s,o),t.languageToolLink.on("focus",s),t.languageToolLink.on("blur",o),t.loginTool.hover(u,a),t.loginToolLink.on("focus",u),t.loginToolLink.on("blur",a)},s=function(){t.languageToolContent.css({height:"auto"}),t.languageTool.addClass("hover")},o=function(){t.languageToolContent.css({heig

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	179377
Entropy (8bit):	4.972034572828638
Encrypted:	false
SSDEEP:	1536:m0vK517e34Ap/NQS93ehsSravENeqevbP2QiGPJiIDQVs1G:DbHM
MD5:	80705F182A5B143FDD3E130C9E42DAB5
SHA1:	D1668BD5DD414CFFDA5D7810FB3A8D34CF4A8B72
SHA-256:	DF036A7C8E086ACD4F24C359B0A7EAC1FB6D9ED820DFFE417FE50CAF92647876
SHA-512:	635436C4724434FC195D59D3C13EAD00356B05455CD83C30FCBFB33480A7CD6DD515EAE1A195785E12BC0AC0850E8F2F957511265E4E478FCA00A44C2979E78C
Malicious:	false
Reputation:	low
URL:	https://js.arcgis.com/4.11/esri/themes/light/main.css
Preview:	@charset "utf-8";.dgrid {position: relative; overflow: hidden; border: 1px solid #ddd; height: 30em; display: block;}.dgrid-header {background-color: #eee;}.dgrid-header-row {position: absolute; right: 17px; left: 0;}.dgrid-header-scroll {position: absolute; top: 0; right: 0;}.dgrid-footer {position: absolute; bottom: 0; width: 100%;}.dgrid-header-hidden {font-size: 0; height: 0 !important; border-top: none !important; border-bottom: none !important; margin-top: 0 !important; margin-bottom: 0 !important; padding-top: 0 !important; padding-bottom: 0 !important;}.dgrid-footer-hidden {display: none;}.dgrid-sortable {cursor: pointer;}.dgrid-header,.dgrid-header-row,.dgrid-footer {overflow: hidden; background-color: #eee;}.dgrid-row-table {border-collapse: collapse; border: none; table-layout: fixed; empty-cells: show; width: 100%; height: 100%;}.dgrid-cell {padding: 3px; text-align: left; overflow: hidden; vertical-align: top; border: 1px solid #ddd; border-top-style: none; -webkit-box-siz

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 02:44:04.609926939 CEST	192.168.2.4	1.1.1.1	0xb068	Standard query (0)	hgdffds.cyou	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:04.610059023 CEST	192.168.2.4	1.1.1.1	0xe03a	Standard query (0)	hgdffds.cyou	65	IN (0x0001)	false
Apr 19, 2024 02:44:07.046210051 CEST	192.168.2.4	1.1.1.1	0xa2c6	Standard query (0)	usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.046211004 CEST	192.168.2.4	1.1.1.1	0xe6d6	Standard query (0)	usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:07.046468019 CEST	192.168.2.4	1.1.1.1	0x4132	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.046591043 CEST	192.168.2.4	1.1.1.1	0x9295	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:07.705853939 CEST	192.168.2.4	1.1.1.1	0x596a	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.705853939 CEST	192.168.2.4	1.1.1.1	0x72d2	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:08.749918938 CEST	192.168.2.4	1.1.1.1	0x65c0	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.750026941 CEST	192.168.2.4	1.1.1.1	0xb64d	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:09.325989008 CEST	192.168.2.4	1.1.1.1	0x3f53	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:09.326610088 CEST	192.168.2.4	1.1.1.1	0xc01e	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:16.792198896 CEST	192.168.2.4	1.1.1.1	0xd723	Standard query (0)	fast.fonts.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:16.792742968 CEST	192.168.2.4	1.1.1.1	0x93af	Standard query (0)	fast.fonts.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:18.705065012 CEST	192.168.2.4	1.1.1.1	0xa432	Standard query (0)	dap.digitalgov.gov	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:18.705524921 CEST	192.168.2.4	1.1.1.1	0x113b	Standard query (0)	dap.digitalgov.gov	65	IN (0x0001)	false
Apr 19, 2024 02:44:19.291703939 CEST	192.168.2.4	1.1.1.1	0x3968	Standard query (0)	resources.digital-cloud-gov.medallia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:19.292181015 CEST	192.168.2.4	1.1.1.1	0x359b	Standard query (0)	resources.digital-cloud-gov.medallia.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:19.319998026 CEST	192.168.2.4	1.1.1.1	0x5848	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:19.320612907 CEST	192.168.2.4	1.1.1.1	0x9be4	Standard query (0)	trkn.us	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.006468058 CEST	192.168.2.4	1.1.1.1	0x43cb	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.006614923 CEST	192.168.2.4	1.1.1.1	0x9d92	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.377726078 CEST	192.168.2.4	1.1.1.1	0x3c9b	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.377944946 CEST	192.168.2.4	1.1.1.1	0xcceb	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.378468037 CEST	192.168.2.4	1.1.1.1	0xbab3	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.378602982 CEST	192.168.2.4	1.1.1.1	0x4f67	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.704068899 CEST	192.168.2.4	1.1.1.1	0x471a	Standard query (0)	s.pinimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.704324961 CEST	192.168.2.4	1.1.1.1	0x7c4	Standard query (0)	s.pinimg.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.860841990 CEST	192.168.2.4	1.1.1.1	0xed4	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.861056089 CEST	192.168.2.4	1.1.1.1	0x5324	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.861690998 CEST	192.168.2.4	1.1.1.1	0x9058	Standard query (0)	sc-static.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.861824989 CEST	192.168.2.4	1.1.1.1	0x36d5	Standard query (0)	sc-static.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:20.872184992 CEST	192.168.2.4	1.1.1.1	0xcd56	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.872400999 CEST	192.168.2.4	1.1.1.1	0x2a77	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.032255888 CEST	192.168.2.4	1.1.1.1	0xdceb	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.032463074 CEST	192.168.2.4	1.1.1.1	0x77cc	Standard query (0)	c.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.037923098 CEST	192.168.2.4	1.1.1.1	0x3294	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.038072109 CEST	192.168.2.4	1.1.1.1	0x272d	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.058453083 CEST	192.168.2.4	1.1.1.1	0x2c11	Standard query (0)	trkn.us	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.058697939 CEST	192.168.2.4	1.1.1.1	0x6065	Standard query (0)	trkn.us	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.344808102 CEST	192.168.2.4	1.1.1.1	0xd09e	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.344948053 CEST	192.168.2.4	1.1.1.1	0x3cc2	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.347322941 CEST	192.168.2.4	1.1.1.1	0xb8dd	Standard query (0)	3976941.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.347486019 CEST	192.168.2.4	1.1.1.1	0x9ed3	Standard query (0)	3976941.fls.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.348128080 CEST	192.168.2.4	1.1.1.1	0xb9e8	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.348385096 CEST	192.168.2.4	1.1.1.1	0xefee	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.358335018 CEST	192.168.2.4	1.1.1.1	0x1883	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.358490944 CEST	192.168.2.4	1.1.1.1	0x777b	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.370769024 CEST	192.168.2.4	1.1.1.1	0x79a2	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.370958090 CEST	192.168.2.4	1.1.1.1	0x307	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.472542048 CEST	192.168.2.4	1.1.1.1	0x3a6a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.472666979 CEST	192.168.2.4	1.1.1.1	0x8d40	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.522634029 CEST	192.168.2.4	1.1.1.1	0x97d2	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.522967100 CEST	192.168.2.4	1.1.1.1	0xc67e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.525080919 CEST	192.168.2.4	1.1.1.1	0x45bd	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.525283098 CEST	192.168.2.4	1.1.1.1	0x596c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.615828991 CEST	192.168.2.4	1.1.1.1	0x4f25	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.616054058 CEST	192.168.2.4	1.1.1.1	0x674b	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.704894066 CEST	192.168.2.4	1.1.1.1	0xe19a	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.705224037 CEST	192.168.2.4	1.1.1.1	0x5135	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.742279053 CEST	192.168.2.4	1.1.1.1	0x5621	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.742521048 CEST	192.168.2.4	1.1.1.1	0x9fad	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:21.743447065 CEST	192.168.2.4	1.1.1.1	0x16ba	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.743587971 CEST	192.168.2.4	1.1.1.1	0x4599	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.043042898 CEST	192.168.2.4	1.1.1.1	0x26d5	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.043210030 CEST	192.168.2.4	1.1.1.1	0xf93	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.045795918 CEST	192.168.2.4	1.1.1.1	0xfb14	Standard query (0)	www.redditstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.045960903 CEST	192.168.2.4	1.1.1.1	0x2a6	Standard query (0)	www.redditstatic.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.047698021 CEST	192.168.2.4	1.1.1.1	0x42d3	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.047836065 CEST	192.168.2.4	1.1.1.1	0x73c9	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.060794115 CEST	192.168.2.4	1.1.1.1	0x2ff7	Standard query (0)	tr.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.061017036 CEST	192.168.2.4	1.1.1.1	0x3cc1	Standard query (0)	tr.snapchat.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.078349113 CEST	192.168.2.4	1.1.1.1	0x9d0c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.078500032 CEST	192.168.2.4	1.1.1.1	0xd50e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.112133980 CEST	192.168.2.4	1.1.1.1	0x9685	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.112270117 CEST	192.168.2.4	1.1.1.1	0x9f45	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.115210056 CEST	192.168.2.4	1.1.1.1	0xf060	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.115339041 CEST	192.168.2.4	1.1.1.1	0xa350	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.119414091 CEST	192.168.2.4	1.1.1.1	0x1eab	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.119719028 CEST	192.168.2.4	1.1.1.1	0x8c91	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.315823078 CEST	192.168.2.4	1.1.1.1	0x1866	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.315944910 CEST	192.168.2.4	1.1.1.1	0x14c9	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.336241007 CEST	192.168.2.4	1.1.1.1	0x7b98	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.336443901 CEST	192.168.2.4	1.1.1.1	0x6e6a	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.359428883 CEST	192.168.2.4	1.1.1.1	0x20cf	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.359540939 CEST	192.168.2.4	1.1.1.1	0xe576	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.365071058 CEST	192.168.2.4	1.1.1.1	0x817d	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.365313053 CEST	192.168.2.4	1.1.1.1	0x7fdd	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.448239088 CEST	192.168.2.4	1.1.1.1	0x2377	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.448374033 CEST	192.168.2.4	1.1.1.1	0x9743	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.449989080 CEST	192.168.2.4	1.1.1.1	0xd60c	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.450124025 CEST	192.168.2.4	1.1.1.1	0x2ab3	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.450683117 CEST	192.168.2.4	1.1.1.1	0xd043	Standard query (0)	urldefense.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.450934887 CEST	192.168.2.4	1.1.1.1	0x839b	Standard query (0)	urldefense.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.453603029 CEST	192.168.2.4	1.1.1.1	0x3431	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.453915119 CEST	192.168.2.4	1.1.1.1	0xeac3	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.454838037 CEST	192.168.2.4	1.1.1.1	0xac00	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.454977989 CEST	192.168.2.4	1.1.1.1	0xdab0	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.455475092 CEST	192.168.2.4	1.1.1.1	0x9729	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.455817938 CEST	192.168.2.4	1.1.1.1	0x1b91	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.784146070 CEST	192.168.2.4	1.1.1.1	0x51ed	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.784343004 CEST	192.168.2.4	1.1.1.1	0x2062	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.913151026 CEST	192.168.2.4	1.1.1.1	0x1dd	Standard query (0)	tr6.snapchat.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.913297892 CEST	192.168.2.4	1.1.1.1	0xbfb9	Standard query (0)	tr6.snapchat.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.930316925 CEST	192.168.2.4	1.1.1.1	0xd80c	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.930553913 CEST	192.168.2.4	1.1.1.1	0xb2a1	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 19, 2024 02:44:22.944804907 CEST	192.168.2.4	1.1.1.1	0x27ed	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.944950104 CEST	192.168.2.4	1.1.1.1	0x966	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.035885096 CEST	192.168.2.4	1.1.1.1	0xb4aa	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.036133051 CEST	192.168.2.4	1.1.1.1	0x595c	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.063266039 CEST	192.168.2.4	1.1.1.1	0xb6dc	Standard query (0)	getrockerbox.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.063456059 CEST	192.168.2.4	1.1.1.1	0xe347	Standard query (0)	getrockerbox.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.067516088 CEST	192.168.2.4	1.1.1.1	0x4494	Standard query (0)	storage.cloud.kargo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.067802906 CEST	192.168.2.4	1.1.1.1	0x143c	Standard query (0)	storage.cloud.kargo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.073482037 CEST	192.168.2.4	1.1.1.1	0x4882	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.073594093 CEST	192.168.2.4	1.1.1.1	0x414e	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.075160027 CEST	192.168.2.4	1.1.1.1	0xe177	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.075288057 CEST	192.168.2.4	1.1.1.1	0x637	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.126179934 CEST	192.168.2.4	1.1.1.1	0xe4f1	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.126338959 CEST	192.168.2.4	1.1.1.1	0x33e0	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.254982948 CEST	192.168.2.4	1.1.1.1	0xdb41	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.255199909 CEST	192.168.2.4	1.1.1.1	0x1fce	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.361627102 CEST	192.168.2.4	1.1.1.1	0xe1ed	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.361742020 CEST	192.168.2.4	1.1.1.1	0xdae1	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:23.526107073 CEST	192.168.2.4	1.1.1.1	0x22ba	Standard query (0)	ara.paa-reporting-advertising.amazon	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.526319027 CEST	192.168.2.4	1.1.1.1	0x235d	Standard query (0)	ara.paa-reporting-advertising.amazon	65	IN (0x0001)	false
Apr 19, 2024 02:44:24.152548075 CEST	192.168.2.4	1.1.1.1	0x7031	Standard query (0)	storage.cloud.kargo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.153413057 CEST	192.168.2.4	1.1.1.1	0x7262	Standard query (0)	storage.cloud.kargo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:24.166002989 CEST	192.168.2.4	1.1.1.1	0x5cb4	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.166248083 CEST	192.168.2.4	1.1.1.1	0x3d0d	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:24.177090883 CEST	192.168.2.4	1.1.1.1	0xf789	Standard query (0)	kds-pixel.kargo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.177339077 CEST	192.168.2.4	1.1.1.1	0xa392	Standard query (0)	kds-pixel.kargo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:24.770242929 CEST	192.168.2.4	1.1.1.1	0x2333	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.770382881 CEST	192.168.2.4	1.1.1.1	0x5809	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:24.814538002 CEST	192.168.2.4	1.1.1.1	0xf10d	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.814666033 CEST	192.168.2.4	1.1.1.1	0x3fd	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:26.931644917 CEST	192.168.2.4	1.1.1.1	0x8ca3	Standard query (0)	ct.pinterest.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:26.931968927 CEST	192.168.2.4	1.1.1.1	0x948f	Standard query (0)	ct.pinterest.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:27.070244074 CEST	192.168.2.4	1.1.1.1	0xf4ac	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.070558071 CEST	192.168.2.4	1.1.1.1	0x260e	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:39.131119013 CEST	192.168.2.4	1.1.1.1	0xc793	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:39.131339073 CEST	192.168.2.4	1.1.1.1	0xdde	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:44.588891983 CEST	192.168.2.4	1.1.1.1	0x277b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:44.589143991 CEST	192.168.2.4	1.1.1.1	0x3b86	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:44:51.011009932 CEST	192.168.2.4	1.1.1.1	0x8510	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.011320114 CEST	192.168.2.4	1.1.1.1	0x2b38	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:51.725661039 CEST	192.168.2.4	1.1.1.1	0x43ea	Standard query (0)	js.arcgis.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.725883007 CEST	192.168.2.4	1.1.1.1	0x3299	Standard query (0)	js.arcgis.com	65	IN (0x0001)	false
Apr 19, 2024 02:44:53.218301058 CEST	192.168.2.4	1.1.1.1	0x383b	Standard query (0)	tools.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:53.218564987 CEST	192.168.2.4	1.1.1.1	0xba6f	Standard query (0)	tools.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:10.984859943 CEST	192.168.2.4	1.1.1.1	0x1d5c	Standard query (0)	informeddelivery.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:10.985080004 CEST	192.168.2.4	1.1.1.1	0x361a	Standard query (0)	informeddelivery.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:13.367676020 CEST	192.168.2.4	1.1.1.1	0xc8c4	Standard query (0)	www.usps.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:13.367965937 CEST	192.168.2.4	1.1.1.1	0xd167	Standard query (0)	www.usps.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.276968002 CEST	192.168.2.4	1.1.1.1	0x4dc5	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.277200937 CEST	192.168.2.4	1.1.1.1	0x230f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.811585903 CEST	192.168.2.4	1.1.1.1	0x3a98	Standard query (0)	adserv.mobi	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.811850071 CEST	192.168.2.4	1.1.1.1	0x587	Standard query (0)	adserv.mobi	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.849886894 CEST	192.168.2.4	1.1.1.1	0x3c53	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.850270033 CEST	192.168.2.4	1.1.1.1	0x6cea	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.859824896 CEST	192.168.2.4	1.1.1.1	0x863f	Standard query (0)	fl.a.ki	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.859956980 CEST	192.168.2.4	1.1.1.1	0x988b	Standard query (0)	fl.a.ki	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.864051104 CEST	192.168.2.4	1.1.1.1	0x9b4b	Standard query (0)	ad.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.864248991 CEST	192.168.2.4	1.1.1.1	0xb89c	Standard query (0)	ad.ipredictive.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:14.966483116 CEST	192.168.2.4	1.1.1.1	0x8277	Standard query (0)	fl.a.ki	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.416655064 CEST	192.168.2.4	1.1.1.1	0x3a22	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.416793108 CEST	192.168.2.4	1.1.1.1	0x44a4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:15.468668938 CEST	192.168.2.4	1.1.1.1	0x5a88	Standard query (0)	ad.ipredictive.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.468811035 CEST	192.168.2.4	1.1.1.1	0x6654	Standard query (0)	ad.ipredictive.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:15.475419998 CEST	192.168.2.4	1.1.1.1	0xf9ea	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.475557089 CEST	192.168.2.4	1.1.1.1	0x590b	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:15.493211031 CEST	192.168.2.4	1.1.1.1	0x3805	Standard query (0)	8905209.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.493410110 CEST	192.168.2.4	1.1.1.1	0x5aef	Standard query (0)	8905209.fls.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:16.097048998 CEST	192.168.2.4	1.1.1.1	0xb680	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.097210884 CEST	192.168.2.4	1.1.1.1	0xff00	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:16.523442984 CEST	192.168.2.4	1.1.1.1	0x4f27	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.523757935 CEST	192.168.2.4	1.1.1.1	0x3cd4	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:17.069204092 CEST	192.168.2.4	1.1.1.1	0xd24c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:17.069535971 CEST	192.168.2.4	1.1.1.1	0x7950	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 02:45:22.373990059 CEST	192.168.2.4	1.1.1.1	0x116c	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.374655962 CEST	192.168.2.4	1.1.1.1	0xf32b	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false
Apr 19, 2024 02:45:22.374656916 CEST	192.168.2.4	1.1.1.1	0x5f06	Standard query (0)	w3-reporting-nel.reddit.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.375058889 CEST	192.168.2.4	1.1.1.1	0xbcb3	Standard query (0)	w3-reporting-nel.reddit.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 02:44:05.174926996 CEST	1.1.1.1	192.168.2.4	0xb068	No error (0)	hgdffds.cyou		149.88.67.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151109934 CEST	1.1.1.1	192.168.2.4	0xa2c6	No error (0)	usps.com		56.0.134.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151170969 CEST	1.1.1.1	192.168.2.4	0x9295	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.151762009 CEST	1.1.1.1	192.168.2.4	0x4132	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.810067892 CEST	1.1.1.1	192.168.2.4	0x596a	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:07.810067892 CEST	1.1.1.1	192.168.2.4	0x596a	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:07.810096025 CEST	1.1.1.1	192.168.2.4	0x72d2	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:08.854264021 CEST	1.1.1.1	192.168.2.4	0x65c0	No error (0)	www.googleoptimize.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:09.431510925 CEST	1.1.1.1	192.168.2.4	0x3f53	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:09.431510925 CEST	1.1.1.1	192.168.2.4	0x3f53	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:09.431559086 CEST	1.1.1.1	192.168.2.4	0xc01e	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:16.897002935 CEST	1.1.1.1	192.168.2.4	0xd723	No error (0)	fast.fonts.net		104.16.40.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:16.897002935 CEST	1.1.1.1	192.168.2.4	0xd723	No error (0)	fast.fonts.net		104.16.41.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:16.898562908 CEST	1.1.1.1	192.168.2.4	0x93af	No error (0)	fast.fonts.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:18.810235977 CEST	1.1.1.1	192.168.2.4	0x113b	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:18.811449051 CEST	1.1.1.1	192.168.2.4	0xa432	No error (0)	dap.digitalgov.gov	d27f3qgc9anoq2.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:18.811449051 CEST	1.1.1.1	192.168.2.4	0xa432	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:18.811449051 CEST	1.1.1.1	192.168.2.4	0xa432	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.81	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:18.811449051 CEST	1.1.1.1	192.168.2.4	0xa432	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:18.811449051 CEST	1.1.1.1	192.168.2.4	0xa432	No error (0)	d27f3qgc9anoq2.cloudfront.net		3.161.136.58	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:19.397310972 CEST	1.1.1.1	192.168.2.4	0x3968	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:19.397742033 CEST	1.1.1.1	192.168.2.4	0x359b	No error (0)	resources.digital-cloud-gov.medallia.com	resources.digital-cloud-gov.medallia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:19.424324036 CEST	1.1.1.1	192.168.2.4	0x5848	No error (0)	trkn.us		23.194.116.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:19.424324036 CEST	1.1.1.1	192.168.2.4	0x5848	No error (0)	trkn.us		23.194.116.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.111222982 CEST	1.1.1.1	192.168.2.4	0x43cb	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.111222982 CEST	1.1.1.1	192.168.2.4	0x43cb	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.111222982 CEST	1.1.1.1	192.168.2.4	0x43cb	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.111222982 CEST	1.1.1.1	192.168.2.4	0x43cb	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.482217073 CEST	1.1.1.1	192.168.2.4	0xcceb	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.482281923 CEST	1.1.1.1	192.168.2.4	0x3c9b	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.482281923 CEST	1.1.1.1	192.168.2.4	0x3c9b	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.482816935 CEST	1.1.1.1	192.168.2.4	0x4f67	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.483196974 CEST	1.1.1.1	192.168.2.4	0xbab3	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.483196974 CEST	1.1.1.1	192.168.2.4	0xbab3	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.808475018 CEST	1.1.1.1	192.168.2.4	0x471a	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.808475018 CEST	1.1.1.1	192.168.2.4	0x471a	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.808475018 CEST	1.1.1.1	192.168.2.4	0x471a	No error (0)	dualstack.pinterest.map.fastly.net		146.75.32.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.808648109 CEST	1.1.1.1	192.168.2.4	0x7c4	No error (0)	s.pinimg.com	s-pinimg-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.808648109 CEST	1.1.1.1	192.168.2.4	0x7c4	No error (0)	s-pinimg-com.gslb.pinterest.com	2-01-37d2-0020.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.859625101 CEST	1.1.1.1	192.168.2.4	0xa375	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.859625101 CEST	1.1.1.1	192.168.2.4	0xa375	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965495110 CEST	1.1.1.1	192.168.2.4	0xed4	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965495110 CEST	1.1.1.1	192.168.2.4	0xed4	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965495110 CEST	1.1.1.1	192.168.2.4	0xed4	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965495110 CEST	1.1.1.1	192.168.2.4	0xed4	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965495110 CEST	1.1.1.1	192.168.2.4	0xed4	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.965739965 CEST	1.1.1.1	192.168.2.4	0x5324	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.966315031 CEST	1.1.1.1	192.168.2.4	0x9058	No error (0)	sc-static.net		108.139.23.251	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:20.976275921 CEST	1.1.1.1	192.168.2.4	0xcd56	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:20.977063894 CEST	1.1.1.1	192.168.2.4	0x2a77	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.136796951 CEST	1.1.1.1	192.168.2.4	0x77cc	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.137018919 CEST	1.1.1.1	192.168.2.4	0xdceb	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.137018919 CEST	1.1.1.1	192.168.2.4	0xdceb	No error (0)	d1ykf07e75w7ss.cloudfront.net		18.164.82.201	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.141957998 CEST	1.1.1.1	192.168.2.4	0x3294	No error (0)	stats.g.doubleclick.net		64.233.185.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.141957998 CEST	1.1.1.1	192.168.2.4	0x3294	No error (0)	stats.g.doubleclick.net		64.233.185.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.141957998 CEST	1.1.1.1	192.168.2.4	0x3294	No error (0)	stats.g.doubleclick.net		64.233.185.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.141957998 CEST	1.1.1.1	192.168.2.4	0x3294	No error (0)	stats.g.doubleclick.net		64.233.185.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.162744045 CEST	1.1.1.1	192.168.2.4	0x2c11	No error (0)	trkn.us		173.222.249.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.162744045 CEST	1.1.1.1	192.168.2.4	0x2c11	No error (0)	trkn.us		173.222.249.33	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.449624062 CEST	1.1.1.1	192.168.2.4	0x3cc2	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.449666977 CEST	1.1.1.1	192.168.2.4	0xd09e	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.449666977 CEST	1.1.1.1	192.168.2.4	0xd09e	No error (0)	dg2iu7dxxehbo.cloudfront.net		108.156.154.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.452620029 CEST	1.1.1.1	192.168.2.4	0xb9e8	No error (0)	td.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.452620029 CEST	1.1.1.1	192.168.2.4	0xb9e8	No error (0)	td.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.452620029 CEST	1.1.1.1	192.168.2.4	0xb9e8	No error (0)	td.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.452620029 CEST	1.1.1.1	192.168.2.4	0xb9e8	No error (0)	td.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.453162909 CEST	1.1.1.1	192.168.2.4	0xb8dd	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.453162909 CEST	1.1.1.1	192.168.2.4	0xb8dd	No error (0)	dart.l.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.453162909 CEST	1.1.1.1	192.168.2.4	0xb8dd	No error (0)	dart.l.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.453857899 CEST	1.1.1.1	192.168.2.4	0x9ed3	No error (0)	3976941.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.462874889 CEST	1.1.1.1	192.168.2.4	0x777b	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.463726044 CEST	1.1.1.1	192.168.2.4	0x1883	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.463726044 CEST	1.1.1.1	192.168.2.4	0x1883	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.463726044 CEST	1.1.1.1	192.168.2.4	0x1883	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.463726044 CEST	1.1.1.1	192.168.2.4	0x1883	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.463726044 CEST	1.1.1.1	192.168.2.4	0x1883	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.475642920 CEST	1.1.1.1	192.168.2.4	0x79a2	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.476690054 CEST	1.1.1.1	192.168.2.4	0x307	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.576754093 CEST	1.1.1.1	192.168.2.4	0x3a6a	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.577302933 CEST	1.1.1.1	192.168.2.4	0x8d40	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:21.627099037 CEST	1.1.1.1	192.168.2.4	0x97d2	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.627099037 CEST	1.1.1.1	192.168.2.4	0x97d2	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.627820015 CEST	1.1.1.1	192.168.2.4	0xc67e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:21.629610062 CEST	1.1.1.1	192.168.2.4	0x596c	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.629610062 CEST	1.1.1.1	192.168.2.4	0x596c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.630023956 CEST	1.1.1.1	192.168.2.4	0x45bd	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.630023956 CEST	1.1.1.1	192.168.2.4	0x45bd	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.719891071 CEST	1.1.1.1	192.168.2.4	0x4f25	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.809449911 CEST	1.1.1.1	192.168.2.4	0xe19a	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.809449911 CEST	1.1.1.1	192.168.2.4	0xe19a	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.809449911 CEST	1.1.1.1	192.168.2.4	0xe19a	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.809487104 CEST	1.1.1.1	192.168.2.4	0x5135	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.809487104 CEST	1.1.1.1	192.168.2.4	0x5135	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.846843004 CEST	1.1.1.1	192.168.2.4	0x9fad	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.846843004 CEST	1.1.1.1	192.168.2.4	0x9fad	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.846942902 CEST	1.1.1.1	192.168.2.4	0x5621	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.846942902 CEST	1.1.1.1	192.168.2.4	0x5621	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:21.846942902 CEST	1.1.1.1	192.168.2.4	0x5621	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:21.847801924 CEST	1.1.1.1	192.168.2.4	0x16ba	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.147670984 CEST	1.1.1.1	192.168.2.4	0xf93	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.148713112 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.148713112 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.148713112 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.148713112 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.148713112 CEST	1.1.1.1	192.168.2.4	0x26d5	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150312901 CEST	1.1.1.1	192.168.2.4	0xfb14	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150312901 CEST	1.1.1.1	192.168.2.4	0xfb14	No error (0)	dualstack.reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150312901 CEST	1.1.1.1	192.168.2.4	0xfb14	No error (0)	dualstack.reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150312901 CEST	1.1.1.1	192.168.2.4	0xfb14	No error (0)	dualstack.reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150312901 CEST	1.1.1.1	192.168.2.4	0xfb14	No error (0)	dualstack.reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.150350094 CEST	1.1.1.1	192.168.2.4	0x2a6	No error (0)	www.redditstatic.com	dualstack.reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.153043985 CEST	1.1.1.1	192.168.2.4	0x42d3	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.153800964 CEST	1.1.1.1	192.168.2.4	0x73c9	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.165441990 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.165441990 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.165441990 CEST	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	gcp.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.166083097 CEST	1.1.1.1	192.168.2.4	0x3cc1	No error (0)	tr.snapchat.com	gcp.api.snapchat.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.166083097 CEST	1.1.1.1	192.168.2.4	0x3cc1	No error (0)	gcp.api.snapchat.com	gcp.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182883024 CEST	1.1.1.1	192.168.2.4	0xd50e	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.182930946 CEST	1.1.1.1	192.168.2.4	0x9d0c	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.216938972 CEST	1.1.1.1	192.168.2.4	0x9f45	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:22.217008114 CEST	1.1.1.1	192.168.2.4	0x9685	No error (0)	googleads.g.doubleclick.net		142.250.9.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.217008114 CEST	1.1.1.1	192.168.2.4	0x9685	No error (0)	googleads.g.doubleclick.net		142.250.9.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.217008114 CEST	1.1.1.1	192.168.2.4	0x9685	No error (0)	googleads.g.doubleclick.net		142.250.9.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.217008114 CEST	1.1.1.1	192.168.2.4	0x9685	No error (0)	googleads.g.doubleclick.net		142.250.9.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.219377995 CEST	1.1.1.1	192.168.2.4	0xf060	No error (0)	ad.doubleclick.net		64.233.185.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.219377995 CEST	1.1.1.1	192.168.2.4	0xf060	No error (0)	ad.doubleclick.net		64.233.185.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.220241070 CEST	1.1.1.1	192.168.2.4	0xa350	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:22.223885059 CEST	1.1.1.1	192.168.2.4	0x1eab	No error (0)	ad.doubleclick.net		74.125.136.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.223885059 CEST	1.1.1.1	192.168.2.4	0x1eab	No error (0)	ad.doubleclick.net		74.125.136.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.224154949 CEST	1.1.1.1	192.168.2.4	0x8c91	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420672894 CEST	1.1.1.1	192.168.2.4	0x1866	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420872927 CEST	1.1.1.1	192.168.2.4	0x14c9	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420872927 CEST	1.1.1.1	192.168.2.4	0x14c9	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.420872927 CEST	1.1.1.1	192.168.2.4	0x14c9	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.440764904 CEST	1.1.1.1	192.168.2.4	0x6e6a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.440764904 CEST	1.1.1.1	192.168.2.4	0x6e6a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.440809011 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.440809011 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.464334011 CEST	1.1.1.1	192.168.2.4	0x20cf	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.469664097 CEST	1.1.1.1	192.168.2.4	0x7fdd	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.469664097 CEST	1.1.1.1	192.168.2.4	0x7fdd	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.470434904 CEST	1.1.1.1	192.168.2.4	0x817d	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.470434904 CEST	1.1.1.1	192.168.2.4	0x817d	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.470434904 CEST	1.1.1.1	192.168.2.4	0x817d	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.552875996 CEST	1.1.1.1	192.168.2.4	0x9743	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.553122044 CEST	1.1.1.1	192.168.2.4	0x2377	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.553122044 CEST	1.1.1.1	192.168.2.4	0x2377	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554778099 CEST	1.1.1.1	192.168.2.4	0xd60c	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554778099 CEST	1.1.1.1	192.168.2.4	0xd60c	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554778099 CEST	1.1.1.1	192.168.2.4	0xd60c	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554778099 CEST	1.1.1.1	192.168.2.4	0xd60c	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554827929 CEST	1.1.1.1	192.168.2.4	0xd043	No error (0)	urldefense.com		52.6.56.188	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554827929 CEST	1.1.1.1	192.168.2.4	0xd043	No error (0)	urldefense.com		52.204.90.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.554827929 CEST	1.1.1.1	192.168.2.4	0xd043	No error (0)	urldefense.com		52.71.28.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.557962894 CEST	1.1.1.1	192.168.2.4	0x3431	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.559483051 CEST	1.1.1.1	192.168.2.4	0x9729	No error (0)	adservice.google.com		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.559483051 CEST	1.1.1.1	192.168.2.4	0x9729	No error (0)	adservice.google.com		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.559483051 CEST	1.1.1.1	192.168.2.4	0x9729	No error (0)	adservice.google.com		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.559483051 CEST	1.1.1.1	192.168.2.4	0x9729	No error (0)	adservice.google.com		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:22.559976101 CEST	1.1.1.1	192.168.2.4	0xdab0	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.560451984 CEST	1.1.1.1	192.168.2.4	0xac00	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.560920000 CEST	1.1.1.1	192.168.2.4	0x1b91	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:22.889023066 CEST	1.1.1.1	192.168.2.4	0x2062	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.889363050 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:22.889363050 CEST	1.1.1.1	192.168.2.4	0x51ed	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.017653942 CEST	1.1.1.1	192.168.2.4	0x1dd	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.017653942 CEST	1.1.1.1	192.168.2.4	0x1dd	No error (0)	usc1-gcp-v61.api.sc-gw.com		35.190.43.134	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.017792940 CEST	1.1.1.1	192.168.2.4	0xbfb9	No error (0)	tr6.snapchat.com	usc1-gcp-v61.api.sc-gw.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.034950972 CEST	1.1.1.1	192.168.2.4	0xd80c	No error (0)	ara.paa-reporting-advertising.amazon		108.138.85.59	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.034950972 CEST	1.1.1.1	192.168.2.4	0xd80c	No error (0)	ara.paa-reporting-advertising.amazon		108.138.85.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.034950972 CEST	1.1.1.1	192.168.2.4	0xd80c	No error (0)	ara.paa-reporting-advertising.amazon		108.138.85.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.034950972 CEST	1.1.1.1	192.168.2.4	0xd80c	No error (0)	ara.paa-reporting-advertising.amazon		108.138.85.47	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.049287081 CEST	1.1.1.1	192.168.2.4	0x27ed	No error (0)	s.amazon-adsystem.com		52.46.128.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.140357971 CEST	1.1.1.1	192.168.2.4	0x595c	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.140582085 CEST	1.1.1.1	192.168.2.4	0xb4aa	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.167840958 CEST	1.1.1.1	192.168.2.4	0xe347	No error (0)	getrockerbox.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:23.170605898 CEST	1.1.1.1	192.168.2.4	0xb6dc	No error (0)	getrockerbox.com		172.67.71.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.170605898 CEST	1.1.1.1	192.168.2.4	0xb6dc	No error (0)	getrockerbox.com		104.26.8.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.170605898 CEST	1.1.1.1	192.168.2.4	0xb6dc	No error (0)	getrockerbox.com		104.26.9.177	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.172931910 CEST	1.1.1.1	192.168.2.4	0x143c	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.173058033 CEST	1.1.1.1	192.168.2.4	0x4494	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.177639961 CEST	1.1.1.1	192.168.2.4	0x4882	No error (0)	adservice.google.com		64.233.176.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.177639961 CEST	1.1.1.1	192.168.2.4	0x4882	No error (0)	adservice.google.com		64.233.176.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.177639961 CEST	1.1.1.1	192.168.2.4	0x4882	No error (0)	adservice.google.com		64.233.176.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.177639961 CEST	1.1.1.1	192.168.2.4	0x4882	No error (0)	adservice.google.com		64.233.176.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.177913904 CEST	1.1.1.1	192.168.2.4	0x414e	No error (0)	adservice.google.com			65	IN (0x0001)	false
Apr 19, 2024 02:44:23.179414988 CEST	1.1.1.1	192.168.2.4	0xe177	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.179414988 CEST	1.1.1.1	192.168.2.4	0xe177	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.179414988 CEST	1.1.1.1	192.168.2.4	0xe177	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.179414988 CEST	1.1.1.1	192.168.2.4	0xe177	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.230758905 CEST	1.1.1.1	192.168.2.4	0xe4f1	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.230758905 CEST	1.1.1.1	192.168.2.4	0xe4f1	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.231456041 CEST	1.1.1.1	192.168.2.4	0x33e0	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359766960 CEST	1.1.1.1	192.168.2.4	0x1fce	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359766960 CEST	1.1.1.1	192.168.2.4	0x1fce	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359766960 CEST	1.1.1.1	192.168.2.4	0x1fce	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.359944105 CEST	1.1.1.1	192.168.2.4	0xdb41	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.466042042 CEST	1.1.1.1	192.168.2.4	0xe1ed	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.466042042 CEST	1.1.1.1	192.168.2.4	0xe1ed	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.466195107 CEST	1.1.1.1	192.168.2.4	0xdae1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:23.630608082 CEST	1.1.1.1	192.168.2.4	0x22ba	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.630608082 CEST	1.1.1.1	192.168.2.4	0x22ba	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.630608082 CEST	1.1.1.1	192.168.2.4	0x22ba	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:23.630608082 CEST	1.1.1.1	192.168.2.4	0x22ba	No error (0)	ara.paa-reporting-advertising.amazon		3.163.80.52	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.257837057 CEST	1.1.1.1	192.168.2.4	0x7262	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:24.257858038 CEST	1.1.1.1	192.168.2.4	0x7031	No error (0)	storage.cloud.kargo.com	storage.cloud.kargo.com.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.270365953 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.282881021 CEST	1.1.1.1	192.168.2.4	0xf789	No error (0)	kds-pixel.kargo.com		3.225.229.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.282881021 CEST	1.1.1.1	192.168.2.4	0xf789	No error (0)	kds-pixel.kargo.com		54.159.173.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.874596119 CEST	1.1.1.1	192.168.2.4	0x2333	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:24.918932915 CEST	1.1.1.1	192.168.2.4	0xf10d	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.036830902 CEST	1.1.1.1	192.168.2.4	0x8ca3	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.037880898 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	ct.pinterest.com	www.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.037880898 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.037880898 CEST	1.1.1.1	192.168.2.4	0x948f	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		34.199.195.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		44.196.185.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		52.205.109.183	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		52.201.20.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		34.203.5.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:27.175265074 CEST	1.1.1.1	192.168.2.4	0xf4ac	No error (0)	crb.kargo.com		34.192.129.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:35.844995975 CEST	1.1.1.1	192.168.2.4	0xf006	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:35.844995975 CEST	1.1.1.1	192.168.2.4	0xf006	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:39.235749960 CEST	1.1.1.1	192.168.2.4	0xdde	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:39.236407995 CEST	1.1.1.1	192.168.2.4	0xc793	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:39.236407995 CEST	1.1.1.1	192.168.2.4	0xc793	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:44.693464041 CEST	1.1.1.1	192.168.2.4	0x3b86	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:44:44.693722963 CEST	1.1.1.1	192.168.2.4	0x277b	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:44.693722963 CEST	1.1.1.1	192.168.2.4	0x277b	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.115803957 CEST	1.1.1.1	192.168.2.4	0x8510	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:51.115803957 CEST	1.1.1.1	192.168.2.4	0x8510	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.118148088 CEST	1.1.1.1	192.168.2.4	0x2b38	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:51.831629038 CEST	1.1.1.1	192.168.2.4	0x43ea	No error (0)	js.arcgis.com		18.67.65.14	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.831629038 CEST	1.1.1.1	192.168.2.4	0x43ea	No error (0)	js.arcgis.com		18.67.65.88	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.831629038 CEST	1.1.1.1	192.168.2.4	0x43ea	No error (0)	js.arcgis.com		18.67.65.48	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:51.831629038 CEST	1.1.1.1	192.168.2.4	0x43ea	No error (0)	js.arcgis.com		18.67.65.46	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:53.322860003 CEST	1.1.1.1	192.168.2.4	0x383b	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:53.322860003 CEST	1.1.1.1	192.168.2.4	0x383b	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:44:53.323427916 CEST	1.1.1.1	192.168.2.4	0xba6f	No error (0)	tools.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:53.504647017 CEST	1.1.1.1	192.168.2.4	0x4afb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:44:53.504647017 CEST	1.1.1.1	192.168.2.4	0x4afb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:11.090279102 CEST	1.1.1.1	192.168.2.4	0x361a	No error (0)	informeddelivery.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:11.091303110 CEST	1.1.1.1	192.168.2.4	0x1d5c	No error (0)	informeddelivery.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:11.091303110 CEST	1.1.1.1	192.168.2.4	0x1d5c	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:13.471927881 CEST	1.1.1.1	192.168.2.4	0xc8c4	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:13.471927881 CEST	1.1.1.1	192.168.2.4	0xc8c4	No error (0)	cs1799.wpc.upsiloncdn.net		152.195.33.23	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:13.472424030 CEST	1.1.1.1	192.168.2.4	0xd167	No error (0)	www.usps.com	cs1799.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:14.381050110 CEST	1.1.1.1	192.168.2.4	0x4dc5	No error (0)	ad.doubleclick.net		173.194.219.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.381050110 CEST	1.1.1.1	192.168.2.4	0x4dc5	No error (0)	ad.doubleclick.net		173.194.219.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.381977081 CEST	1.1.1.1	192.168.2.4	0x230f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:45:14.916666031 CEST	1.1.1.1	192.168.2.4	0x3a98	No error (0)	adserv.mobi		104.21.94.97	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.916666031 CEST	1.1.1.1	192.168.2.4	0x3a98	No error (0)	adserv.mobi		172.67.221.181	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.916719913 CEST	1.1.1.1	192.168.2.4	0x587	No error (0)	adserv.mobi			65	IN (0x0001)	false
Apr 19, 2024 02:45:14.955106974 CEST	1.1.1.1	192.168.2.4	0x6cea	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:14.955248117 CEST	1.1.1.1	192.168.2.4	0x3c53	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:14.955248117 CEST	1.1.1.1	192.168.2.4	0x3c53	No error (0)	dg2iu7dxxehbo.cloudfront.net		108.156.154.126	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.968204021 CEST	1.1.1.1	192.168.2.4	0x9b4b	No error (0)	ad.ipredictive.com		52.45.111.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.968204021 CEST	1.1.1.1	192.168.2.4	0x9b4b	No error (0)	ad.ipredictive.com		54.204.91.195	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.968204021 CEST	1.1.1.1	192.168.2.4	0x9b4b	No error (0)	ad.ipredictive.com		54.156.30.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:14.968204021 CEST	1.1.1.1	192.168.2.4	0x9b4b	No error (0)	ad.ipredictive.com		52.72.131.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.521194935 CEST	1.1.1.1	192.168.2.4	0x3a22	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.521194935 CEST	1.1.1.1	192.168.2.4	0x3a22	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.521492004 CEST	1.1.1.1	192.168.2.4	0x44a4	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:45:15.575436115 CEST	1.1.1.1	192.168.2.4	0x5a88	No error (0)	ad.ipredictive.com		54.204.91.195	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.575436115 CEST	1.1.1.1	192.168.2.4	0x5a88	No error (0)	ad.ipredictive.com		52.72.131.118	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.575436115 CEST	1.1.1.1	192.168.2.4	0x5a88	No error (0)	ad.ipredictive.com		54.156.30.187	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.575436115 CEST	1.1.1.1	192.168.2.4	0x5a88	No error (0)	ad.ipredictive.com		52.45.111.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581135988 CEST	1.1.1.1	192.168.2.4	0x590b	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581535101 CEST	1.1.1.1	192.168.2.4	0xf9ea	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581535101 CEST	1.1.1.1	192.168.2.4	0xf9ea	No error (0)	pubads46.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581535101 CEST	1.1.1.1	192.168.2.4	0xf9ea	No error (0)	pubads46.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581535101 CEST	1.1.1.1	192.168.2.4	0xf9ea	No error (0)	pubads46.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.581535101 CEST	1.1.1.1	192.168.2.4	0xf9ea	No error (0)	pubads46.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.598071098 CEST	1.1.1.1	192.168.2.4	0x3805	No error (0)	8905209.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:15.598071098 CEST	1.1.1.1	192.168.2.4	0x3805	No error (0)	dart.l.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.598071098 CEST	1.1.1.1	192.168.2.4	0x3805	No error (0)	dart.l.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:15.600552082 CEST	1.1.1.1	192.168.2.4	0x5aef	No error (0)	8905209.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202521086 CEST	1.1.1.1	192.168.2.4	0xff00	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202996969 CEST	1.1.1.1	192.168.2.4	0xb680	No error (0)	pubads.g.doubleclick.net	pubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202996969 CEST	1.1.1.1	192.168.2.4	0xb680	No error (0)	pubads46.g.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202996969 CEST	1.1.1.1	192.168.2.4	0xb680	No error (0)	pubads46.g.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202996969 CEST	1.1.1.1	192.168.2.4	0xb680	No error (0)	pubads46.g.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.202996969 CEST	1.1.1.1	192.168.2.4	0xb680	No error (0)	pubads46.g.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.628076077 CEST	1.1.1.1	192.168.2.4	0x3cd4	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:45:16.629831076 CEST	1.1.1.1	192.168.2.4	0x4f27	No error (0)	ad.doubleclick.net		172.253.124.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:16.629831076 CEST	1.1.1.1	192.168.2.4	0x4f27	No error (0)	ad.doubleclick.net		172.253.124.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:17.173368931 CEST	1.1.1.1	192.168.2.4	0xd24c	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:17.173368931 CEST	1.1.1.1	192.168.2.4	0xd24c	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:17.174828053 CEST	1.1.1.1	192.168.2.4	0x7950	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Apr 19, 2024 02:45:22.479926109 CEST	1.1.1.1	192.168.2.4	0x116c	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479926109 CEST	1.1.1.1	192.168.2.4	0x116c	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479926109 CEST	1.1.1.1	192.168.2.4	0x116c	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479926109 CEST	1.1.1.1	192.168.2.4	0x116c	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479926109 CEST	1.1.1.1	192.168.2.4	0x116c	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479988098 CEST	1.1.1.1	192.168.2.4	0x5f06	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479988098 CEST	1.1.1.1	192.168.2.4	0x5f06	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479988098 CEST	1.1.1.1	192.168.2.4	0x5f06	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479988098 CEST	1.1.1.1	192.168.2.4	0x5f06	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.479988098 CEST	1.1.1.1	192.168.2.4	0x5f06	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Apr 19, 2024 02:45:22.480545044 CEST	1.1.1.1	192.168.2.4	0xf32b	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 02:45:22.480868101 CEST	1.1.1.1	192.168.2.4	0xbcb3	No error (0)	w3-reporting-nel.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	149.88.67.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:05 UTC	655	OUT	GET / HTTP/1.1 Host: hgdffds.cyou Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:06 UTC	239	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 19 Apr 2024 00:44:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 52 Connection: close Location: https://usps.com/ Strict-Transport-Security: max-age=31536000
2024-04-19 00:44:06 UTC	52	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 2f 22 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usps.com/">Moved Permanently</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	56.0.134.100	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:07 UTC	651	OUT	GET / HTTP/1.1 Host: usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:07 UTC	150	IN	HTTP/1.1 301 MOVED PERMANENTLY Location: https://www.usps.com/ Strict-Transport-Security: max-age=31536000;includeSubDomains Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:07 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 00:44:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=195581 Date: Fri, 19 Apr 2024 00:44:07 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:08 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 00:44:08 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=195565 Date: Fri, 19 Apr 2024 00:44:08 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 00:44:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:08 UTC	655	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:08 UTC	1095	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 1496 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:08 GMT Last-Modified: Fri, 19 Apr 2024 00:19:12 GMT Server: ECAcc (agb/538C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 92635 Connection: close
2024-04-19 00:44:08 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 6f 70 74 69 6d 69 7a 65 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 2e 6a 73 3f 69 64 3d 47 54 4d 2d 54 33 35 4e 39 52 4c 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 77 69 6e 64 6f 77 73 2d 31 32 35 32 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 Data Ascii: <!DOCTYPE html><html lang="en"><head> <script src="https://www.googleoptimize.com/optimize.js?id=GTM-T35N9RL"></script><meta http-equiv="Content-Type" content="text/html; charset=windows-1252"><meta http-equiv="X-UA-Compatible" content="I
2024-04-19 00:44:08 UTC	16383	IN	Data Raw: 61 20 54 72 61 63 6b 69 6e 67 20 4e 75 6d 62 65 72 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 2d 2d 74 72 61 63 6b 2d 69 6e 70 75 74 20 69 6e 70 75 74 2d 2d 66 69 65 6c 64 20 71 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 22 20 69 64 3d 22 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 2d 6d 61 69 6c 2d 73 68 69 70 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 35 36 22 20 6e 61 6d 65 3d 22 71 22 20 74 79 70 65 3d 22 74 65 78 74 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 75 74 6f 63 6f 72 72 65 63 74 22 3e 3c 75 6c 3e 3c 2f 75 6c 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 69 6e 70 75 74 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 20 76 61 6c 75 65 3d 22 53 65 61 72 Data Ascii: a Tracking Number" class="search--track-input input--field q global-header--search-track" id="global-header--search-track-mail-ship" maxlength="256" name="q" type="text"><div class="autocorrect"><ul></ul></div><input tabindex="-1" value="Sear
2024-04-19 00:44:08 UTC	16383	IN	Data Raw: 2d 2d 73 65 61 72 63 68 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 73 65 61 72 63 68 22 3e 0d 0a 09 09 3c 73 70 61 6e 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 2d 77 72 61 70 22 3e 0d 0a 09 09 09 3c 6c 61 62 65 6c 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 22 20 20 66 6f 72 3d 22 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 2d 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 3e 53 65 61 72 63 68 20 55 53 50 53 2e 63 6f 6d 3c 2f 6c 61 62 65 6c 3e 0d 0a 09 09 09 3c 69 6e 70 75 74 20 74 61 62 69 6e 64 65 78 3d 22 2d Data Ascii: --search" action="https://www.usps.com/search"><span tabindex="-1" aria-hidden="false" class="input--wrap"><label tabindex="-1" class="visuallyhidden" for="global-header--search-track-international">Search USPS.com</label><input tabindex="-
2024-04-19 00:44:08 UTC	3	IN	Data Raw: 72 6c 69 Data Ascii: rli
2024-04-19 00:44:08 UTC	16383	IN	Data Raw: 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 0d 0a 7d 0d 0a 2e 61 64 64 65 64 2d 6c 69 6e 6b 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 33 33 37 61 62 37 3b 0d 0a 0d 0a 7d 0d 0a 2e 61 64 64 65 64 2d 6c 69 6e 6b 20 61 20 73 75 70 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 65 6d 20 7b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 0d 0a 09 70 2e 61 64 64 65 64 2d 6c 69 6e 6b 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0d 0a 20 20 20 20 2e 63 6f 6c 2d 31 32 2e Data Ascii: ne;color:#337ab7;}.added-link a:hover {text-decoration:none;color:#337ab7;}.added-link a sup {text-decoration:none!important;}em {font-style: italic;}@media (max-width: 992px){p.added-link {display:none;} .col-12.
2024-04-19 00:44:08 UTC	16383	IN	Data Raw: 61 74 61 2d 67 74 6d 2d 73 75 62 73 65 63 74 69 6f 6e 3d 22 70 61 73 73 70 6f 72 74 22 20 64 61 74 61 2d 67 74 6d 2d 6c 61 62 65 6c 3d 22 6c 65 61 72 6e 2d 6d 6f 72 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 72 63 61 73 2e 68 74 6d 22 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 2d 2d 70 72 69 6d 61 72 79 22 3e 53 63 68 65 64 75 6c 65 20 61 6e 20 41 70 70 6f 69 6e 74 6d 65 6e 74 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 20 66 6f 72 20 61 20 4e 65 77 20 50 61 73 73 70 6f 72 74 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 70 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 09 09 09 09 09 0d 0a 0d 0a 09 3c 21 2d 2d 20 53 6d 61 6c 6c 20 42 75 73 69 6e 65 73 73 20 2d Data Ascii: ata-gtm-subsection="passport" data-gtm-label="learn-more" href="https://tools.usps.com/rcas.htm" class="button--primary">Schedule an Appointment<span class="sr-only"> for a New Passport</span></a></p></div></div>... Small Business -
2024-04-19 00:44:08 UTC	10717	IN	Data Raw: 65 77 20 44 61 74 65 28 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 20 55 53 50 53 2e 20 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 3c 2f 64 69 76 3e 0d 0a 09 09 0d 0a 3c 75 6c 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 73 6f 63 69 61 6c 22 3e 0d 0a 3c 6c 69 3e 0d 0a 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 55 53 50 53 3f 72 66 3d 31 30 38 35 30 31 33 35 35 38 34 38 36 33 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 69 6d 67 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 Data Ascii: ew Date().getFullYear());</script> USPS. All Rights Reserved.</div><ul class="global-footer--social"><li> <a target="_blank" style="text-decoration: none;" href="https://www.facebook.com/USPS?rf=108501355848630"> <img alt="Image of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	555	OUT	GET /assets/css/welcome/bootstrap.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1178	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 84577 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 155764 Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "26074-58f0f21542f80+ident" Last-Modified: Thu, 01 Aug 2019 14:33:50 GMT Server: ECAcc (agb/5343) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 155764 Connection: close
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-19 00:44:09 UTC	1	IN	Data Raw: 33 Data Ascii: 3
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 Data Ascii: 3%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-first{-ms-flex-order:-1;order:-1}.order-xl-last{-ms-flex-order:13;order:13}.order-xl-0{-ms-flex-order:0;orde
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f Data Ascii: d .form-check-input:invalid~.invalid-tooltip{display:block}.custom-control-input.is-invalid~.custom-control-label,.was-validated .custom-control-input:invalid~.custom-control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::befo
2024-04-19 00:44:09 UTC	2	IN	Data Raw: 69 6f Data Ascii: io
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 6c 65 66 74 2c 2e 64 72 6f 70 72 69 67 68 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 Data Ascii: n:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid transparent
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 72 65 6d 20 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 63 6f 6e 74 65 6e 74 3a 22 42 72 6f 77 73 65 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 2e 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 30 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 72 65 6d 20 2b 20 2e 34 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 Data Ascii: rem .75rem;line-height:1.5;color:#495057;content:"Browse";background-color:#e9ecef;border-left:inherit;border-radius:0 .25rem .25rem 0}.custom-range{width:100%;height:calc(1rem + .4rem);padding:0;background-color:transparent;-webkit-appearance:none;-moz-a
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 35 36 62 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 Data Ascii: -height:1.25;color:#007bff;background-color:#fff;border:1px solid #dee2e6}.page-link:hover{z-index:2;color:#0056b3;text-decoration:none;background-color:#e9ecef;border-color:#dee2e6}.page-link:focus{z-index:2;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,25
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 73 63 72 6f 6c 6c 62 61 72 2d 6d 65 61 73 75 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 39 39 39 39 70 78 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 Data Ascii: rder-bottom-right-radius:.3rem;border-bottom-left-radius:.3rem}.modal-footer>:not(:first-child){margin-left:.25rem}.modal-footer>:not(:last-child){margin-right:.25rem}.modal-scrollbar-measure{position:absolute;top:-9999px;width:50px;height:50px;overflow:s
2024-04-19 00:44:09 UTC	4	IN	Data Raw: 73 70 6c 61 Data Ascii: spla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	565	OUT	GET /global-elements/header/css/megamenu-v4.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58346 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "ad9f-5fdb1f8841e00+ident" Last-Modified: Fri, 09 Jun 2023 13:01:44 GMT ntCoent-Length: 44447 Server: ECAcc (agb/A42A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 44447 Connection: close
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 62 62 72 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 63 72 6f 6e 79 6d 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 70 70 6c 65 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 72 74 69 63 6c 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 73 69 64 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 75 64 69 6f 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 69 67 Data Ascii: .global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big
2024-04-19 00:44:09 UTC	16383	IN	Data Raw: 2e 61 63 74 69 76 65 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 6e 61 76 2d 73 65 61 72 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 69 6d 61 67 65 73 2f 75 74 69 6c 69 74 79 2d 68 65 61 64 65 72 2f 73 65 61 72 63 68 2e 73 76 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 7a 2d 69 6e 64 65 78 3a 35 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 Data Ascii: .active.nav-first-element{color:#336}.global--navigation nav .nav-search{background:url(https://www.usps.com/global-elements/header/images/utility-header/search.svg) no-repeat;background-repeat:no-repeat;z-index:5;text-indent:-9999px;background-position:5
2024-04-19 00:44:09 UTC	11681	IN	Data Raw: 20 61 2e 6d 75 6c 74 69 2d 6c 61 6e 67 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 63 68 69 6e 65 73 65 5f 63 68 61 72 61 63 74 65 72 73 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 23 6c 69 6e 6b 2d 6c 61 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 Data Ascii: a.multi-lang-link{background:url(https://www.usps.com/assets/images/home/chinese_characters.gif);background-repeat:no-repeat;width:80px;height:25px;left:20px;position:relative}.nav-utility #link-lang:before{content:"";display:inline-block;height:15px;wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	625	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58954 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "de5-549b1263b1ac0+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (agb/53BC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-04-19 00:44:09 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	142.250.105.102	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	544	OUT	GET /optimize.js?id=GTM-T35N9RL HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Fri, 19 Apr 2024 00:44:09 GMT Expires: Fri, 19 Apr 2024 00:44:09 GMT Cache-Control: private, max-age=900 Last-Modified: Fri, 19 Apr 2024 00:18:47 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:09 UTC	601	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 34 39 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 5d 2c 0a 20 20 22 74 61 67 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 61 73 70 72 76 22 2c 22 76 74 70 5f 67 6c 6f 62 61 6c 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 5f 6f 70 74 69 6d 69 7a 65 22 2c 22 76 74 70 5f 6c 69 73 74 65 6e 46 Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"49", "macros":[{"function":"__e"},{"function":"__dee"}], "tags":[{"function":"__asprv","vtp_globalName":"google_optimize","vtp_listenF
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 66 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 Data Ascii: rn b<a.length?{done:!1,value:a[b++]}:{done:!0}}},fa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ia=function(a){for(var b=["object"==typeof glob
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 6b 61 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 71 61 7d 29 3b 76 61 72 20 72 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 75 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 Data Ascii: ototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};ka("Object.assign",function(a){return a\|\|qa});var ra="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ua;if("function"==typeof Object.setProt
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 6f 74 79 70 65 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 6e 61 74 69 76 65 20 63 6f 64 65 22 29 3f 43 61 3a 44 61 3b 72 65 74 75 72 6e 20 45 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 46 61 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 0a 20 6a 51 75 65 72 79 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 2e 0a 2a 2f 0a 76 61 72 20 47 61 3d 2f 5c 5b 6f 62 6a 65 63 74 20 28 42 6f 6f 6c 65 61 6e 7c 4e 75 6d 62 65 72 7c 53 74 72 69 6e 67 7c 46 75 6e 63 74 69 6f 6e 7c 41 72 72 61 79 7c 44 61 74 65 7c 52 65 67 45 78 70 29 5c 5d 2f 2c 48 Data Ascii: otype.bind.toString().indexOf("native code")?Ca:Da;return Ea.apply(null,arguments)},Fa=function(a){return a};/* jQuery (c) 2005, 2012 jQuery Foundation, Inc. jquery.org/license.*/var Ga=/\[object (Boolean\|Number\|String\|Function\|Array\|Date\|RegExp)\]/,H
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 3d 66 3e 3e 32 2c 6e 3d 28 66 26 33 29 3c 3c 34 7c 68 3e 3e 34 2c 70 3d 28 68 26 31 35 29 3c 3c 32 7c 6c 3e 3e 36 2c 71 3d 6c 26 36 33 3b 65 7c 7c 28 71 3d 36 34 2c 64 7c 7c 28 70 3d 36 34 29 29 3b 62 2e 70 75 73 68 28 4c 61 5b 6d 5d 2c 4c 61 5b 6e 5d 2c 4c 61 5b 70 5d 2c 4c 61 5b 71 5d 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6d 29 7b 66 6f 72 28 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 61 2e 63 68 61 72 41 74 28 64 2b 2b 29 2c 70 3d 4e 61 5b 6e 5d 3b 69 66 28 6e 75 6c 6c 21 3d 70 29 72 65 74 75 72 6e 20 70 3b 69 66 28 21 2f 5e 5b 5c 73 5c 78 61 30 5d 2a 24 2f 2e 74 65 73 74 28 6e 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 6b 6e Data Ascii: =f>>2,n=(f&3)<<4\|h>>4,p=(h&15)<<2\|l>>6,q=l&63;e\|\|(q=64,d\|\|(p=64));b.push(La[m],La[n],La[p],La[q])}return b.join("")}function Pa(a){function b(m){for(;d<a.length;){var n=a.charAt(d++),p=Na[n];if(null!=p)return p;if(!/^[\s\xa0]*$/.test(n))throw Error("Unkn
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 62 2d 61 2b 31 29 2b 61 29 7d 2c 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 24 61 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 2e 73 65 74 28 61 5b 64 5d 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 63 2e 67 65 74 28 62 5b 65 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 0a 63 29 26 26 62 28 63 2c 61 5b 63 5d 29 7d 2c 62 62 3d 66 75 6e 63 74 69 Data Ascii: loor(Math.random()*(b-a+1)+a)},ab=function(a,b){for(var c=new $a,d=0;d<a.length;d++)c.set(a[d],!0);for(var e=0;e<b.length;e++)if(c.get(b[e]))return!0;return!1},A=function(a,b){for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(c,a[c])},bb=functi
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 61 2e 73 70 6c 69 74 28 22 2e 22 29 2c 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 64 3d 64 5b 65 5b 66 5d 5d 3d 7b 7d 3b 64 5b 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 5d 3d 62 3b 72 65 74 75 72 6e 20 63 7d 2c 6e 62 3d 2f 5e 5c 77 7b 31 2c 39 7d 24 2f 2c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 7c 7c 7b 7d 3b 62 3d 62 7c 7c 22 2c 22 3b 76 61 72 20 63 3d 5b 5d 3b 41 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 6e 62 2e 74 65 73 74 28 64 29 26 26 0a 65 26 26 63 2e 70 75 73 68 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 2e 6a 6f 69 6e 28 62 29 7d 2c 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 2b 2b 64 3d 3d 3d 62 26 26 28 65 28 29 2c 65 3d 6e 75 6c 6c 2c 63 2e 64 6f 6e 65 Data Ascii: a.split("."),f=0;f<e.length-1;f++)d=d[e[f]]={};d[e[e.length-1]]=b;return c},nb=/^\w{1,9}$/,ob=function(a,b){a=a\|\|{};b=b\|\|",";var c=[];A(a,function(d,e){nb.test(d)&&e&&c.push(d)});return c.join(b)},pb=function(a,b){function c(){++d===b&&(e(),e=null,c.done
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 3b 76 61 72 20 42 62 2c 43 62 3b 61 3a 7b 66 6f 72 28 76 61 72 20 44 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 45 62 3d 42 61 2c 46 62 3d 30 3b 46 62 3c 44 62 2e 6c 65 6e 67 74 68 3b 46 62 2b 2b 29 69 66 28 45 62 3d 45 62 5b 44 62 5b 46 62 5d 5d 2c 6e 75 6c 6c 3d 3d 45 62 29 7b 43 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 43 62 3d 45 62 7d 76 61 72 20 47 62 3d 43 62 26 26 43 62 5b 36 31 30 34 30 31 33 30 31 5d 3b 42 62 3d 6e 75 6c 6c 21 3d 47 62 3f 47 62 3a 21 31 3b 66 75 6e 63 74 69 6f 6e 20 48 62 28 29 7b 76 61 72 20 61 3d 42 61 2e 6e 61 76 69 67 61 74 6f 72 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 61 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 22 22 7d 76 61 72 20 49 62 2c 4a 62 3d 42 Data Ascii: ;var Bb,Cb;a:{for(var Db=["CLOSURE_FLAGS"],Eb=Ba,Fb=0;Fb<Db.length;Fb++)if(Eb=Eb[Db[Fb]],null==Eb){Cb=null;break a}Cb=Eb}var Gb=Cb&&Cb[610401301];Bb=null!=Gb?Gb:!1;function Hb(){var a=Ba.navigator;if(a){var b=a.userAgent;if(b)return b}return""}var Ib,Jb=B
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 20 42 41 53 45 46 4f 4e 54 20 42 49 47 20 44 49 52 20 48 47 52 4f 55 50 20 53 54 52 49 4b 45 20 54 54 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 63 6f 6e 63 61 74 28 5b 22 42 55 54 54 4f 4e 22 2c 0a 22 49 4e 50 55 54 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 53 62 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 22 6e 75 6c 6c 22 3a 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 7d 3b 76 61 72 20 45 3d 77 69 6e 64 6f 77 2c 46 3d 64 6f 63 75 6d 65 6e 74 2c 54 62 3d 6e 61 76 69 67 61 74 6f 72 2c 55 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 74 72 79 7b 61 3d 54 62 2e 73 65 72 76 69 63 65 57 6f 72 6b 65 72 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 7d 72 65 74 75 72 6e 20 61 7d 2c 56 62 3d 46 2e 63 75 72 72 65 Data Ascii: BASEFONT BIG DIR HGROUP STRIKE TT".split(" ").concat(["BUTTON","INPUT"]);function Sb(a){return null===a?"null":void 0===a?"undefined":a};var E=window,F=document,Tb=navigator,Ub=function(){var a;try{a=Tb.serviceWorker}catch(b){return}return a},Vb=F.curre
2024-04-19 00:44:09 UTC	1255	IN	Data Raw: 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 7c 7c 46 2e 62 6f 64 79 7c 7c 46 2e 68 65 61 64 3b 75 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 66 2c 75 29 7d 72 65 74 75 72 6e 20 66 7d 2c 62 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 56 62 29 7b 76 61 72 20 61 3d 56 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 30 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 73 3a 2f 2f 22 29 29 72 65 74 75 72 6e 20 32 3b 69 66 28 30 3d 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 68 74 74 70 3a 2f 2f 22 29 29 72 65 74 75 72 6e 20 33 7d 72 65 74 75 72 6e 20 31 7d 2c 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 21 30 3a 66 3b 76 61 72 Data Ascii: gName("script")[0]\|\|F.body\|\|F.head;u.parentNode.insertBefore(f,u)}return f},bc=function(){if(Vb){var a=Vb.toLowerCase();if(0===a.indexOf("https://"))return 2;if(0===a.indexOf("http://"))return 3}return 1},cc=function(a,b,c,d,e){var f;f=void 0===f?!0:f;var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	601	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58361 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "222-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/53F6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-04-19 00:44:09 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	603	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58977 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "80c-547ddea221540+gzip+ident" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (agb/5326) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-04-19 00:44:09 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	598	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58361 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "5b9-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/5345) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-19 00:44:09 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	368	OUT	GET /assets/images/home/hamburger.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58361 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "222-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/53F6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 546 Connection: close
2024-04-19 00:44:09 UTC	546	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 74 52 61 74 69 6f 3d 22 78 4d 69 64 59 4d 69 64 22 20 77 69 64 74 68 3d 22 36 37 22 20 68 65 69 67 68 74 3d 22 34 39 2e 39 33 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 20 34 39 2e 39 33 38 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 34 33 34 36 36 3b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 2d 72 75 6c 65 3a 20 65 76 65 6e 6f 64 64 3b 0a 20 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" preserveAspectRatio="xMidYMid" width="67" height="49.938" viewBox="0 0 67 49.938"> <defs> <style> .cls-1 { fill: #343466; fill-rule: evenodd;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:09 UTC	392	OUT	GET /global-elements/header/images/utility-header/logo-sb.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:09 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58954 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:09 GMT Etag: "de5-549b1263b1ac0+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:03 GMT Server: ECAcc (agb/53BC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3557 Connection: close
2024-04-19 00:44:09 UTC	3557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	600	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1155	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59017 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "a1a-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (agb/5367) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-04-19 00:44:10 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	600	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58913 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "5bf-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/53AA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-04-19 00:44:10 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	607	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58352 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "8fe-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (agb/53EF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-04-19 00:44:10 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	611	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58374 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "436-5494e7bfce000+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (agb/5379) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-04-19 00:44:10 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49757	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	607	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58998 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "6ef-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-04-19 00:44:10 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:10 UTC	598	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:10 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58987 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:10 GMT Etag: "44f-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/A40A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-04-19 00:44:10 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49759	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:11 UTC	370	OUT	GET /assets/images/home/logo_mobile.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:11 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58979 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:11 GMT Etag: "80c-547ddea221540+gzip+ident" Last-Modified: Mon, 06 Feb 2017 15:02:05 GMT Server: ECAcc (agb/5326) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2060 Connection: close
2024-04-19 00:44:11 UTC	2060	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49760	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:11 UTC	365	OUT	GET /assets/images/home/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:11 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58363 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:11 GMT Etag: "5b9-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/5345) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-19 00:44:11 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	625	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58950 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (agb/A40E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-04-19 00:44:12 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49763	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	600	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59011 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "5a8-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT Server: ECAcc (agb/539E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-04-19 00:44:12 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49764	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	598	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58956 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "667-5494e7f259740+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (agb/53B4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-04-19 00:44:12 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49762	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	606	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58967 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "74d-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (agb/52EF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-04-19 00:44:12 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49767	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	602	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58944 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "42a-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/52D3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-04-19 00:44:12 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49765	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:12 UTC	652	OUT	GET /assets/images/home/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:12 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58933 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:12 GMT Etag: "87d-547e11c4438c0" Last-Modified: Mon, 06 Feb 2017 18:50:51 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-19 00:44:12 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49769	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	658	OUT	GET /assets/images/home/utility_customer_service.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59006 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "51b-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (agb/52D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1307 Connection: close
2024-04-19 00:44:13 UTC	1307	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49768	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	651	OUT	GET /assets/images/home/utility_languages.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58329 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "5b0-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (agb/5346) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1456 Connection: close
2024-04-19 00:44:13 UTC	1456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 06 00 00 00 72 50 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRrP6tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49770	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	584	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58371 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (agb/A429) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-04-19 00:44:13 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-04-19 00:44:13 UTC	3951	IN	Data Raw: fb df ef 28 2f af f8 fc 6d b7 dd ba f1 e5 97 d7 3d dc d0 d0 50 3c 71 e2 c4 3e f5 44 ae 5a d7 d3 d3 43 6b 6b 2b 5f f9 ca 57 fe fb a2 8b 2e fa fa b3 cf 3e db 31 82 04 5a ec 58 97 fe 38 5e e3 91 07 e8 25 91 db fd a7 88 de f5 63 bf 53 5d bd f8 78 35 49 b7 02 2e c9 dc ed ab 9d 97 db cd c8 6d 0f e6 1e 6b 35 1c d3 c1 68 a0 e3 ae ac a9 a9 ad 3f 5b 96 e9 2f 9e 48 e0 74 16 0a 04 94 e9 f3 69 4f 3e f9 93 e7 2c cb ba f3 5b df 59 f6 7d c3 30 66 7f fc 13 37 20 2d 3b eb da cd 57 33 0c 83 bc bc 3c ba ba ba 58 b1 62 05 8f 3c f2 08 25 25 25 5b ff e5 e1 87 7f b1 71 d3 a6 3b f7 ec d9 33 23 95 4a 61 9a 66 ec ae bb ee 7a 70 c2 84 09 8f 55 54 54 c4 9c 6c 6c 74 5d 97 a6 69 d2 72 b4 25 b1 ee a5 17 ff eb 33 b7 df be fe 95 57 5e 5b fe e7 3f ff f9 23 25 25 25 14 14 14 78 ad 90 3b 3a Data Ascii: (/m=P<q>DZCkk+_W.>1ZX8^%cS]x5I.mk5h?[/HtiO>,[Y}0f7 -;W3<Xb<%%%[q;3#JafzpUTTllt]ir%3W^[?#%%%x;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49773	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	666	OUT	GET /global-elements/header/images/utility-header/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58340 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "5b9-549b126599f40+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:05 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-19 00:44:13 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49772	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	664	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58929 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "efd-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/53E5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3837 Connection: close
2024-04-19 00:44:13 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49771	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:13 UTC	636	OUT	GET /test/nav/images/gifts.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:13 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58970 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:13 GMT Etag: "3ee-560f10e9b5900+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:12 GMT Server: ECAcc (agb/5348) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1006 Connection: close
2024-04-19 00:44:13 UTC	1006	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49775	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	374	OUT	GET /assets/images/home/schedule_pickup.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59002 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "6ef-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1775 Connection: close
2024-04-19 00:44:14 UTC	1775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49776	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	367	OUT	GET /assets/images/home/location.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1155	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59021 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "a1a-5494e7ee88e40+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT nnCoection: close Server: ECAcc (agb/5367) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2586 Connection: close
2024-04-19 00:44:14 UTC	2586	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49777	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	365	OUT	GET /assets/images/home/stamps.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58991 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "44f-5494e7f535e00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:16 GMT Server: ECAcc (agb/A40A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1103 Connection: close
2024-04-19 00:44:14 UTC	1103	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49774	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	367	OUT	GET /assets/images/home/find_zip.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58917 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "5bf-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/53AA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1471 Connection: close
2024-04-19 00:44:14 UTC	1471	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49779	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	374	OUT	GET /assets/images/home/calculate_price.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58356 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "8fe-5494e7eca09c0" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (agb/53EF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2302 Connection: close
2024-04-19 00:44:14 UTC	2302	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49778	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	378	OUT	GET /assets/images/home/featured_clicknship.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58378 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "436-5494e7bfce000+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:45:20 GMT Server: ECAcc (agb/5379) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1078 Connection: close
2024-04-19 00:44:14 UTC	1078	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 35 2e 31 36 20 38 35 2e 36 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 32 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 55 53 50 53 5f 42 6c 75 65 5f 32 39 35 43 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 37 37 2e 38 34 2c 32 31 2e 31 37 48 37 34 2e 31 32 56 31 31 2e 33 32 41 31 31 2e 33 33 2c 31 31 2e 33 33 2c 30 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 85.16 85.6"><defs><style>.cls-1{fill:#336;}</style></defs><title>Asset 2</title><g id="Layer_2" data-name="Layer 2"><g id="USPS_Blue_295C"><path class="cls-1" d="M77.84,21.17H74.12V11.32A11.33,11.33,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49780	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	639	OUT	GET /test/nav/images/business.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58965 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "4d2-560f10e7cd480+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:10 GMT Server: ECAcc (agb/52C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1234 Connection: close
2024-04-19 00:44:14 UTC	1234	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 c3 95 5f 78 42 41 5f 5f 78 32 32 36 34 5f 5f 78 32 30 31 45 5f 5f 78 35 46 5f 31 22 0a 09 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_xBA__x2264__x201E__x5F_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49782	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	679	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1137	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58453 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 7250 Connection: close
2024-04-19 00:44:14 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49783	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	662	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58307 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/534C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2340 Connection: close
2024-04-19 00:44:14 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49781	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	609	OUT	GET /assets/images/home/printcustomsforms.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58307 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "9e7-5cfbe96b910c0+gzip+ident" Last-Modified: Mon, 01 Nov 2021 18:46:03 GMT Server: ECAcc (agb/5333) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2535 Connection: close
2024-04-19 00:44:14 UTC	2535	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 2e 31 36 20 31 30 33 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 2d 32 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 63 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49784	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	650	OUT	GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58448 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "8a9-560f10e8c16c0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:11 GMT Server: ECAcc (agb/5332) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2217 Connection: close
2024-04-19 00:44:14 UTC	2217	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49785	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	641	OUT	GET /test/nav/images/collectors.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58971 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "461-560f10f803ac0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:27 GMT Server: ECAcc (agb/52F5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1121 Connection: close
2024-04-19 00:44:14 UTC	1121	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 63 6f 6e 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49786	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	367	OUT	GET /assets/images/home/holdmail.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59013 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "5a8-5494e7ee88e40" Last-Modified: Fri, 24 Feb 2017 22:46:09 GMT Server: ECAcc (agb/539E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1448 Connection: close
2024-04-19 00:44:14 UTC	1448	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49787	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	377	OUT	GET /assets/images/home/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58935 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "87d-547e11c4438c0" Last-Modified: Mon, 06 Feb 2017 18:50:51 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-19 00:44:14 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49788	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	369	OUT	GET /assets/images/home/free_boxes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58946 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "42a-5494e7ed94c00+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:08 GMT Server: ECAcc (agb/52D3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1066 Connection: close
2024-04-19 00:44:14 UTC	1066	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49789	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	392	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58952 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT Server: ECAcc (agb/A40E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1827 Connection: close
2024-04-19 00:44:14 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49790	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	373	OUT	GET /assets/images/home/change_address.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58969 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "74d-5494e7eca09c0+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:07 GMT Server: ECAcc (agb/52EF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1869 Connection: close
2024-04-19 00:44:14 UTC	1869	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 73 6f 6c 61 74 69 6f 6e 5f 4d 6f 64 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Isolation_Mode" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49791	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	365	OUT	GET /assets/images/home/po_box.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58958 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "667-5494e7f259740+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:13 GMT Server: ECAcc (agb/53B4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1639 Connection: close
2024-04-19 00:44:14 UTC	1639	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49795	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	648	OUT	GET /test/nav/images/shipping-supplies.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58390 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "9f8-560f10eaa9b40" Last-Modified: Fri, 22 Dec 2017 17:22:13 GMT Server: ECAcc (agb/53A1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2552 Connection: close
2024-04-19 00:44:14 UTC	2552	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49797	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	585	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 84560 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (agb/53BC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-04-19 00:44:14 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-04-19 00:44:14 UTC	1104	IN	Data Raw: 36 12 2e ba 00 6b 71 d1 3e eb b4 cf 28 1f 15 23 11 21 ca 4d 4b 15 f3 ea b8 bf d3 60 4a 32 b5 84 41 32 5d 4c c0 7f 1f b0 c8 d7 d1 49 fc 79 67 93 ff b7 bf ee f7 e5 7d 4f 3f 47 ef d3 6b b0 97 ce 08 55 87 50 3b ae 3c 12 bc 2f cb 32 b2 df 4f d2 e5 17 8f 5b af bb 79 a7 e2 1a 3e 06 41 c1 90 e5 9b 1a cb e7 39 4a eb 37 fc 6d bf 1b 6d 30 65 98 52 53 ab a5 9b d7 6f 41 96 ef 06 30 65 a4 33 f0 fa 9b b4 dd fc 53 02 83 43 e3 5e eb eb ea a6 f5 07 3f c6 92 96 85 10 a1 3f 4b e8 3e 68 46 b8 6f 6f 27 51 f3 66 13 fb e5 2f 8d 5b 77 ff 8b 2f 29 46 fb f8 fe 1f 79 72 20 60 c4 3f 7f 4e 99 52 c2 d0 58 3e ef 52 21 c4 53 00 92 45 49 1d df 7e ef 2f f0 34 ef 1c f7 da b6 9f dc 8a b7 75 37 e6 f4 34 64 39 b0 ef 3e 2b c0 ef e8 21 f1 f2 4b c6 0d 11 1d 5c f7 06 7d 4f 3f 87 25 3b 0b 21 94 91 Data Ascii: 6.kq>(#!MK`J2A2]LIyg}O?GkUP;</2O[y>A9J7mm0eRSoA0e3SC^??K>hFoo'Qf/[w/)Fyr `?NRX>R!SEI~/4u74d9>+!K\}O?%;!
2024-04-19 00:44:14 UTC	3097	IN	Data Raw: 6e 17 8a dd 2c f0 b5 b7 93 7c d3 8f 30 25 26 86 dc d3 5d df c0 b6 2f 9d 49 c0 e9 c2 5a 34 0d 59 15 84 48 23 81 56 77 a4 ef b2 92 99 3b b2 93 d3 a1 45 1b 05 b4 8e a3 0f e0 6f aa 5c b6 76 15 ea 7e 6e 95 cb d6 2e 27 34 92 6d 09 ca 6c d1 1a f6 19 9a 11 2c ab 51 a5 9b c9 5a ae 9e 1b 2b 04 54 3f 8a ad 61 64 44 4a 0a 6b cb fc ca 65 6b 0b d5 c4 01 87 3d 39 da 94 12 86 c6 b2 b9 8f 0a 21 be 39 56 78 a7 29 36 16 5f eb 1e f6 fc f8 16 2c 39 39 48 51 a1 d3 9d 91 04 42 fb 5f 76 bb 31 25 24 92 78 49 a8 e1 ec 6e d8 c2 b6 af 9c 4d 60 68 08 5b 71 11 01 8f 27 a4 9e b1 5c b6 47 1d 93 41 48 e2 7f 4b 1b ea 96 1d e8 ef 3e 08 b4 0e a5 bd 61 97 e8 a6 45 c3 99 8f 62 1b cc 57 cb 57 ab 79 99 9a 50 37 49 dc 47 c0 50 b0 b3 eb cb a8 f9 98 9a 18 23 a9 59 58 7d 8e f0 73 95 cb d6 de 87 32 Data Ascii: n,\|0%&]/IZ4YH#Vw;Eo\v~n.'4ml,QZ+T?adDJkek=9!9Vx)6_,99HQB_v1%$xInM`h[q'\GAHK>aEbWWyP7IGP#YX}s2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49796	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	593	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58974 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (agb/535E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-04-19 00:44:14 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-19 00:44:14 UTC	5750	IN	Data Raw: 1a 8c f8 1e 11 12 55 c4 85 ae 15 e4 15 d9 8a 0b 52 39 60 83 61 e1 0e 51 b9 9d 70 b6 87 23 ca a9 91 97 e6 37 ca 9c 46 a1 1f 86 94 a0 c8 cc 90 1b b1 aa 91 39 23 4c 1f 4c 4f 4b c4 a5 97 5d 80 ad 1f ee c3 fe fa dd ac 9d 0d 83 7d 83 f8 d5 6d 97 21 99 01 32 e0 f3 e3 9c 53 4b b1 f9 bd 26 2c 9a 9b 8d ac ac 44 74 76 b9 78 00 7b 1b d3 1b 97 2e ca c6 d3 af ef 63 7a 67 00 4a 82 ac 30 ae 9e c3 20 82 df c7 c4 f1 10 e3 e8 64 68 32 f1 bf ad 16 13 46 06 07 d0 d3 d5 5d 8a f2 02 7d 66 e9 74 d8 62 6a 58 8a 4e 5b d8 f1 01 3b 72 eb f7 d6 53 31 97 79 99 19 fb e7 1b cd 71 e5 05 f9 0b 4b 03 61 47 f6 c0 c0 b0 c1 6a b3 23 18 64 7a 16 03 98 dd 6e 17 89 b9 14 32 17 09 5b 03 2f 91 2f 94 bc a0 e4 78 22 ce 93 1b 5d 64 7a 92 2a 82 72 c9 57 11 f5 6b 08 c0 b4 bf 46 28 52 9d 3c c8 8b 41 51 Data Ascii: UR9`aQp#7F9#LLOK]}m!2SK&,Dtvx{.czgJ0 dh2F]}ftbjXN[;rS1yqKaGj#dzn2[//x"]dz*rWkF(R<AQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49798	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	588	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58362 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (agb/537D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-04-19 00:44:14 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-19 00:44:14 UTC	3586	IN	Data Raw: fd 28 e5 b7 66 89 77 31 2f 25 19 4c 5b 54 51 b1 54 59 a3 d4 2f 98 9f e2 8f 6c 55 40 a4 48 41 f9 3c 9b 54 32 67 cb 65 f2 d9 d5 72 6e 73 9a e7 55 5e 1c e9 06 32 d6 28 20 52 31 62 aa a9 eb 58 d4 c9 ec 53 2f fb 47 9b 87 92 e2 05 4a bb f3 99 f2 f6 4c 57 73 40 18 66 40 db f9 00 38 92 1e 7b 66 a0 e6 e6 e6 0a fa cc 65 00 b0 b4 e2 06 bb 6d db 36 b0 34 fa d2 97 be 24 01 e3 95 57 5e 91 02 00 66 bd 11 27 9b 9a 30 9d 98 c9 70 e4 a8 c4 3c 2c 9d 94 6b 79 89 c5 26 96 97 e3 9b df f8 57 e8 12 61 9c 39 56 83 bd af be 88 8e b6 e6 64 0d 07 93 09 a6 8c 4c e4 17 94 48 29 42 7c ac 95 d8 e9 f5 5d af c3 e3 0f 49 63 94 1c 99 0e b8 0a 0a 51 3d 7f 21 26 56 4c 42 80 64 1c ff 3e 1c a0 60 90 3f f9 e4 93 83 52 8d ae ef 20 16 2a e0 47 a1 df 2d 96 fa a2 3a df 6f 7f 2e a0 c9 6c b3 45 69 f8 Data Ascii: (fw1/%L[TQTY/lU@HA<T2gernsU^2( R1bXS/GJLWs@f@8{fem64$W^f'0p<,ky&Wa9VdLH)B\|]IcQ=!&VLBd>`?R *G-:o.lEi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49799	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	586	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58402 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (agb/52DE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-04-19 00:44:14 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49800	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:14 UTC	600	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:14 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58969 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:14 GMT Etag: "619-5494e7f71e280+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (agb/5366) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-04-19 00:44:14 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49802	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	376	OUT	GET /assets/images/home/utility_languages.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58331 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "5b0-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (agb/5346) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1456 Connection: close
2024-04-19 00:44:15 UTC	1456	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 13 08 06 00 00 00 72 50 36 cc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRrP6tEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49801	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	391	OUT	GET /global-elements/header/images/utility-header/search.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58342 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "5b9-549b126599f40+gzip+ident" Last-Modified: Wed, 01 Mar 2017 20:28:05 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1465 Connection: close
2024-04-19 00:44:15 UTC	1465	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0d 0a 09 20 76 69 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" vie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49803	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	383	OUT	GET /assets/images/home/utility_customer_service.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59008 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "51b-547dde9f44e80" Last-Modified: Mon, 06 Feb 2017 15:02:02 GMT Server: ECAcc (agb/52D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1307 Connection: close
2024-04-19 00:44:15 UTC	1307	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49804	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	361	OUT	GET /test/nav/images/gifts.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58972 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "3ee-560f10e9b5900+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:12 GMT Server: ECAcc (agb/5348) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1006 Connection: close
2024-04-19 00:44:15 UTC	1006	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49805	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	351	OUT	GET /ship/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58373 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "4f6e-597266cf37800" Last-Modified: Tue, 12 Nov 2019 13:42:56 GMT Server: ECAcc (agb/A429) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 20334 Connection: close
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 8e 08 06 00 00 00 44 d5 56 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 de 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRDVpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-04-19 00:44:15 UTC	3951	IN	Data Raw: fb df ef 28 2f af f8 fc 6d b7 dd ba f1 e5 97 d7 3d dc d0 d0 50 3c 71 e2 c4 3e f5 44 ae 5a d7 d3 d3 43 6b 6b 2b 5f f9 ca 57 fe fb a2 8b 2e fa fa b3 cf 3e db 31 82 04 5a ec 58 97 fe 38 5e e3 91 07 e8 25 91 db fd a7 88 de f5 63 bf 53 5d bd f8 78 35 49 b7 02 2e c9 dc ed ab 9d 97 db cd c8 6d 0f e6 1e 6b 35 1c d3 c1 68 a0 e3 ae ac a9 a9 ad 3f 5b 96 e9 2f 9e 48 e0 74 16 0a 04 94 e9 f3 69 4f 3e f9 93 e7 2c cb ba f3 5b df 59 f6 7d c3 30 66 7f fc 13 37 20 2d 3b eb da cd 57 33 0c 83 bc bc 3c ba ba ba 58 b1 62 05 8f 3c f2 08 25 25 25 5b ff e5 e1 87 7f b1 71 d3 a6 3b f7 ec d9 33 23 95 4a 61 9a 66 ec ae bb ee 7a 70 c2 84 09 8f 55 54 54 c4 9c 6c 6c 74 5d 97 a6 69 d2 72 b4 25 b1 ee a5 17 ff eb 33 b7 df be fe 95 57 5e 5b fe e7 3f ff f9 23 25 25 25 14 14 14 78 ad 90 3b 3a Data Ascii: (/m=P<q>DZCkk+_W.>1ZX8^%cS]x5I.mk5h?[/HtiO>,[Y}0f7 -;W3<Xb<%%%[q;3#JafzpUTTllt]ir%3W^[?#%%%x;:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49806	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	389	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58931 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "efd-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/53E5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3837 Connection: close
2024-04-19 00:44:15 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49807	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	554	OUT	GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59013 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "15d84-5affcd6633ac0+gzip+ident" Last-Modified: Wed, 23 Sep 2020 15:35:47 GMT Server: ECAcc (agb/5375) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c Data Ascii: (e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{val
2024-04-19 00:44:15 UTC	3	IN	Data Raw: 74 65 73 Data Ascii: tes
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 Data Ascii: t(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:func
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 41 Data Ascii: tend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.removeA
2024-04-19 00:44:15 UTC	7558	IN	Data Raw: 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 Data Ascii: in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49809	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	553	OUT	GET /global-elements/header/script/megamenu-v3.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58352 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "3458-5b39a71ac3540+gzip+ident" Last-Modified: Sun, 08 Nov 2020 15:53:17 GMT Server: ECAcc (agb/52BE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 13400 Connection: close
2024-04-19 00:44:15 UTC	13400	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 22 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 3d 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 63 28 22 2e 6d 6f 62 69 6c 65 2d 68 61 6d 62 75 72 67 65 72 22 29 2e 6f 6e 28 22 74 6f 75 63 68 20 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49808	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	555	OUT	GET /ContentTemplates/common/scripts/OneLinkUsps.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58950 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "e37-5875dc5375780+gzip+ident" Last-Modified: Thu, 25 Apr 2019 17:01:34 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3639 Connection: close
2024-04-19 00:44:15 UTC	3639	IN	Data Raw: 2f 2f 0d 0a 2f 2f 20 4f 6e 65 4c 69 6e 6b 28 29 20 6d 65 74 68 6f 64 20 66 6f 72 20 55 53 50 53 20 73 69 74 65 2e 20 20 43 6f 64 65 64 20 66 6f 72 20 73 74 61 67 69 6e 67 20 61 6e 64 20 6c 69 76 65 20 73 69 74 65 73 2e 0d 0a 2f 2f 0d 0a 2f 2f 20 48 69 73 74 6f 72 79 3a 0d 0a 2f 2f 20 20 20 20 61 72 69 76 61 72 64 20 20 20 3a 3a 20 20 31 30 2d 41 75 67 2d 32 30 31 31 20 20 3a 3a 20 63 72 65 61 74 65 64 0d 0a 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 66 75 6e 63 74 69 6f 6e 20 6b 44 65 62 75 67 20 28 73 4d 65 73 73 61 67 65 29 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: //// OneLink() method for USPS site. Coded for staging and live sites.//// History:// arivard :: 10-Aug-2011 :: created//----------------------------------------------------------------------function kDebug (sMessage)//------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49811	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	550	OUT	GET /global-elements/header/script/ge-login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58352 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "288b-5ebf9ca4d4940+gzip+ident" Last-Modified: Thu, 27 Oct 2022 01:09:17 GMT Server: ECAcc (agb/5388) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10379 Connection: close
2024-04-19 00:44:15 UTC	10379	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 70 66 73 6c 48 6f 73 74 20 3d 20 22 70 66 73 6c 2e 75 73 70 73 2e 63 6f 6d 22 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var pfslHost = "pfsl.usps.com"var lowEnv = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49810	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	556	OUT	GET /global-elements/lib/script/requirejs/require.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58400 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "440f-5057c2658f140+gzip+ident" Last-Modified: Wed, 15 Oct 2014 20:41:01 GMT Server: ECAcc (agb/5310) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 17423 Connection: close
2024-04-19 00:44:15 UTC	16383	IN	Data Raw: 2f 2a 2a 20 0a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 31 35 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 0a 76 61 72 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 3b 28 66 75 6e 63 74 Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var USPSRequireNS;(funct
2024-04-19 00:44:15 UTC	1040	IN	Data Raw: 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 73 72 63 2e 70 6f 70 28 29 2c 73 75 62 50 61 74 68 3d 73 72 63 2e 6c 65 6e 67 74 68 3f 73 72 63 2e 6a 6f 69 6e 28 22 2f 22 29 2b 22 2f 22 3a 22 2e 2f 22 2c 63 66 67 2e 62 61 73 65 55 72 6c 3d 73 75 62 50 61 74 68 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 6d 61 69 6e 53 63 72 69 70 74 2e 72 65 70 6c 61 63 65 28 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 2c 22 22 29 2c 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 2e 74 65 73 74 28 6d 61 69 6e 53 63 72 69 70 74 29 26 26 28 6d 61 69 6e 53 63 72 69 70 74 3d 64 61 74 61 4d 61 69 6e 29 2c 63 66 67 2e 64 65 70 73 3d 63 66 67 2e 64 65 70 73 3f 63 66 67 2e 64 65 70 73 2e 63 6f 6e 63 61 74 28 6d 61 69 6e 53 63 72 69 70 74 29 3a 5b 6d 61 69 6e 53 63 Data Ascii: t.split("/"),mainScript=src.pop(),subPath=src.length?src.join("/")+"/":"./",cfg.baseUrl=subPath),mainScript=mainScript.replace(jsSuffixRegExp,""),req.jsExtRegExp.test(mainScript)&&(mainScript=dataMain),cfg.deps=cfg.deps?cfg.deps.concat(mainScript):[mainSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49812	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	560	OUT	GET /global-elements/header/script/header-init-search.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58352 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "388-5b3971b6b3e40+gzip+ident" Last-Modified: Sun, 08 Nov 2020 11:54:25 GMT Server: ECAcc (agb/53AA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-04-19 00:44:15 UTC	904	IN	Data Raw: 76 61 72 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 2c 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 22 2c 0d 0a 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 22 67 6c 6f 62 61 6c 22 0d 0a 7d 29 2c 20 55 53 50 53 47 6c 6f Data Ascii: var USPSGlobals = USPSGlobals \|\| {};USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({ baseUrl: "https://www.usps.com/global-elements/lib/script", context: "global"}), USPSGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49813	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	364	OUT	GET /test/nav/images/business.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58966 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "4d2-560f10e7cd480+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:10 GMT Server: ECAcc (agb/52C8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1234 Connection: close
2024-04-19 00:44:15 UTC	1234	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 c3 95 5f 78 42 41 5f 5f 78 32 32 36 34 5f 5f 78 32 30 31 45 5f 5f 78 35 46 5f 31 22 0a 09 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_xBA__x2264__x201E__x5F_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49814	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	366	OUT	GET /test/nav/images/collectors.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58972 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "461-560f10f803ac0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:27 GMT Server: ECAcc (agb/52F5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1121 Connection: close
2024-04-19 00:44:15 UTC	1121	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 49 63 6f 6e 73 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Icons" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49815	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	376	OUT	GET /assets/images/home/printcustomsforms.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58308 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "9e7-5cfbe96b910c0+gzip+ident" Last-Modified: Mon, 01 Nov 2021 18:46:03 GMT Server: ECAcc (agb/5333) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2535 Connection: close
2024-04-19 00:44:15 UTC	2535	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 2e 31 36 20 31 30 33 2e 39 35 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 33 33 36 3b 7d 2e 63 6c 73 2d 32 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 29 3b 7d 2e 63 6c 73 2d 33 7b 63 6c 69 70 2d 70 61 74 68 3a 75 72 6c 28 23 63 6c 69 70 2d 70 61 74 68 2d 32 29 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 63 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 108.16 103.95"><defs><style>.cls-1{fill:#336;}.cls-2{clip-path:url(#clip-path);}.cls-3{clip-path:url(#clip-path-2);}</style><c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49816	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	375	OUT	GET /test/nav/images/cards-and-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58449 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "8a9-560f10e8c16c0+gzip+ident" Last-Modified: Fri, 22 Dec 2017 17:22:11 GMT Server: ECAcc (agb/5332) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2217 Connection: close
2024-04-19 00:44:15 UTC	2217	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49818	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	387	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58308 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/534C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2340 Connection: close
2024-04-19 00:44:15 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49817	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	404	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:15 UTC	1137	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58454 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 7250 Connection: close
2024-04-19 00:44:15 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49819	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	549	OUT	GET /assets/script/home/megamenu-additions.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58960 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "541-591d1c7fd1e40+gzip+ident" Last-Modified: Thu, 05 Sep 2019 17:37:53 GMT Server: ECAcc (agb/528A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1345 Connection: close
2024-04-19 00:44:16 UTC	1345	IN	Data Raw: 76 61 72 20 55 53 50 53 20 3d 20 55 53 50 53 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 74 6f 75 63 68 73 74 61 72 74 27 2c 20 7b 70 61 73 73 69 76 65 3a 20 74 72 75 65 7d 29 3b 0d 0a 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0d 0a 09 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 69 6d 67 27 29 2e 61 74 74 72 28 27 61 6c 74 27 2c 27 20 27 29 3b 0d 0a 09 09 61 3d 24 28 27 2e 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 20 61 27 29 2e Data Ascii: var USPS = USPS \|\| {};USPS.Require = USPS.Require \|\| {};document.addEventListener('touchstart', {passive: true});global_elements_jq(document).ready(function($){$('.international-addition img').attr('alt',' ');a=$('.international-addition a').

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49820	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	560	OUT	GET /assets/css/welcome/welcome-styles.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58382 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:15 GMT Etag: "6e5f-597b4cb57f540+ident" Last-Modified: Tue, 19 Nov 2019 15:34:05 GMT ntCoent-Length: 28255 Server: ECAcc (agb/52D0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 28255 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 2f 2a 20 46 4f 4e 54 20 53 54 59 4c 45 53 20 2a 2f 20 0d 0a 62 6f 64 79 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0d 0a 7d 0d 0a 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 4f 70 65 72 61 2c 20 53 61 66 61 72 69 20 31 30 2e 31 2b 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 2f 2a 20 46 69 72 65 66 6f 78 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 20 31 30 2d 31 31 20 2a 2f 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 7d 0d 0a 0d 0a 3a 3a 2d 6d 73 2d 69 6e 70 75 74 2d Data Ascii: /* FONT STYLES / body {font-size:16px;}::placeholder { / Chrome, Firefox, Opera, Safari 10.1+ /color: #000000; opacity: 1; / Firefox /}:-ms-input-placeholder { / Internet Explorer 10-11 */color: #000000; }::-ms-input-
2024-04-19 00:44:16 UTC	11872	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 2c 20 20 7b 0d 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 2e 61 72 74 69 63 6c 65 20 68 33 20 7b 0d 0a 09 09 63 6f 6c 6f 72 3a 23 33 33 33 33 36 36 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2e 66 65 61 74 75 72 65 64 2d 75 73 70 73 20 61 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 09 2e 6a 75 6d 62 6f 74 72 6f 6e 2e 70 72 65 6d 69 75 6d 20 2e 61 72 74 69 63 6c 65 3a 61 66 74 65 72 20 7b 0d 0a 09 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 Data Ascii: splay:none;}.featured-usps .article, {text-align: center;}.featured-usps .article h3 {color:#333366;display:block;}.featured-usps a {display:inline-block;}.jumbotron.premium .article:after {left: 0;transf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49821	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	561	OUT	GET /global-elements/footer/css/main-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1192	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58969 Cache-Control: private Cneonction: close Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "225c-522270bf185c0+ident" Last-Modified: Thu, 15 Oct 2015 16:19:43 GMT ntCoent-Length: 8796 Server: ECAcc (agb/52D3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8796 Connection: close
2024-04-19 00:44:16 UTC	8796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 2c 75 72 6c 28 22 68 Data Ascii: @font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49822	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	563	OUT	GET /global-elements/footer/css/footer-sb.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58298 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 3181 Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "c6d-5b371de5f09c0+ident" Last-Modified: Fri, 06 Nov 2020 15:28:47 GMT Server: ECAcc (agb/5353) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 3181 Connection: close
2024-04-19 00:44:16 UTC	3181	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 32 30 70 78 20 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 35 30 6d 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 Data Ascii: .global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49823	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	544	OUT	GET /assets/script/globals/jquery.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59016 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "15d84-5c237dc443280+gzip+ident" Last-Modified: Thu, 13 May 2021 15:34:18 GMT Server: ECAcc (agb/536B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 89476 Connection: close
2024-04-19 00:44:16 UTC	15254	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 73 65 2e 61 74 74 72 28 65 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 22 21 3d 22 3d 3d 3d 72 3a 21 72 7c 7c 28 74 2b 3d 22 22 2c 22 3d 22 3d 3d 3d 72 3f 74 3d 3d 3d 69 3a 22 21 3d 22 3d 3d 3d 72 3f 74 21 3d 3d 69 3a 22 5e 3d 22 3d 3d 3d Data Ascii: return t.test("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttribute("class")\|\|"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r\|\|(t+="","="===r?t===i:"!="===r?t!==i:"^="===
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 46 3d 53 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 45 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 2c 53 2e 72 65 61 64 79 28 29 7d 53 2e 66 6e 2e 72 65 61 Data Ascii: console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},S.readyException=function(e){C.setTimeout(function(){throw e})};var F=S.Deferred();function B(){E.removeEventListener("DOMContentLoaded",B),C.removeEventListener("load",B),S.ready()}S.fn.rea
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 2e 63 68 65 63 6b 43 6c 6f 6e 65 26 26 44 65 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 65 71 28 65 29 3b 68 26 26 28 72 5b 30 5d 3d 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2e 68 74 6d 6c 28 29 29 29 2c 50 65 28 74 2c 72 2c 69 2c 6f 29 7d 29 3b 69 66 28 66 26 26 28 74 3d 28 65 3d 78 65 28 72 2c 6e 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 6e 2c 6f 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 6f 29 29 7b 66 6f 72 28 73 3d 28 61 3d 53 2e 6d 61 70 28 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 4c 65 29 29 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b Data Ascii: .checkClone&&De.test(d))return n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),Pe(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t\|\|o)){for(s=(a=S.map(ve(e,"script"),Le)).length;c<f;c++
2024-04-19 00:44:16 UTC	1133	IN	Data Raw: 6c 69 64 65 55 70 3a 6c 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 6c 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 61 63 69 74 79 3a 22 68 69 64 65 22 7d 2c 66 61 64 65 54 6f 67 67 6c 65 3a 7b 6f 70 61 63 69 74 79 3a 22 74 6f 67 67 6c 65 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 53 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 72 2c 65 2c 74 2c 6e 29 7d 7d 29 2c 53 2e 74 69 6d 65 72 73 3d 5b 5d 2c 53 2e 66 78 2e 74 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 30 2c 6e 3d 53 2e 74 69 6d 65 72 73 3b 66 6f 72 28 74 74 3d 44 Data Ascii: lideUp:lt("hide"),slideToggle:lt("toggle"),fadeIn:{opacity:"show"},fadeOut:{opacity:"hide"},fadeToggle:{opacity:"toggle"}},function(e,r){S.fn[e]=function(e,t,n){return this.animate(r,e,t,n)}}),S.timers=[],S.fx.tick=function(){var e,t=0,n=S.timers;for(tt=D
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f 76 65 41 74 Data Ascii: end({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.removeAt
2024-04-19 00:44:16 UTC	7557	IN	Data Raw: 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 3d Data Ascii: in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49824	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:15 UTC	544	OUT	GET /assets/script/globals/popper.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58335 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "4a5c-5c1ab1e365980+gzip+ident" Last-Modified: Thu, 06 May 2021 15:39:34 GMT Server: ECAcc (agb/52C2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19036 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 2f 2a 0d 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0d 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0d 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 Data Ascii: /* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&de
2024-04-19 00:44:16 UTC	2653	IN	Data Raw: 74 29 3e 6c 28 6f 2e 72 69 67 68 74 29 2c 67 3d 6c 28 61 2e 74 6f 70 29 3c 6c 28 6f 2e 74 6f 70 29 2c 75 3d 6c 28 61 2e 62 6f 74 74 6f 6d 29 3e 6c 28 6f 2e 62 6f 74 74 6f 6d 29 2c 62 3d 27 6c 65 66 74 27 3d 3d 3d 69 26 26 68 7c 7c 27 72 69 67 68 74 27 3d 3d 3d 69 26 26 63 7c 7c 27 74 6f 70 27 3d 3d 3d 69 26 26 67 7c 7c 27 62 6f 74 74 6f 6d 27 3d 3d 3d 69 26 26 75 2c 79 3d 2d 31 21 3d 3d 5b 27 74 6f 70 27 2c 27 62 6f 74 74 6f 6d 27 5d 2e 69 6e 64 65 78 4f 66 28 69 29 2c 77 3d 21 21 74 2e 66 6c 69 70 56 61 72 69 61 74 69 6f 6e 73 26 26 28 79 26 26 27 73 74 61 72 74 27 3d 3d 3d 72 26 26 68 7c 7c 79 26 26 27 65 6e 64 27 3d 3d 3d 72 26 26 63 7c 7c 21 79 26 26 27 73 74 61 72 74 27 3d 3d 3d 72 26 26 67 7c 7c 21 79 26 26 27 65 6e 64 27 3d 3d 3d 72 26 26 75 29 3b Data Ascii: t)>l(o.right),g=l(a.top)<l(o.top),u=l(a.bottom)>l(o.bottom),b='left'===i&&h\|\|'right'===i&&c\|\|'top'===i&&g\|\|'bottom'===i&&u,y=-1!==['top','bottom'].indexOf(i),w=!!t.flipVariations&&(y&&'start'===r&&h\|\|y&&'end'===r&&c\|\|!y&&'start'===r&&g\|\|!y&&'end'===r&&u);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49825	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	373	OUT	GET /test/nav/images/shipping-supplies.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58392 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "9f8-560f10eaa9b40" Last-Modified: Fri, 22 Dec 2017 17:22:13 GMT Server: ECAcc (agb/53A1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2552 Connection: close
2024-04-19 00:44:16 UTC	2552	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 75 74 6c 69 6e 65 64 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Outlined" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49826	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	360	OUT	GET /international/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58976 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "5675-56819dacea480" Last-Modified: Fri, 23 Mar 2018 19:58:58 GMT Server: ECAcc (agb/535E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 22133 Connection: close
2024-04-19 00:44:16 UTC	15280	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-19 00:44:16 UTC	6853	IN	Data Raw: 4c 4f 0b ca 02 c2 0a 8f 45 e5 f1 a1 32 f4 8e 1b 93 42 a1 c8 d0 69 6b f2 c6 bd 07 30 67 76 01 de da f2 20 6e bb ed 76 fc f9 b7 bf c1 37 6f be 0e 3d bd 83 b8 eb d1 ed a8 64 1c f0 e2 b3 cb b1 64 4e 0e 3e d8 dd 8a 12 06 78 93 d5 8c f7 76 76 30 30 0d c2 62 b3 e1 ed 1d 6d 68 6c e9 83 d3 61 e1 be 44 21 ae 86 e5 f0 84 35 d7 17 90 62 bb bc 17 4d 8d 7b f0 a3 b5 b7 35 fc 78 f5 57 97 b0 3f 07 27 bb d1 9a 08 9c 5a a6 2f 2e 93 9f 55 69 b8 85 6b 02 43 8e ca dd 5c 13 85 9e 4d e0 02 c1 c1 7e 13 15 8e d6 10 1d 62 a6 8d ea 61 df 29 51 e3 69 38 58 48 5a 0c 5d 56 a7 28 8a 55 1d ae 20 21 c1 59 e2 0d 3a b2 ac e6 11 1e f5 12 52 c6 d0 1a 01 a4 2c ad c1 0d 35 a1 60 24 b7 50 cd 6f 34 48 67 a4 d7 17 82 d7 e3 c3 8d 97 cf 86 b5 64 36 fa 0e 1c 80 b7 a3 0d 85 05 65 a8 58 5c 84 bf dc f7 Data Ascii: LOE2Bik0gv nv7o=ddN>xvv00bmhlaD!5bM{5xW?'Z/.UikC\M~ba)Qi8XHZ]V(U !Y:R,5`$Po4Hgd6eX\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49827	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	352	OUT	GET /store/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 84562 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "4c19-60e102c507580" Last-Modified: Wed, 03 Jan 2024 20:08:06 GMT Server: ECAcc (agb/53BC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19481 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c3 00 00 00 a7 08 06 00 00 00 ac 1a e8 e6 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 Data Ascii: PNGIHDRIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"
2024-04-19 00:44:16 UTC	3098	IN	Data Raw: f4 6e 17 8a dd 2c f0 b5 b7 93 7c d3 8f 30 25 26 86 dc d3 5d df c0 b6 2f 9d 49 c0 e9 c2 5a 34 0d 59 15 84 48 23 81 56 77 a4 ef b2 92 99 3b b2 93 d3 a1 45 1b 05 b4 8e a3 0f e0 6f aa 5c b6 76 15 ea 7e 6e 95 cb d6 2e 27 34 92 6d 09 ca 6c d1 1a f6 19 9a 11 2c ab 51 a5 9b c9 5a ae 9e 1b 2b 04 54 3f 8a ad 61 64 44 4a 0a 6b cb fc ca 65 6b 0b d5 c4 01 87 3d 39 da 94 12 86 c6 b2 b9 8f 0a 21 be 39 56 78 a7 29 36 16 5f eb 1e f6 fc f8 16 2c 39 39 48 51 a1 d3 9d 91 04 42 fb 5f 76 bb 31 25 24 92 78 49 a8 e1 ec 6e d8 c2 b6 af 9c 4d 60 68 08 5b 71 11 01 8f 27 a4 9e b1 5c b6 47 1d 93 41 48 e2 7f 4b 1b ea 96 1d e8 ef 3e 08 b4 0e a5 bd 61 97 e8 a6 45 c3 99 8f 62 1b cc 57 cb 57 ab 79 99 9a 50 37 49 dc 47 c0 50 b0 b3 eb cb a8 f9 98 9a 18 23 a9 59 58 7d 8e f0 73 95 cb d6 de 87 Data Ascii: n,\|0%&]/IZ4YH#Vw;Eo\v~n.'4ml,QZ+T?adDJkek=9!9Vx)6_,99HQB_v1%$xInM`h[q'\GAHK>aEbWWyP7IGP#YX}s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49828	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	355	OUT	GET /business/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58364 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "4e01-5b1b89d32bc40" Last-Modified: Thu, 15 Oct 2020 17:02:33 GMT Server: ECAcc (agb/537D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 19969 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d2 00 00 00 aa 08 06 00 00 00 d8 e8 11 ee 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 86 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21
2024-04-19 00:44:16 UTC	3586	IN	Data Raw: fd 28 e5 b7 66 89 77 31 2f 25 19 4c 5b 54 51 b1 54 59 a3 d4 2f 98 9f e2 8f 6c 55 40 a4 48 41 f9 3c 9b 54 32 67 cb 65 f2 d9 d5 72 6e 73 9a e7 55 5e 1c e9 06 32 d6 28 20 52 31 62 aa a9 eb 58 d4 c9 ec 53 2f fb 47 9b 87 92 e2 05 4a bb f3 99 f2 f6 4c 57 73 40 18 66 40 db f9 00 38 92 1e 7b 66 a0 e6 e6 e6 0a fa cc 65 00 b0 b4 e2 06 bb 6d db 36 b0 34 fa d2 97 be 24 01 e3 95 57 5e 91 02 00 66 bd 11 27 9b 9a 30 9d 98 c9 70 e4 a8 c4 3c 2c 9d 94 6b 79 89 c5 26 96 97 e3 9b df f8 57 e8 12 61 9c 39 56 83 bd af be 88 8e b6 e6 64 0d 07 93 09 a6 8c 4c e4 17 94 48 29 42 7c ac 95 d8 e9 f5 5d af c3 e3 0f 49 63 94 1c 99 0e b8 0a 0a 51 3d 7f 21 26 56 4c 42 80 64 1c ff 3e 1c a0 60 90 3f f9 e4 93 83 52 8d ae ef 20 16 2a e0 47 a1 df 2d 96 fa a2 3a df 6f 7f 2e a0 c9 6c b3 45 69 f8 Data Ascii: (fw1/%L[TQTY/lU@HA<T2gernsU^2( R1bXS/GJLWs@f@8{fem64$W^f'0p<,ky&Wa9VdLH)B\|]IcQ=!&VLBd>`?R *G-:o.lEi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49830	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	353	OUT	GET /manage/go-now.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58404 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "1f5a-568020d7be540" Last-Modified: Thu, 22 Mar 2018 15:35:09 GMT Server: ECAcc (agb/52DE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8026 Connection: close
2024-04-19 00:44:16 UTC	8026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e3 00 00 00 aa 08 06 00 00 00 5f d9 f8 e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 81 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDR_tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49829	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	367	OUT	GET /assets/images/home/tracking.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1136	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58971 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "619-5494e7f71e280+gzip+ident" Last-Modified: Fri, 24 Feb 2017 22:46:18 GMT Server: ECAcc (agb/5366) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1561 Connection: close
2024-04-19 00:44:16 UTC	1561	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 55 53 50 53 5f 78 35 46 5f 42 6c 75 65 5f 78 35 46 5f 32 39 35 43 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="USPS_x5F_Blue_x5F_295C" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49831	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	543	OUT	GET /assets/script/globals/bootstrap.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58374 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "e2de-5c1ab1e459bc0+gzip+ident" Last-Modified: Thu, 06 May 2021 15:39:35 GMT Server: ECAcc (agb/533C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 58078 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 67 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 76 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 70 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6d 74 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 69 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 74 72 69 67 67 65 72 41 72 72 61 79 5b 6f 5d 2c 73 3d 5f 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 72 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 73 29 67 28 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 73 29 29 29 2e 68 Data Ascii: this._element),g(this._element).addClass(vt).removeClass(pt).removeClass(mt);var i=this._triggerArray.length;if(0<i)for(var o=0;o<i;o++){var r=this._triggerArray[o],s=_.getSelectorFromElement(r);if(null!==s)g([].slice.call(document.querySelectorAll(s))).h
2024-04-19 00:44:16 UTC	2	IN	Data Raw: 2e 64 Data Ascii: .d
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 67 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 6e 7c 7c 22 22 7d 2c 74 2e 5f 67 65 74 53 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 65 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 76 61 72 20 65 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 Data Ascii: ata("padding-right");g(document.body).removeData("padding-right"),document.body.style.paddingRight=n\|\|""},t._getScrollbarWidth=function(){var t=document.createElement("div");t.className=ae,document.body.appendChild(t);var e=t.getBoundingClientRect().width
2024-04-19 00:44:16 UTC	8927	IN	Data Raw: 29 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 74 68 69 73 2e 5f 73 65 6c 65 63 74 6f 72 29 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3d 5f 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 29 3b 69 66 28 6e 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 29 2c 65 29 7b 76 61 72 20 69 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 69 66 28 69 2e 77 69 64 74 68 7c 7c 69 2e 68 65 69 67 68 74 29 72 65 74 75 72 6e 5b 67 28 65 29 5b 6f 5d 28 29 2e 74 6f 70 2b 72 2c 6e 5d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 Data Ascii: ),[].slice.call(document.querySelectorAll(this._selector)).map(function(t){var e,n=_.getSelectorFromElement(t);if(n&&(e=document.querySelector(n)),e){var i=e.getBoundingClientRect();if(i.width\|\|i.height)return[g(e)[o]().top+r,n]}return null}).filter(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49832	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	541	OUT	GET /assets/script/welcome/welcome.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58942 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "46d-592e871363840+gzip+ident" Last-Modified: Thu, 19 Sep 2019 14:05:13 GMT Server: ECAcc (agb/5363) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1133 Connection: close
2024-04-19 00:44:16 UTC	1133	IN	Data Raw: 09 2f 2a 20 77 68 65 6e 20 75 73 65 72 20 67 6f 65 73 20 74 6f 20 61 20 6e 65 77 20 73 6c 69 64 65 20 66 6f 63 75 73 20 6f 6e 20 74 68 61 74 20 73 6c 69 64 65 20 2a 2f 09 0d 0a 20 20 20 20 20 0d 0a 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 73 6c 69 64 65 27 29 2e 6f 6e 28 27 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 29 2e 72 65 6d 6f 76 65 41 74 74 72 28 27 74 61 62 69 6e 64 65 78 27 29 3b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 27 29 2e 61 74 74 72 28 27 61 72 69 61 2d 68 69 64 64 65 6e 27 2c 20 27 74 72 75 65 27 29 3b 0d 0a 09 09 09 24 28 27 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2e 61 63 74 69 76 65 Data Ascii: /* when user goes to a new slide focus on that slide */ $('.carouselslide').on('slid.bs.carousel', function (e) {$('.carousel-item').removeAttr('tabindex');$('.carousel-item').attr('aria-hidden', 'true');$('.carousel-item.active

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49834	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	544	OUT	GET /assets/script/welcome/jq.roughly.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 54239 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "acc-60a35a5c59dc0+gzip+ident" Last-Modified: Wed, 15 Nov 2023 19:09:51 GMT Server: ECAcc (agb/A40A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2764 Connection: close
2024-04-19 00:44:16 UTC	2764	IN	Data Raw: 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 76 61 72 20 63 6f 75 6e 74 65 72 44 61 74 61 2c 20 69 6e 64 65 78 3b 0d 0a 20 20 09 63 6f 75 6e 74 65 72 44 61 74 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 72 6f 75 67 68 6c 79 22 29 3b 0d 0a 09 66 6f 72 20 28 69 6e 64 65 78 20 3d 20 30 3b 20 69 6e 64 65 78 20 3c 20 63 6f 75 6e 74 65 72 44 61 74 61 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 6e 64 65 78 29 20 7b 0d 0a 0d 0a 09 09 76 61 72 20 73 74 61 72 74 44 61 74 65 20 09 3d 20 22 4e 6f 76 65 6d 62 65 72 20 32 30 2c 20 32 30 32 33 20 30 30 3a 30 30 3a 30 30 20 55 54 43 22 2c 0d 0a 20 20 20 20 20 20 20 Data Ascii: window.addEventListener('load', function () {var counterData, index; counterData = document.getElementsByClassName("roughly");for (index = 0; index < counterData.length; ++index) {var startDate = "November 20, 2023 00:00:00 UTC",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49833	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	615	OUT	GET /assets/images/welcome/premium/id-phoneblur.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48594 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "1d24b-615aecbfb49c0" Last-Modified: Tue, 09 Apr 2024 19:19:11 GMT Server: ECAcc (agb/530D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 119371 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:16 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: f0 3b a3 58 c5 bc 16 76 fe 92 d9 1f 05 c2 34 eb ea 7f 51 ba 47 62 55 73 04 00 41 b8 00 19 03 70 64 db 30 6a 0c 98 cc 18 83 11 80 19 30 21 10 1e bd 89 fc d1 75 79 df 33 bc cf 7e ed e7 7b 7d 4f 83 d6 b6 47 5d 82 3a 3a ef 07 ab eb 5f 33 ab c3 bf 53 f2 3c d7 58 e9 7c 5e 8f 67 f2 bd 9f 77 70 47 79 e9 f2 ae fe 8f 94 5f 63 c8 f8 eb 97 57 2b 71 49 5a b0 cb 67 53 72 89 5d 6b 0b 77 47 24 b3 c7 34 ce 1d ba 56 d9 53 2d 53 d8 68 a6 b6 9a b9 ab de 75 aa 8a 4e b9 d1 f6 e7 6d ae 53 bb 73 dd 2a 6e 17 13 b7 2f c9 48 b0 32 9b 56 b6 29 f4 4e 21 e3 1b 2a 4a 49 1b ec b6 9c e6 ec 90 e5 ec 37 3f 48 f1 de 14 b8 1a 50 82 af b2 15 d3 6b 5e 9a f3 b0 2a 67 70 46 15 1a 16 9b 10 94 99 58 50 3a 97 2e 4e d1 81 dd 8e 01 6d 6e 92 c9 23 69 18 d2 22 44 05 02 93 55 51 94 b8 43 95 6e 06 60 22 Data Ascii: ;Xv4QGbUsApd0j0!uy3~{}OG]::_3S<X\|^gwpGy_cW+qIZgSr]kwG$4VS-ShuNmSsn/H2V)N!JI7?HPk^*gpFXP:.Nmn#i"DUQCn`"
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 48 ad d1 96 f4 34 5d 16 43 ac ae d2 64 c6 a5 51 b4 55 a9 76 ec 2f 93 bc a5 fb 56 1d d4 2c 76 56 55 50 25 e9 5a 41 ee 7b 08 7f 97 df 45 a5 8b 16 43 d1 1f ff da 00 08 01 03 00 01 05 00 12 1f a6 a8 91 0d 11 a3 d2 60 99 19 ee 36 26 34 44 0c 81 89 0c 81 10 34 57 5f 71 ea d1 1a 40 91 05 91 04 15 a8 90 c6 87 59 1a 23 45 e8 64 68 d0 d4 11 07 b0 ad 04 49 1a 34 59 13 a5 44 b4 7a 34 2f 4a d6 20 6a 47 d0 5a 59 e9 77 03 b1 63 b4 48 83 b4 87 ac 74 ed 12 23 4e e8 1d 87 76 3b 31 b9 27 5a d6 4c 7d 04 a4 5a 34 55 68 d0 c8 20 82 08 20 83 b4 ed 12 3b 45 51 21 21 54 ed 2b 52 a8 c7 43 1d 60 a5 4a 63 47 c6 7c 48 78 d2 2d 51 d4 55 2a 84 8b 23 22 32 d6 0b d4 6b af 69 5e 82 45 4c 68 a2 20 ba 33 23 2a 92 c8 75 29 58 29 58 15 46 8b a2 f5 92 06 88 15 45 51 a3 b4 ed 3b 48 20 ed 3b 60 Data Ascii: H4]CdQUv/V,vVUP%ZA{EC`6&4D4W_q@Y#EdhI4YDz4/J jGZYwcHt#Nv;1'ZL}Z4Uh ;EQ!!T+RC`JcG\|Hx-QU#"2ki^ELh 3#u)X)XFEQ;H ;`
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 96 67 17 c8 5b 8c dd 78 6f 99 d6 f8 f8 5f 29 c7 db b6 f2 ec 78 d7 2d f6 0e 3c 18 b9 7f 30 fd ee 6a 73 5d cb 6f c9 b6 fe bb fa b7 9c f3 bb 6c 7f 8c 2a b8 fc 8b f8 e5 cc 71 f8 fc 8b 80 de f0 99 b7 7b bf db da dc 9a b9 87 79 dc f6 bb 8e e5 8a c3 52 41 65 06 dd ff 00 db f7 3e c7 f6 1e 67 bb e4 d5 78 5c 39 56 6c 7c f7 f1 63 c5 b9 75 b7 fe 06 f8 27 16 f7 7f c5 af 18 dc fd 37 bd fe 15 65 e5 69 e3 1f c0 2e 23 c2 29 f4 67 f1 23 77 e3 3f 45 e1 fe 0b f2 bc de 7f 0f fe 0a 79 ff 00 90 ef f8 4f e0 1f 2f e3 3b da ff 00 0e 39 2d bf d1 7e 7d fc 05 f3 0f 28 de 7f 20 3f 88 5b 2f b4 f8 0e 3b f8 25 f6 0f 8e ec bc 3b f8 6d f6 9f 08 fe e4 f1 ef b1 ff 00 93 bf 54 ee be 8b fe 4a f8 67 8e 7d 19 e5 3e 71 b2 fe 42 f9 6f f1 bb 9a f2 1f 22 fe 18 f8 67 93 f8 27 d6 9f ce 3e 2b fc 9f d3 Data Ascii: g[xo_)x-<0js]ol*q{yRAe>gx\9Vl\|cu'7ei.#)g#w?EyO/;9-~}( ?[/;%;mTJg}>qBo"g'>+
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: ad ca b4 8e e4 77 f4 f9 1c fc b0 2c 86 db 37 6d 16 68 29 9a 1d 73 76 95 cc 9b a6 54 57 38 b7 06 3c ed 18 f7 0d 95 dc 14 dc 41 5c ad 94 dc 4b fd c3 2b 9c ae e0 ae 77 0b 3c 15 ce 57 39 8f 3c aa e7 2b 9e 0f 94 ae 64 cf dc 14 dc 31 67 16 61 66 2f 94 59 9a 16 6e 95 cd 05 73 28 a6 52 99 ca 66 92 b9 ba 2c 85 32 4b 57 48 b5 cb 5e 47 72 d9 24 77 92 d7 1d c7 71 e4 75 2d 90 b6 43 e5 16 68 3e 52 b9 64 ab ee 29 b5 77 33 71 0b 22 e6 fc 75 da be 5d c2 df 15 7c 87 1b c7 6d fd 97 76 0c 8b bb 6f 69 31 c9 5a 4a 6a 08 86 99 5b c3 c7 91 a3 16 59 58 b2 4b 59 24 fa b7 17 cd 6e 1f 04 2e 13 0a 3f 9f 5f 62 7f e4 bc 27 71 67 63 0d a1 bb 4d 6b d1 d1 77 5a ec 5d 4d ae 1a d6 b9 72 bb b7 d5 24 25 07 0f 6e cd f6 fe 68 7f 1c b9 0f f0 df cb df bc fc 5b 77 c3 7d 8d ca f9 d6 c3 c8 73 79 87 Data Ascii: w,7mh)svTW8<A\K+w<W9<+d1gaf/Yns(Rf,2KWH^Gr$wqu-Ch>Rd)w3q"u]\|mvoi1ZJj[YXKY$n.?_b'qgcMkwZ]Mr$%nh[w}sy
2024-04-19 00:44:16 UTC	4	IN	Data Raw: a5 03 8e c4 Data Ascii:
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: e9 39 70 91 33 7b 45 ef 3f 6a 73 3e 5f cd 45 eb ba 7d 2e 9a 1a ad 26 a2 37 ee e9 b5 52 d3 6a a3 ea db 9f 05 b1 6e 51 06 06 e7 08 bd c7 01 0a 95 a8 f6 d7 b4 f9 34 e5 ca 2d f2 6e 79 ac b1 aa d6 5e 85 ab fa 8d 6f 29 1a 43 3d 38 d3 03 2b b6 a0 06 a5 8c ee c6 3c 74 95 b1 28 1e 23 a2 d4 7e 6e f2 bb 51 e6 3c d7 94 f2 5e 77 cb a1 ed 8b 97 39 88 bb a7 e6 d6 6f de 16 6e 42 71 b7 2b 5a 8d 3c 74 f7 0c e0 49 f5 62 c6 cf 14 9e 03 5d 0f 74 e9 f5 1a 2d 3d 8b f7 2c 69 ae 58 b5 76 f8 bb 31 76 fc 2c 5b 97 92 3c 37 b5 42 d0 f4 2c b1 99 b8 65 68 b4 a3 5f 53 40 79 ce a6 52 bd ac 85 a8 59 e5 3a 99 ca ed 8d 15 b9 5d bd ab b6 04 7c da 78 c6 13 f3 82 fc 51 31 e1 e2 31 07 91 f3 5f ca 4e 53 3f 78 4f dc 1c f3 51 c8 b4 22 d6 aa d6 86 c5 db ba 7d 2d ed 55 cb 96 f5 17 c7 04 ed f0 d8 9c Data Ascii: 9p3{E?js>_E}.&7RjnQ4-ny^o)C=8+<t(#~nQ<^w9onBq+Z<tIb]t-=,iXv1v,[<7B,eh_S@yRY:]\|xQ11_NS?xOQ"}-U
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 10 7a b8 a9 5e db d5 5d 94 a3 1b 9c ca 7a 56 96 66 fe 96 f0 00 75 98 ab f6 a3 43 28 5c 01 b7 85 1f 5a 44 dd d0 f3 ed 7d b2 e6 af c7 19 1f 10 b5 46 34 8c a6 26 3f c6 00 fd aa 00 4b 31 9a b7 a7 9c 84 78 62 38 7a 94 40 20 97 f3 45 e8 5f 7a e4 9e fd d0 db e3 9f 29 bd 3e 5f af 94 70 8d bd 59 e3 b4 fb a3 70 37 5c 94 89 20 55 80 cf b5 46 df 7a b5 73 8b cf 19 00 73 3b ab f3 56 63 ac bd 18 c4 c2 50 26 4d 42 4f 13 83 89 2a cd cd 3c 89 91 89 e1 2c c2 71 38 63 91 3e 2a 17 67 53 28 98 5d 04 01 85 3b c2 3e df 97 05 bf 5c 46 e6 9f 55 37 31 b7 7e dd 20 e0 55 8c 5c 1c f2 57 b9 1f 3e b2 6c 6b 2d 34 8c 5c 18 ca 27 e9 9c 25 81 8c b2 3d 98 a7 25 91 7e b4 7c c8 d7 07 44 12 ca 86 89 81 7a d1 63 de 87 11 77 43 61 4e 7c 36 ae 23 8e 3d a8 bf 5a 25 62 13 07 74 48 34 21 1a 87 65 d7 Data Ascii: z^]zVfuC(\ZD}F4&?K1xb8z@ E_z)>_pYp7\ UFzss;VcP&MBO<,q8c>gS(];>\FU71~ U\W>lk-4\'%=%~\|DzcwCaN\|6#=Z%btH4!e
2024-04-19 00:44:16 UTC	4685	IN	Data Raw: 9e 5f 66 33 85 86 91 12 9c 4c 81 06 5c 12 e1 80 79 b8 a8 0e 1f 51 67 96 6b b9 1d f9 e9 2f 5b b1 a8 10 d1 69 cf a5 2b 96 7d 68 99 9e 3e 11 03 02 3c ce dc 52 8c 31 2a c7 35 e7 ba fe 4f a7 b3 a9 d4 5f d2 db 8c b9 65 a3 77 d5 d3 b7 a8 25 6f 8d e3 1a f9 64 69 2f d9 5e cd fc d1 f7 24 e1 77 9b eb 7d 1b ba b9 d9 b7 e9 c2 57 ae e9 af 42 66 30 0e 22 0c a3 83 d1 03 b0 c4 f7 15 1b 11 a9 25 ca 81 02 8a 31 18 11 f6 a8 db dc f5 d8 a4 1e 85 82 9d a0 7c d5 15 51 91 04 c4 e2 3c 0a 8c a1 2c cf 52 3c 7f b4 28 7a ca 39 d6 87 a9 70 e6 cd df 8a 62 58 6c 0a 10 99 71 42 f2 f8 c5 44 c4 03 31 50 0e 05 b1 1b 95 bf 44 98 bb 49 9d cc 48 d8 76 28 91 28 dc 81 fd 90 58 87 d9 bd 46 52 87 0b d4 18 8a 3e f0 80 00 92 d8 c4 d5 b6 55 71 40 89 c7 37 c7 70 07 72 9d a6 12 91 3e 59 6c 2f 8e f0 f4 Data Ascii: _f3L\yQgk/[i+}h><R1*5O_ew%odi/^$w}WBf0"%1\|Q<,R<(z9pbXlqBD1PDIHv((XFR>Uq@7pr>Yl/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49835	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:16 UTC	620	OUT	GET /assets/images/welcome/featured/passport-scanner.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:16 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48594 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:16 GMT Etag: "1524d-615aecad95f00" Last-Modified: Tue, 09 Apr 2024 19:18:52 GMT Server: ECAcc (agb/53F0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 86605 Connection: close
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 75 6a ad 36 76 95 61 77 15 c0 8c f6 28 ac d9 57 e9 de fe 88 47 78 87 d2 15 50 40 55 3f b2 91 e9 ce aa 1e f7 d7 8c 89 b7 37 6e 91 48 fa 9c 0d bf c9 39 f7 1e c9 be fe 80 6a 47 56 3b 89 3e ed 08 20 82 6a 08 f6 4f 97 a5 14 71 12 9a d0 3a 4a c5 ed d2 bd 08 53 b3 89 21 30 d5 5c 31 52 89 a8 26 94 e2 89 af 4b 58 fe 38 d6 56 ed 90 c5 6b 69 6d 73 35 bb 1c c8 ba 57 f4 2b 44 d2 5a 71 fb 75 ed b2 b2 db 6c 6e 51 98 16 e5 a5 e4 b2 05 1e a3 a4 03 bb 0d 00 3d 6b 45 21 52 3d 55 5d df 88 95 c4 e5 c5 ef 24 92 b0 90 7c 56 cb f6 5f b7 5a 77 61 ef 55 5e ad 35 51 84 10 43 a1 90 04 f7 97 74 02 aa 38 a9 e8 91 c0 02 7b a0 81 e9 34 75 1e c5 dd 8b 87 21 45 44 13 7d 9e 51 50 45 f2 3d 05 95 c8 7f dd db 3e eb 21 37 57 f6 6d ad c0 9e 3f 55 3a 91 51 69 7b 3d a9 93 30 e9 45 e1 e4 0f a1 be Data Ascii: uj6vaw(WGxP@U?7nH9jGV;> jOq:JS!0\1R&KX8Vkims5W+DZqulnQ=kE!R=U]$\|V_ZwaU^5QCt8{4u!ED}QPE=>!7Wm?U:Qi{=0E
2024-04-19 00:44:16 UTC	2	IN	Data Raw: 95 33 Data Ascii: 3
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 01 5c fe 19 77 fc 34 ba 06 eb e2 8d cb f8 3c b5 8e 55 f6 37 3a be 76 1c d6 2f 21 ed 97 3f de b2 77 7c de d5 8a d2 35 8d 93 63 cb 6e 5b 18 a8 1e 32 b1 9f 4f c1 ed be 52 8a 4d 28 35 c4 7d 75 f1 e6 0e de e6 cf 13 e2 0c 4c d8 fd 76 6c 7f 8d 7c 89 82 92 e7 46 d6 35 fc b6 0f c9 16 f0 6e 19 df 07 ee 7f 94 56 11 79 53 59 1c 5e c2 ce ce 74 6c 69 07 88 ec 3e 42 4f 21 c9 8e 0a b4 4d 25 c7 f0 4b 46 fe 23 49 c4 b7 e9 62 ba 34 66 7a 4f ed ec d2 17 5e 44 f1 4a b4 8e 4a 41 51 b2 e3 32 39 67 ea 1e 04 c0 e2 af a5 99 91 47 cb bc 93 35 8a 6b 92 e3 2b e7 b9 9b 51 c3 47 ae eb 98 d8 a1 c8 da 5f d8 49 69 6d a6 c2 6c f5 09 a6 63 f2 0f 35 38 49 1a ec 74 cf 07 29 3b 03 87 db 0f bf 71 ab 94 2e 6d c4 33 b1 d6 b7 18 7c 88 7b 4b c3 81 71 69 66 5d cd 8a 5b 9f 90 be 4a 27 b5 f3 2b 5c 53 Data Ascii: \w4<U7:v/!?w\|5cn[2ORM(5}uLvl\|F5nVySY^tli>BO!M%KF#Ib4fzO^DJJAQ29gG5k+QG_Iimlc58It);q.m3\|{Kqif][J'+\S
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: 57 6b 6d 8a c1 59 6f f6 09 47 6f a2 7f 6a 9d 91 f5 4f 83 6c 94 da 86 99 db 8e cc 3d 91 ff da 00 08 01 01 01 06 3f 00 28 be fa 40 e2 bc 6b 12 69 4b 89 fa 30 c1 2b 91 15 d7 8d 40 de 0d 3a 8f b3 e8 51 c3 3a 70 27 08 f0 15 81 21 45 1c 68 f9 8d 49 14 83 53 5e 0b 48 3d 6a 0e f9 d9 d9 2c 7b 65 fb f4 ee 2c 8c 9d 21 4a 87 10 39 56 d3 dc 36 77 4f f9 79 9d 18 b9 6b 5c 53 13 99 c7 df 56 97 b1 4b ea 36 e2 31 ac 2a a1 23 11 4d ee bd b2 17 1b 9b 15 f9 96 c6 bf 99 09 f8 86 1c 46 75 8c 8f 68 3f 89 4e 55 38 61 7a a6 7a 8e 5c 28 90 e7 a7 2d 47 0a 40 e7 f9 b0 f8 8d 12 af 24 67 e6 34 34 97 0e 00 12 7d d4 7e 2c 97 07 12 3c 6b 07 14 ff 00 58 fb eb e3 23 8a a9 a4 f5 ce 5c 09 a8 da e9 4f c7 88 5e bc 6a 12 5c 4a 34 51 c4 aa 65 45 57 3e 74 5a 09 04 15 38 9a 27 5b 90 9c d6 9c 75 11 Data Ascii: WkmYoGojOl=?(@kiK0+@:Q:p'!EhIS^H=j,{e,!J9V6wOyk\SVK61*#MFuh?NU8azz\(-G@$g44}~,<kX#\O^j\J4QeEW>tZ8'[u
2024-04-19 00:44:16 UTC	16383	IN	Data Raw: a3 a9 55 3e 33 87 8f 85 62 48 0d e0 3f 6e 35 69 76 c0 d7 3e ca e2 3b 98 5a e5 d0 e7 c4 e0 e0 1d a4 b5 da 4a 21 42 0a 13 8d 77 1d b4 f2 6e fb 73 3b 81 92 35 8c ed eb e6 c0 22 32 b1 cd 2e 73 af 1b 39 05 a7 48 63 62 d0 d6 b4 64 e7 00 4f f5 cd cb b7 24 9b 74 99 d0 9b b8 f7 0d c6 5b db 70 db 58 24 8e 06 41 ac 07 23 1d 2b 8b 83 d4 ca d4 d6 75 f9 aa f2 f9 f6 f6 d6 af bc 99 d3 4b 6d 69 1f a5 6e c7 3c a9 11 46 09 d0 d5 c8 2e 14 80 94 50 50 e1 4d ed ed 86 d6 0b cd de e6 d2 ea ea de ce e2 e2 2b 76 cc db 48 8c b2 31 af 9d cc 61 91 c0 69 63 15 5c e2 1a 31 35 b0 58 8e e0 93 b9 fb a7 b8 2d 19 b4 5e 77 4b c3 9f bb 40 f9 03 66 df a0 b6 de 2d df 0c d3 31 9e 5b 79 b6 dd d2 2d 51 f9 5d 13 8b 2b 74 bf ec de ee de f7 6f d0 af d4 1b 6f 9d ec 5e f9 ed 9b 96 4c fd bb 76 2c 6b ec Data Ascii: U>3bH?n5iv>;ZJ!Bwns;5"2.s9HcbdO$t[pX$A#+uKmin<F.PPM+vH1aic\15X-^wK@f-1[y-Q]+too^Lv,k
2024-04-19 00:44:16 UTC	4688	IN	Data Raw: 32 03 20 12 a5 dc 77 c9 22 b4 b3 b7 69 90 b6 42 01 c0 64 87 2a b9 b2 d9 9a d8 b6 88 1c 43 33 6f ab a4 a3 95 53 0a 2f 81 e0 3a 37 28 8d e4 97 68 70 42 a0 e6 38 a5 7c 41 7d 2d 2b a7 f1 fa bf 17 82 51 4f ed 3e 27 80 e6 3c 21 06 9b bc d9 34 80 c3 aa 40 07 c4 ce 3e ea 8e e2 34 2d 90 2a 75 ac 4f 80 a5 55 fa 0d 7d bf 47 8d 02 a3 0a 12 b7 86 69 ca 83 d9 8b d8 15 be 15 25 ac a1 5e d0 84 1c ea 58 9c c3 a1 c4 e8 e8 b4 8b d5 47 dd 4a 88 0e 63 a1 a0 55 7f 75 70 40 b8 9a c3 33 97 4a 1c f1 15 24 80 f9 9e 34 c5 cf 1a 68 c5 73 2e eb 4b c4 85 c3 3a 0a 53 9d 5c 0b 3b 66 cd dc 7d b4 e7 5f ec 6f 4f 34 81 a3 f3 a0 07 fc 6d 18 0e 62 a3 77 a6 e6 38 e0 e6 38 21 04 60 41 1c c1 a6 01 09 2d 79 08 53 2a b3 63 ad 43 6d 63 2d 37 37 04 7d 40 d4 5b 75 8c 2d 85 8c 68 0e 73 42 12 94 e7 47 Data Ascii: 2 w"iBdC3oS/:7(hpB8\|A}-+QO>'<!4@>4-uOU}Gi%^XGJcUup@3J$4hs.K:S\;f}_oO4mbw88!`A-yS*cCmc-77}@[u-hsBG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49836	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	626	OUT	GET /assets/fonts/4a9c62ab-b359-4081-8383-a0d1cdebd111.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1267	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 58357 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "b641-504fd43115680" Last-Modified: Thu, 09 Oct 2014 13:18:02 GMT Server: ECAcc (agb/5332) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 46657 Connection: close
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 b6 41 00 0f 00 00 00 01 95 e0 00 01 00 00 00 00 b2 40 00 00 04 01 00 00 09 2a 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 18 2d d5 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 40 00 00 00 40 03 0f 0e ae 66 70 67 6d 00 00 02 f8 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 30 00 00 00 10 00 00 00 10 00 12 00 09 67 6c 79 66 00 00 04 40 00 00 91 8c 00 01 49 68 12 7b 34 d4 68 65 61 64 00 00 95 cc 00 00 00 36 00 00 00 36 e9 5c 32 97 68 68 65 61 00 00 96 04 00 00 00 21 00 00 00 24 07 6f 04 83 68 6d 74 78 00 00 96 28 00 00 02 e2 00 00 06 18 49 94 2d db 6b 65 72 6e 00 00 99 0c 00 00 0b 1e 00 00 1d 4c 1c cf 17 ab 6c 6f 63 61 00 00 a4 2c 00 00 04 Data Ascii: wOFFA@*OS/2XV`-cmapt8cvt @@fpgm8gasp0glyf@Ih{4head66\2hhea!$ohmtx(I-kernLloca,
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: c0 58 11 4c c3 c2 e4 5e 81 41 0a e2 88 f1 31 b0 07 b3 b3 e2 b6 0f dc dd 9b 42 4f 0b ee ea c3 b7 84 50 5d 6d be 50 8f 27 38 e0 f3 0e 27 ec 3e 97 d5 98 36 7b c2 29 9f 7f 38 14 2c 3b ad 3e 57 57 eb 7f d9 22 5e ab a3 b3 d3 d5 e1 f4 77 ec e2 ff e8 68 f7 e2 3f 14 dc 67 61 ad f2 03 15 17 c4 b4 2a 7b 96 5c 81 20 f2 76 e2 ce af 7c eb 02 5b 6d af 56 2c 6f c3 be 63 4d 3b c7 5a 69 72 d0 48 5e 2d 31 98 57 40 7a bb 12 38 8d 3b 9d 5a 9d fc e0 c3 73 73 ad 98 11 f1 4b 6a e1 11 b1 af c8 fb d4 98 7a ad d2 0d 12 72 a1 a1 2e 19 ee da 40 4a 8a f3 79 62 b1 53 61 50 8f bb 41 df 4e dc 26 36 8c 0b d5 c5 58 07 75 ef 99 38 ef 96 33 ea 3d f3 3c a1 70 06 5a 3f a3 24 e1 40 93 0a 55 24 b1 67 21 3e 62 80 36 f1 4b e0 73 f2 e7 d3 ec a5 29 5c 2b a8 ed ec b7 84 aa 8f 26 72 97 9e 40 d6 cd 3b Data Ascii: XL^A1BOP]mP'8'>6{)8,;>WW"^wh?ga*{\ v\|[mV,ocM;ZirH^-1W@z8;ZssKjzr.@JybSaPAN&6Xu83=<pZ?$@U$g!>b6Ks)\+&r@;
2024-04-19 00:44:17 UTC	13891	IN	Data Raw: c6 7d fe 3a 13 61 1e bc df 65 e2 30 13 43 4c bc ce c4 65 4c 6c e2 d3 d7 a4 fc 98 2d 2c 2d 18 e0 8f fe a0 b9 a1 ab b0 b2 7b 24 71 03 e9 73 ec f2 55 60 4e a1 94 3b ad ec cb d2 cf 43 7f 3b 13 ad 7c 9a 5b c3 e7 a2 0f 49 e2 7e 79 7d 59 5e 8f f1 b9 a8 91 b3 85 b8 0d a3 3c 79 9e 37 09 d5 aa af 31 11 67 62 88 89 4b 99 78 8a 4d d7 de 21 89 5b d1 74 4d cb b1 d9 9c b0 45 ec a2 57 88 6d 7f 21 86 96 ea 84 fd a8 a8 d7 bb 97 36 be 47 7f f2 fc a0 6c 15 88 1f fe a4 dc b7 d2 62 6d 81 ec ad 4c 61 d9 0a c3 bb 23 20 f7 d8 b0 1a 5d 14 6b 32 a7 8e ba 34 ef 14 07 f2 39 36 2d 78 80 35 12 f3 6c 52 34 cf 3a a7 18 d9 b6 aa a1 90 82 a1 90 b2 0c 16 d3 15 39 5f 2d 80 5a b0 80 6c b6 88 62 24 4b 58 2c b8 6c ba ac d8 89 41 06 02 20 ec d3 1c e1 fa 36 25 f5 80 b0 7b 0e 1c 6c 29 64 08 d0 da Data Ascii: }:ae0CLeLl-,-{$qsU`N;C;\|[I~y}Y^<y71gbKxM![tMEWm!6GlbmLa# ]k2496-x5lR4:9_-Zlb$KX,lA 6%{l)d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49838	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	626	OUT	GET /assets/fonts/d5af76d8-a90b-4527-b3a3-182207cc3250.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1267	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 58964 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "e542-504fd434e5f80" Last-Modified: Thu, 09 Oct 2014 13:18:06 GMT Server: ECAcc (agb/532C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 58690 Connection: close
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 e5 42 00 0f 00 00 00 02 04 0c 00 01 00 00 00 00 e1 40 00 00 04 02 00 00 09 2b 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 12 2b a8 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 03 43 0e fb 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 19 00 09 67 6c 79 66 00 00 04 48 00 00 c0 b0 00 01 b7 c8 7d 95 00 6e 68 65 61 64 00 00 c4 f8 00 00 00 36 00 00 00 36 e9 5a 31 79 68 68 65 61 00 00 c5 30 00 00 00 21 00 00 00 24 07 5e 04 87 68 6d 74 78 00 00 c5 54 00 00 02 d6 00 00 06 18 20 00 38 11 6b 65 72 6e 00 00 c8 2c 00 00 0a fe 00 00 1c c2 08 f7 06 d0 6c 6f 63 61 00 00 d3 2c 00 00 03 Data Ascii: wOFFB@+OS/2XV`+cmapt8cvt HHCfpgm8gasp8glyfH}nhead66Z1yhhea0!$^hmtxT 8kern,loca,
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 43 21 5d b3 22 c3 f5 23 45 c3 a9 b6 81 06 87 33 dc d3 34 b0 b0 60 6d d9 c5 e7 f7 6d 9c e3 af 9b b3 71 a0 65 69 7f 83 55 9f 68 ef aa ef 1e 8d 86 47 52 81 79 7d 13 bb a3 0b ce eb ed dd be b8 d9 dd 32 af 4d c8 2e 1e ab cb 84 3f 40 8b be 6b 96 4f 19 a2 6e a5 27 99 72 3e 2c 36 9d 0f e3 94 d8 f7 70 39 2b 8b f0 06 ce 71 f4 65 32 d0 c4 5a a9 20 83 77 04 6f 4a 3f 50 15 8c cb 3c a8 7a f7 1d 9c 42 93 3d 4c d7 60 73 aa 1a 25 3c f9 6a d3 a4 f4 4f 66 dc 6c ea ca b3 b6 7c 57 7e 89 67 ee da 19 8e 8a d2 6f 57 ba 2b da a5 24 78 44 12 19 47 7c 54 69 57 53 32 a4 e8 69 32 55 28 b3 ea 33 6a c9 cb b3 cb e8 86 cd b8 69 08 23 e6 90 b8 3b 3d c3 5d 57 0f a5 42 33 ba 96 24 c6 35 d9 9c df d2 17 76 e8 87 cf 24 21 a6 66 f0 fe d4 c9 05 4a 3c 9c b7 48 88 07 bd 48 33 fb da 42 f2 a0 48 8b Data Ascii: C!]"#E34`mmqeiUhGRy}2M.?@kOn'r>,6p9+qe2Z woJ?P<zB=L`s%<jOfl\|W~goW+$xDG\|TiWS2i2U(3ji#;=]WB3$5v$!fJ<HH3BH
2024-04-19 00:44:17 UTC	2	IN	Data Raw: 7c ae Data Ascii: \|
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 3d a4 17 84 da f7 f1 e7 b0 73 1c 14 4c 5c 60 27 49 2d fd 08 60 32 0a fe 51 03 3f a4 f2 58 15 12 52 0b a5 94 6d 86 d2 8b a1 1b e8 0c db c8 eb 41 74 ae e6 86 f4 f8 af c9 4e d5 e3 25 99 54 db 40 d4 66 af eb 69 1c 18 2f da 50 fe ee 2d e1 bf 26 37 4d a5 d6 74 55 d7 f4 6f 19 68 59 d9 17 35 ab 33 ed 5d b5 dd 13 b1 ba 91 54 68 b8 77 cb ae 82 a6 0b c9 4c 47 0a 9a 46 b7 76 2d d9 3e d9 ec 6e 19 6e 33 ce 58 13 d1 20 e3 92 fe f9 22 5c f0 08 42 c3 f0 21 99 21 ba 77 91 f6 07 81 a3 52 84 4e b8 82 da 08 1d 6f 7e 3b a0 6d 4e 1a ed 1a f2 db 3d a5 f7 b7 9b bc 37 ae 25 5a 22 26 66 3f 37 3c 03 71 5a 32 fa ca 19 06 b6 71 ec ad 33 0c 3c c9 f1 69 66 08 10 74 47 03 53 19 8d 4c 77 34 73 4d 9b 41 77 cc bf 08 7f 3e 49 63 ff 7f 88 0a 1a 86 3f f5 19 21 a9 3d 2a 34 13 66 20 80 90 ff c3 Data Ascii: =sL\`'I-`2Q?XRmAtN%T@fi/P-&7MtUohY53]ThwLGFv->nn3X "\B!!wRNo~;mN=7%Z"&f?7<qZ2q3<iftGSLw4sMAw>Ic?!=*4f
2024-04-19 00:44:17 UTC	9539	IN	Data Raw: 06 5c 04 38 90 b4 2a 15 ac e8 46 5d bc 07 be a4 87 75 f1 1e 58 24 1e 20 67 3c 70 8e 78 94 71 28 1b a1 ec 84 72 1d 69 bd 85 99 21 9b 05 87 ed ff 6f 67 57 17 1a c5 15 85 ef dc bb 93 ed 66 76 b3 c9 d4 cd 76 d3 c4 a0 81 1a ad ba da 4d 22 da 82 d1 90 a0 06 ad 79 58 a5 01 5f 8a c2 2a 84 68 9e f4 2d 56 28 15 1f 2c 94 56 1a 5a 44 28 fd a1 85 be f5 61 5b 4a 09 56 e8 82 ad 58 a8 58 f6 21 0f 52 f0 41 22 82 82 25 66 3d 3f f7 ec ce ec 6e 0c f8 70 98 93 21 7b 67 ee 77 67 ce 3d f7 cc 39 df cd 75 18 18 45 17 13 25 69 f1 95 4e 61 fc a8 a5 c7 a1 14 50 67 2a 9f cf 2f 5f 3b 7a 74 ff 58 bc 37 ee 75 79 bd eb 8f 1f a7 9d 26 f5 fb 85 c2 b7 e3 07 77 ef 89 44 0e 44 cc 6b eb f7 8d 2f 8f c1 e3 5c 1b a3 d7 9d 4c 68 84 32 0d 75 a3 cc 69 83 39 a2 78 4c 96 39 ed 2a 65 b9 80 7b ca 2b 26 Data Ascii: \8F]uX$ g<pxq(ri!ogWfvvM"yX_h-V(,VZD(a[JVXX!RA"%f=?np!{gwg=9uE%iNaPg/_;ztX7uy&wDDk/\Lh2ui9xL9e{+&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49840	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	527	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	854	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:17 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 650 Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2789 Expires: Fri, 19 Apr 2024 00:49:17 GMT Accept-Ranges: bytes Set-Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg; path=/; expires=Fri, 19-Apr-24 01:14:17 GMT; domain=.fonts.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8768dd80ab390709-ATL
2024-04-19 00:44:17 UTC	515	IN	Data Raw: 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 72 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 74 6f 53 74 72 69 6e 67 28 61 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 72 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 3b 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 6c 65 28 63 2d 2d 29 69 66 28 6b 5b 63 5d 29 70 3d 70 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 27 5c 5c 62 27 2b 65 28 63 29 2b 27 5c 5c 62 27 2c 27 67 27 29 2c 6b 5b 63 5d 29 3b 72 65 74 75 72 Data Ascii: eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]\|\|e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);retur
2024-04-19 00:44:17 UTC	135	IN	Data Raw: 65 74 7c 68 72 65 66 7c 61 70 70 65 6e 64 43 68 69 6c 64 7c 77 69 6e 64 6f 77 7c 70 72 6f 74 6f 63 6f 6c 7c 68 74 74 70 7c 66 61 73 74 7c 66 6f 6e 74 73 7c 6e 65 74 7c 61 70 69 54 79 70 65 7c 63 73 73 7c 70 72 6f 6a 65 63 74 69 64 7c 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 7c 68 65 61 64 7c 6c 69 6e 6b 7c 62 6f 64 79 7c 7c 6c 6f 63 61 74 69 6f 6e 27 2e 73 70 6c 69 74 28 27 7c 27 29 2c 30 2c 7b 7d 29 29 Data Ascii: et\|href\|appendChild\|window\|protocol\|http\|fast\|fonts\|net\|apiType\|css\|projectid\|createElement\|head\|link\|body\|\|location'.split('\|'),0,{}))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49837	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	626	OUT	GET /assets/fonts/5b4a262e-3342-44e2-8ad7-719998a68134.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1267	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 58380 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "c9e5-504fd432098c0" Last-Modified: Thu, 09 Oct 2014 13:18:03 GMT Server: ECAcc (agb/53CB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 51685 Connection: close
2024-04-19 00:44:17 UTC	15135	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 c9 e5 00 0f 00 00 00 01 c5 18 00 01 00 00 00 00 c5 e0 00 00 04 05 00 00 09 2c 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 1a 2b a3 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 48 00 00 00 48 04 6b 0d 63 66 70 67 6d 00 00 03 00 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 38 00 00 00 10 00 00 00 10 00 16 00 09 67 6c 79 66 00 00 04 48 00 00 a4 e1 00 01 77 f4 d2 5a ae 68 68 65 61 64 00 00 a9 2c 00 00 00 36 00 00 00 36 e9 23 09 93 68 68 65 61 00 00 a9 64 00 00 00 21 00 00 00 24 07 45 04 7f 68 6d 74 78 00 00 a9 88 00 00 02 ea 00 00 06 18 32 dd 34 05 6b 65 72 6e 00 00 ac 74 00 00 0b 3e 00 00 1d 58 16 44 17 a8 6c 6f 63 61 00 00 b7 b4 00 00 03 Data Ascii: wOFF,OS/2XV`+cmapt8cvt HHkcfpgm8gasp8glyfHwZhhead,66#hhead!$Ehmtx24kernt>XDloca
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 04 6c fa 15 a3 93 c9 74 72 cd de de 9e 9d ab da db 3a 56 95 b6 04 b3 c5 70 78 98 e9 80 a1 d0 50 3a 80 e3 7f 90 e5 0b 3e 2b b9 e4 b6 25 d6 4e 29 da a6 58 91 ce e7 d1 32 d0 e8 5d 26 b1 20 13 8b 96 59 ab ca da fc 80 5d 56 4f 97 d5 d3 8d 26 2a 31 69 d7 3b e6 d8 94 d5 f3 6e 9a bf 50 08 ca c4 b5 28 e4 ae 92 9b 18 28 fb 08 f6 ad 05 fa d6 42 7d 8b af b1 40 df 5a a0 6f 2d d0 b7 16 a1 f0 1b 24 0b 57 f8 77 57 af 0d 30 e7 af 2c df 47 18 b8 89 d0 ee 6c ea e0 ac e2 dc 94 dd b2 77 56 49 67 5b ba 42 4d b3 a0 8b ff a7 9a ba ec b2 d2 e7 e5 95 43 05 e0 c3 cd a5 1f 33 7d 0d 17 56 fe 4a ec b9 fb e5 a5 22 ad 97 6a eb 53 22 b5 25 8f 06 59 32 a9 e6 52 cd c5 47 9a b6 88 93 26 f0 90 f0 bf c4 87 2b e7 d2 99 a2 8e ad c6 b0 73 3c 56 9a e7 b4 b4 a9 23 b3 f0 9f 72 f6 e0 e5 17 de 91 94 Data Ascii: ltr:VpxP:>+%N)X2]& Y]VO&*1i;nP((B}@Zo-$WwW0,GlwVIg[BMC3}VJ"jS"%Y2RG&+s<V#r
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 15 1a e6 16 13 90 6a c6 0b 0c dc c2 6a c6 0b 26 50 c2 8f 44 78 e0 02 99 f1 42 27 bb f5 bc 5c c4 e6 15 26 53 a3 be 89 73 aa 95 41 c6 a8 24 86 bc 02 0c 36 a6 d1 4c 7c 2d ee 75 a0 59 c3 19 0c 5a 81 11 75 33 61 ef d4 a2 3e b6 b8 b8 7c 75 51 ff ea f2 55 e3 f9 c7 1e 7b a3 5b 6f 59 fe 81 fe d1 49 3c 58 64 a7 5c 0a 73 56 af e7 c6 2b ac 91 99 c8 2c 9e c8 c8 13 4b 03 da 4b 6c 40 7b 19 83 9d c9 14 5c b5 44 c2 e3 17 d2 b5 13 32 29 0e 15 a2 2a 3f 03 c5 09 66 d8 2f 71 fc c2 cb 00 3c 43 f1 0b b5 dc 39 59 45 65 ae 15 ab 76 0d 34 5f a7 d9 88 48 a1 6e 45 ca b3 00 f9 39 e3 cc 53 34 87 49 33 76 b2 08 b6 83 7e be 1e 81 f8 87 a5 8e 41 06 f7 4c 53 12 1c 2f cc ae d4 ba 60 70 90 4c 7a 7c e1 7d ef 33 bc 3b d3 bb 6f 5b 30 52 e9 40 22 54 b1 b0 75 ab f1 7c 36 fb a7 91 e4 de bd cb 0f Data Ascii: jj&PDxB'\&SsA$6L\|-uYZu3a>\|uQU{[oYI<Xd\sV+,KKl@{\D2)*?f/q<C9YEev4_HnE9S4I3v~ALS/`pLz\|}3;o[0R@"Tu\|6
2024-04-19 00:44:17 UTC	3784	IN	Data Raw: 85 cc 5b 44 ef 45 d4 e4 a3 27 1f ad 05 fd 32 4b c8 6e 29 d9 2d e5 3b ff 17 99 e5 dc 83 e5 ed 32 85 68 2d e4 ac 88 0c d6 c0 5f cb b7 62 e6 ae 63 5f 1b f0 b2 89 fc 36 73 56 c2 8e 4b e0 6c dd 08 c8 60 1b fd b6 b1 83 ed 4d 32 3b c9 b1 94 3e bb b9 8f 7b 38 df 83 97 72 9e e5 e8 ab a0 cf 3e b2 d8 8f 9f 4a 7c 1d 68 93 39 c8 0e 3c 70 3d e8 f1 70 df 3c f4 f7 b0 8f 2a bc 56 e1 ad 9a 4c ab c9 a5 1a 4f 35 68 aa 29 03 cc aa 19 f8 03 98 b6 5a 30 00 00 00 01 00 00 01 86 00 7c 00 07 00 69 00 04 00 01 00 00 00 00 00 14 00 00 02 00 05 65 00 02 00 01 78 9c e5 57 4b 6f 1b c9 11 6e af b8 7e ad 65 58 7b c8 c3 08 90 be 24 b6 b1 d2 88 d4 ca 5a 4a 87 05 04 af 2c 2b b0 25 41 a2 77 b1 97 05 9a 33 4d b2 77 e7 b5 d3 3d a4 a9 53 4e 39 e5 27 04 b9 6f 8e 41 7e 41 90 53 10 20 40 8e b9 25 Data Ascii: [DE'2Kn)-;2h-_bc_6sVKl`M2;>{8r>J\|h9<p=p<*VLO5h)Z0\|iexWKon~eX{$ZJ,+%Aw3Mw=SN9'oA~AS @%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49839	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	642	OUT	GET /assets/images/welcome/scroll-red.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/assets/css/welcome/welcome-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58805 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "604-591bbfef60080" Last-Modified: Wed, 04 Sep 2019 15:38:26 GMT Server: ECAcc (agb/52E3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1540 Connection: close
2024-04-19 00:44:17 UTC	1540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 be 49 44 41 54 68 05 e5 9b 5b 68 1c 55 18 c7 bf 73 ce 6e 0a 6b 42 1a 34 97 4d 22 b2 66 a5 14 b4 11 fa a0 42 6d 8d 08 2a 08 82 82 18 11 d2 2a 4d 15 f1 41 7a 41 41 0b de 40 aa 7d f0 c9 cb 83 a6 0f a6 6f 82 20 e8 5b 7a 83 a6 42 9f 4b 71 d3 34 cd 26 7b 89 a1 94 d4 a4 6d 32 73 fc be b3 3b eb ee ec cc ec ce ec 4e 76 67 73 20 99 99 73 f9 be ef 37 67 e6 cc cc 39 ff 65 e0 53 92 fd bb 23 59 b8 b5 47 4a 7d b7 64 72 07 03 d8 01 12 fa 24 83 0e 00 86 7f 94 e4 0a 93 b0 02 0c d2 12 e0 2a 93 ec 2a 63 fc 72 0f 74 5e 60 8b 97 57 73 75 ea fb 1f e3 a8 5f 4a 0f 0d f5 c0 aa 7c 03 a1 5e 41 ab 4f 80 94 6d 9e ac 33 76 0f db 5d c2 93 f1 Data Ascii: PNGIHDR<<:rsRGBIDATh[hUsnkB4M"fBmMAzAA@}o [zBKq4&{m2s;Nvgs s7g9eS#YGJ}dr$crt^`Wsu_J\|^AOm3v]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49842	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	625	OUT	GET /assets/images/welcome/featured/featured-small-biz-10.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 21204 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "d633-5b83fdb39c500" Last-Modified: Wed, 06 Jan 2021 18:54:44 GMT Server: ECAcc (agb/5310) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 54835 Connection: close
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 2e 00 00 ff e1 03 fb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: bc bc c0 90 eb e1 3f 2c 9a 9a af 37 3f c2 7d 2a 43 97 0e 47 0f 96 4f 98 92 cf 0b 44 9b 9b 5f 9d 46 cd 7d b4 bc a7 2f 99 c4 e6 62 e0 f3 58 a7 8e 28 14 ae 54 41 a4 c5 95 ad b9 c7 96 09 b7 89 ad 74 3f 0a 23 2f 3f c6 65 c7 1e 3f d4 45 96 aa 8f 3e c8 fc 51 da 22 ab e4 11 35 9b cc 7d 76 e8 6b 8d bd a9 3b 2d 7a d7 f8 83 78 dc ed b5 f8 43 ec 16 c7 c7 c3 6c 39 f9 8c 19 23 9a 44 6c 49 24 31 6c d9 71 17 8c 7e 50 0a 59 81 b9 d2 f5 a6 cc 81 66 e3 a2 09 72 9b 83 47 b7 53 66 17 1f a6 b3 5e 92 48 72 f8 8e 77 27 1a 01 8d 8d 93 9d 23 c3 08 5d 9b 55 63 44 17 41 d0 e9 ad 69 b8 b9 cb 70 d0 48 06 e7 89 6c 07 b5 6e 29 34 b2 bb a2 1b 78 7d ad f8 0e 83 16 1c 36 79 63 8d 7c d7 b7 9a eb db ae b5 3f 9b 24 38 eb 2a 02 eb 0b 11 2a 8d 49 4b 9d 47 bb ad 56 8b 35 65 9b e9 9d 0e f6 d0 38 Data Ascii: ?,7?}CGOD_F}/bX(TAt?#/?e?E>Q"5}vk;-zxCl9#DlI$1lq~PYfrGSf^Hrw'#]UcDAipHln)4x}6yc\|?$8*IKGV5e8
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: af 7d 95 e1 61 66 8a 33 ef 51 58 cf 56 7a 63 8f cd c6 9b 2f 16 25 83 2e 35 2e 0a 0b 06 b6 b6 22 b4 a7 f9 2a 36 95 ab b6 71 29 c8 9f a6 b4 4a 7e c3 ca 27 61 ba dd d5 4e 63 a9 26 ac 16 2c 74 52 58 9b 00 05 c9 3d c2 8a e1 7a 77 38 a7 d5 10 86 5b 5d 61 bd d9 41 ea 5b 4b 06 1d d7 ad b9 6e 92 cb d4 ce a8 77 a6 bd 33 95 c8 18 f2 e5 c4 7c b8 a4 27 c8 c4 59 23 89 a6 b7 6b 6f 75 6d be c0 35 ad e7 05 2f 15 9b 37 d1 c7 83 1a 64 46 0c 72 40 d1 2a 4c 02 68 cb 8d be e1 c0 ed 37 0d fb 22 b1 f8 b8 d3 80 56 37 0e 48 b4 af f8 8f f5 51 be 60 ab da 47 b8 51 56 e7 0e 72 fd 0c ab bb 36 16 11 a7 22 2d ba 0d 82 ea 19 ba 4a 17 a8 53 a8 3a de b8 39 5d af d7 1e 1d 0e 8a c5 7f ab b3 34 b9 3c 6c bc 54 a1 fd 0d 30 4c c6 03 ce 84 5c e3 2a 0f db 57 3e 06 1d 88 da df 5d 0d 44 9c af 0d ca Data Ascii: }af3QXVzc/%.5."6q)J~'aNc&,tRX=zw8[]aA[Knw3\|'Y#koum5/7dFr@Lh7"V7HQ`GQVr6"-JS:9]4<lT0L\*W>]D
2024-04-19 00:44:17 UTC	5686	IN	Data Raw: c0 ed 3f 6f c0 d5 56 e2 21 05 76 b6 f8 47 6f 6d ea db 93 18 0d 6f 0b 74 3d 6d ec 35 c3 cd 23 71 5b 47 d0 9f 6d 29 1c 35 a1 54 e1 47 08 fc 81 b1 8f 69 d4 55 29 e0 e6 63 3b a2 28 f1 77 51 60 f2 2e 81 ae bd 6c 45 4c cc ac 0b 14 b7 79 5d 3e ea 24 25 f5 cf 98 0e 2c 49 a6 05 9c 6c 73 d5 7b 2a 41 89 95 0d 9d 40 72 34 16 d7 4f 6d 18 58 95 d4 6d 25 7d bd 95 0c d1 e4 aa 91 15 9e dd b7 a9 2d 59 81 79 7e 37 23 3a 01 2b aa c7 97 18 b2 6d 16 dc 07 61 34 12 24 90 a1 57 52 1d 0d 98 1e a0 d6 a1 a0 cb 98 ee 99 c0 db a2 90 de 11 ec 22 a8 f2 5c 7b 15 69 a2 20 4c 83 c4 07 e2 b5 74 70 73 be 3b 23 9f d4 fa 75 cb 47 1a be c0 e3 23 08 f6 8e ea a3 2a ab c6 5b 52 c7 a8 a9 7c d3 24 25 8f 85 d7 a8 a4 54 92 4c 73 20 d0 a8 fb 6b b3 d5 5d 59 51 ae d2 79 fe 8f 8d d7 ea 27 de 3d c5 2c 68 Data Ascii: ?oV!vGomot=m5#q[Gm)5TGiU)c;(wQ`.lELy]>$%,Ils{A@r4OmXm%}-Yy~7#:+ma4$WR"\{i Ltps;#uG#[R\|$%TLs k]YQy'=,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49843	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	616	OUT	GET /assets/images/welcome/featured/pp-cedarwood.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48595 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "1b8a0-615aecad95f00" Last-Modified: Tue, 09 Apr 2024 19:18:52 GMT Server: ECAcc (agb/53BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 112800 Connection: close
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:17 UTC	1	IN	Data Raw: 0f Data Ascii:
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 36 03 88 be ec 22 a2 90 35 3e 7c 92 06 43 53 63 20 98 9c d4 26 ea f7 10 6c 35 cd 6c 61 cb b5 41 2b ab b9 b0 fb ab 36 a7 87 b1 d2 31 cd 6b 9b 21 96 32 d3 da e4 0a 3d 53 5e 1a a6 94 39 d6 2b 86 b8 40 0b 6b 57 ee 27 3e a7 f7 c2 a5 e7 63 f5 09 05 47 f6 00 8f 80 41 12 9c 7a c7 f7 3b ed 8d 4a 7e b0 e0 8b 82 aa 72 c7 91 dd 1f dd 69 a7 21 a5 76 39 08 5e 9b 5a 44 6a 4c 99 4a c9 43 5d 64 bb d9 4d d8 dd 7c f8 76 a6 d1 71 d3 da 5f b6 d8 69 92 17 b5 81 e4 b1 ed ca 38 2e 8b ee 23 ea 05 49 e6 df 35 8c 1c 20 bf e4 8d 14 11 f2 77 d9 fd e3 38 51 7d e8 84 d6 17 17 34 01 0d 72 43 0c 8f 7e ba 5f 54 48 64 95 46 f7 3c 57 7b 02 37 9c 4b 47 50 88 20 80 bb 13 98 d6 1d 5c 4d 7b 6c 6b 23 c7 ed 4f cb 27 ca f5 00 53 76 96 db 7f a6 e2 03 da 19 91 ad 20 bc 8e d7 bf cd 51 56 4f d6 a3 3f Data Ascii: 6"5>\|CSc &l5laA+61k!2=S^9+@kW'>cGAz;J~ri!v9^ZDjLJC]dM\|vq_i8.#I5 w8Q}4rC~_THdF<W{7KGP \M{lk#O'Sv QVO?
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 62 68 7f 6f d6 82 39 16 40 63 08 12 72 17 46 75 51 9e 83 af 80 51 65 cf 74 92 36 5b 4d 86 78 da 27 f6 d2 86 c6 f8 af 4f 04 14 af 49 42 6a 36 65 16 2a 5b 02 79 6f 57 7c f6 a8 5c b3 4e 59 40 7c 52 68 ee 30 80 4c 30 4b 33 ff 00 81 37 d1 e1 bc 2a e7 2a df 73 ce 0b a5 d3 53 8d ef 61 e1 5b 6b 56 c6 c3 57 59 dc 7f 89 6c d9 62 fd 97 df 07 45 b2 97 49 43 77 e8 49 78 31 a2 cf cb 24 36 4f 8d 58 ef e0 1f 53 a1 8a 41 62 19 71 e9 33 d3 78 0d 6b dc 1d 24 b5 60 a7 23 96 d2 ad a1 35 86 39 ab 76 c6 b3 4d ae fa 76 3c 89 a3 dc f1 86 46 38 9b 00 2f 89 bf 97 f3 06 1f b7 e2 8c ff 00 e7 6f 82 e6 52 d7 5a 9d ac d0 ec 4d c6 e8 76 1e 8b 74 b3 a1 ab 93 d1 b3 53 bd 82 bb a0 8a e9 2c d7 57 c7 ef 1b e2 3f 74 e2 40 37 88 c5 08 96 2b f4 63 b2 b7 76 6b c9 ca a9 47 8e 4c c9 e5 b3 5e 38 7d Data Ascii: bho9@crFuQQet6[Mx'OIBj6e[yoW\|\NY@\|Rh0L0K37*sSa[kVWYlbEICwIx1$6OXSAbq3xk$`#59vMv<F8/oRZMvtS,W?t@7+cvkGL^8}
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 1a 31 5d 2e 4d a2 06 10 af 83 ef 7a 2d 8a c5 62 b1 59 bb 65 34 39 55 33 55 44 3b ba ab 14 73 52 5c 10 e1 8e 56 0c 05 aa 5d 6d 2d de 26 ea 71 6d d2 8b 5d 7d a4 6d 11 df 9e a6 06 1e a4 e2 4e 4d d4 48 20 c2 f2 0e 60 c7 9c 81 b5 be 1a 93 5a c1 33 ab 32 cb 3a e8 7e 56 cb c4 a2 5c de d3 fe 45 29 32 b7 ab 3b fb aa a0 43 7a 5e 4b 59 de da 14 4b cc 9b 3c dc a6 ec ff 00 f8 c2 e9 e8 f9 bb 4e f5 dd 54 08 6d 71 e8 3b c5 9b e8 30 39 27 d1 ad c0 3a 48 d2 68 ab 02 73 d8 f9 b7 78 1c 49 cd 8d 7d 6e 92 81 b5 a8 ed 41 a9 c2 47 35 43 84 fd a8 9f 59 6a 73 2a 31 44 d5 19 91 02 f4 16 55 6e e8 a0 d7 06 d9 32 b4 14 21 1e cb 54 c6 68 e7 3a 7f 2d 40 8d 94 7a ef 7e d7 bb 75 56 5c 21 fc a6 37 e2 55 87 96 f5 f6 b2 26 02 05 b9 33 6d 27 7f 67 06 bd d2 bb 57 49 ab 81 5a 15 aa d5 6d 18 d6 Data Ascii: 1].Mz-bYe49U3UD;sR\V]m-&qm]}mNMH `Z32:~V\E)2;Cz^KYK<NTmq;09':HhsxI}nAG5CYjs*1DUn2!Th:-@z~uV\!7U&3m'gWIZm
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 3f bc 1a 83 7f f6 d6 79 d0 ee 71 21 dc 4d ef 6d 4f 0a 52 9f cb 39 d2 8b 5c 92 e4 a8 27 b1 49 bd c5 6f 7f e5 2c b9 19 47 65 d8 2b 7d dd c0 5a 8f 95 fc 99 92 49 be d3 b4 71 fa 2d f4 da 81 8f f9 27 28 3b 78 db e1 83 af 10 0f 1b 51 31 ff 00 26 e5 09 46 9b c3 44 15 4f 1d 14 9b 51 75 fe 4d ca 52 45 9b fb cc 6a 2c 3e 9b 51 27 f9 38 84 24 28 2f 95 18 52 cd e1 ec 3b ae 7b a8 79 9f ca 10 99 35 52 4e 54 63 8f d1 4a a3 f9 42 02 a9 c5 46 4a 17 b5 b5 d4 d0 5f fe d0 8c 11 7b 5a 78 b4 07 d1 a1 e1 46 39 3f 94 60 28 50 a9 12 65 47 b7 69 f4 69 a5 04 1f ca 38 85 40 1b 37 4d 08 b5 85 af a9 a0 ab fc a3 82 38 2f e6 c0 45 af 7d b6 1a 6b 5c df ca 98 1b 7c 24 3e 4c 26 e0 f6 6b d9 44 0f e5 9e 98 0b 68 4f cd 42 bc 38 03 f4 52 aa 7f 2e f4 a8 82 e8 84 64 46 76 fa 87 0a 51 1f 47 e9 08 Data Ascii: ?yq!MmOR9\'Io,Ge+}ZIq-'(;xQ1&FDOQuMREj,>Q'8$(/R;{y5RNTcJBFJ_{ZxF9?`(PeGii8@7M8/E}k\\|$>L&kDhOB8R.dFvQG
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: f4 8f 0d 34 a6 3d cc 75 48 75 21 74 e3 6f 45 18 52 32 ec c0 b1 5e 1e 92 da da bc c3 22 89 54 f2 c5 62 4d af 6d 4f 87 86 b4 8d c1 37 1d 9d a3 70 ed f5 d4 71 83 60 ab 7d c8 35 66 bd ee d4 e9 08 28 ee cb 18 28 41 72 1b b0 06 e1 73 e2 6f 0a d5 e4 12 3a 9b 9d ca 5e c5 6d ae d2 b6 f0 fd de 5a ea 29 8b 14 78 c4 c4 3e 66 77 50 ee 91 93 a2 0d db b6 33 e9 cc 9c f4 23 00 a4 c1 41 b9 d4 bb 1e 32 13 c5 6f ee 53 08 61 2e 22 01 e5 90 0d 15 2f 6d c7 b8 51 c3 c7 b4 99 59 0c ab 1c 4c bc cc 6f 7d b1 db 98 48 4e 9f 86 8e 18 85 20 c9 c5 c6 59 0b 4f 68 1d d2 fc 9b d5 ad f1 36 e9 c8 be cf 37 35 32 6e 24 a1 3a 91 67 d3 81 35 72 a2 33 ed 05 00 0d 07 60 af 85 29 8a 39 08 f4 8b f7 f6 d7 e7 41 6d 97 e2 b6 f2 b7 71 e1 f9 5e 8f 7e a3 c2 31 5d 16 08 18 e4 7d e9 22 0c 56 ba 82 20 2d 6d Data Ascii: 4=uHu!toER2^"TbMmO7pq`}5f((Arso:^mZ)x>fwP3#A2oSa."/mQYLo}HN YOh6752n$:g5r3`)9Amq^~1]}"V -m
2024-04-19 00:44:17 UTC	14501	IN	Data Raw: f1 24 fe ca 90 bc 77 bd c0 bd 85 f5 bd ea 3c 69 d2 64 91 9d db 32 48 b9 81 52 41 52 a0 7b 4a 07 b5 53 ca 9d 44 2a ca ed 24 60 c1 27 16 be 8c 41 d3 ef 56 37 51 8f 3e 16 9b 18 30 51 2c 4c d0 90 cb b5 95 d7 8e 97 a9 3e 66 3e 95 34 77 56 48 26 13 ae db 2d 89 8c a9 f8 a5 db 9b 74 9f 95 e0 55 a5 dd 8f d0 f0 4a 11 b5 a5 5c 86 2c bc 08 b0 6d e9 df bc 7e ed 35 db a0 90 08 dd b6 2c a5 b3 5f 5b 12 49 3e 9d b4 f3 75 4e 9b fc bf 9b 95 21 01 a7 18 b9 64 b1 e1 62 e0 a1 b8 5a b6 2f 47 e9 11 c8 d7 1b 23 c8 cf c6 7f 46 d5 66 2b 51 c5 12 45 87 2c a0 79 4e 32 f2 5c 12 49 1b 6c f0 95 dd e8 df 4d 91 87 d5 d0 46 ae d1 de 58 e5 4d c5 0d 8b 05 74 57 d8 4f 85 ad cd 40 0e ad d3 c9 26 d6 63 2a 9f 45 ac 87 75 fd 14 52 2c 8e 9b 3e b6 d3 27 cb 3a 77 f9 8a b4 02 f4 b1 93 72 47 f7 79 e1 Data Ascii: $w<id2HRAR{JSD$`'AV7Q>0Q,L>f>4wVH&-tUJ\,m~5,_[I>uN!dbZ/G#Ff+QE,yN2\IlMFXMtWO@&cEuR,>':wrGy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49845	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	757	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg
2024-04-19 00:44:17 UTC	558	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:17 GMT Content-Type: text/css; charset=utf-8 Content-Length: 0 Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99158 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8768dd83cab2674b-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49844	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	616	OUT	GET /assets/images/welcome/featured/po-boxes-box.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:17 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48594 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:17 GMT Etag: "13107-5d786ea79e5c0" Last-Modified: Tue, 08 Feb 2022 19:42:23 GMT Server: ECAcc (agb/53F2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 78087 Connection: close
2024-04-19 00:44:17 UTC	15278	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9c a0 03 00 04 00 00 00 01 00 00 01 c2 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c2 02 9c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-19 00:44:17 UTC	16383	IN	Data Raw: 7d 80 c9 af d0 3f 80 df f0 4b 3f db 1b f6 81 82 1d 57 41 f0 cb e9 1a 64 c7 8b cd 54 f9 0b 8f 50 84 6f 3f f7 cd 7f 65 9f 06 3f 62 af d9 a3 e0 15 9a 41 f0 cb c2 36 16 37 11 0c 7d a5 a3 12 4c de ed 23 e5 b3 f8 d7 d4 96 ab 0c 6a 20 50 aa 3b 0e 06 2a d4 52 32 75 24 fc 8f e7 03 e0 37 fc 10 1f e1 ff 00 87 d9 35 2f da 0f c4 53 eb 72 8c 1f b1 e9 c0 c3 17 b8 67 39 73 f8 11 5f b1 ff 00 06 bf 64 2f d9 c3 e0 34 11 c1 f0 bb c2 3a 7e 99 2c 43 1e 78 8c 34 c7 ea ed 96 3f 89 af ad 2e 16 36 24 fd ec 7a 55 16 85 95 77 91 8e 3b 55 5f b1 9e fb 94 3c 9c e1 47 00 70 00 15 23 6c 0d e5 ee ce 2a ec 2d e5 82 8c 3f 13 d6 b3 e4 6d 92 f9 43 27 27 82 69 0f 72 36 17 48 09 18 c7 6a 8a 60 0a e3 ee 93 da ad cb e5 88 c9 98 e3 03 ad 79 55 df c5 4f 08 7f 60 4d e2 4d 1e f1 75 2b 7b 69 cd bb 9b Data Ascii: }?K?WAdTPo?e?bA67}L#j P;R2u$75/Srg9s_d/4:~,Cx4?.6$zUw;U_<Gp#l-?mC''ir6Hj`yUO`MMu+{i
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 0d b8 b4 82 38 b8 ff 00 80 28 ab a5 42 a5 3a 92 e5 6b 91 bb f5 be bb fe 3a fc cc 73 1c cf 05 8c c3 51 95 58 cf eb 10 82 83 69 ae 57 ca da 8b 7a 36 ed 1b 45 ad 36 dc da 9e 36 72 49 e9 d7 02 b3 a7 05 22 2f 18 c9 03 a1 ad a9 10 e5 91 73 cd 52 91 00 88 21 39 6f 7a ed 3e 68 e5 d2 64 91 fe 73 b0 f6 a9 8c 09 20 dc e7 fd da 59 a2 c4 cb b4 0c 1e f5 66 78 c2 c4 24 43 c2 d0 06 13 c4 e9 21 4c 10 7f 4a 82 56 62 bf 31 e4 70 6b 46 69 92 e1 76 a1 cf a6 3f 51 59 33 85 4c 04 07 af 22 a9 01 03 7e f2 30 40 e6 9b 23 2b 20 46 ef 4a ca e3 3b 57 69 ce 7f 1a 8a 25 65 76 5c 0e 4e 69 20 38 3d 77 4e 3e 61 da 30 a3 ad 79 eb 43 1b 38 47 3f 2e 70 71 d6 bd d7 50 b7 8e e5 09 1d 48 c6 2b cb 35 4d 21 ad d9 a6 ec 7d 2a c0 fc b4 ff 00 82 89 6b 7f 10 2c 7e 12 a7 c3 6b ed 0f 4a d6 7c 29 e3 49 Data Ascii: 8(B:k:sQXiWz6E66rI"/sR!9oz>hds Yfx$C!LJVb1pkFiv?QY3L"~0@#+ FJ;Wi%ev\Ni 8=wN>a0yC8G?.pqPH+5M!}*k,~kJ\|)I
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: d1 bf 86 b4 88 12 78 fa 4d 27 ce ff 00 81 6c e3 f0 af 7a b2 d5 77 b8 20 e0 0e b5 e2 36 9a 90 67 f2 f3 b7 e9 5d e6 97 3c 45 02 83 d0 8a e9 54 e3 05 68 ab 23 92 73 94 dd e4 ee cf 6f d1 f5 26 6e 72 08 3d 2b d2 b4 bd 42 3c 2c 64 e7 fa 57 cf fa 55 d0 0c 11 7b f4 c5 7a 56 8d a8 c4 b3 ac 1b 94 ca 57 3b 41 e7 1e b8 a6 66 d1 ee 96 92 47 e5 83 10 c9 3c 73 5d 3c 17 12 2b 09 3b f6 15 f3 4a 7c 70 f8 71 a7 78 63 5b f1 6f f6 bc 17 36 1e 1b 67 5d 45 a0 3e 61 85 d3 aa 10 bc ef e8 36 f5 cf 15 34 3f b4 6f 82 ee ad bc 1b aa e8 de 65 fe 9d e3 4b d3 63 6d 72 b8 51 0c bb 19 c2 ca ad 86 56 25 0a 11 d4 37 5a c5 d7 a6 b4 e6 5f d3 b7 e6 76 c3 2b c5 c9 5d 52 76 d5 6d 6d 54 79 ad af 5e 5d 6d bd 8f aa e3 90 38 2c 07 07 a5 4d 0c 85 fe 44 fd 2b c3 27 f8 a1 79 a7 7c 76 d3 be 13 dd da a2 Data Ascii: xM'lzw 6g]<ETh#so&nr=+B<,dWU{zVW;AfG<s]<+;J\|pqxc[o6g]E>a64?oeKcmrQV%7Z_v+]RvmmTy^]m8,MD+'y\|v
2024-04-19 00:44:18 UTC	13660	IN	Data Raw: a5 ab fc 44 f8 cd af f8 86 1d 37 22 ea db 42 f2 ec e3 04 29 72 98 85 77 92 40 e3 e7 f4 af 94 7f 68 71 7b a4 7c 76 b8 d5 0b b3 45 a9 7d 9a f6 25 63 90 05 e5 b9 42 00 3f f4 de d9 3a 77 35 de 7e cd 1a 84 76 3e 30 f1 3f 85 e6 ff 00 53 7b 69 0d ea 2f a9 8b 31 b7 e6 21 fd 6b d7 fa b3 86 1d 57 a6 d4 74 4f dd 8a f2 ba bb bc b4 f5 3c c7 5e 32 ad ec 66 9b d5 ad 64 df a6 9a 2f c0 b3 ac a7 ec 89 f0 f3 c2 96 7e 3f f0 bf 80 64 f1 6d cd fb 4a 90 5c 6b 73 bc ec 65 8e 06 9d 37 79 a6 4c 79 80 00 30 3f 88 57 b0 fc 30 fd a7 35 2f 16 68 76 d3 f8 27 4a d3 74 0b 7b c8 6d e4 84 5a c4 bf 2a dc 8d a0 f4 03 2a f2 c3 db d6 be 48 5b 49 2d 3e 0d eb be 1f 61 ba 4f 07 ea 29 38 07 ae 2d 26 31 37 e7 14 69 ff 00 7d 57 33 fb 38 cf 3d 86 9b 2f 83 15 b1 2e 9d 2d e6 93 19 1f f4 c5 da 4b 73 ff Data Ascii: D7"B)rw@hq{\|vE}%cB?:w5~v>0?S{i/1!kWtO<^2fd/~?dmJ\kse7yLy0?W05/hv'Jt{mZ**H[I->aO)8-&17i}W38=/.-Ks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49846	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	616	OUT	GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45258 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "1e451-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/535D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 123985 Connection: close
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 99 eb 17 11 33 d6 2e 22 67 ac 3c 44 ce e4 36 9d 65 69 d8 1f 80 ff 00 6d bf b8 97 d9 8b 7e 79 4c 81 24 f4 cc 20 a2 e8 01 81 90 14 1e 95 45 47 ae 26 a9 54 33 85 4c 41 45 e2 2b ac 26 f0 89 cd e2 15 14 22 25 f3 0a 0a 65 f2 05 a5 8e be bb 77 0c 9c 46 b1 5a 56 4b 5e 6b 28 dd 59 5e 4c c0 08 f8 8c 26 10 12 e0 78 00 4c 20 05 50 00 c0 00 26 c3 9b c4 3a e4 5a a3 6a 91 de 75 8a c8 34 e4 b2 09 a9 1b c9 64 81 5a 7b 9a 2e ca 8c b2 d7 64 6b 07 53 cc 72 49 ea 7a 25 1b 56 b0 f8 8c 64 84 65 da b6 bd 3a 89 67 9a 5e 0a a8 9b 44 fd d5 b4 43 47 0b 9d ca fe 32 10 8d d5 05 4a b2 44 57 04 ea a2 43 cc 2a 43 1a 51 73 2a 91 85 42 00 08 e7 e7 80 3d 30 04 00 3f 3c e9 d0 0d f9 ed 76 ee 1d 44 b2 29 a9 32 c4 8d 96 45 b3 e4 15 b8 48 9a 46 3d f4 0b 15 53 a6 c8 23 13 2d 12 83 d8 d5 ae 52 3c Data Ascii: 3."g<D6eim~yL$ EG&T3LAE+&"%ewFZVK^k(Y^L&xL P&:Zju4dZ{.dkSrIz%Vde:g^DCG2JDWCCQsB=0?<vD)2EHF=S#-R<
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 58 09 ad d7 75 da e1 b3 93 c7 7e c6 a4 92 4b de 0b 40 63 1e c0 75 88 9c e6 86 34 7a cd 40 b5 b4 ff 00 fb 6a c2 c5 bb db 6e c8 8e 32 5a d6 f7 84 a4 6e 69 d6 5a e9 5c 30 69 61 2d 19 7a cb 5e 22 b0 f1 05 9d a0 f0 0b ad dc d8 a4 c9 f2 60 03 da f3 ab b2 1e 09 0f 2e 01 84 37 e4 ca 93 5e 1b 87 ec a6 ce c1 db 09 9c be 60 11 cc 10 39 c3 57 75 da 0a 1e 4b 9c e6 b5 64 d4 dc 30 5a dc fc 3f b6 ed 76 d3 5b 45 b4 59 4b ae 47 b9 ae 26 56 b9 42 02 88 13 0c 32 e3 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5b b4 97 d6 91 43 35 b5 c7 74 8c 25 c0 a3 41 25 4a f3 fe 8f bc a7 b7 ba 05 ec 89 a1 24 e3 cb 4b 8f 12 98 ae 69 9d 07 30 cc 1d ab fd 50 0e 77 94 1c 0b 79 d6 99 19 72 e5 e7 6e cf 7e 9c df 66 ba 7c 98 aa a3 06 19 a7 05 Data Ascii: Xu~K@cu4z@jn2ZniZ\0ia-z^"`.7^`9WuKd0Z?v[EYKG&VB2_l~u__l~u__l~u_[C5t%A%J$Ki0Pwyrn~f\|
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: ec 92 40 3d dc b9 8c c7 a9 c3 8d 1d 3b 92 a0 24 fc 9c b8 01 99 3d 8c 87 3a b7 fb 42 fb 30 fb 3e bc dd fc 1b 2d d4 d6 cc ba 8d d0 b1 8e 9e 0d 3d ec 7a 66 96 39 15 9a 9a a4 b0 02 a1 09 af e4 d6 e5 f3 96 9f b4 57 f2 6b 72 f9 cb 4f da 2b f9 35 b9 7c e5 a7 ed 15 fc 9a dc be 72 d3 f6 8a fe 4d 6e 5f 39 69 fb 45 7f 26 b7 2f 9c b4 fd a2 b6 8d 83 ed 2f c3 13 ed 3b c5 fd bc 93 db c5 2b a3 71 96 28 9c 19 23 da 62 7c 8d 46 3c 86 b8 12 08 27 2f bc 4e 4a 85 17 25 4c 17 a1 51 7a 2a e6 3f b4 86 cd 16 e7 11 77 75 12 25 bb 22 27 03 6c 07 65 cc 38 2b c1 2e 27 d6 2b 85 47 73 b0 ed ae bb 94 c6 5b 34 6d 68 71 36 e4 8e f1 c1 48 42 d2 84 15 cf 0e 34 e6 6e 6c 71 64 bf ab 28 d0 18 8a ac 71 07 83 53 03 c7 00 6a 38 b7 cd 8d b7 11 96 8e ed e1 cd 12 b0 12 5a 00 95 a7 54 64 10 ba 1f 80 Data Ascii: @=;$=:B0>-=zf9WkrO+5\|rMn_9iE&//;+q(#b\|F<'/NJ%LQz*?wu%"'le8+.'+Gs[4mhq6HB4nlqd(qSj8ZTd
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: e2 77 04 4f 79 3d 35 6c c3 0b b5 b5 a4 26 18 e1 fd 14 45 c5 bb c4 7a 94 1c 3a c2 d4 af f6 72 62 2d 19 22 a6 3e fe 35 03 c4 2e ee 10 81 92 9f c0 56 99 a1 21 ab 9e 07 05 50 bc a9 d7 02 dd d8 84 52 70 4e 1f e4 3d 9f 65 f0 f3 5b 75 b9 6d f3 49 df 5e b4 00 d2 d2 34 fb 34 6f ce 56 b5 dd a2 ef 54 10 8d 5c 6b c2 d2 dc 4a c8 e1 17 28 5c e2 1a d0 4b 5c 02 b8 e0 01 24 05 38 63 9d 7d a5 6c d3 5f 5b 3b 6f bb 30 48 d7 3e 46 88 8c 90 30 32 40 d7 13 a4 91 89 72 1c db 85 7d b3 ee 52 ee 50 32 29 20 70 8b 5b c3 75 46 c8 9d 13 7b b5 3d a6 ea c1 a1 aa 71 5c 8d 5e f8 9e 29 2d ae 3c 45 7b 70 d8 db 6e e7 76 bb 1d 96 c5 23 01 d4 18 d6 ea 95 ce 40 0a e9 5a da ac f7 4f 0e ed 16 3b 6c f2 77 4f 9a de 3e ed cc d5 ea 17 9c 8c 3a fd 70 79 ad 6f 16 36 fb 8d b0 db 4c 17 06 37 77 8d ee 9a Data Ascii: wOy=5l&Ez:rb-">5.V!PRpN=e[umI^44oVT\kJ(\K\$8c}l_[;o0H>F02@r}RP2) p[uF{=q\^)-<E{pnv#@ZO;lwO>:pyo6L7w
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 48 06 2b a1 03 70 36 d9 63 a8 27 54 fb 75 da ba 1a 80 27 ae de 42 07 8f 81 dc 69 23 62 83 b7 77 42 4e db fc bf 29 24 6b 63 b7 87 b4 f5 04 78 81 d3 c3 6f 66 82 76 db b4 0d 93 ed 50 ff 00 94 7e 5f a3 41 3b 10 01 07 61 d4 77 6f b1 23 a6 fb 7d 3d 34 de c7 b4 6f ef 1d c0 db 7e 9b fb 7c 75 f3 0d f6 f9 4f 76 c7 a1 1e 1b e8 01 d5 25 3b 9e 9b 6d d7 ae db f5 df 7d 61 f3 f2 c4 f9 b8 ce 25 5f 96 f2 15 ac 74 f6 93 24 60 f8 f4 cb b8 4c ab bc 16 bc af 8d 6d 0b 5f 7f ba 42 06 e4 78 eb 06 e4 7f 4f 34 92 18 ca 33 a2 ac 6f 16 c9 26 f7 c8 b6 c9 2b a9 6d 5f ac c7 30 89 7c 79 21 f9 c8 2e a2 d1 e9 0e d8 33 13 b2 37 9b 39 0b 53 89 ee 56 b3 8e 61 f5 0f cc dc 83 c2 93 f2 27 66 65 11 30 7c 2f 2f 56 35 94 61 99 f5 9d d3 36 b2 b0 ec 53 06 ac f8 ec 52 bf 02 b9 08 f2 52 5e 8e 1b ac 8e Data Ascii: H+p6c'Tu'Bi#bwBN)$kcxofvP~_A;awo#}=4o~\|uOv%;m}a%_t$`Lm_BxO43o&+m_0\|y!.379SVa'fe0\|//V5a6SRR^
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: bc 01 49 1b 02 92 0f 4d bc 46 91 f4 7e d1 fe ea 7e e7 e1 1a 7f c3 bb ca 74 b7 dd bf 67 9a 1b 57 94 1c 23 a8 6c bb b7 76 df b9 df 56 3f ef 71 32 d1 7e 97 5f 10 9b e8 28 91 5b e7 2b c9 18 df 95 fe 6c 6b 8a 76 ea 9f ca 6f f5 fa f4 d0 f6 fc bd 4f b3 db f3 6a 3c 28 51 9e 9b 36 63 ed c6 87 12 32 3c c9 12 a4 bc a0 86 98 65 be 81 4b 5a 8e df 47 5f 0d 45 87 95 d4 7d 94 ec e6 94 f4 35 b7 2e 3c e8 b2 12 da bb 5d 6d 32 a2 ad 6d a6 5c 65 1d 9d 68 ec a4 1f 66 da db ee fc 83 c7 c3 ee 6a ba db b7 b8 62 f9 b5 64 be ed ba 34 6d d8 72 a9 4a 24 7d 52 b4 9e d1 f2 e9 68 56 e5 2b 4a 90 ad ba 1e d5 82 93 b1 f6 28 03 d0 fb 0e aa a0 ca 7d b7 72 5e 37 2c 61 b9 0a 01 01 e7 20 21 0a 73 17 b6 5b 47 af 97 32 b8 79 45 ce a1 c7 9a 51 3b 1d 39 82 72 a6 30 ce 4f 8f 87 55 26 aa 43 6e 9a fc Data Ascii: IMF~~tgW#lvV?q2~_([+lkvoOj<(Q6c2<eKZG_E}5.<]m2m\ehfjbd4mrJ$}RhV+J(}r^7,a !s[G2yEQ;9r0OU&Cn
2024-04-19 00:44:18 UTC	9304	IN	Data Raw: 24 ce 0e ba 60 25 2d ac a8 f7 13 fa e4 6a e6 73 77 3b 0a fa df 58 dc 5d 06 8d 94 73 26 78 cb 78 ac 17 fd 42 67 f1 dd 83 8a 04 5c 24 63 95 eb 8e 12 d2 a3 c5 f2 da 5b 28 4b 64 76 80 35 e8 f5 cc ab 3a e5 7a bc b7 84 7f 57 c7 aa 0e 03 e4 ca cf d3 9c aa be 93 2d ca 30 7e 36 e4 7b 2c 43 91 ec 2a 93 31 98 f6 99 95 c6 25 3a 2b f3 a7 bc 83 29 b9 ed 20 f7 a9 48 4a 87 a4 6f 5c dc 5b ea eb d4 bc 3e 42 cb bd 5e e5 5e 9f ec 70 2c 9f 95 72 6c cb 8b a4 e2 3c 6f 33 0d 9c e1 b5 c5 b2 19 d3 a1 5e 23 32 81 7a f4 4b 16 25 25 c6 d2 0a 1d 67 b1 6d ee 5c b3 bc 11 23 55 3d 52 26 5a 22 72 9b 76 13 30 de 8a 1d 92 dc 85 38 84 b6 f3 29 6d 65 27 74 fb c3 d9 d7 6d 71 ec 6e 3e a9 82 fe 30 d5 f5 f4 e8 9f a4 75 f6 92 f1 78 2d 22 85 28 53 d3 e2 45 93 1e 53 4a 91 28 ac 42 f3 55 b2 77 1d 37 Data Ascii: $`%-jsw;X]s&xxBg\$c[(Kdv5:zW-0~6{,C*1%:+) HJo\[>B^^p,rl<o3^#2zK%%gm\#U=R&Z"rv08)me'tmqn>0ux-"(SESJ(BUw7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49848	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	620	OUT	GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 66435 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "9e3b-5b8a5e31d0dc0" Last-Modified: Mon, 11 Jan 2021 20:38:23 GMT Server: ECAcc (agb/5336) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 40507 Connection: close
2024-04-19 00:44:18 UTC	15279	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPuhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: d6 66 93 af 0f 95 48 e6 a8 8f 01 fc c3 46 4a cd 1e 0c ca 0a 72 4b 52 94 9f b4 c7 46 2d b4 14 a2 42 50 a2 95 12 93 c0 5d 47 81 1c fb 6a ab 3e a3 69 bf f2 d7 fd 4c c8 c9 9f 7d af 66 bf cd 56 30 38 5c 9e f6 da d8 57 e5 c5 c8 e7 1a 8d 2e 0b cd 47 97 10 05 a9 c4 3d 22 32 e5 b4 8d 29 49 be b6 1b 52 ee 38 70 b1 37 e1 59 ca f4 20 e8 df 95 2b e6 3b 6c 70 cd 4d f4 a5 08 36 9a 6d 3c 29 45 25 06 fa a4 d2 f6 18 8f f5 03 6b c6 b2 a5 4b 95 1d 04 00 97 9c 8a ef 86 a7 3c 30 f1 65 2b 00 a4 b8 96 94 16 a4 df 82 78 d5 5e a2 0b 33 58 f0 8d 4c fe 14 9f 5a ad 2b 4a d3 92 b8 27 ca 46 5f 50 76 b4 1c 83 d8 c9 32 a4 a6 73 2f 45 8e a6 84 65 90 a7 26 3e 88 cd 04 ab 80 36 5b 89 2b fd 54 7b c7 85 1e a2 09 d1 e7 87 7b a0 b7 c2 35 37 20 ae 45 2d d6 a4 f3 5f 2a 72 7d c9 d3 95 e1 99 93 17 Data Ascii: fHFJrKRF-BP]Gj>iL}fV08\W.G="2)IR8p7Y +;lpM6m<)E%kK<0e+x^3XLZ+J'F_Pv2s/Ee&>6[+T{{57 E-_*r}
2024-04-19 00:44:18 UTC	8845	IN	Data Raw: 71 bd 24 be 6a 74 a6 7b 06 17 af de 9b 37 a2 92 71 7d 51 d9 79 07 9c 57 88 12 f4 f8 d1 de 2b 09 d3 7d 2f a9 b5 dc 27 87 2b d7 2c f4 1a 9b 79 c2 4b a9 9d 50 d7 69 ee 65 38 be b4 7a be 19 3b 56 6a d9 9d b7 e7 44 9c 96 82 cb 6b 83 2c 3e d1 0e 73 24 21 6a 49 e7 5c b2 52 58 48 e9 8e eb c5 1d 45 50 b8 a0 39 ed d3 f7 d7 dc b2 7e e0 5a db 9e 16 d1 52 d9 4b 6a 7c 31 e2 27 c7 f0 12 f7 d9 97 7c 3d 5a 35 f0 bf 3a bd ba 57 12 b3 ad 30 3c b5 bd e5 d4 d8 4c 47 6e 56 c9 99 3a 73 6e 21 dc 92 43 2d 96 d1 11 52 1a 2a 28 79 a7 42 5c 78 46 4b a7 42 47 f6 85 22 dd 87 7f 0a db f9 bc bf c4 c7 c4 b8 b6 18 4d f5 87 71 e3 a3 16 f3 bb 12 63 99 3f 0d d7 9a 66 22 1d 65 a7 03 c9 4f dd ac 85 ba 95 21 2e 4a 70 a9 b0 16 b4 e9 29 ba 82 6f 6a b7 db 45 bf 76 58 79 57 b0 af 8f 25 9c 71 f2 a7 Data Ascii: q$jt{7q}QyW+}/'+,yKPie8z;VjDk,>s$!jI\RXHEP9~ZRKj\|1'\|=Z5:W0<LGnV:sn!C-R*(yB\xFKBG"Mqc?f"eO!.Jp)ojEvXyW%q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49847	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:17 UTC	615	OUT	GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45258 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "1806c-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/5380) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 98412 Connection: close
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:18 UTC	1	IN	Data Raw: d7 Data Ascii:
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: c5 9c 75 e4 85 0a 95 85 36 b5 ab 2b 25 e4 af 6b 8b 70 16 67 11 8c fb bf 8b 10 2c 17 15 6a 2f 19 8c b2 8b 89 da 1a d2 92 7c e2 60 ab 03 50 79 85 fe a7 4c 78 bd d9 e6 07 9e 60 78 e6 3a 67 39 f4 07 ff 00 16 eb 9f fa 89 ff da 00 08 01 01 00 01 05 00 ff 00 5d 33 19 cc 5a 04 d4 c9 25 64 90 b1 46 e6 91 69 78 bc c7 22 0e 39 93 8a c7 32 a9 3e 39 95 c8 f1 c1 39 a0 0f 04 f4 d8 1e 0a 44 d0 1e 0a 56 c8 1e 66 62 c9 8e 66 68 d3 8c 20 7d 48 bf 3f d2 0c d2 8b c6 57 13 c1 ab 16 02 bd d9 0b 5f 36 df 5f dd 6f c4 96 54 1e 01 50 50 1a 33 16 de fa ea f3 d9 cb b8 ca 26 bf d1 2d c7 6a d9 e4 de 5c 78 b2 02 5c a6 87 8e 6e 38 c2 40 72 d2 b6 69 0a 4d dd 4d e1 ad a8 89 60 b9 75 a6 52 43 7b b5 70 e7 82 48 65 34 cc 37 7d 3e 16 41 81 e1 45 0b 18 70 71 21 17 03 fe df d7 31 52 62 b8 37 64 Data Ascii: u6+%kpg,j/\|`PyLx`x:g9]3Z%dFix"92>99DVfbfh }H?W_6_oTPP3&-j\x\n8@riMM`uRC{pHe47}>AEpq!1Rb7d
2024-04-19 00:44:18 UTC	1	IN	Data Raw: 48 Data Ascii: H
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 5f 71 a0 f1 3e 43 f3 e8 59 b4 fd 5b c6 1e 21 19 11 7d fc db 66 a7 f1 71 a8 1f 6e da c8 4b 22 09 cc 29 1a b3 46 8c 55 4b 2f 32 3c e9 e2 2b a8 c4 57 0f 11 03 c5 49 04 0f cc 47 9f 97 db a7 c4 5e 64 a5 93 15 20 a1 46 3c d6 a0 fc 40 10 77 07 7f 49 52 7d f5 d2 5e c0 e3 af 19 d8 f8 82 a4 10 47 fb 2c a4 82 0f b7 57 3c ec a4 5b 48 6e de 34 b8 72 02 4b 29 f5 2a 46 05 6a c1 3e 21 41 c4 53 7a 90 0d 58 00 51 40 7a 79 b0 24 57 dc 69 b1 1e 54 d1 01 f7 d0 08 6b a6 ff 00 ef 3f fe 1f c4 f0 fe 86 5b ab 96 61 6d 1a 96 72 aa 58 85 1b b1 0a bb 9a 0a 9a 0d f6 d5 96 1f ba af 67 c6 cd 73 1a 4f 6e b2 c5 c2 4b c8 04 7d 69 7e 48 3b 74 e6 6e 97 a8 0e 61 d5 59 49 4e 5e 91 82 be ec 5c f9 cc 60 72 70 ce ac d2 cb 2c 5f 2e 6d 10 f5 23 b5 b6 29 c6 ea 66 99 c1 79 56 82 28 e3 75 62 c5 56 9d Data Ascii: _q>CY[!}fqnK")FUK/2<+WIG^d F<@wIR}^G,W<[Hn4rK)*Fj>!ASzXQ@zy$WiTk?[amrXgsOnK}i~H;tnaYIN^\`rp,_.m#)fyV(ubV
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: a0 79 1a 1d 44 65 9d 62 73 e3 42 3f 61 f6 ea 6b ce b8 b8 15 1b 1a 29 a0 f8 54 52 b4 55 1e 03 cc 92 c7 7d 3c 77 38 c9 d5 81 a1 a3 29 fd 15 03 56 d7 71 0b 98 ee 63 27 76 8c 3a 90 45 0a b7 16 15 56 06 8c 35 86 86 e3 3b 25 cf 6e 63 cb c3 04 3c 7a 48 84 30 66 e7 1d 7e f1 92 a1 63 77 a9 44 01 16 80 1d 0e 4d af 88 57 ed d2 d0 8a 6b fc 3a 1e dd 5c b7 b5 cf f6 7e 28 3a f7 7e 0e 55 f7 68 9a 6f ed d6 fa b9 cd e1 c5 b5 8e 46 6a b5 cd c1 80 49 33 05 8d 51 78 13 b0 aa af 19 57 d2 a4 05 6a 33 ea 19 e6 c9 e6 a4 70 8c 52 6f 58 0b 52 0c 8f 10 29 c0 b4 e5 f8 06 21 96 35 f8 0a 7c 4d 2c 9f cd 32 30 62 e2 67 44 53 3c d3 3b f1 26 af 21 04 96 66 20 d1 14 84 45 14 15 26 ba e8 76 37 64 c4 b0 c9 48 cd cd f4 d3 7c bc ae 4d 00 87 16 9d 49 e5 e4 aa d5 76 78 51 1c 02 c5 ab 51 35 af d4 Data Ascii: yDebsB?ak)TRU}<w8)Vqc'v:EV5;%nc<zH0f~cwDMWk:\~(:~UhoFjI3QxWj3pRoXR)!5\|M,20bgDS<;&!f E&v7dH\|MIvxQQ5
2024-04-19 00:44:18 UTC	2	IN	Data Raw: 99 b3 Data Ascii:
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: c5 5b 65 9b ae 5c 94 b6 4a 38 fa d3 bd 33 d4 35 d5 af ea ec ee a9 e3 34 77 42 ed ea 98 b1 4f 1a a9 10 df b4 68 23 cb f3 44 9f ec 47 77 63 f7 86 4b 2b 63 6d 73 61 55 43 73 0e 82 65 27 5f 5b 44 c8 66 ee ff 00 c4 14 74 59 bd da c6 b1 24 7d 4d 0c 90 bc 71 ec e4 b6 7c f8 bf a0 cd 4f 6d 5a 06 76 86 87 63 59 a2 bc dc 4e b4 92 fb 20 58 19 d6 ba 0d 14 eb b1 b1 d5 62 d0 59 30 75 30 0e c2 d2 bc 20 61 60 45 17 aa 3c 16 3d 18 3f 4a 0d 32 d1 e9 76 76 33 33 35 b5 32 25 54 75 4d 97 61 d8 e9 e2 60 ec a4 18 47 98 7c fd 44 d9 85 83 42 39 51 01 fd f3 e2 c7 13 05 ee 7b 6a ae 55 5f 13 33 35 98 0e d9 fd b2 a4 37 1d 96 6b bc 7f 5e 4f bb 7e a7 af 33 b6 49 2a 66 e7 3d 67 0a 11 d4 f9 7a d8 d6 21 74 d9 ee 31 42 e9 2d 60 4c d6 ab d1 8b a1 db f5 6e a5 b2 e4 ac 9a 98 5a 76 58 81 81 97 Data Ascii: [e\J8354wBOh#DGwcK+cmsaUCse'_[DftY$}Mq\|OmZvcYN XbY0u0 a`E<=?J2vv3352%TuMa`G\|DB9Q{jU_357k^O~3I*f=gz!t1B-`LnZvX
2024-04-19 00:44:18 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: b6 09 79 30 e1 c5 72 8c a7 77 08 a8 8a d5 e1 57 e8 be 29 05 12 39 aa 96 c0 96 93 85 02 7c b0 1e 6b 83 1a 6b ab 9a 74 78 91 88 e0 91 e0 72 37 84 f2 e3 85 e5 53 9f 08 58 f2 99 00 a3 e5 4b 68 f0 98 ef 00 8e e1 8a 57 a9 91 5c 39 c7 69 40 cf 36 09 e8 47 2b 5b c7 3c 70 a1 b3 a6 c2 66 45 b0 aa 8a 47 d6 5a d3 05 d9 69 b6 52 65 2f dc 31 f7 47 88 d1 a5 c0 6e 21 22 8c 5f 7e 17 3c 2f 5e 1c a9 e8 5e 33 7d a3 9a 3d 85 55 f5 6c a8 b7 15 e8 56 16 1c d8 13 22 b9 52 44 29 d1 97 87 70 8e 6b c2 71 f9 b0 a3 57 27 9b 5c 8a ba be f6 b6 28 2f fa ff 00 77 a6 a8 84 58 91 a0 c0 97 63 4f 20 b4 e5 99 3a 3e a8 0b 30 4b 12 04 59 6a 57 56 15 23 91 a5 62 2a ab f9 7a a3 44 38 82 e4 84 96 62 c4 e5 1a 8b ec 58 08 73 59 ea 46 35 88 ad 56 39 1c d7 f1 fa f9 e7 95 e7 c7 be b1 9d e9 5e 15 51 5a Data Ascii: y0rwW)9\|kktxr7SXKhW\9i@6G+[<pfEGZiRe/1Gn!"_~</^^3}=UlV"RD)pkqW'\(/wXcO :>0KYjWV#b*zD8bXsYF5V9^QZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49850	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	614	OUT	GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45258 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "d78b-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/53F0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 55179 Connection: close
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:18 UTC	1	IN	Data Raw: 95 Data Ascii:
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: 62 01 a9 0a a0 f7 50 9c ba 32 ac 05 62 2b 33 4a 1b 15 ed ce b5 21 91 eb 20 0c 68 29 52 13 af 81 a8 d3 23 81 ac b8 d1 19 d0 93 ff 00 3a d1 72 d3 4a 8f 8a 30 23 f8 fd 40 19 bc 2b f7 d4 81 27 b7 a2 78 d6 a3 e1 ba 3f 10 e3 df d7 fb 68 85 74 2b d7 31 40 df ba a0 7f 77 13 ef 3f b2 85 bb 0b 0b f6 c6 78 d0 6e 35 e2 18 51 2a 48 3f 75 65 23 b3 d5 10 0e 46 b1 6c 4e 34 48 e9 6b b7 1d 52 ca e6 cc 42 aa f6 b3 34 00 3b 49 14 d6 76 3b e7 df 5e 53 05 76 76 6f 6e 4c f5 6a b6 a6 dc ff 00 d6 68 8b 3f 26 f3 c6 00 e6 76 e8 9f f9 ef 83 5a b7 9f 2c 73 bb 0b 13 2d b3 2e 07 ff 00 aa e3 9f b8 d0 db 6d f9 dd 95 de 1c ad dd d5 62 e1 9f ee 5e 16 c9 f6 4d 43 21 0d 1f 77 5f 54 76 f1 f4 04 0e 3d 04 13 e0 63 40 83 87 a9 f0 ac d4 b9 f7 54 2a 8a 38 51 d5 65 7d 98 7e ca f1 59 3f fe 46 a7 f4 Data Ascii: bP2b+3J! h)R#:rJ0#@+'x?ht+1@w?xn5QH?ue#FlN4HkRB4;Iv;^SvvonLjh?&vZ,s-.mb^MC!w_Tv=c@T8Qe}~Y?F
2024-04-19 00:44:18 UTC	1	IN	Data Raw: d3 Data Ascii:
2024-04-19 00:44:18 UTC	16383	IN	Data Raw: cc 25 52 13 15 82 ea 4a 3c 9b 03 39 1e bd b3 75 c0 54 d4 9b d4 1d da 82 d3 95 aa 2e de b7 d7 5f 81 a5 b8 f7 12 ca a8 8b 61 26 bb 6a 90 fa ab ed 21 ed 0d dc fb b5 51 e1 fb f3 10 cc 19 26 6a 21 94 b6 87 38 eb 83 af 2d 4d 7f 24 72 5d 06 d7 b4 ea b0 d8 62 1a e1 3b 59 aa 3a a4 32 cc e7 64 4b 44 a8 d3 f6 d9 10 e5 c7 aa 65 2c 3e ab 05 d7 48 29 4b 69 40 5a a9 b5 19 a1 4d df ec 7a de c5 b2 55 b4 98 cf fd 0c 5a ad 3a 45 2b 1b 0a a7 4e f3 71 a8 ae b6 e6 c9 19 2d 46 f6 cf d4 17 16 49 48 47 5b 4e ad 55 64 f3 37 7a 33 ba c2 76 f6 96 cc b8 cf 57 3b b9 52 bf b1 eb ae 89 12 1b fa 49 11 ec 6a 18 f7 d0 1a 70 a9 ac 14 3a 47 ca 3a 9d 0e 64 99 46 75 73 cd a2 7a d8 50 96 84 4c b0 5b 45 0f 03 ee 95 36 99 0d 2c 12 a1 e6 8f 22 46 40 07 a4 49 af 43 95 b3 6d 2c 05 2b 51 d3 09 91 08 Data Ascii: %RJ<9uT._a&j!Q&j!8-M$r]b;Y:2dKDe,>H)Ki@ZMzUZ:E+Nq-FIHG[NUd7z3vW;RIjp:G:dFuszPL[E6,"F@ICm,+Q
2024-04-19 00:44:18 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-04-19 00:44:18 UTC	6027	IN	Data Raw: 15 7e 60 82 32 47 a1 c8 1f f2 75 e4 4e 3c 48 39 ef df 20 03 e9 df 3d 39 8e e7 c8 a8 0c e4 1c 77 09 cf c0 76 f4 ea f6 5a db 28 62 6e f5 74 a8 ca f8 38 98 ec 42 61 c2 9f c9 2e a4 8c fe 23 f6 b5 bf 05 aa 54 9f 15 01 dc 7f d9 54 85 7a 02 70 7c c7 45 c5 61 29 62 12 13 f1 fd 45 19 20 13 df d5 5e bd ba 8c 8c 61 72 dd 5b aa 1e 84 87 5d 3f e3 e2 94 f4 84 fa fc a9 ee 72 47 96 0e 31 db 23 03 1d 36 91 8c f8 60 fa fa 03 9e e4 77 3d fa 7c 8c 60 ba e6 7d 7e 2b 50 38 f8 fc 3a 75 af 2c 07 10 52 a1 83 dc 1e d8 1d 25 a5 8f 20 db ee c4 5f 90 f5 8d 24 10 41 3e a3 c5 58 c7 e5 d2 99 56 49 61 f2 9e e0 fa 05 1f 1f f5 75 66 f3 63 2e 06 1c 7d af 81 f7 42 07 b4 12 3e 05 4e 90 3a d5 68 90 3c 7f 97 51 57 32 ee 7d 4c 93 1d 0e cb 51 fc d7 25 c5 9f ef fe dd c2 6a 29 4a 1f 57 2a 4b 43 72 Data Ascii: ~`2GuN<H9 =9wvZ(bnt8Ba.#TTzp\|Ea)bE ^ar[]?rG1#6`w=\|`}~+P8:u,R% _$A>XVIaufc.}B>N:h<QW2}LQ%j)JW*KCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49851	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	616	OUT	GET /global-elements/footer/images/facebook_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58371 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "74c-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/A427) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1868 Connection: close
2024-04-19 00:44:18 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49853	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	617	OUT	GET /global-elements/footer/images/instagram_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58338 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "b12-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/5335) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2834 Connection: close
2024-04-19 00:44:18 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49854	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	617	OUT	GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58156 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "a65-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/53D5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2661 Connection: close
2024-04-19 00:44:18 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49855	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	615	OUT	GET /global-elements/footer/images/threads_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58967 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "745-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/5332) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1861 Connection: close
2024-04-19 00:44:18 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49856	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:18 UTC	609	OUT	GET /global-elements/footer/images/x_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:18 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58955 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:18 GMT Etag: "54d-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (agb/538F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1357 Connection: close
2024-04-19 00:44:18 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49859	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	685	OUT	GET /global-elements/footer/images/youtube_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58999 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "371-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (agb/535F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 881 Connection: close
2024-04-19 00:44:19 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49860	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	623	OUT	GET /global-elements/lib/script/require-jquery.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58956 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "4a-5057c23aa4c00" Last-Modified: Wed, 15 Oct 2014 20:40:16 GMT Server: ECAcc (agb/53A0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 74 Connection: close
2024-04-19 00:44:19 UTC	74	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 7d 29 3b Data Ascii: USPSRequireNS.define(["jquery"],function(){return jQuery.noConflict(!0)});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49862	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	562	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:19 UTC	652	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 28851 Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e0634f0f53d0a85cd36335242b7da5dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: vBKKuAH07N_nOhV9bOzapOGSlPlexLDfx8ahRcORBbUBS04CV0uQAQ== Age: 34072
2024-04-19 00:44:19 UTC	15732	IN	Data Raw: 76 61 72 20 74 4f 62 6a 65 63 74 43 68 65 63 6b 2c 5f 61 6c 6c 6f 77 65 64 51 75 65 72 79 73 74 72 69 6e 67 73 3d 5b 5d 2c 69 73 53 65 61 72 63 68 3d 21 31 2c 6f 43 4f 4e 46 49 47 3d 7b 47 57 54 5f 55 41 49 44 3a 5b 22 55 41 2d 33 33 35 32 33 31 34 35 2d 31 22 5d 2c 47 57 54 5f 47 41 34 49 44 3a 5b 22 47 2d 43 53 4c 4c 34 5a 45 4b 34 4c 22 5d 2c 46 4f 52 43 45 5f 53 53 4c 3a 21 30 2c 41 4e 4f 4e 59 4d 49 5a 45 5f 49 50 3a 21 30 2c 41 47 45 4e 43 59 3a 22 22 2c 53 55 42 5f 41 47 45 4e 43 59 3a 22 22 2c 56 45 52 53 49 4f 4e 3a 22 32 30 32 34 30 34 31 36 20 76 37 2e 30 31 20 2d 20 44 75 61 6c 20 54 72 61 63 6b 69 6e 67 22 2c 53 49 54 45 5f 54 4f 50 49 43 3a 22 22 2c 53 49 54 45 5f 50 4c 41 54 46 4f 52 4d 3a 22 22 2c 53 43 52 49 50 54 5f 53 4f 55 52 43 45 3a Data Ascii: var tObjectCheck,_allowedQuerystrings=[],isSearch=!1,oCONFIG={GWT_UAID:["UA-33523145-1"],GWT_GA4ID:["G-CSLL4ZEK4L"],FORCE_SSL:!0,ANONYMIZE_IP:!0,AGENCY:"",SUB_AGENCY:"",VERSION:"20240416 v7.01 - Dual Tracking",SITE_TOPIC:"",SITE_PLATFORM:"",SCRIPT_SOURCE:
2024-04-19 00:44:19 UTC	13119	IN	Data Raw: 2f 69 67 29 3f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2b 67 3a 64 3b 61 3d 5f 55 52 49 48 61 6e 64 6c 65 72 28 5f 73 63 72 75 62 62 65 64 55 52 4c 28 63 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 30 3d 3d 3d 63 7c 7c 30 3c 63 26 26 6f 43 4f 4e 46 49 47 2e 55 53 45 5f 50 41 52 41 4c 4c 45 4c 5f 43 55 53 54 4f 4d 5f 44 49 4d 45 4e 53 49 4f 4e 53 3f 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 6f 43 4f 4e 46 49 47 2e 47 57 54 5f 47 41 34 49 44 5b 63 5d 2c 0d 0a 7b 67 72 6f 75 70 73 3a 6f 43 4f 4e 46 49 47 2e 47 41 34 5f 4e 41 4d 45 2b 63 2c 63 6f Data Ascii: /ig)?document.location.protocol+"//"+document.location.hostname+g:d;a=_URIHandler(_scrubbedURL(c));for(c=0;c<oCONFIG.GWT_GA4ID.length;c++)0===c\|\|0<c&&oCONFIG.USE_PARALLEL_CUSTOM_DIMENSIONS?gtag("config",oCONFIG.GWT_GA4ID[c],{groups:oCONFIG.GA4_NAME+c,co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49863	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	616	OUT	GET /global-elements/lib/script/helpers.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58963 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "2b7-505dad4fe5380+gzip+ident" Last-Modified: Mon, 20 Oct 2014 13:38:38 GMT Server: ECAcc (agb/5363) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 695 Connection: close
2024-04-19 00:44:19 UTC	695	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 72 65 71 75 69 72 65 2d 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 6e 3d 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 65 78 74 61 72 65 61 22 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 7d 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 6f 28 29 7d 2c 73 3d 66 75 6e 63 74 69 Data Ascii: USPSRequireNS.define(["require-jquery"],function(e){var t=function(){var t="placeholder"in document.createElement("input"),n="placeholder"in document.createElement("textarea"),r=function(){e(document).ready(function(){i()})},i=function(){s(),o()},s=functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49865	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	621	OUT	GET /global-elements/header/script/search-fe.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58972 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "8d8-5d77081c47c40+gzip+ident" Last-Modified: Mon, 07 Feb 2022 16:58:17 GMT Server: ECAcc (agb/A411) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2264 Connection: close
2024-04-19 00:44:19 UTC	2264	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 72 65 71 75 69 72 65 2d 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 3d 7b 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 2c 72 28 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 62 6f 64 79 3d 65 28 22 62 6f 64 79 22 29 2c 74 2e 73 65 61 72 63 68 3d 65 28 22 2e 73 65 61 72 63 68 22 29 2c 74 2e 73 65 61 72 63 68 54 6f 67 67 6c 65 3d 65 28 22 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 22 29 2c 74 2e 73 65 Data Ascii: USPSRequireNS.define(["require-jquery"],function(e){USPSGlobals.Require.requireGlobals(["resize-manager"],function(a){var t={},o=function(){n(),r()},n=function(){t.body=e("body"),t.search=e(".search"),t.searchToggle=e(".global-header--search-button"),t.se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49864	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	706	OUT	GET /component-guide/blue-caret.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/assets/css/welcome/welcome-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58481 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "250-56c54c4b80440+gzip+ident" Last-Modified: Wed, 16 May 2018 15:56:57 GMT Server: ECAcc (agb/53BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 592 Connection: close
2024-04-19 00:44:19 UTC	592	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49866	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	724	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/global-elements/footer/css/footer-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58148 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT Server: ECAcc (agb/5393) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5390 Connection: close
2024-04-19 00:44:19 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49868	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	452	OUT	GET /assets/images/welcome/premium/id-phoneblur.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48597 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "1d24b-615aecbfb49c0" Last-Modified: Tue, 09 Apr 2024 19:19:11 GMT Server: ECAcc (agb/530D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 119371 Connection: close
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:19 UTC	1	IN	Data Raw: 89 Data Ascii:
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: f0 3b a3 58 c5 bc 16 76 fe 92 d9 1f 05 c2 34 eb ea 7f 51 ba 47 62 55 73 04 00 41 b8 00 19 03 70 64 db 30 6a 0c 98 cc 18 83 11 80 19 30 21 10 1e bd 89 fc d1 75 79 df 33 bc cf 7e ed e7 7b 7d 4f 83 d6 b6 47 5d 82 3a 3a ef 07 ab eb 5f 33 ab c3 bf 53 f2 3c d7 58 e9 7c 5e 8f 67 f2 bd 9f 77 70 47 79 e9 f2 ae fe 8f 94 5f 63 c8 f8 eb 97 57 2b 71 49 5a b0 cb 67 53 72 89 5d 6b 0b 77 47 24 b3 c7 34 ce 1d ba 56 d9 53 2d 53 d8 68 a6 b6 9a b9 ab de 75 aa 8a 4e b9 d1 f6 e7 6d ae 53 bb 73 dd 2a 6e 17 13 b7 2f c9 48 b0 32 9b 56 b6 29 f4 4e 21 e3 1b 2a 4a 49 1b ec b6 9c e6 ec 90 e5 ec 37 3f 48 f1 de 14 b8 1a 50 82 af b2 15 d3 6b 5e 9a f3 b0 2a 67 70 46 15 1a 16 9b 10 94 99 58 50 3a 97 2e 4e d1 81 dd 8e 01 6d 6e 92 c9 23 69 18 d2 22 44 05 02 93 55 51 94 b8 43 95 6e 06 60 22 Data Ascii: ;Xv4QGbUsApd0j0!uy3~{}OG]::_3S<X\|^gwpGy_cW+qIZgSr]kwG$4VS-ShuNmSsn/H2V)N!JI7?HPk^*gpFXP:.Nmn#i"DUQCn`"
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 48 ad d1 96 f4 34 5d 16 43 ac ae d2 64 c6 a5 51 b4 55 a9 76 ec 2f 93 bc a5 fb 56 1d d4 2c 76 56 55 50 25 e9 5a 41 ee 7b 08 7f 97 df 45 a5 8b 16 43 d1 1f ff da 00 08 01 03 00 01 05 00 12 1f a6 a8 91 0d 11 a3 d2 60 99 19 ee 36 26 34 44 0c 81 89 0c 81 10 34 57 5f 71 ea d1 1a 40 91 05 91 04 15 a8 90 c6 87 59 1a 23 45 e8 64 68 d0 d4 11 07 b0 ad 04 49 1a 34 59 13 a5 44 b4 7a 34 2f 4a d6 20 6a 47 d0 5a 59 e9 77 03 b1 63 b4 48 83 b4 87 ac 74 ed 12 23 4e e8 1d 87 76 3b 31 b9 27 5a d6 4c 7d 04 a4 5a 34 55 68 d0 c8 20 82 08 20 83 b4 ed 12 3b 45 51 21 21 54 ed 2b 52 a8 c7 43 1d 60 a5 4a 63 47 c6 7c 48 78 d2 2d 51 d4 55 2a 84 8b 23 22 32 d6 0b d4 6b af 69 5e 82 45 4c 68 a2 20 ba 33 23 2a 92 c8 75 29 58 29 58 15 46 8b a2 f5 92 06 88 15 45 51 a3 b4 ed 3b 48 20 ed 3b 60 Data Ascii: H4]CdQUv/V,vVUP%ZA{EC`6&4D4W_q@Y#EdhI4YDz4/J jGZYwcHt#Nv;1'ZL}Z4Uh ;EQ!!T+RC`JcG\|Hx-QU#"2ki^ELh 3#u)X)XFEQ;H ;`
2024-04-19 00:44:19 UTC	2	IN	Data Raw: 96 67 Data Ascii: g
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 17 c8 5b 8c dd 78 6f 99 d6 f8 f8 5f 29 c7 db b6 f2 ec 78 d7 2d f6 0e 3c 18 b9 7f 30 fd ee 6a 73 5d cb 6f c9 b6 fe bb fa b7 9c f3 bb 6c 7f 8c 2a b8 fc 8b f8 e5 cc 71 f8 fc 8b 80 de f0 99 b7 7b bf db da dc 9a b9 87 79 dc f6 bb 8e e5 8a c3 52 41 65 06 dd ff 00 db f7 3e c7 f6 1e 67 bb e4 d5 78 5c 39 56 6c 7c f7 f1 63 c5 b9 75 b7 fe 06 f8 27 16 f7 7f c5 af 18 dc fd 37 bd fe 15 65 e5 69 e3 1f c0 2e 23 c2 29 f4 67 f1 23 77 e3 3f 45 e1 fe 0b f2 bc de 7f 0f fe 0a 79 ff 00 90 ef f8 4f e0 1f 2f e3 3b da ff 00 0e 39 2d bf d1 7e 7d fc 05 f3 0f 28 de 7f 20 3f 88 5b 2f b4 f8 0e 3b f8 25 f6 0f 8e ec bc 3b f8 6d f6 9f 08 fe e4 f1 ef b1 ff 00 93 bf 54 ee be 8b fe 4a f8 67 8e 7d 19 e5 3e 71 b2 fe 42 f9 6f f1 bb 9a f2 1f 22 fe 18 f8 67 93 f8 27 d6 9f ce 3e 2b fc 9f d3 9f c5 Data Ascii: [xo_)x-<0js]ol*q{yRAe>gx\9Vl\|cu'7ei.#)g#w?EyO/;9-~}( ?[/;%;mTJg}>qBo"g'>+
2024-04-19 00:44:19 UTC	1	IN	Data Raw: b4 Data Ascii:
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 8e e4 77 f4 f9 1c fc b0 2c 86 db 37 6d 16 68 29 9a 1d 73 76 95 cc 9b a6 54 57 38 b7 06 3c ed 18 f7 0d 95 dc 14 dc 41 5c ad 94 dc 4b fd c3 2b 9c ae e0 ae 77 0b 3c 15 ce 57 39 8f 3c aa e7 2b 9e 0f 94 ae 64 cf dc 14 dc 31 67 16 61 66 2f 94 59 9a 16 6e 95 cd 05 73 28 a6 52 99 ca 66 92 b9 ba 2c 85 32 4b 57 48 b5 cb 5e 47 72 d9 24 77 92 d7 1d c7 71 e4 75 2d 90 b6 43 e5 16 68 3e 52 b9 64 ab ee 29 b5 77 33 71 0b 22 e6 fc 75 da be 5d c2 df 15 7c 87 1b c7 6d fd 97 76 0c 8b bb 6f 69 31 c9 5a 4a 6a 08 86 99 5b c3 c7 91 a3 16 59 58 b2 4b 59 24 fa b7 17 cd 6e 1f 04 2e 13 0a 3f 9f 5f 62 7f e4 bc 27 71 67 63 0d a1 bb 4d 6b d1 d1 77 5a ec 5d 4d ae 1a d6 b9 72 bb b7 d5 24 25 07 0f 6e cd f6 fe 68 7f 1c b9 0f f0 df cb df bc fc 5b 77 c3 7d 8d ca f9 d6 c3 c8 73 79 87 3b 7f 28 Data Ascii: w,7mh)svTW8<A\K+w<W9<+d1gaf/Yns(Rf,2KWH^Gr$wqu-Ch>Rd)w3q"u]\|mvoi1ZJj[YXKY$n.?_b'qgcMkwZ]Mr$%nh[w}sy;(
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: c4 e9 39 70 91 33 7b 45 ef 3f 6a 73 3e 5f cd 45 eb ba 7d 2e 9a 1a ad 26 a2 37 ee e9 b5 52 d3 6a a3 ea db 9f 05 b1 6e 51 06 06 e7 08 bd c7 01 0a 95 a8 f6 d7 b4 f9 34 e5 ca 2d f2 6e 79 ac b1 aa d6 5e 85 ab fa 8d 6f 29 1a 43 3d 38 d3 03 2b b6 a0 06 a5 8c ee c6 3c 74 95 b1 28 1e 23 a2 d4 7e 6e f2 bb 51 e6 3c d7 94 f2 5e 77 cb a1 ed 8b 97 39 88 bb a7 e6 d6 6f de 16 6e 42 71 b7 2b 5a 8d 3c 74 f7 0c e0 49 f5 62 c6 cf 14 9e 03 5d 0f 74 e9 f5 1a 2d 3d 8b f7 2c 69 ae 58 b5 76 f8 bb 31 76 fc 2c 5b 97 92 3c 37 b5 42 d0 f4 2c b1 99 b8 65 68 b4 a3 5f 53 40 79 ce a6 52 bd ac 85 a8 59 e5 3a 99 ca ed 8d 15 b9 5d bd ab b6 04 7c da 78 c6 13 f3 82 fc 51 31 e1 e2 31 07 91 f3 5f ca 4e 53 3f 78 4f dc 1c f3 51 c8 b4 22 d6 aa d6 86 c5 db ba 7d 2d ed 55 cb 96 f5 17 c7 04 ed f0 d8 Data Ascii: 9p3{E?js>_E}.&7RjnQ4-ny^o)C=8+<t(#~nQ<^w9onBq+Z<tIb]t-=,iXv1v,[<7B,eh_S@yRY:]\|xQ11_NS?xOQ"}-U
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: af 10 7a b8 a9 5e db d5 5d 94 a3 1b 9c ca 7a 56 96 66 fe 96 f0 00 75 98 ab f6 a3 43 28 5c 01 b7 85 1f 5a 44 dd d0 f3 ed 7d b2 e6 af c7 19 1f 10 b5 46 34 8c a6 26 3f c6 00 fd aa 00 4b 31 9a b7 a7 9c 84 78 62 38 7a 94 40 20 97 f3 45 e8 5f 7a e4 9e fd d0 db e3 9f 29 bd 3e 5f af 94 70 8d bd 59 e3 b4 fb a3 70 37 5c 94 89 20 55 80 cf b5 46 df 7a b5 73 8b cf 19 00 73 3b ab f3 56 63 ac bd 18 c4 c2 50 26 4d 42 4f 13 83 89 2a cd cd 3c 89 91 89 e1 2c c2 71 38 63 91 3e 2a 17 67 53 28 98 5d 04 01 85 3b c2 3e df 97 05 bf 5c 46 e6 9f 55 37 31 b7 7e dd 20 e0 55 8c 5c 1c f2 57 b9 1f 3e b2 6c 6b 2d 34 8c 5c 18 ca 27 e9 9c 25 81 8c b2 3d 98 a7 25 91 7e b4 7c c8 d7 07 44 12 ca 86 89 81 7a d1 63 de 87 11 77 43 61 4e 7c 36 ae 23 8e 3d a8 bf 5a 25 62 13 07 74 48 34 21 1a 87 65 Data Ascii: z^]zVfuC(\ZD}F4&?K1xb8z@ E_z)>_pYp7\ UFzss;VcP&MBO<,q8c>gS(];>\FU71~ U\W>lk-4\'%=%~\|DzcwCaN\|6#=Z%btH4!e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49867	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	457	OUT	GET /assets/images/welcome/featured/passport-scanner.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48597 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "1524d-615aecad95f00" Last-Modified: Tue, 09 Apr 2024 19:18:52 GMT Server: ECAcc (agb/53F0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 86605 Connection: close
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 75 6a ad 36 76 95 61 77 15 c0 8c f6 28 ac d9 57 e9 de fe 88 47 78 87 d2 15 50 40 55 3f b2 91 e9 ce aa 1e f7 d7 8c 89 b7 37 6e 91 48 fa 9c 0d bf c9 39 f7 1e c9 be fe 80 6a 47 56 3b 89 3e ed 08 20 82 6a 08 f6 4f 97 a5 14 71 12 9a d0 3a 4a c5 ed d2 bd 08 53 b3 89 21 30 d5 5c 31 52 89 a8 26 94 e2 89 af 4b 58 fe 38 d6 56 ed 90 c5 6b 69 6d 73 35 bb 1c c8 ba 57 f4 2b 44 d2 5a 71 fb 75 ed b2 b2 db 6c 6e 51 98 16 e5 a5 e4 b2 05 1e a3 a4 03 bb 0d 00 3d 6b 45 21 52 3d 55 5d df 88 95 c4 e5 c5 ef 24 92 b0 90 7c 56 cb f6 5f b7 5a 77 61 ef 55 5e ad 35 51 84 10 43 a1 90 04 f7 97 74 02 aa 38 a9 e8 91 c0 02 7b a0 81 e9 34 75 1e c5 dd 8b 87 21 45 44 13 7d 9e 51 50 45 f2 3d 05 95 c8 7f dd db 3e eb 21 37 57 f6 6d ad c0 9e 3f 55 3a 91 51 69 7b 3d a9 93 30 e9 45 e1 e4 0f a1 be Data Ascii: uj6vaw(WGxP@U?7nH9jGV;> jOq:JS!0\1R&KX8Vkims5W+DZqulnQ=kE!R=U]$\|V_ZwaU^5QCt8{4u!ED}QPE=>!7Wm?U:Qi{=0E
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 95 33 01 5c fe 19 77 fc 34 ba 06 eb e2 8d cb f8 3c b5 8e 55 f6 37 3a be 76 1c d6 2f 21 ed 97 3f de b2 77 7c de d5 8a d2 35 8d 93 63 cb 6e 5b 18 a8 1e 32 b1 9f 4f c1 ed be 52 8a 4d 28 35 c4 7d 75 f1 e6 0e de e6 cf 13 e2 0c 4c d8 fd 76 6c 7f 8d 7c 89 82 92 e7 46 d6 35 fc b6 0f c9 16 f0 6e 19 df 07 ee 7f 94 56 11 79 53 59 1c 5e c2 ce ce 74 6c 69 07 88 ec 3e 42 4f 21 c9 8e 0a b4 4d 25 c7 f0 4b 46 fe 23 49 c4 b7 e9 62 ba 34 66 7a 4f ed ec d2 17 5e 44 f1 4a b4 8e 4a 41 51 b2 e3 32 39 67 ea 1e 04 c0 e2 af a5 99 91 47 cb bc 93 35 8a 6b 92 e3 2b e7 b9 9b 51 c3 47 ae eb 98 d8 a1 c8 da 5f d8 49 69 6d a6 c2 6c f5 09 a6 63 f2 0f 35 38 49 1a ec 74 cf 07 29 3b 03 87 db 0f bf 71 ab 94 2e 6d c4 33 b1 d6 b7 18 7c 88 7b 4b c3 81 71 69 66 5d cd 8a 5b 9f 90 be 4a 27 b5 f3 2b Data Ascii: 3\w4<U7:v/!?w\|5cn[2ORM(5}uLvl\|F5nVySY^tli>BO!M%KF#Ib4fzO^DJJAQ29gG5k+QG_Iimlc58It);q.m3\|{Kqif][J'+
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 00 e8 57 6b 6d 8a c1 59 6f f6 09 47 6f a2 7f 6a 9d 91 f5 4f 83 6c 94 da 86 99 db 8e cc 3d 91 ff da 00 08 01 01 01 06 3f 00 28 be fa 40 e2 bc 6b 12 69 4b 89 fa 30 c1 2b 91 15 d7 8d 40 de 0d 3a 8f b3 e8 51 c3 3a 70 27 08 f0 15 81 21 45 1c 68 f9 8d 49 14 83 53 5e 0b 48 3d 6a 0e f9 d9 d9 2c 7b 65 fb f4 ee 2c 8c 9d 21 4a 87 10 39 56 d3 dc 36 77 4f f9 79 9d 18 b9 6b 5c 53 13 99 c7 df 56 97 b1 4b ea 36 e2 31 ac 2a a1 23 11 4d ee bd b2 17 1b 9b 15 f9 96 c6 bf 99 09 f8 86 1c 46 75 8c 8f 68 3f 89 4e 55 38 61 7a a6 7a 8e 5c 28 90 e7 a7 2d 47 0a 40 e7 f9 b0 f8 8d 12 af 24 67 e6 34 34 97 0e 00 12 7d d4 7e 2c 97 07 12 3c 6b 07 14 ff 00 58 fb eb e3 23 8a a9 a4 f5 ce 5c 09 a8 da e9 4f c7 88 5e bc 6a 12 5c 4a 34 51 c4 aa 65 45 57 3e 74 5a 09 04 15 38 9a 27 5b 90 9c d6 9c Data Ascii: WkmYoGojOl=?(@kiK0+@:Q:p'!EhIS^H=j,{e,!J9V6wOyk\SVK61*#MFuh?NU8azz\(-G@$g44}~,<kX#\O^j\J4QeEW>tZ8'[
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: bf 99 a3 a9 55 3e 33 87 8f 85 62 48 0d e0 3f 6e 35 69 76 c0 d7 3e ca e2 3b 98 5a e5 d0 e7 c4 e0 e0 1d a4 b5 da 4a 21 42 0a 13 8d 77 1d b4 f2 6e fb 73 3b 81 92 35 8c ed eb e6 c0 22 32 b1 cd 2e 73 af 1b 39 05 a7 48 63 62 d0 d6 b4 64 e7 00 4f f5 cd cb b7 24 9b 74 99 d0 9b b8 f7 0d c6 5b db 70 db 58 24 8e 06 41 ac 07 23 1d 2b 8b 83 d4 ca d4 d6 75 f9 aa f2 f9 f6 f6 d6 af bc 99 d3 4b 6d 69 1f a5 6e c7 3c a9 11 46 09 d0 d5 c8 2e 14 80 94 50 50 e1 4d ed ed 86 d6 0b cd de e6 d2 ea ea de ce e2 e2 2b 76 cc db 48 8c b2 31 af 9d cc 61 91 c0 69 63 15 5c e2 1a 31 35 b0 58 8e e0 93 b9 fb a7 b8 2d 19 b4 5e 77 4b c3 9f bb 40 f9 03 66 df a0 b6 de 2d df 0c d3 31 9e 5b 79 b6 dd d2 2d 51 f9 5d 13 8b 2b 74 bf ec de ee de f7 6f d0 af d4 1b 6f 9d ec 5e f9 ed 9b 96 4c fd bb 76 2c Data Ascii: U>3bH?n5iv>;ZJ!Bwns;5"2.s9HcbdO$t[pX$A#+uKmin<F.PPM+vH1aic\15X-^wK@f-1[y-Q]+too^Lv,
2024-04-19 00:44:19 UTC	4690	IN	Data Raw: 80 c1 32 03 20 12 a5 dc 77 c9 22 b4 b3 b7 69 90 b6 42 01 c0 64 87 2a b9 b2 d9 9a d8 b6 88 1c 43 33 6f ab a4 a3 95 53 0a 2f 81 e0 3a 37 28 8d e4 97 68 70 42 a0 e6 38 a5 7c 41 7d 2d 2b a7 f1 fa bf 17 82 51 4f ed 3e 27 80 e6 3c 21 06 9b bc d9 34 80 c3 aa 40 07 c4 ce 3e ea 8e e2 34 2d 90 2a 75 ac 4f 80 a5 55 fa 0d 7d bf 47 8d 02 a3 0a 12 b7 86 69 ca 83 d9 8b d8 15 be 15 25 ac a1 5e d0 84 1c ea 58 9c c3 a1 c4 e8 e8 b4 8b d5 47 dd 4a 88 0e 63 a1 a0 55 7f 75 70 40 b8 9a c3 33 97 4a 1c f1 15 24 80 f9 9e 34 c5 cf 1a 68 c5 73 2e eb 4b c4 85 c3 3a 0a 53 9d 5c 0b 3b 66 cd dc 7d b4 e7 5f ec 6f 4f 34 81 a3 f3 a0 07 fc 6d 18 0e 62 a3 77 a6 e6 38 e0 e6 38 21 04 60 41 1c c1 a6 01 09 2d 79 08 53 2a b3 63 ad 43 6d 63 2d 37 37 04 7d 40 d4 5b 75 8c 2d 85 8c 68 0e 73 42 12 94 Data Ascii: 2 w"iBdC3oS/:7(hpB8\|A}-+QO>'<!4@>4-uOU}Gi%^XGJcUup@3J$4hs.K:S\;f}_oO4mbw88!`A-yS*cCmc-77}@[u-hsB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49869	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	442	OUT	GET /assets/images/welcome/scroll-red.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58807 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "604-591bbfef60080" Last-Modified: Wed, 04 Sep 2019 15:38:26 GMT Server: ECAcc (agb/52E3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1540 Connection: close
2024-04-19 00:44:19 UTC	1540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 05 be 49 44 41 54 68 05 e5 9b 5b 68 1c 55 18 c7 bf 73 ce 6e 0a 6b 42 1a 34 97 4d 22 b2 66 a5 14 b4 11 fa a0 42 6d 8d 08 2a 08 82 82 18 11 d2 2a 4d 15 f1 41 7a 41 41 0b de 40 aa 7d f0 c9 cb 83 a6 0f a6 6f 82 20 e8 5b 7a 83 a6 42 9f 4b 71 d3 34 cd 26 7b 89 a1 94 d4 a4 6d 32 73 fc be b3 3b eb ee ec cc ec ce ec 4e 76 67 73 20 99 99 73 f9 be ef 37 67 e6 cc cc 39 ff 65 e0 53 92 fd bb 23 59 b8 b5 47 4a 7d b7 64 72 07 03 d8 01 12 fa 24 83 0e 00 86 7f 94 e4 0a 93 b0 02 0c d2 12 e0 2a 93 ec 2a 63 fc 72 0f 74 5e 60 8b 97 57 73 75 ea fb 1f e3 a8 5f 4a 0f 0d f5 c0 aa 7c 03 a1 5e 41 ab 4f 80 94 6d 9e ac 33 76 0f db 5d c2 93 f1 Data Ascii: PNGIHDR<<:rsRGBIDATh[hUsnkB4M"fBmMAzAA@}o [zBKq4&{m2s;Nvgs s7g9eS#YGJ}dr$crt^`Wsu_J\|^AOm3v]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49870	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	462	OUT	GET /assets/images/welcome/featured/featured-small-biz-10.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 21206 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "d633-5b83fdb39c500" Last-Modified: Wed, 06 Jan 2021 18:54:44 GMT Server: ECAcc (agb/5310) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 54835 Connection: close
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 2e 00 00 ff e1 03 fb 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:44:19 UTC	1	IN	Data Raw: bc Data Ascii:
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: bc c0 90 eb e1 3f 2c 9a 9a af 37 3f c2 7d 2a 43 97 0e 47 0f 96 4f 98 92 cf 0b 44 9b 9b 5f 9d 46 cd 7d b4 bc a7 2f 99 c4 e6 62 e0 f3 58 a7 8e 28 14 ae 54 41 a4 c5 95 ad b9 c7 96 09 b7 89 ad 74 3f 0a 23 2f 3f c6 65 c7 1e 3f d4 45 96 aa 8f 3e c8 fc 51 da 22 ab e4 11 35 9b cc 7d 76 e8 6b 8d bd a9 3b 2d 7a d7 f8 83 78 dc ed b5 f8 43 ec 16 c7 c7 c3 6c 39 f9 8c 19 23 9a 44 6c 49 24 31 6c d9 71 17 8c 7e 50 0a 59 81 b9 d2 f5 a6 cc 81 66 e3 a2 09 72 9b 83 47 b7 53 66 17 1f a6 b3 5e 92 48 72 f8 8e 77 27 1a 01 8d 8d 93 9d 23 c3 08 5d 9b 55 63 44 17 41 d0 e9 ad 69 b8 b9 cb 70 d0 48 06 e7 89 6c 07 b5 6e 29 34 b2 bb a2 1b 78 7d ad f8 0e 83 16 1c 36 79 63 8d 7c d7 b7 9a eb db ae b5 3f 9b 24 38 eb 2a 02 eb 0b 11 2a 8d 49 4b 9d 47 bb ad 56 8b 35 65 9b e9 9d 0e f6 d0 38 ef Data Ascii: ?,7?}CGOD_F}/bX(TAt?#/?e?E>Q"5}vk;-zxCl9#DlI$1lq~PYfrGSf^Hrw'#]UcDAipHln)4x}6yc\|?$8*IKGV5e8
2024-04-19 00:44:19 UTC	1	IN	Data Raw: 7d Data Ascii: }
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 95 e1 61 66 8a 33 ef 51 58 cf 56 7a 63 8f cd c6 9b 2f 16 25 83 2e 35 2e 0a 0b 06 b6 b6 22 b4 a7 f9 2a 36 95 ab b6 71 29 c8 9f a6 b4 4a 7e c3 ca 27 61 ba dd d5 4e 63 a9 26 ac 16 2c 74 52 58 9b 00 05 c9 3d c2 8a e1 7a 77 38 a7 d5 10 86 5b 5d 61 bd d9 41 ea 5b 4b 06 1d d7 ad b9 6e 92 cb d4 ce a8 77 a6 bd 33 95 c8 18 f2 e5 c4 7c b8 a4 27 c8 c4 59 23 89 a6 b7 6b 6f 75 6d be c0 35 ad e7 05 2f 15 9b 37 d1 c7 83 1a 64 46 0c 72 40 d1 2a 4c 02 68 cb 8d be e1 c0 ed 37 0d fb 22 b1 f8 b8 d3 80 56 37 0e 48 b4 af f8 8f f5 51 be 60 ab da 47 b8 51 56 e7 0e 72 fd 0c ab bb 36 16 11 a7 22 2d ba 0d 82 ea 19 ba 4a 17 a8 53 a8 3a de b8 39 5d af d7 1e 1d 0e 8a c5 7f ab b3 34 b9 3c 6c bc 54 a1 fd 0d 30 4c c6 03 ce 84 5c e3 2a 0f db 57 3e 06 1d 88 da df 5d 0d 44 9c af 0d ca 71 b3 Data Ascii: af3QXVzc/%.5."6q)J~'aNc&,tRX=zw8[]aA[Knw3\|'Y#koum5/7dFr@Lh7"V7HQ`GQVr6"-JS:9]4<lT0L\*W>]Dq
2024-04-19 00:44:19 UTC	5684	IN	Data Raw: 3f 6f c0 d5 56 e2 21 05 76 b6 f8 47 6f 6d ea db 93 18 0d 6f 0b 74 3d 6d ec 35 c3 cd 23 71 5b 47 d0 9f 6d 29 1c 35 a1 54 e1 47 08 fc 81 b1 8f 69 d4 55 29 e0 e6 63 3b a2 28 f1 77 51 60 f2 2e 81 ae bd 6c 45 4c cc ac 0b 14 b7 79 5d 3e ea 24 25 f5 cf 98 0e 2c 49 a6 05 9c 6c 73 d5 7b 2a 41 89 95 0d 9d 40 72 34 16 d7 4f 6d 18 58 95 d4 6d 25 7d bd 95 0c d1 e4 aa 91 15 9e dd b7 a9 2d 59 81 79 7e 37 23 3a 01 2b aa c7 97 18 b2 6d 16 dc 07 61 34 12 24 90 a1 57 52 1d 0d 98 1e a0 d6 a1 a0 cb 98 ee 99 c0 db a2 90 de 11 ec 22 a8 f2 5c 7b 15 69 a2 20 4c 83 c4 07 e2 b5 74 70 73 be 3b 23 9f d4 fa 75 cb 47 1a be c0 e3 23 08 f6 8e ea a3 2a ab c6 5b 52 c7 a8 a9 7c d3 24 25 8f 85 d7 a8 a4 54 92 4c 73 20 d0 a8 fb 6b b3 d5 5d 59 51 ae d2 79 fe 8f 8d d7 ea 27 de 3d c5 2c 68 d1 b2 Data Ascii: ?oV!vGomot=m5#q[Gm)5TGiU)c;(wQ`.lELy]>$%,Ils{A@r4OmXm%}-Yy~7#:+ma4$WR"\{i Ltps;#uG#[R\|$%TLs k]YQy'=,h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49872	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	453	OUT	GET /assets/images/welcome/featured/pp-cedarwood.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48597 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "1b8a0-615aecad95f00" Last-Modified: Tue, 09 Apr 2024 19:18:52 GMT Server: ECAcc (agb/53BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 112800 Connection: close
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 0f 36 03 88 be ec 22 a2 90 35 3e 7c 92 06 43 53 63 20 98 9c d4 26 ea f7 10 6c 35 cd 6c 61 cb b5 41 2b ab b9 b0 fb ab 36 a7 87 b1 d2 31 cd 6b 9b 21 96 32 d3 da e4 0a 3d 53 5e 1a a6 94 39 d6 2b 86 b8 40 0b 6b 57 ee 27 3e a7 f7 c2 a5 e7 63 f5 09 05 47 f6 00 8f 80 41 12 9c 7a c7 f7 3b ed 8d 4a 7e b0 e0 8b 82 aa 72 c7 91 dd 1f dd 69 a7 21 a5 76 39 08 5e 9b 5a 44 6a 4c 99 4a c9 43 5d 64 bb d9 4d d8 dd 7c f8 76 a6 d1 71 d3 da 5f b6 d8 69 92 17 b5 81 e4 b1 ed ca 38 2e 8b ee 23 ea 05 49 e6 df 35 8c 1c 20 bf e4 8d 14 11 f2 77 d9 fd e3 38 51 7d e8 84 d6 17 17 34 01 0d 72 43 0c 8f 7e ba 5f 54 48 64 95 46 f7 3c 57 7b 02 37 9c 4b 47 50 88 20 80 bb 13 98 d6 1d 5c 4d 7b 6c 6b 23 c7 ed 4f cb 27 ca f5 00 53 76 96 db 7f a6 e2 03 da 19 91 ad 20 bc 8e d7 bf cd 51 56 4f d6 a3 Data Ascii: 6"5>\|CSc &l5laA+61k!2=S^9+@kW'>cGAz;J~ri!v9^ZDjLJC]dM\|vq_i8.#I5 w8Q}4rC~_THdF<W{7KGP \M{lk#O'Sv QVO
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 9b 62 68 7f 6f d6 82 39 16 40 63 08 12 72 17 46 75 51 9e 83 af 80 51 65 cf 74 92 36 5b 4d 86 78 da 27 f6 d2 86 c6 f8 af 4f 04 14 af 49 42 6a 36 65 16 2a 5b 02 79 6f 57 7c f6 a8 5c b3 4e 59 40 7c 52 68 ee 30 80 4c 30 4b 33 ff 00 81 37 d1 e1 bc 2a e7 2a df 73 ce 0b a5 d3 53 8d ef 61 e1 5b 6b 56 c6 c3 57 59 dc 7f 89 6c d9 62 fd 97 df 07 45 b2 97 49 43 77 e8 49 78 31 a2 cf cb 24 36 4f 8d 58 ef e0 1f 53 a1 8a 41 62 19 71 e9 33 d3 78 0d 6b dc 1d 24 b5 60 a7 23 96 d2 ad a1 35 86 39 ab 76 c6 b3 4d ae fa 76 3c 89 a3 dc f1 86 46 38 9b 00 2f 89 bf 97 f3 06 1f b7 e2 8c ff 00 e7 6f 82 e6 52 d7 5a 9d ac d0 ec 4d c6 e8 76 1e 8b 74 b3 a1 ab 93 d1 b3 53 bd 82 bb a0 8a e9 2c d7 57 c7 ef 1b e2 3f 74 e2 40 37 88 c5 08 96 2b f4 63 b2 b7 76 6b c9 ca a9 47 8e 4c c9 e5 b3 5e 38 Data Ascii: bho9@crFuQQet6[Mx'OIBj6e[yoW\|\NY@\|Rh0L0K37*sSa[kVWYlbEICwIx1$6OXSAbq3xk$`#59vMv<F8/oRZMvtS,W?t@7+cvkGL^8
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: cd 1a 31 5d 2e 4d a2 06 10 af 83 ef 7a 2d 8a c5 62 b1 59 bb 65 34 39 55 33 55 44 3b ba ab 14 73 52 5c 10 e1 8e 56 0c 05 aa 5d 6d 2d de 26 ea 71 6d d2 8b 5d 7d a4 6d 11 df 9e a6 06 1e a4 e2 4e 4d d4 48 20 c2 f2 0e 60 c7 9c 81 b5 be 1a 93 5a c1 33 ab 32 cb 3a e8 7e 56 cb c4 a2 5c de d3 fe 45 29 32 b7 ab 3b fb aa a0 43 7a 5e 4b 59 de da 14 4b cc 9b 3c dc a6 ec ff 00 f8 c2 e9 e8 f9 bb 4e f5 dd 54 08 6d 71 e8 3b c5 9b e8 30 39 27 d1 ad c0 3a 48 d2 68 ab 02 73 d8 f9 b7 78 1c 49 cd 8d 7d 6e 92 81 b5 a8 ed 41 a9 c2 47 35 43 84 fd a8 9f 59 6a 73 2a 31 44 d5 19 91 02 f4 16 55 6e e8 a0 d7 06 d9 32 b4 14 21 1e cb 54 c6 68 e7 3a 7f 2d 40 8d 94 7a ef 7e d7 bb 75 56 5c 21 fc a6 37 e2 55 87 96 f5 f6 b2 26 02 05 b9 33 6d 27 7f 67 06 bd d2 bb 57 49 ab 81 5a 15 aa d5 6d 18 Data Ascii: 1].Mz-bYe49U3UD;sR\V]m-&qm]}mNMH `Z32:~V\E)2;Cz^KYK<NTmq;09':HhsxI}nAG5CYjs*1DUn2!Th:-@z~uV\!7U&3m'gWIZm
2024-04-19 00:44:19 UTC	4	IN	Data Raw: ed 3f bc 1a Data Ascii: ?
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 83 7f f6 d6 79 d0 ee 71 21 dc 4d ef 6d 4f 0a 52 9f cb 39 d2 8b 5c 92 e4 a8 27 b1 49 bd c5 6f 7f e5 2c b9 19 47 65 d8 2b 7d dd c0 5a 8f 95 fc 99 92 49 be d3 b4 71 fa 2d f4 da 81 8f f9 27 28 3b 78 db e1 83 af 10 0f 1b 51 31 ff 00 26 e5 09 46 9b c3 44 15 4f 1d 14 9b 51 75 fe 4d ca 52 45 9b fb cc 6a 2c 3e 9b 51 27 f9 38 84 24 28 2f 95 18 52 cd e1 ec 3b ae 7b a8 79 9f ca 10 99 35 52 4e 54 63 8f d1 4a a3 f9 42 02 a9 c5 46 4a 17 b5 b5 d4 d0 5f fe d0 8c 11 7b 5a 78 b4 07 d1 a1 e1 46 39 3f 94 60 28 50 a9 12 65 47 b7 69 f4 69 a5 04 1f ca 38 85 40 1b 37 4d 08 b5 85 af a9 a0 ab fc a3 82 38 2f e6 c0 45 af 7d b6 1a 6b 5c df ca 98 1b 7c 24 3e 4c 26 e0 f6 6b d9 44 0f e5 9e 98 0b 68 4f cd 42 bc 38 03 f4 52 aa 7f 2e f4 a8 82 e8 84 64 46 76 fa 87 0a 51 1f 47 e9 08 aa 00 b7 Data Ascii: yq!MmOR9\'Io,Ge+}ZIq-'(;xQ1&FDOQuMREj,>Q'8$(/R;{y5RNTcJBFJ_{ZxF9?`(PeGii8@7M8/E}k\\|$>L&kDhOB8R.dFvQG
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 34 a6 3d cc 75 48 75 21 74 e3 6f 45 18 52 32 ec c0 b1 5e 1e 92 da da bc c3 22 89 54 f2 c5 62 4d af 6d 4f 87 86 b4 8d c1 37 1d 9d a3 70 ed f5 d4 71 83 60 ab 7d c8 35 66 bd ee d4 e9 08 28 ee cb 18 28 41 72 1b b0 06 e1 73 e2 6f 0a d5 e4 12 3a 9b 9d ca 5e c5 6d ae d2 b6 f0 fd de 5a ea 29 8b 14 78 c4 c4 3e 66 77 50 ee 91 93 a2 0d db b6 33 e9 cc 9c f4 23 00 a4 c1 41 b9 d4 bb 1e 32 13 c5 6f ee 53 08 61 2e 22 01 e5 90 0d 15 2f 6d c7 b8 51 c3 c7 b4 99 59 0c ab 1c 4c bc cc 6f 7d b1 db 98 48 4e 9f 86 8e 18 85 20 c9 c5 c6 59 0b 4f 68 1d d2 fc 9b d5 ad f1 36 e9 c8 be cf 37 35 32 6e 24 a1 3a 91 67 d3 81 35 72 a2 33 ed 05 00 0d 07 60 af 85 29 8a 39 08 f4 8b f7 f6 d7 e7 41 6d 97 e2 b6 f2 b7 71 e1 f9 5e 8f 7e a3 c2 31 5d 16 08 18 e4 7d e9 22 0c 56 ba 82 20 2d 6d b2 35 bb Data Ascii: 4=uHu!toER2^"TbMmO7pq`}5f((Arso:^mZ)x>fwP3#A2oSa."/mQYLo}HN YOh6752n$:g5r3`)9Amq^~1]}"V -m5
2024-04-19 00:44:19 UTC	14498	IN	Data Raw: ca 90 bc 77 bd c0 bd 85 f5 bd ea 3c 69 d2 64 91 9d db 32 48 b9 81 52 41 52 a0 7b 4a 07 b5 53 ca 9d 44 2a ca ed 24 60 c1 27 16 be 8c 41 d3 ef 56 37 51 8f 3e 16 9b 18 30 51 2c 4c d0 90 cb b5 95 d7 8e 97 a9 3e 66 3e 95 34 77 56 48 26 13 ae db 2d 89 8c a9 f8 a5 db 9b 74 9f 95 e0 55 a5 dd 8f d0 f0 4a 11 b5 a5 5c 86 2c bc 08 b0 6d e9 df bc 7e ed 35 db a0 90 08 dd b6 2c a5 b3 5f 5b 12 49 3e 9d b4 f3 75 4e 9b fc bf 9b 95 21 01 a7 18 b9 64 b1 e1 62 e0 a1 b8 5a b6 2f 47 e9 11 c8 d7 1b 23 c8 cf c6 7f 46 d5 66 2b 51 c5 12 45 87 2c a0 79 4e 32 f2 5c 12 49 1b 6c f0 95 dd e8 df 4d 91 87 d5 d0 46 ae d1 de 58 e5 4d c5 0d 8b 05 74 57 d8 4f 85 ad cd 40 0e ad d3 c9 26 d6 63 2a 9f 45 ac 87 75 fd 14 52 2c 8e 9b 3e b6 d3 27 cb 3a 77 f9 8a b4 02 f4 b1 93 72 47 f7 79 e1 94 dc 7d Data Ascii: w<id2HRAR{JSD$`'AV7Q>0Q,L>f>4wVH&-tUJ\,m~5,_[I>uN!dbZ/G#Ff+QE,yN2\IlMFXMtWO@&cEuR,>':wrGy}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49871	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	453	OUT	GET /assets/images/welcome/featured/po-boxes-box.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:19 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 48596 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "13107-5d786ea79e5c0" Last-Modified: Tue, 08 Feb 2022 19:42:23 GMT Server: ECAcc (agb/53F2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 78087 Connection: close
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 4c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 02 9c a0 03 00 04 00 00 00 01 00 00 01 c2 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c2 02 9c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 Data Ascii: JFIFHHLExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#B
2024-04-19 00:44:19 UTC	1	IN	Data Raw: e2 Data Ascii:
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: 57 80 35 df 00 f8 bf 56 f0 3f 88 e0 31 6a 3a 3d d4 b6 77 31 fa 3c 4c 51 b9 fa 8e 2b c5 6e ec 36 e7 77 eb 51 25 d0 dd 3b ab a3 e2 6f 89 5a 5f d8 fc 40 65 41 f2 ca a1 bf 1a e9 fe 0f fc 71 f1 47 c2 5d 55 4d a3 9b 8d 39 cf ef 6d 98 f1 8f 55 f4 35 d1 fc 60 d1 cf f6 7c 17 f8 e6 37 2a c7 d8 f4 af 9d 1d 39 c5 63 25 a8 95 d6 c7 ed ff 00 82 fc 7f e1 8f 89 ba 0a eb 7e 1b 99 64 52 3e 78 cf de 43 e8 45 2e ab a6 c5 28 21 86 08 af c8 df 86 3a f7 8f fc 17 ae 47 ac f8 4c 3a e0 fc e8 dc 23 8e e0 d7 e9 bf 87 bc 67 e2 2f 1e 69 70 cb 61 0d bd 94 8e a3 7b 4d 20 24 1e f8 51 c9 a7 67 6f 7b 43 ae 38 7a 93 87 3c 62 ed e9 a1 47 53 b1 f2 72 fc 00 3d 6b 8b be b5 21 bc c8 8e 08 ee 2b d1 f5 6f 86 2f a8 db 49 fd b3 a8 4d 71 2b 03 8d 87 62 03 ec 05 78 0d ae a3 a8 f8 4f 54 6f 08 f8 98 92 Data Ascii: W5V?1j:=w1<LQ+n6wQ%;oZ_@eAqG]UM9mU5`\|7*9c%~dR>xCE.(!:GL:#g/ipa{M $Qgo{C8z<bGSr=k!+o/IMq+bxOTo
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: d3 e0 34 ba 57 89 e3 f8 db a0 d9 79 16 97 d2 7d 9e fd 51 70 12 65 e3 2d fe f5 7c 59 f0 6f f6 4a fd a3 be 3e df 25 8f c2 bf 08 ea 3a ac 67 8f 3c 46 63 84 7b 99 5f 6a 7e b5 fd ac 7c 66 f8 73 e1 1f 0a fc 4e 5b 8f 13 e8 f0 eb 1a 06 b1 28 9b ec b7 91 ab 46 65 4e 47 0c 31 9f 4f 7a f3 2f d9 f7 fe 0a 61 f0 27 e2 67 c7 4d 4b f6 69 d7 b4 39 bc 09 ab e9 f7 1f 65 b0 8a e8 a7 97 72 47 45 4d 9c 29 c7 20 1e a3 a5 72 72 c6 0d 46 4f 7d 8e a9 39 cd 39 45 68 b7 3f 20 3e 05 ff 00 c1 02 be 2c f8 92 1b 7d 5b e3 9f 89 ad bc 3f 1b 1c bd 95 82 f9 f3 01 e8 64 38 8c 1f a0 6a fd 45 87 fe 08 8f fb 1f d9 fc 29 d5 7c 07 a5 e9 f7 0f ae 5f da 98 e0 d6 ef 25 69 65 86 6e ab 22 a8 2a 83 07 a8 03 91 c5 7e bb 78 87 c5 1e 0b f0 54 22 e7 c4 9a 84 36 aa 3a 06 61 cf d0 57 c5 df 15 bf e0 a4 bf 02 Data Ascii: 4Wy}Qpe-\|YoJ>%:g<Fc{_j~\|fsN[(FeNG1Oz/a'gMKi9erGEM) rrFO}99Eh? >,}[?d8jE)\|_%ien"*~xT"6:aW
2024-04-19 00:44:19 UTC	16383	IN	Data Raw: b1 86 db 5c ba fb 3c 73 2d dc 90 a7 96 b7 08 b2 e4 c7 28 8f 09 bf 27 70 00 b0 24 66 bd 27 c2 5f b3 af c3 1f 07 8b 38 ac ed 1e e9 2c 74 73 a1 47 1d db 79 b1 fd 99 9c c9 2e 51 86 0b cc e7 32 37 7e 07 41 5e f2 c0 94 c0 38 0d 54 f6 ee 90 82 7a 77 ad e1 85 a5 1d 97 eb f9 fe 3d cf 32 be 75 8c ab 7e 6a 96 be f6 4a 37 e8 af 64 af 65 a2 be cb 45 64 62 78 6f c2 be 1f f0 7e 83 6b e1 5f 0c db 2d 96 9f 62 be 5c 10 47 9d a8 bf dd 19 24 e2 b7 0a c4 23 25 ba fa d4 52 80 ac 1b 24 7a 91 42 4c 63 1b 65 3f 29 3c 66 b7 49 25 64 79 b3 9c a5 27 29 3b b6 2c 51 ed 39 38 03 ae 29 93 99 62 e5 46 33 4f 6d 8b 21 de 3a f4 a7 dc 3a b2 15 63 c8 fc 69 92 55 0c 8c 80 c8 72 0f 4a 82 56 21 88 41 c6 3a 1a 64 04 2c 46 3c 67 9a 46 33 48 3e 50 31 9a 00 6a c8 50 6d 71 f8 0a af 1b 3c e4 b8 c6 df Data Ascii: \<s-('p$f'_8,tsGy.Q27~A^8Tzw=2u~jJ7deEdbxo~k_-b\G$#%R$zBLce?)<fI%dy');,Q98)bF3Om!::ciUrJV!A:d,F<gF3H>P1jPmq<
2024-04-19 00:44:19 UTC	12554	IN	Data Raw: 35 e1 77 a6 fc 9c 60 e0 9e 69 be 07 d0 fe 1e f8 d2 fa d7 41 16 1a a5 e5 bd a4 17 10 c3 77 74 1d 23 54 2c 09 8c 63 19 12 29 0c 09 cf 02 be 98 b0 f0 d7 87 b4 dd 8f a7 d8 c4 9b 54 c7 92 b9 21 49 dc 46 4f 3c b7 35 85 6a d1 84 ae d6 bf d7 7b 9a d3 a6 e5 1b 2d bf af 43 e7 2d 03 c3 4f e0 43 78 3c 01 6b 71 73 a9 4b 24 36 cc f7 44 88 a6 8d d5 58 4e 3c b1 8f 94 36 39 c6 00 c5 7b a7 80 1b c4 b7 be 18 b4 bb f1 5c 2f 67 7e 73 e7 42 4e 57 20 91 91 9c 90 18 72 01 39 af 40 8f 61 40 89 8d a3 8a af 31 99 77 15 c0 5f 5a e4 a9 5d cd 6a b5 ee 74 42 9a 8e c4 a1 55 c6 32 32 3d 29 b8 89 e5 c2 f0 2b 95 d5 fc 65 e1 0f 0d db 1b 9f 11 ea 96 b6 28 a3 96 b8 91 53 f9 91 5f 38 78 93 f6 d9 fd 9d bc 39 39 b7 4d 79 75 39 06 7e 4b 14 69 7f 0c a8 db fa d7 1d 4a f4 e1 f1 c9 2f 56 7a 78 4c af Data Ascii: 5w`iAwt#T,c)T!IFO<5j{-C-OCx<kqsK$6DXN<69{\/g~sBNW r9@a@1w_Z]jtBU22=)+e(S_8x99Myu9~KiJ/VzxL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49879	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	457	OUT	GET /assets/images/welcome/carousel/supplies-dotcom8.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 66436 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:19 GMT Etag: "9e3b-5b8a5e31d0dc0" Last-Modified: Mon, 11 Jan 2021 20:38:23 GMT Server: ECAcc (agb/5336) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 40507 Connection: close
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 75 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyPuhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:44:20 UTC	1	IN	Data Raw: 28 Data Ascii: (
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: d1 2a 60 b1 39 1c 67 46 b6 86 0b 29 8b c9 6d e9 b9 fd be ce 37 1e ce 2d dc 34 0c ab c8 85 32 24 75 49 53 2d c9 69 41 45 45 b5 4b 74 a5 49 52 54 2e 3d ee 02 b5 96 aa 72 4d 4a 8e ae b8 ac 76 7a 8c e3 a6 8c 5a 6a ab 0a 67 e5 ca 71 73 7d 37 6d c7 b6 f6 e3 c2 c4 dd 99 81 37 75 cd 8b 2f 3f 98 c9 46 c6 64 7c e2 62 47 54 56 5b 95 11 d8 89 8e f2 d2 da b5 f9 85 27 cc 17 42 5d 53 8a 29 ad 56 be 5b c9 b4 b0 c9 2a af 4f 76 54 c2 86 4f 45 1d d6 93 78 e7 93 f4 77 e7 5c 6a 7b b6 17 12 ce 0b 0b 86 c1 46 91 2a 5c 5c 14 08 d8 e8 b2 e7 3c a9 12 9d 6e 2b 49 69 0b 7d e5 71 71 c5 04 dd 4a 3c cd cd 71 ce 5b d2 6d ed 75 3a e3 1d d4 97 21 b2 b5 54 b1 4b 50 14 b5 01 4d 34 05 2d 40 50 8a 02 96 a0 2c e1 cf f8 e6 e0 f6 47 c7 a7 fa 2e 9f cf 40 75 23 b6 80 ad c5 01 5a 02 63 b2 80 ad 00 Data Ascii: `9gF)m7-42$uIS-iAEEKtIRT.=rMJvzZjgqs}7m7u/?Fd\|bGTV['B]S)V[OvTOExw\j{F*\\<n+Ii}qqJ<q[mu:!TKPM4-@P,G.@u#Zc
2024-04-19 00:44:20 UTC	7740	IN	Data Raw: b6 eb 71 96 10 98 53 32 f9 68 04 a9 40 28 0d 13 53 31 a3 70 6a df a9 e8 ae 7c 76 3b 12 7e 6a 15 fd 37 5b 6f e0 bf da df a6 a6 c1 87 7f 13 8d a1 1d 4e c6 97 8e df b0 99 57 15 36 bc 1e 4d 6a fa 3c 93 dc b8 d5 5a e1 37 1e d8 bf de 5e b2 57 ea b6 f9 24 ba 9f a8 ba af 57 3e b5 f6 5b 25 5b e7 d3 71 9f 1d af ed 67 23 0f 95 8c 0d b9 9f 12 22 e6 b5 f5 53 f4 ad 05 cf 82 f7 7a f4 d0 9f d5 35 f6 fe 3b 3d cf d1 53 3e 07 e2 7f 0f 1e a4 47 de fd 12 cb 61 64 26 c1 f5 c6 c8 b6 9b 1e db 35 39 88 8a 1f 4d 56 5f 8d 37 f0 5c 4f ab d5 52 57 e4 69 7c 76 da eb f5 d0 f5 cc 17 e2 49 e9 e7 2c 96 c6 42 3e e9 c0 b8 ab 78 85 fc 60 94 d2 4f f1 e1 3a fd ed f2 57 2d cf c7 75 51 cb 75 f5 fa e8 75 5b fc 83 4b 2c ea ba bd 55 3d 46 17 ab 3f 49 db b8 31 1d ce a7 6d e6 dc f1 10 f3 4c 65 9a 7b Data Ascii: qS2h@(S1pj\|v;~j7[oNW6Mj<Z7^W$W>[%[qg#"Sz5;=S>Gad&59MV_7\ORWi\|vI,B>x`O:W-uQuu[K,U=F?I1mLe{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49881	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	453	OUT	GET /assets/images/welcome/carousel/apr24-stamps.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45260 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "1e451-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/535D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 123985 Connection: close
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:20 UTC	1	IN	Data Raw: 99 Data Ascii:
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: eb 17 11 33 d6 2e 22 67 ac 3c 44 ce e4 36 9d 65 69 d8 1f 80 ff 00 6d bf b8 97 d9 8b 7e 79 4c 81 24 f4 cc 20 a2 e8 01 81 90 14 1e 95 45 47 ae 26 a9 54 33 85 4c 41 45 e2 2b ac 26 f0 89 cd e2 15 14 22 25 f3 0a 0a 65 f2 05 a5 8e be bb 77 0c 9c 46 b1 5a 56 4b 5e 6b 28 dd 59 5e 4c c0 08 f8 8c 26 10 12 e0 78 00 4c 20 05 50 00 c0 00 26 c3 9b c4 3a e4 5a a3 6a 91 de 75 8a c8 34 e4 b2 09 a9 1b c9 64 81 5a 7b 9a 2e ca 8c b2 d7 64 6b 07 53 cc 72 49 ea 7a 25 1b 56 b0 f8 8c 64 84 65 da b6 bd 3a 89 67 9a 5e 0a a8 9b 44 fd d5 b4 43 47 0b 9d ca fe 32 10 8d d5 05 4a b2 44 57 04 ea a2 43 cc 2a 43 1a 51 73 2a 91 85 42 00 08 e7 e7 80 3d 30 04 00 3f 3c e9 d0 0d f9 ed 76 ee 1d 44 b2 29 a9 32 c4 8d 96 45 b3 e4 15 b8 48 9a 46 3d f4 0b 15 53 a6 c8 23 13 2d 12 83 d8 d5 ae 52 3c 47 Data Ascii: 3."g<D6eim~yL$ EG&T3LAE+&"%ewFZVK^k(Y^L&xL P&:Zju4dZ{.dkSrIz%Vde:g^DCG2JDWCCQsB=0?<vD)2EHF=S#-R<G
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 09 ad d7 75 da e1 b3 93 c7 7e c6 a4 92 4b de 0b 40 63 1e c0 75 88 9c e6 86 34 7a cd 40 b5 b4 ff 00 fb 6a c2 c5 bb db 6e c8 8e 32 5a d6 f7 84 a4 6e 69 d6 5a e9 5c 30 69 61 2d 19 7a cb 5e 22 b0 f1 05 9d a0 f0 0b ad dc d8 a4 c9 f2 60 03 da f3 ab b2 1e 09 0f 2e 01 84 37 e4 ca 93 5e 1b 87 ec a6 ce c1 db 09 9c be 60 11 cc 10 39 c3 57 75 da 0a 1e 4b 9c e6 b5 64 d4 dc 30 5a dc fc 3f b6 ed 76 d3 5b 45 b4 59 4b ae 47 b9 ae 26 56 b9 42 02 88 13 0c 32 e3 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5f c0 6c 7e 75 f5 fc 06 c7 e7 5f 5b b4 97 d6 91 43 35 b5 c7 74 8c 25 c0 a3 41 25 4a f3 fe 8f bc a7 b7 ba 05 ec 89 a1 24 e3 cb 4b 8f 12 98 ae 69 9d 07 30 cc 1d ab fd 50 0e 77 94 1c 0b 79 d6 99 19 72 e5 e7 6e cf 7e 9c df 66 ba 7c 98 aa a3 06 19 a7 05 1c Data Ascii: u~K@cu4z@jn2ZniZ\0ia-z^"`.7^`9WuKd0Z?v[EYKG&VB2_l~u__l~u__l~u_[C5t%A%J$Ki0Pwyrn~f\|
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 92 40 3d dc b9 8c c7 a9 c3 8d 1d 3b 92 a0 24 fc 9c b8 01 99 3d 8c 87 3a b7 fb 42 fb 30 fb 3e bc dd fc 1b 2d d4 d6 cc ba 8d d0 b1 8e 9e 0d 3d ec 7a 66 96 39 15 9a 9a a4 b0 02 a1 09 af e4 d6 e5 f3 96 9f b4 57 f2 6b 72 f9 cb 4f da 2b f9 35 b9 7c e5 a7 ed 15 fc 9a dc be 72 d3 f6 8a fe 4d 6e 5f 39 69 fb 45 7f 26 b7 2f 9c b4 fd a2 b6 8d 83 ed 2f c3 13 ed 3b c5 fd bc 93 db c5 2b a3 71 96 28 9c 19 23 da 62 7c 8d 46 3c 86 b8 12 08 27 2f bc 4e 4a 85 17 25 4c 17 a1 51 7a 2a e6 3f b4 86 cd 16 e7 11 77 75 12 25 bb 22 27 03 6c 07 65 cc 38 2b c1 2e 27 d6 2b 85 47 73 b0 ed ae bb 94 c6 5b 34 6d 68 71 36 e4 8e f1 c1 48 42 d2 84 15 cf 0e 34 e6 6e 6c 71 64 bf ab 28 d0 18 8a ac 71 07 83 53 03 c7 00 6a 38 b7 cd 8d b7 11 96 8e ed e1 cd 12 b0 12 5a 00 95 a7 54 64 10 ba 1f 80 6a Data Ascii: @=;$=:B0>-=zf9WkrO+5\|rMn_9iE&//;+q(#b\|F<'/NJ%LQz*?wu%"'le8+.'+Gs[4mhq6HB4nlqd(qSj8ZTdj
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 77 04 4f 79 3d 35 6c c3 0b b5 b5 a4 26 18 e1 fd 14 45 c5 bb c4 7a 94 1c 3a c2 d4 af f6 72 62 2d 19 22 a6 3e fe 35 03 c4 2e ee 10 81 92 9f c0 56 99 a1 21 ab 9e 07 05 50 bc a9 d7 02 dd d8 84 52 70 4e 1f e4 3d 9f 65 f0 f3 5b 75 b9 6d f3 49 df 5e b4 00 d2 d2 34 fb 34 6f ce 56 b5 dd a2 ef 54 10 8d 5c 6b c2 d2 dc 4a c8 e1 17 28 5c e2 1a d0 4b 5c 02 b8 e0 01 24 05 38 63 9d 7d a5 6c d3 5f 5b 3b 6f bb 30 48 d7 3e 46 88 8c 90 30 32 40 d7 13 a4 91 89 72 1c db 85 7d b3 ee 52 ee 50 32 29 20 70 8b 5b c3 75 46 c8 9d 13 7b b5 3d a6 ea c1 a1 aa 71 5c 8d 5e f8 9e 29 2d ae 3c 45 7b 70 d8 db 6e e7 76 bb 1d 96 c5 23 01 d4 18 d6 ea 95 ce 40 0a e9 5a da ac f7 4f 0e ed 16 3b 6c f2 77 4f 9a de 3e ed cc d5 ea 17 9c 8c 3a fd 70 79 ad 6f 16 36 fb 8d b0 db 4c 17 06 37 77 8d ee 9a e9 Data Ascii: wOy=5l&Ez:rb-">5.V!PRpN=e[umI^44oVT\kJ(\K\$8c}l_[;o0H>F02@r}RP2) p[uF{=q\^)-<E{pnv#@ZO;lwO>:pyo6L7w
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 06 2b a1 03 70 36 d9 63 a8 27 54 fb 75 da ba 1a 80 27 ae de 42 07 8f 81 dc 69 23 62 83 b7 77 42 4e db fc bf 29 24 6b 63 b7 87 b4 f5 04 78 81 d3 c3 6f 66 82 76 db b4 0d 93 ed 50 ff 00 94 7e 5f a3 41 3b 10 01 07 61 d4 77 6f b1 23 a6 fb 7d 3d 34 de c7 b4 6f ef 1d c0 db 7e 9b fb 7c 75 f3 0d f6 f9 4f 76 c7 a1 1e 1b e8 01 d5 25 3b 9e 9b 6d d7 ae db f5 df 7d 61 f3 f2 c4 f9 b8 ce 25 5f 96 f2 15 ac 74 f6 93 24 60 f8 f4 cb b8 4c ab bc 16 bc af 8d 6d 0b 5f 7f ba 42 06 e4 78 eb 06 e4 7f 4f 34 92 18 ca 33 a2 ac 6f 16 c9 26 f7 c8 b6 c9 2b a9 6d 5f ac c7 30 89 7c 79 21 f9 c8 2e a2 d1 e9 0e d8 33 13 b2 37 9b 39 0b 53 89 ee 56 b3 8e 61 f5 0f cc dc 83 c2 93 f2 27 66 65 11 30 7c 2f 2f 56 35 94 61 99 f5 9d d3 36 b2 b0 ec 53 06 ac f8 ec 52 bf 02 b9 08 f2 52 5e 8e 1b ac 8e e2 Data Ascii: +p6c'Tu'Bi#bwBN)$kcxofvP~_A;awo#}=4o~\|uOv%;m}a%_t$`Lm_BxO43o&+m_0\|y!.379SVa'fe0\|//V5a6SRR^
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 01 49 1b 02 92 0f 4d bc 46 91 f4 7e d1 fe ea 7e e7 e1 1a 7f c3 bb ca 74 b7 dd bf 67 9a 1b 57 94 1c 23 a8 6c bb b7 76 df b9 df 56 3f ef 71 32 d1 7e 97 5f 10 9b e8 28 91 5b e7 2b c9 18 df 95 fe 6c 6b 8a 76 ea 9f ca 6f f5 fa f4 d0 f6 fc bd 4f b3 db f3 6a 3c 28 51 9e 9b 36 63 ed c6 87 12 32 3c c9 12 a4 bc a0 86 98 65 be 81 4b 5a 8e df 47 5f 0d 45 87 95 d4 7d 94 ec e6 94 f4 35 b7 2e 3c e8 b2 12 da bb 5d 6d 32 a2 ad 6d a6 5c 65 1d 9d 68 ec a4 1f 66 da db ee fc 83 c7 c3 ee 6a ba db b7 b8 62 f9 b5 64 be ed ba 34 6d d8 72 a9 4a 24 7d 52 b4 9e d1 f2 e9 68 56 e5 2b 4a 90 ad ba 1e d5 82 93 b1 f6 28 03 d0 fb 0e aa a0 ca 7d b7 72 5e 37 2c 61 b9 0a 01 01 e7 20 21 0a 73 17 b6 5b 47 af 97 32 b8 79 45 ce a1 c7 9a 51 3b 1d 39 82 72 a6 30 ce 4f 8f 87 55 26 aa 43 6e 9a fc 97 Data Ascii: IMF~~tgW#lvV?q2~_([+lkvoOj<(Q6c2<eKZG_E}5.<]m2m\ehfjbd4mrJ$}RhV+J(}r^7,a !s[G2yEQ;9r0OU&Cn
2024-04-19 00:44:20 UTC	6	IN	Data Raw: ce 0e ba 60 25 2d Data Ascii: `%-
2024-04-19 00:44:20 UTC	9297	IN	Data Raw: ac a8 f7 13 fa e4 6a e6 73 77 3b 0a fa df 58 dc 5d 06 8d 94 73 26 78 cb 78 ac 17 fd 42 67 f1 dd 83 8a 04 5c 24 63 95 eb 8e 12 d2 a3 c5 f2 da 5b 28 4b 64 76 80 35 e8 f5 cc ab 3a e5 7a bc b7 84 7f 57 c7 aa 0e 03 e4 ca cf d3 9c aa be 93 2d ca 30 7e 36 e4 7b 2c 43 91 ec 2a 93 31 98 f6 99 95 c6 25 3a 2b f3 a7 bc 83 29 b9 ed 20 f7 a9 48 4a 87 a4 6f 5c dc 5b ea eb d4 bc 3e 42 cb bd 5e e5 5e 9f ec 70 2c 9f 95 72 6c cb 8b a4 e2 3c 6f 33 0d 9c e1 b5 c5 b2 19 d3 a1 5e 23 32 81 7a f4 4b 16 25 25 c6 d2 0a 1d 67 b1 6d ee 5c b3 bc 11 23 55 3d 52 26 5a 22 72 9b 76 13 30 de 8a 1d 92 dc 85 38 84 b6 f3 29 6d 65 27 74 fb c3 d9 d7 6d 71 ec 6e 3e a9 82 fe 30 d5 f5 f4 e8 9f a4 75 f6 92 f1 78 2d 22 85 28 53 d3 e2 45 93 1e 53 4a 91 28 ac 42 f3 55 b2 77 1d 37 db 56 52 b8 fe 82 74 Data Ascii: jsw;X]s&xxBg\$c[(Kdv5:zW-0~6{,C*1%:+) HJo\[>B^^p,rl<o3^#2zK%%gm\#U=R&Z"rv08)me'tmqn>0ux-"(SESJ(BUw7VRt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49880	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	452	OUT	GET /assets/images/welcome/carousel/apr24-cards.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45260 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "1806c-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/5380) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 98412 Connection: close
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:20 UTC	1	IN	Data Raw: d7 Data Ascii:
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: c5 9c 75 e4 85 0a 95 85 36 b5 ab 2b 25 e4 af 6b 8b 70 16 67 11 8c fb bf 8b 10 2c 17 15 6a 2f 19 8c b2 8b 89 da 1a d2 92 7c e2 60 ab 03 50 79 85 fe a7 4c 78 bd d9 e6 07 9e 60 78 e6 3a 67 39 f4 07 ff 00 16 eb 9f fa 89 ff da 00 08 01 01 00 01 05 00 ff 00 5d 33 19 cc 5a 04 d4 c9 25 64 90 b1 46 e6 91 69 78 bc c7 22 0e 39 93 8a c7 32 a9 3e 39 95 c8 f1 c1 39 a0 0f 04 f4 d8 1e 0a 44 d0 1e 0a 56 c8 1e 66 62 c9 8e 66 68 d3 8c 20 7d 48 bf 3f d2 0c d2 8b c6 57 13 c1 ab 16 02 bd d9 0b 5f 36 df 5f dd 6f c4 96 54 1e 01 50 50 1a 33 16 de fa ea f3 d9 cb b8 ca 26 bf d1 2d c7 6a d9 e4 de 5c 78 b2 02 5c a6 87 8e 6e 38 c2 40 72 d2 b6 69 0a 4d dd 4d e1 ad a8 89 60 b9 75 a6 52 43 7b b5 70 e7 82 48 65 34 cc 37 7d 3e 16 41 81 e1 45 0b 18 70 71 21 17 03 fe df d7 31 52 62 b8 37 64 Data Ascii: u6+%kpg,j/\|`PyLx`x:g9]3Z%dFix"92>99DVfbfh }H?W_6_oTPP3&-j\x\n8@riMM`uRC{pHe47}>AEpq!1Rb7d
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 48 5f 71 a0 f1 3e 43 f3 e8 59 b4 fd 5b c6 1e 21 19 11 7d fc db 66 a7 f1 71 a8 1f 6e da c8 4b 22 09 cc 29 1a b3 46 8c 55 4b 2f 32 3c e9 e2 2b a8 c4 57 0f 11 03 c5 49 04 0f cc 47 9f 97 db a7 c4 5e 64 a5 93 15 20 a1 46 3c d6 a0 fc 40 10 77 07 7f 49 52 7d f5 d2 5e c0 e3 af 19 d8 f8 82 a4 10 47 fb 2c a4 82 0f b7 57 3c ec a4 5b 48 6e de 34 b8 72 02 4b 29 f5 2a 46 05 6a c1 3e 21 41 c4 53 7a 90 0d 58 00 51 40 7a 79 b0 24 57 dc 69 b1 1e 54 d1 01 f7 d0 08 6b a6 ff 00 ef 3f fe 1f c4 f0 fe 86 5b ab 96 61 6d 1a 96 72 aa 58 85 1b b1 0a bb 9a 0a 9a 0d f6 d5 96 1f ba af 67 c6 cd 73 1a 4f 6e b2 c5 c2 4b c8 04 7d 69 7e 48 3b 74 e6 6e 97 a8 0e 61 d5 59 49 4e 5e 91 82 be ec 5c f9 cc 60 72 70 ce ac d2 cb 2c 5f 2e 6d 10 f5 23 b5 b6 29 c6 ea 66 99 c1 79 56 82 28 e3 75 62 c5 56 Data Ascii: H_q>CY[!}fqnK")FUK/2<+WIG^d F<@wIR}^G,W<[Hn4rK)*Fj>!ASzXQ@zy$WiTk?[amrXgsOnK}i~H;tnaYIN^\`rp,_.m#)fyV(ubV
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: 7d a0 79 1a 1d 44 65 9d 62 73 e3 42 3f 61 f6 ea 6b ce b8 b8 15 1b 1a 29 a0 f8 54 52 b4 55 1e 03 cc 92 c7 7d 3c 77 38 c9 d5 81 a1 a3 29 fd 15 03 56 d7 71 0b 98 ee 63 27 76 8c 3a 90 45 0a b7 16 15 56 06 8c 35 86 86 e3 3b 25 cf 6e 63 cb c3 04 3c 7a 48 84 30 66 e7 1d 7e f1 92 a1 63 77 a9 44 01 16 80 1d 0e 4d af 88 57 ed d2 d0 8a 6b fc 3a 1e dd 5c b7 b5 cf f6 7e 28 3a f7 7e 0e 55 f7 68 9a 6f ed d6 fa b9 cd e1 c5 b5 8e 46 6a b5 cd c1 80 49 33 05 8d 51 78 13 b0 aa af 19 57 d2 a4 05 6a 33 ea 19 e6 c9 e6 a4 70 8c 52 6f 58 0b 52 0c 8f 10 29 c0 b4 e5 f8 06 21 96 35 f8 0a 7c 4d 2c 9f cd 32 30 62 e2 67 44 53 3c d3 3b f1 26 af 21 04 96 66 20 d1 14 84 45 14 15 26 ba e8 76 37 64 c4 b0 c9 48 cd cd f4 d3 7c bc ae 4d 00 87 16 9d 49 e5 e4 aa d5 76 78 51 1c 02 c5 ab 51 35 af Data Ascii: }yDebsB?ak)TRU}<w8)Vqc'v:EV5;%nc<zH0f~cwDMWk:\~(:~UhoFjI3QxWj3pRoXR)!5\|M,20bgDS<;&!f E&v7dH\|MIvxQQ5
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: d0 99 b3 c5 5b 65 9b ae 5c 94 b6 4a 38 fa d3 bd 33 d4 35 d5 af ea ec ee a9 e3 34 77 42 ed ea 98 b1 4f 1a a9 10 df b4 68 23 cb f3 44 9f ec 47 77 63 f7 86 4b 2b 63 6d 73 61 55 43 73 0e 82 65 27 5f 5b 44 c8 66 ee ff 00 c4 14 74 59 bd da c6 b1 24 7d 4d 0c 90 bc 71 ec e4 b6 7c f8 bf a0 cd 4f 6d 5a 06 76 86 87 63 59 a2 bc dc 4e b4 92 fb 20 58 19 d6 ba 0d 14 eb b1 b1 d5 62 d0 59 30 75 30 0e c2 d2 bc 20 61 60 45 17 aa 3c 16 3d 18 3f 4a 0d 32 d1 e9 76 76 33 33 35 b5 32 25 54 75 4d 97 61 d8 e9 e2 60 ec a4 18 47 98 7c fd 44 d9 85 83 42 39 51 01 fd f3 e2 c7 13 05 ee 7b 6a ae 55 5f 13 33 35 98 0e d9 fd b2 a4 37 1d 96 6b bc 7f 5e 4f bb 7e a7 af 33 b6 49 2a 66 e7 3d 67 0a 11 d4 f9 7a d8 d6 21 74 d9 ee 31 42 e9 2d 60 4c d6 ab d1 8b a1 db f5 6e a5 b2 e4 ac 9a 98 5a 76 58 Data Ascii: [e\J8354wBOh#DGwcK+cmsaUCse'_[DftY$}Mq\|OmZvcYN XbY0u0 a`E<=?J2vv3352%TuMa`G\|DB9Q{jU_357k^O~3I*f=gz!t1B-`LnZvX
2024-04-19 00:44:20 UTC	4	IN	Data Raw: 92 17 36 74 Data Ascii: 6t
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: b6 09 79 30 e1 c5 72 8c a7 77 08 a8 8a d5 e1 57 e8 be 29 05 12 39 aa 96 c0 96 93 85 02 7c b0 1e 6b 83 1a 6b ab 9a 74 78 91 88 e0 91 e0 72 37 84 f2 e3 85 e5 53 9f 08 58 f2 99 00 a3 e5 4b 68 f0 98 ef 00 8e e1 8a 57 a9 91 5c 39 c7 69 40 cf 36 09 e8 47 2b 5b c7 3c 70 a1 b3 a6 c2 66 45 b0 aa 8a 47 d6 5a d3 05 d9 69 b6 52 65 2f dc 31 f7 47 88 d1 a5 c0 6e 21 22 8c 5f 7e 17 3c 2f 5e 1c a9 e8 5e 33 7d a3 9a 3d 85 55 f5 6c a8 b7 15 e8 56 16 1c d8 13 22 b9 52 44 29 d1 97 87 70 8e 6b c2 71 f9 b0 a3 57 27 9b 5c 8a ba be f6 b6 28 2f fa ff 00 77 a6 a8 84 58 91 a0 c0 97 63 4f 20 b4 e5 99 3a 3e a8 0b 30 4b 12 04 59 6a 57 56 15 23 91 a5 62 2a ab f9 7a a3 44 38 82 e4 84 96 62 c4 e5 1a 8b ec 58 08 73 59 ea 46 35 88 ad 56 39 1c d7 f1 fa f9 e7 95 e7 c7 be b1 9d e9 5e 15 51 5a Data Ascii: y0rwW)9\|kktxr7SXKhW\9i@6G+[<pfEGZiRe/1Gn!"_~</^^3}=UlV"RD)pkqW'\(/wXcO :>0KYjWV#b*zD8bXsYF5V9^QZ
2024-04-19 00:44:20 UTC	109	IN	Data Raw: c2 2f 1e 23 e8 50 63 5a c6 ca bd de 46 68 90 2a 48 55 b5 d5 55 98 3c 5c 0b 46 01 cf 6c 59 ff 00 67 0a 54 9f 60 8b ee 09 0d f9 2f f4 b7 a0 8c 61 1b ca 2f a5 ed 47 b7 94 f3 45 e1 c8 a9 ca 2f 8e 18 c6 b1 3f 26 b5 1a 9f e6 44 4f e8 03 cb 8b 5f 0a 34 a9 3c 7d cc 98 f1 40 13 c8 e3 8e 3d f2 8c 6d 21 78 e3 fd 65 5f ff 00 68 9f ff d9 Data Ascii: /#PcZFh*HUU<\FlYgT`/a/GE/?&DO_4<}@=m!xe_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49882	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	451	OUT	GET /assets/images/welcome/carousel/apr24-swag.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 45260 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "d78b-6151d289ee200" Last-Modified: Tue, 02 Apr 2024 13:34:00 GMT Server: ECAcc (agb/53F0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 55179 Connection: close
2024-04-19 00:44:20 UTC	15279	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: ee a5 a7 6f 6f 65 2a 2d 59 68 5c 9a aa 82 55 c3 e9 4d c9 e3 f7 79 94 8a 97 73 20 17 e5 43 59 95 57 83 d6 5c 74 80 dd ca da 91 51 42 f6 76 b2 42 d1 2d 41 e8 15 02 a5 c4 b6 df fd ab 77 c6 fc bc ba b3 68 04 a9 02 34 c8 a5 b5 4a 79 c5 c8 69 f5 d3 e9 0b 93 25 53 6b 12 aa cd b9 69 b3 19 d9 b0 d4 e3 1f 11 f5 75 4d e3 6f 79 cb 48 06 6e 09 a5 13 d2 df fe 30 95 a5 0d 3c b5 29 25 5e 72 01 70 3e 0a c9 d9 29 6d 05 50 eb 49 2d 49 ae 3b d0 ef 06 dd 71 cc 19 de 64 ed ff 00 e5 41 d1 15 9a 4b 46 3c 18 a0 ed e7 d3 73 85 ae aa e1 e9 32 d4 5d 85 1d c0 53 2d 25 b8 f8 ed c2 ed 85 e3 7e 5e 67 a0 32 10 84 b2 e4 e9 7e d3 28 71 6e 4c 92 b5 d2 e9 2a fd 66 68 b2 ca 2a 93 fa 64 4b 92 b0 b1 f0 e3 58 76 45 97 de 72 75 95 3f 80 e8 a9 f7 1e 71 6b 08 6d 82 11 e4 0a c2 42 9c 25 4a 74 6e bf Data Ascii: ooe-Yh\UMys CYW\tQBvB-Awh4Jyi%SkiuMoyHn0<)%^rp>)mPI-I;qdAKF<s2]S-%~^g2~(qnLfh*dKXvEru?qkmB%Jtn
2024-04-19 00:44:20 UTC	1106	IN	Data Raw: d8 fa 62 15 b6 71 5f 36 d4 e9 9f 74 75 bc 41 c6 ac 5c f2 10 dd f8 b2 b3 72 17 7c c1 cd 3b f5 97 ff 00 e7 4e 0b 62 df 63 9c dd fe 8b 19 1a 3c 74 40 77 63 7c fd 5b ce 49 83 26 6f b5 95 79 45 d4 7e dc f9 66 c7 8b 76 28 1c 7f 47 c9 5b 67 da cf 3f d8 6d 1c bb f6 b3 a9 d5 6c 76 7f d3 d0 b5 e9 1c a6 5d 9f bd fd b5 5c d9 ed 11 e5 d7 53 cb 83 65 2e a6 7a 21 3b 25 10 0c 54 1c 6c 9a 06 c9 aa 5f 71 07 3b 68 35 f1 ad b9 03 83 b7 49 50 67 de d7 51 4b 7f e8 e1 f2 1f 1f 6c f5 61 ba 1e 5b e1 bb 79 a7 db 89 b2 54 fc 8d 3a 43 13 98 89 23 f8 64 a8 a8 01 8f 2f 94 95 60 8c a4 7e a0 31 df b9 38 e9 7f 38 05 29 f3 38 1d b1 f9 63 05 19 cf c7 24 f4 a2 92 32 9e e7 b6 3e 51 db 39 c9 f4 cf f8 f4 eb ab 47 8a 0c 37 d6 31 91 97 18 41 58 c1 04 8f 25 ab 19 1e 84 74 a4 58 c3 66 5c 3b 28 2d Data Ascii: bq_6tuA\r\|;Nbc<t@wc\|[I&oyE~fv(G[g?mlv]\Se.z!;%Tl_q;h5IPgQKla[yT:C#d/`~188)8c$2>Q9G71AX%tXf\;(-
2024-04-19 00:44:20 UTC	16383	IN	Data Raw: cc 25 52 13 15 82 ea 4a 3c 9b 03 39 1e bd b3 75 c0 54 d4 9b d4 1d da 82 d3 95 aa 2e de b7 d7 5f 81 a5 b8 f7 12 ca a8 8b 61 26 bb 6a 90 fa ab ed 21 ed 0d dc fb b5 51 e1 fb f3 10 cc 19 26 6a 21 94 b6 87 38 eb 83 af 2d 4d 7f 24 72 5d 06 d7 b4 ea b0 d8 62 1a e1 3b 59 aa 3a a4 32 cc e7 64 4b 44 a8 d3 f6 d9 10 e5 c7 aa 65 2c 3e ab 05 d7 48 29 4b 69 40 5a a9 b5 19 a1 4d df ec 7a de c5 b2 55 b4 98 cf fd 0c 5a ad 3a 45 2b 1b 0a a7 4e f3 71 a8 ae b6 e6 c9 19 2d 46 f6 cf d4 17 16 49 48 47 5b 4e ad 55 64 f3 37 7a 33 ba c2 76 f6 96 cc b8 cf 57 3b b9 52 bf b1 eb ae 89 12 1b fa 49 11 ec 6a 18 f7 d0 1a 70 a9 ac 14 3a 47 ca 3a 9d 0e 64 99 46 75 73 cd a2 7a d8 50 96 84 4c b0 5b 45 0f 03 ee 95 36 99 0d 2c 12 a1 e6 8f 22 46 40 07 a4 49 af 43 95 b3 6d 2c 05 2b 51 d3 09 91 08 Data Ascii: %RJ<9uT._a&j!Q&j!8-M$r]b;Y:2dKDe,>H)Ki@ZMzUZ:E+Nq-FIHG[NUd7z3vW;RIjp:G:dFuszPL[E6,"F@ICm,+Q
2024-04-19 00:44:20 UTC	6028	IN	Data Raw: 20 15 7e 60 82 32 47 a1 c8 1f f2 75 e4 4e 3c 48 39 ef df 20 03 e9 df 3d 39 8e e7 c8 a8 0c e4 1c 77 09 cf c0 76 f4 ea f6 5a db 28 62 6e f5 74 a8 ca f8 38 98 ec 42 61 c2 9f c9 2e a4 8c fe 23 f6 b5 bf 05 aa 54 9f 15 01 dc 7f d9 54 85 7a 02 70 7c c7 45 c5 61 29 62 12 13 f1 fd 45 19 20 13 df d5 5e bd ba 8c 8c 61 72 dd 5b aa 1e 84 87 5d 3f e3 e2 94 f4 84 fa fc a9 ee 72 47 96 0e 31 db 23 03 1d 36 91 8c f8 60 fa fa 03 9e e4 77 3d fa 7c 8c 60 ba e6 7d 7e 2b 50 38 f8 fc 3a 75 af 2c 07 10 52 a1 83 dc 1e d8 1d 25 a5 8f 20 db ee c4 5f 90 f5 8d 24 10 41 3e a3 c5 58 c7 e5 d2 99 56 49 61 f2 9e e0 fa 05 1f 1f f5 75 66 f3 63 2e 06 1c 7d af 81 f7 42 07 b4 12 3e 05 4e 90 3a d5 68 90 3c 7f 97 51 57 32 ee 7d 4c 93 1d 0e cb 51 fc d7 25 c5 9f ef fe dd c2 6a 29 4a 1f 57 2a 4b 43 Data Ascii: ~`2GuN<H9 =9wvZ(bnt8Ba.#TTzp\|Ea)bE ^ar[]?rG1#6`w=\|`}~+P8:u,R% _$A>XVIaufc.}B>N:h<QW2}LQ%j)JW*KC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49876	23.194.116.39	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:19 UTC	619	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:20 UTC	532	IN	HTTP/1.1 302 Moved Temporarily Location: /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1 Date: Fri, 19 Apr 2024 00:44:20 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:20 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49883	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	453	OUT	GET /global-elements/footer/images/facebook_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58373 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "74c-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/A427) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1868 Connection: close
2024-04-19 00:44:20 UTC	1868	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 06 bf 49 44 41 54 58 09 c5 58 59 6c 54 65 14 3e ff 7f ef 6c 5d e9 36 b4 d1 98 60 85 04 02 8d 3c 90 20 f8 84 c2 9b 42 24 c6 14 e5 c1 e5 89 a4 c4 46 28 82 26 36 51 91 a5 51 22 1a 13 5f 8c 0f b2 84 44 49 78 51 8c cb 03 6b 7c 11 10 1e 58 c4 18 90 2e d3 8d 4e a7 b3 dc 7b 8f df b9 33 b7 cc b4 77 66 da 0a 78 d2 db 7b e7 5f ce f9 fe b3 fd e7 ff 15 cd 81 1a bb 06 aa 89 03 0b b5 11 5e a9 28 f3 b4 72 9c 85 4c aa 41 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXYlTe>l]6`< B$F(&6QQ"_DIxQk\|X.N{3wfx{_^(rLA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49884	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	454	OUT	GET /global-elements/footer/images/instagram_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58340 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "b12-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/5335) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2834 Connection: close
2024-04-19 00:44:20 UTC	2834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 0a 85 49 44 41 54 58 09 bd 58 6b 8c 55 d5 15 5e 6b ef 73 ee b9 f7 ce 1d 66 2e c3 78 75 9a 34 e3 83 89 61 40 2a 4a 07 b1 a9 93 46 3b a2 25 d4 08 da 3f 35 75 e2 34 7d 64 68 9a da 1f 25 2d 3e 9a c6 a6 b1 6d 94 c4 34 c1 a0 f1 87 24 14 63 29 51 4a 69 04 92 6a 07 41 4d 85 31 54 09 f2 c7 c1 79 5c e6 c1 7d 9d c7 3e bb df 3a b7 43 18 e7 0e 6d 13 64 e5 ee 7b ce d9 cf 6f 7f 6b ed b5 f6 de 4c 0b c8 e0 0d d6 2b f9 e5 Data Ascii: PNGIHDR&&=gAMAa8eXIfMMi&&:aIDATXXkU^ksf.xu4a@JF;%?5u4}dh%->m4$c)QJijAM1Ty\}>:Cmd{okL+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49887	172.253.124.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	860	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&gjid=1539724385&_gid=1668540185.1713487459&_u=YGBAiEABBAAAAGAEq~&z=840242377 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usps.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:20 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 00:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:20 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49888	172.253.124.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	864	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=1989466777.1713487459&jid=2051262266&gjid=1052602915&_gid=1668540185.1713487459&_u=YGDACUABBAAAAGAGqCC~&z=1445488733 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.usps.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:20 UTC	590	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 00:44:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:20 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49893	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	454	OUT	GET /global-elements/footer/images/pinterest_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:20 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58158 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:20 GMT Etag: "a65-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/53D5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2661 Connection: close
2024-04-19 00:44:20 UTC	2661	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 26 08 06 00 00 00 a8 3d e9 ae 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 26 00 00 00 00 a7 3a 02 61 00 00 09 d8 49 44 41 54 58 09 ad 58 0b 70 16 d5 15 fe ee dd fd 1f 79 40 42 08 90 17 22 0f 95 ca 5b 10 50 a0 a0 80 a0 8c a5 53 a7 ad 30 4e 5b 3a d6 96 a9 56 6a 07 75 b0 ce d4 3e a0 4a 61 aa 52 2c 58 3b 32 30 16 8b e2 0b 1f 08 4e 31 45 0a ad 4d c1 c8 23 28 24 93 e4 4f 78 25 21 ef fc fb ef de db 73 f6 7f 65 ff ff 0f c6 4e cf 64 f7 df 3d f7 9c 73 bf 7b ce b9 e7 dc 8d c0 ff 40 0d 59 25 57 49 4b 4c 74 b4 58 64 08 75 Data Ascii: PNGIHDR&&=gAMAa8eXIfMM*i&&:aIDATXXpy@B"[PS0N[:Vju>JaR,X;20N1EM#($Ox%!seNd=s{@Y%WIKLtXdu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49894	23.194.116.39	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	713	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:20 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:20 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:20 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49898	31.13.66.19	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-19 00:44:21 UTC	1511	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-19 00:44:21 UTC	24	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 Data Ascii: /*** Copyright (c) 2017
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e 64 20 Data Ascii: -present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services and
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 61 3b 21 Data Ascii: nsole.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),a;!
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 62 26 26 62 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 61 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 2c 63 29 7b 62 20 69 6e 20 61 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 Data Ascii: Object.create(b&&b.prototype,{constructor:{value:a,enumerable:!1,writable:!0,configurable:!0}});b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b,c){b in a?Object.defineProperty(a,b,{value:c,enumerable:!0,configurable:!0,w
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 65 6e 74 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7d 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 21 61 28 62 29 3f 6e 75 6c 6c 3a 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 62 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c Data Ascii: ent))==="object")return a instanceof HTMLElement;else return a!==null&&(typeof a==="undefined"?"undefined":i(a))==="object"&&a.nodeType===Node.ELEMENT_NODE&&typeof a.nodeName==="string"}function b(b){return!a(b)?null:b}k.exports=b})();return k.exports}(a,
2024-04-19 00:44:21 UTC	967	IN	Data Raw: 6c 2c 77 61 72 6e 69 6e 67 73 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 69 66 28 61 29 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 62 3d 69 5b 61 5d 3b 69 66 28 62 21 3d 3d 21 30 29 72 65 74 75 72 6e 20 6d 28 7b 6d 65 74 61 64 61 74 61 3a 61 2c 74 79 70 65 3a 22 55 4e 53 55 50 50 4f 52 54 45 44 5f 4d 45 54 41 44 41 54 41 5f 41 52 47 55 4d 45 4e 54 22 7d 29 7d 72 65 74 75 72 6e 20 6c 28 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6d 28 7b 74 79 70 65 3a 22 4e 4f 5f 45 56 45 4e 54 5f 4e 41 Data Ascii: l,warnings:a}}function o(a){if(a){a=a.toLowerCase();var b=i[a];if(b!==!0)return m({metadata:a,type:"UNSUPPORTED_METADATA_ARGUMENT"})}return l()}function p(a){var b=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(!a)return m({type:"NO_EVENT_NA
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 6e 67 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 28 61 2e 77 61 72 6e 69 6e 67 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 61 7d 6b 2e 65 78 70 6f 72 74 73 3d 7b 76 61 6c 69 64 61 74 65 45 76 65 6e 74 3a 70 2c 76 61 6c 69 64 61 74 65 45 76 65 6e 74 41 6e 64 4c 6f 67 3a 72 2c 76 61 6c 69 64 61 74 65 4d 65 74 61 64 61 74 61 3a 6f 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 Data Ascii: ngs.length;c++)b(a.warnings[c]);return a}k.exports={validateEvent:p,validateEventAndLog:r,validateMetadata:o}})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsBaseEvent",function(){return function(g,i,j,k){var l={exports:{}};l.exp
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 68 53 69 7a 65 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 63 3d 61 2e 67 65 74 28 6e 75 6c 6c 2c 22 62 61 74 63 68 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 63 21 3d 6e 75 6c 6c 3f 63 2e 62 61 74 63 68 57 61 69 74 54 69 6d 65 4d 73 3a 62 7d 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 62 29 7b 6e 28 74 68 69 73 2c 61 29 2c 74 68 69 73 2e 5f 77 61 69 74 48 61 6e 64 6c 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 5f 63 62 3d 62 7d 68 28 61 2c 5b 7b 6b 65 79 3a 22 61 64 64 54 6f 42 61 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 5f 77 61 69 74 48 61 6e 64 6c 65 3d 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e Data Ascii: hSize:c}function e(){var c=a.get(null,"batching");return c!=null?c.batchWaitTimeMs:b}var i=function(){function a(b){n(this,a),this._waitHandle=null,this._data=[],this._cb=b}h(a,[{key:"addToBatch",value:function(a){var b=this;this._waitHandle==null&&(this.
2024-04-19 00:44:21 UTC	1500	IN	Data Raw: 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 3d 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 64 65 6c 61 79 49 6e 4d 73 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 65 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 73 74 72 69 6e 67 28 29 29 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 45 69 64 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 43 43 52 75 6c 65 45 76 61 6c 75 61 74 6f 72 43 6f 6e 66 Data Ascii: d"),b=a.Typed;a.coerce;a=b.objectWithFields({delayInMs:b.number(),experimentName:b.allowNull(b.string()),enableMultiEid:b.allowNull(b["boolean"]())});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsCCRuleEvaluatorConf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49896	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	452	OUT	GET /global-elements/footer/images/threads_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:21 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58970 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "745-610a3295df100" Last-Modified: Mon, 05 Feb 2024 14:20:20 GMT Server: ECAcc (agb/5332) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1861 Connection: close
2024-04-19 00:44:21 UTC	1861	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 2c 08 06 00 00 00 09 a6 ca c8 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 2c 00 00 00 00 ed 8a 1a c0 00 00 06 b8 49 44 41 54 58 09 b5 96 69 88 d5 55 18 87 35 77 d3 d1 cc b2 1c b5 51 cb 2d 14 45 4d 4d 41 2a 5c 92 36 0c 33 08 2a 5b 28 0b 6d 35 2a f2 8b 44 1b 48 65 14 52 81 8a d1 87 29 22 b0 fa d0 66 96 b9 94 69 59 e6 ee e8 b8 af 59 66 ee d6 f3 5c ef 19 ce dc f9 ff ef bd a3 d3 0f 9e 39 e7 7f ce 7b b6 f7 bc e7 bd 53 bf 5e ed 75 01 43 4a 61 68 96 9e 94 1d c1 f6 86 70 04 76 c3 26 58 01 df c1 4a d8 01 27 a0 ce d5 8b Data Ascii: PNGIHDR&,gAMAa8eXIfMMi&,IDATXiU5wQ-EMMA\63[(m5DHeR)"fiYYf\9{S^uCJahpv&XJ'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49897	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:20 UTC	446	OUT	GET /global-elements/footer/images/x_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70
2024-04-19 00:44:21 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58958 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "54d-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (agb/538F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1357 Connection: close
2024-04-19 00:44:21 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 27 08 06 00 00 00 63 61 3a 0b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 27 00 00 00 00 9a 5a 2b d1 00 00 04 c0 49 44 41 54 58 09 b5 98 5b 88 95 55 18 86 b7 4e 69 65 49 78 e8 20 12 38 9a 82 49 51 8e 10 79 18 0b b3 ec 22 8c 54 18 07 83 b0 48 ea a2 83 4c e4 85 5d 54 d0 41 30 2a 49 09 a2 42 50 88 b4 03 7a 51 53 64 78 a8 2e 26 d4 2e 9c 19 a5 60 88 0e 56 a8 a3 a3 66 96 3d cf 76 2f 5b 2d f7 de fd fb f4 c2 b3 ff b5 d6 b7 4e ff fa be b5 d6 3f 93 cb e5 72 ef c0 99 8c 6c a0 5e bd 75 1d 1d fe 02 ce e1 0f b8 15 f2 1a c5 Data Ascii: PNGIHDR&'ca:gAMAa8eXIfMMi&'Z+IDATX[UNieIx 8IQy"THL]TA0IBPzQSdx.&.`Vf=v/[-N?rl^u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49899	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	524	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:21 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-pdk-katl1840079-PDK X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-19 00:44:21 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49900	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	699	OUT	GET /global-elements/footer/images/youtube_logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
2024-04-19 00:44:21 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59001 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "371-610a3296d3340" Last-Modified: Mon, 05 Feb 2024 14:20:21 GMT Server: ECAcc (agb/535F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 881 Connection: close
2024-04-19 00:44:21 UTC	881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 26 00 00 00 1b 08 06 00 00 00 10 d9 fd dd 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 00 26 a0 03 00 04 00 00 00 01 00 00 00 1b 00 00 00 00 fe 8b 7e 56 00 00 02 e4 49 44 41 54 58 09 cd 97 4d 4f 53 41 14 86 4f ab a5 96 6a 00 2b f8 81 51 13 11 17 24 35 f1 0f b8 92 95 0b 83 0b f6 fc 08 d9 b9 26 61 21 1a 70 d5 45 eb 9e 80 4b 58 6b 58 b8 20 81 a8 91 54 9b a6 8d df b6 8a 55 0b b4 3d be ef 6d 07 1b da b4 f7 a3 90 9e e4 e9 cc 9d 3b 73 e6 bd bd 73 cf 9c f1 49 9d a9 88 1f 97 23 e0 12 b8 56 2b cf a3 8c 80 01 70 0a 84 41 2f 38 01 82 e0 78 0d 8e 85 0b a9 80 12 d8 05 c5 1a Data Ascii: PNGIHDR&gAMAa8eXIfMM*i&~VIDATXMOSAOj+Q$5&a!pEKXkX TU=m;ssI#V+pA/8x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49902	146.75.32.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	518	OUT	GET /ct/core.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	453	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4777 ETag: "157038e34123cc34939c37ef460356f4" x-amz-server-side-encryption: AES256 Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=7200 date: Fri, 19 Apr 2024 00:44:21 GMT
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 69 5b 6e 5d 7c 7c 28 65 3d 69 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 72 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 69 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 72 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 72 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var i={};function r(n){var e;return(i[n]\|\|(e=i[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,r),e.l=!0,e)).exports}r.m=t,r.c=i,r.d=function(n,e,t){r.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},r.r=function(n){"undefin
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 6c 6c 28 6e 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 29 7c 7c 22 53 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 69 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e Data Ascii: ll(n).slice(8,-1))&&n.constructor?n.constructor.name:t)\|\|"Set"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?i(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 28 29 3c 28 6e 7c 7c 30 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 74 28 30 29 2c 72 3d 7b 7d 2c 6f 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 6f 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 69 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 72 2e 76 28 6e 29 7d 72 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6f 3d 6e 7d 2c 72 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 Data Ascii: ()<(n\|\|0)},n.exports=r},function(n,e,t){var i=t(0),r={},o="unknown";function a(n){n.version=o,100*Math.random()<(i.LIST.SEND_LOGS.chance\|\|0)&&r.v(n)}r.setVersion=function(n){o=n},r.v=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerr
2024-04-19 00:44:21 UTC	643	IN	Data Raw: 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 2c 72 3d 74 28 31 29 2c 6f 3d 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 5c 2e 70 69 6e 69 6d 67 5c 2e 63 6f 6d 5c 2f 63 74 5c 2f 6c 69 62 5c 2f 6d 61 69 6e 5c 2e 5b 30 2d 39 61 2d 66 5d 7b 38 7d 5c 2e 6a 73 2f 67 3b 69 2e 73 65 6e 64 45 76 65 6e 74 49 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3b 6e 26 26 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 22 68 74 74 70 73 3a 2f 2f 73 2e 70 69 6e 69 6d 67 2e 63 6f 6d 2f 63 74 2f 6c 69 62 2f 6d 61 69 6e 2e 36 31 39 32 66 66 62 37 2e 6a 73 22 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 55 52 49 26 26 28 65 3d 22 44 69 72 65 63 74 69 76 65 3a 20 22 2b 6e 2e 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 2b 22 20 44 69 73 70 6f 73 69 74 69 6f 6e 3a Data Ascii: (n,e,t){var i={},r=t(1),o=/https?:\/\/s\.pinimg\.com\/ct\/lib\/main\.[0-9a-f]{8}\.js/g;i.sendEventInfo=function(n){var e,t;n&&n.blockedURI&&"https://s.pinimg.com/ct/lib/main.6192ffb7.js"===n.blockedURI&&(e="Directive: "+n.effectiveDirective+" Disposition:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49905	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	683	OUT	GET /component-guide/blue-caret.svg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
2024-04-19 00:44:21 UTC	1135	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58483 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "250-56c54c4b80440+gzip+ident" Last-Modified: Wed, 16 May 2018 15:56:57 GMT Server: ECAcc (agb/53BA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 592 Connection: close
2024-04-19 00:44:21 UTC	592	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49906	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	698	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
2024-04-19 00:44:21 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58150 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT Server: ECAcc (agb/5393) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5390 Connection: close
2024-04-19 00:44:21 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49908	108.139.23.251	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	523	OUT	GET /scevent.min.js HTTP/1.1 Host: sc-static.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	662	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 45523 Connection: close Server: CloudFront Date: Fri, 19 Apr 2024 00:44:21 GMT Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Origin: * Content-Encoding: utf-8 Cache-Control: private, s-maxage=0, max-age=600 Set-Cookie: X-AB=38b33afdb36f494aa03f175381ce5c1b;max-age=86400;expires=Sat, 20 Apr 2024 00:44:21 GMT;Path=/scevent.min.js;Secure;SameSite=None X-Cache: Miss from cloudfront Via: 1.1 35ccb6cc125c2f90120be4104c394baa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: Ra2B4h7okV08o3FpRTn07bgfP3DJe79f96Wba-5xZBYlxNOTOTbUXA==
2024-04-19 00:44:21 UTC	15722	IN	Data Raw: 2f 2a 2a 20 53 6e 61 70 63 68 61 74 20 50 69 78 65 6c 20 53 44 4b 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 31 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 3c 65 3b 72 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 69 29 26 26 28 74 5b 69 5d 3d 6e 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 Data Ascii: /** Snapchat Pixel SDK */!function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,r=1,e=arguments.length;r<e;r++)for(var i in n=arguments[r])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,argu
2024-04-19 00:44:21 UTC	10290	IN	Data Raw: 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 72 28 29 7b 76 61 72 20 74 3b 64 6f 7b 74 3d 22 73 6e 61 70 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 37 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 77 68 69 6c 65 28 73 74 26 26 73 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 77 72 3d 6d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 44 72 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 28 74 29 7c 7c 61 28 74 29 7c 7c 77 28 74 29 7d 76 61 72 20 78 72 2c 52 72 3d 77 72 26 26 Data Ascii: ,t)}}function Pr(){var t;do{t="snap"+Math.floor(1e7*Math.random())}while(st&&st.getElementById(t));return t}var wr=m((function(){return JSON}));function Dr(t){return void 0===t\|\|null==t\|\|function(t){return"boolean"==typeof t}(t)\|\|a(t)\|\|w(t)}var xr,Rr=wr&&
2024-04-19 00:44:21 UTC	12792	IN	Data Raw: 69 6c 3a 22 75 5f 65 6d 22 2c 75 73 65 72 5f 68 61 73 68 65 64 5f 65 6d 61 69 6c 3a 22 75 5f 68 65 6d 22 2c 75 73 65 72 5f 68 61 73 68 65 64 5f 65 6d 61 69 6c 5f 64 6f 6d 61 69 6e 3a 22 75 5f 68 65 64 22 2c 75 73 65 72 5f 68 61 73 68 65 64 5f 6d 6f 62 69 6c 65 5f 61 64 5f 69 64 3a 22 75 5f 68 6d 61 69 22 2c 75 73 65 72 5f 68 61 73 68 65 64 5f 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 3a 22 75 5f 68 70 6e 22 2c 75 73 65 72 5f 6d 6f 62 69 6c 65 5f 61 64 5f 69 64 3a 22 75 5f 6d 61 69 22 2c 75 73 65 72 5f 70 61 72 74 6e 65 72 5f 75 69 64 3a 22 75 5f 70 75 69 64 22 2c 75 73 65 72 5f 70 68 6f 6e 65 5f 6e 75 6d 62 65 72 3a 22 75 5f 70 6e 22 2c 69 73 74 3a 22 69 73 74 22 2c 61 67 65 3a 22 75 5f 61 67 65 22 2c 62 72 61 6e 64 5f 69 64 3a 22 62 72 5f 69 64 22 2c 62 72 61 Data Ascii: il:"u_em",user_hashed_email:"u_hem",user_hashed_email_domain:"u_hed",user_hashed_mobile_ad_id:"u_hmai",user_hashed_phone_number:"u_hpn",user_mobile_ad_id:"u_mai",user_partner_uid:"u_puid",user_phone_number:"u_pn",ist:"ist",age:"u_age",brand_id:"br_id",bra
2024-04-19 00:44:21 UTC	6719	IN	Data Raw: 74 79 43 6f 6f 6b 69 65 3a 4f 6e 7d 29 29 7d 29 29 2c 4f 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 6e 29 69 66 28 76 6e 26 26 70 6e 3d 3d 3d 79 6e 29 5f 69 28 6e 74 28 65 74 29 29 3b 65 6c 73 65 20 74 72 79 7b 54 2e 57 65 62 4a 53 42 72 69 64 67 65 3d 7b 73 65 74 53 52 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 63 6e 28 74 29 29 74 72 79 7b 54 6e 28 79 6e 2c 74 29 2c 5f 69 28 6e 74 28 65 74 29 29 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 4e 43 49 44 52 22 2c 74 29 7d 65 6c 73 65 20 77 74 28 22 4e 43 49 44 56 22 2c 41 29 7d 7d 2c 7a 69 28 22 67 65 74 53 52 49 44 22 29 2c 47 69 28 22 67 65 74 53 52 49 44 22 2c 7b 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 7d 29 7d 63 61 74 63 68 28 74 29 7b 77 74 28 22 Data Ascii: tyCookie:On}))})),Ot((function(){if(sn)if(vn&&pn===yn)_i(nt(et));else try{T.WebJSBridge={setSRID:function(t){if(cn(t))try{Tn(yn,t),_i(nt(et))}catch(t){wt("NCIDR",t)}else wt("NCIDV",A)}},zi("getSRID"),Gi("getSRID",{placeholder:"placeholder"})}catch(t){wt("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49907	151.101.65.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	528	OUT	GET /ads/pixel.js HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	1014	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8702 Last-Modified: Thu, 15 Feb 2024 20:38:48 GMT ETag: "9a680c8c475d8bba600d4d87b4fa7ee5" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=60 Content-Encoding: gzip Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:21 GMT Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 d4 3b 6b 73 da c8 b2 7f 05 ab 4e 38 92 99 c8 80 b1 93 80 b5 29 02 38 66 63 63 17 0f 67 b7 5c 2c 25 4b 03 28 11 12 47 12 71 7c 41 f7 b7 df 9e a7 46 32 4e 9c b3 e7 7c b8 55 bb 41 33 dd d3 ef ee e9 19 c9 07 f3 4d e0 24 5e 18 94 22 1d a3 00 25 c6 56 ce 84 ba 87 e6 c6 d6 9b eb 07 c1 9d 37 65 4f 98 3e 7d b3 a3 92 63 69 02 55 b3 ac e4 71 8d c3 79 29 c2 ff da 78 11 2e 97 f9 43 8b ac 99 97 cb 8e 11 e1 64 13 05 25 07 88 1e 54 0d 32 bf 11 73 1b 3e 47 a8 da 56 80 1f 4a bd 28 0a 23 5d eb d8 41 10 26 a5 b9 17 b8 a5 55 e8 6e 7c 5c fa a7 56 f1 2a da 3f 35 a3 95 2c a3 f0 a1 64 9b 4e e8 62 4b bb ba ee 4e 2e 7b b3 c1 f5 78 76 7e 3d 19 74 35 64 a7 84 de da 22 b2 5b 5b fc 7d 1d 46 49 dc dc a6 69 8b e8 70 57 9d 9a 8e ed fb fa da e4 20 24 b4 d1 23 Data Ascii: ;ksN8)8fccg\,%K(Gq\|AF2N\|UA3M$^"%V7eO>}ciUqy)x.Cd%T2s>GVJ(#]A&Un\|\V*?5,dNbKN.{xv~=t5d"[[}FIipW $#
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: e9 42 d6 30 54 42 01 30 60 5d a6 3c 1b 5f b2 68 62 03 1e 5b a8 e0 45 15 93 f8 b2 6e 64 da 1d 43 92 52 46 c4 83 9c 0a 6c 9e 60 7f 38 0b d6 0d 04 32 d2 dc f5 5e bd 3d 6c fc d4 bf 2a a7 a3 3a a9 f5 97 d0 91 05 35 ee 5a 3e f8 af 79 d7 a7 f4 ff be 83 15 3a cc 79 cc 61 e6 3c 0a 57 64 b6 03 db 00 75 7b e6 3f 75 c9 b3 2e 64 48 39 2f ca 29 ee 48 39 7e c6 97 05 7c aa 94 aa ca ce d2 41 83 72 46 c6 e1 f2 b6 13 dd 33 84 2f 41 d1 9f fa b2 c0 89 38 73 92 cc df 72 57 d2 c7 9f 38 52 69 ed 5d 4c b6 ce c9 b0 df 09 57 6b a8 44 10 6c 38 76 ec 35 d6 59 4c 28 bb 69 46 c0 90 ed 3e d0 2a b6 fa 57 b6 0f 36 5c 41 37 3f 19 9f bf 7e 5b 72 ed c4 d6 88 90 05 9b 6f 40 50 6a 71 2e 09 e7 47 b1 f4 4d c0 a5 60 5b 7b 4e 3e b1 d0 20 44 3f 6c e6 73 1c 61 f7 83 1f 3a 5f db fe 22 8c bc 64 b9 12 Data Ascii: B0TB0`]<_hb[EndCRFl`82^=l:5Z>y:ya<Wdu{?u.dH9/)H9~\|ArF3/A8srW8Ri]LWkDl8v5YL(iF>W6\A7?~[ro@Pjq.GM`[{N> D?lsa:_"d
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: a1 a3 e3 29 8d 8b 8a 4b 47 8d 29 0d 8f 0a a6 a3 93 29 8d 92 ca 9c 8e 4e a7 34 58 2a 0b 3a 7a 33 a5 31 53 59 ee aa 34 5c cf 9f f4 43 ac da bd e8 54 13 90 14 1c 87 89 ed 5b 6f 0f 8b c7 2a 06 bd c4 f3 04 80 b9 06 5b f4 02 92 e6 9d 44 05 a3 9e c0 c9 be 56 7f 4b cf ef 72 fe d5 71 3d 13 e1 ae d6 a8 e8 12 54 39 6d c0 aa 77 67 67 0d 63 ca 2a e3 dc 0f 21 c9 32 e1 8e b2 e2 65 a8 54 4e 9e a3 92 2d cd 9f 0c ac c6 61 76 92 e0 b7 16 fb da 4c 96 d5 3f 3c 04 f0 ba f3 93 63 00 2d 3a 4a 9d c8 1f 03 a0 cb ea 14 ea 58 ae d5 d4 19 8c b4 65 a4 1f dc 8f 29 1b 45 81 cd 1b 36 24 fb 04 36 ff ff b1 4d 38 79 61 9b e0 b9 a8 73 3d 18 8d db 83 f1 c8 ca 89 4b df 7b 25 b1 66 20 f2 66 18 20 38 4e e8 2e f0 c7 d5 e5 45 92 ac f9 14 8a dc 44 bc 48 87 c7 16 fc 0f 9b 9c e7 5a f0 60 ae bd ef d8 Data Ascii: )KG))N4X:z31SY4\CT[o[DVKrq=T9mwggc*!2eTN-avL?<c-:JXe)E6$6M8yas=K{%f f 8N.EDHZ`
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: b9 97 e0 be 49 a1 1e b9 68 21 17 38 13 20 73 4e de 31 53 e8 6d 3d 93 c2 61 33 24 a0 f9 c7 7c 6b df 4b 2c 65 9a be c3 81 86 c5 d4 e4 71 89 ce f0 13 d9 59 fd bd 82 dc a4 20 38 45 a7 52 04 d6 f7 3c e5 2c ef ba f6 29 a0 33 8b eb a4 81 13 84 c0 32 fb a8 c8 bb 3a 2a 78 d6 6e 51 54 21 7c 0b dc 11 fa 2e 30 e1 56 a3 1f 42 b2 19 c9 dc aa 1d 55 c5 bb 7d 45 c3 ec fd fe 57 fc 08 5a 5a 4c 47 6f 2a 88 5b ec 7c 51 3b 63 70 be 8c dc 04 f2 58 30 e1 67 a5 33 28 74 56 86 65 59 59 ff b9 a7 89 60 dc a0 ca 90 f2 1f 5b 7c 61 6d aa ba 82 32 14 28 82 25 eb 39 a5 3e f2 fb 0b 81 47 ee bb 6a 55 a3 75 e0 c5 03 7b a0 4b 4c f2 91 a5 78 3e 2b 58 05 0e 1c 45 3b 49 dc bc 4d a5 9c e4 ed 84 f8 fe 53 41 e0 3d 28 b5 49 3f 06 b9 f0 02 47 99 2b 63 11 11 9a 56 19 d0 6f 66 61 0a 4c 15 67 09 50 5c Data Ascii: Ih!8 sN1Sm=a3$\|kK,eqY 8ER<,)32:xnQT!\|.0VBU}EWZZLGo[\|Q;cpX0g3(tVeYY`[\|am2(%9>GjUu{KLx>+XE;IMSA=(I?G+cVofaLgP\
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 33 16 87 99 48 79 05 69 18 2e 42 a5 67 34 57 29 92 26 9b 11 0d 80 84 d3 4c 6c 75 19 b5 46 ca ee 72 34 10 6c 41 db 2c fd 86 e3 44 17 b7 40 17 27 ef c9 2e 20 6f 04 3b 3f 9e 64 9b a3 21 2c e2 68 fa c0 b1 61 80 06 e6 bc 72 a1 b9 05 ba 48 e5 e2 90 f1 fe f8 f6 16 c4 a7 04 cb f7 c2 10 2b 81 0a 46 e4 3a 03 4c 43 05 fb 64 42 47 4b 56 46 b2 00 d1 53 94 80 52 9f 54 b1 cb bc 6a 7f 9b a5 93 07 55 0b 28 40 be da 66 0d f4 97 d9 e8 7a 08 0b 24 46 d4 65 07 06 f9 e8 f9 b4 3f 01 4e 99 7a a0 b9 de 82 00 f2 7c 5e e5 35 67 01 03 27 02 09 be ef fd 8c 2a 7c f1 60 1c 51 ea c6 b0 7e 7a 9d f6 b3 74 2d bd cd b0 ca f7 61 3c 5b fb dc ff 86 95 96 83 eb d9 10 ab 80 3f 63 6d f0 64 02 8b cb fa f7 1a 6b 1f 28 fa 00 1a 2b 6c fa 00 d5 bf 2a dc 5e fb 0d 29 1a fe de cf de 8d a7 5d 45 40 96 0e Data Ascii: 3Hyi.Bg4W)&LluFr4lA,D@'. o;?d!,harH+F:LCdBGKVFSRTjU(@fz$Fe?Nz\|^5g'\|`Q~zt-a<[?cmdk(+l^)]E@
2024-04-19 00:44:21 UTC	1378	IN	Data Raw: 7a 9b 57 42 e1 57 df 5a d2 dc 7d 49 a1 37 be 8e 05 cc 7a fd f9 56 83 7b 0c 66 0d da 93 78 bb 32 99 bf 76 6f 0b b1 1e b3 55 12 78 cb 25 bf 94 fa 79 0f 98 ef f6 32 eb ef eb 65 9e 9b 92 14 b4 d9 ad d1 a4 0e 39 a0 a7 f9 db 6d c7 e3 c2 97 8a 85 b9 7d 39 16 bf 1c a5 d7 c3 e4 89 51 58 6d 44 80 eb e5 22 b4 ee 64 5c a2 93 fb ee e1 08 c7 74 2f 4f b1 14 1b e4 06 a1 88 5c ca f3 af a8 93 68 0a 10 94 ce 9d cb ce 7c 72 96 e8 59 e8 65 12 e7 6a a8 7f d7 6d 34 47 39 6a 9d 33 fa 34 56 63 b3 9a 33 da 5f 38 76 0a e5 de cb 32 16 6f c0 14 f4 c9 74 1a 71 40 17 38 0a 1b f1 6c e2 06 bc b0 8c 00 ce a9 a3 97 70 b3 7a a2 8b b9 fc b7 f3 27 78 ea 55 ec 94 7e 17 4c 0e 33 ff ae f5 34 c6 17 56 7d 30 4d 0c 80 17 76 24 65 03 80 fc dc 32 5a ea 7d 32 41 ba 2f e7 76 7c 05 7f 10 95 3e 8e e0 37 Data Ascii: zWBWZ}I7zV{fx2voUx%y2e9m}9QXmD"d\t/O\h\|rYejm4G9j34Vc3_8v2otq@8lpz'xU~L34V}0Mv$e2Z}2A/v\|>7
2024-04-19 00:44:21 UTC	434	IN	Data Raw: 2f 16 a2 57 6d c7 f6 a9 d6 7b 6c 44 bb cd 85 e8 0f db 00 f1 a1 fe ac 11 e1 cb 17 9b fa d5 5d be 72 1a 9f cd 55 f3 b9 f7 b2 f5 69 9a 4d d5 70 b3 d8 28 27 fd 09 a9 cd b9 3f 51 08 70 fc 90 b0 29 da dd b1 58 ba 20 34 7c 2c d4 66 b0 a0 58 b1 58 b0 cb a3 19 db dc 2d a3 21 66 0a e2 1b 6f 8a 12 5e 5a 6f 2c d8 6b f5 1e 0e 34 bc 9d 85 d2 99 74 a2 92 93 74 a4 b2 89 0a 4a d6 dd aa 74 c3 be 93 4c 89 da e7 31 63 fe 13 c7 56 f7 33 59 28 81 ed 8a 13 29 b0 45 2e af 6e b3 8c 60 9a 72 dc 60 7a f2 54 38 9f a5 44 bb e0 83 e0 79 fb 97 c7 8f ad 58 2b 78 77 67 df d2 59 6a 97 82 48 2e bb db 65 b2 49 c6 66 0b 84 6c 50 4b 27 bf 18 b9 70 82 5f f8 bd 04 8f 7a f4 48 50 87 1a d1 61 d5 14 e3 cc f2 34 1e cb 7f 6c 9b d1 e3 7c ae 75 c5 75 47 d7 9a cf d7 dd d1 3c ce fd 6f 1c 2c 43 7b 81 64 Data Ascii: /Wm{lD]rUiMp('?Qp)X 4\|,fXX-!fo^Zo,k4ttJtL1cV3Y()E.n`r`zT8DyX+xwgYjH.eIflPK'p_zHPa4l\|uuG<o,C{d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49918	64.233.185.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	616	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&gjid=1539724385&_gid=1668540185.1713487459&_u=YGBAiEABBAAAAGAEq~&z=840242377 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 00:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:21 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49917	64.233.185.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	620	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-33523145-1&cid=1989466777.1713487459&jid=2051262266&gjid=1052602915&_gid=1668540185.1713487459&_u=YGDACUABBAAAAGAGqCC~&z=1445488733 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 00:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:21 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49910	18.164.82.201	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	528	OUT	GET /aat/amzn.js HTTP/1.1 Host: c.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 13289 Connection: close Last-Modified: Wed, 10 Apr 2024 18:20:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: fGR5t.K8YuwuyRXgWCvjBPJCcP7L_UJH Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 0084aed5dd6a13faa2cd2ae32db12036.cloudfront.net (CloudFront), 1.1 0ed91fd9817789661f8fd99e9f14d4be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL56-C2 Date: Fri, 19 Apr 2024 00:44:21 GMT ETag: "3d13ef41aa477d7e1ec276886b9e0ec5" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: ATL58-P5 X-Amz-Cf-Id: y4HgpB-dTC7E96690eC8T19hR9qe3u4sTf9YYDhHR6O1aOULnsDNKg==
2024-04-19 00:44:21 UTC	12792	IN	Data Raw: 2f 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 70 69 78 65 6c 20 69 73 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 41 6d 61 7a 6f 6e 20 61 64 20 73 70 65 63 73 20 61 6e 64 20 70 6f 6c 69 63 69 65 73 20 61 74 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 63 6f 6d 2f 62 2f 3f 26 6e 6f 64 65 3d 37 32 35 33 30 31 35 30 31 31 2e 20 56 65 72 73 69 6f 6e 20 6e 75 6d 62 65 72 3a 20 36 2c 20 43 68 61 6e 67 65 73 65 74 3a 20 41 64 64 69 6e 67 20 69 6e 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 73 75 70 70 6f 72 74 20 66 6f 72 20 73 65 74 55 73 65 72 44 61 74 61 20 2a 2f 0a 74 68 69 73 2e 61 6d 7a 6e 3d 74 68 69 73 2e 61 6d 7a 6e 7c 7c 7b 7d 2c 74 68 69 73 2e 61 6d 7a 6e 2e 6a 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b Data Ascii: /* Use of this pixel is subject to the Amazon ad specs and policies at http://www.amazon.com/b/?&node=7253015011. Version number: 6, Changeset: Adding in phone number support for setUserData */this.amzn=this.amzn\|\|{},this.amzn.js=function(){"use strict";
2024-04-19 00:44:21 UTC	497	IN	Data Raw: 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 50 28 43 29 2c 74 3d 6e 65 77 20 41 2c 6e 3d 6e 65 77 20 4e 28 74 29 3b 6c 65 74 20 72 3d 6e 65 77 20 4f 28 65 2c 6e 29 3b 77 69 6e 64 6f 77 2e 61 6d 7a 6e 26 26 77 69 6e 64 6f 77 2e 61 6d 7a 6e 2e 71 26 26 72 2e 70 72 6f 63 63 65 73 73 43 6f 6d 6d 61 6e 64 51 75 65 75 65 28 77 69 6e 64 6f 77 2e 61 6d 7a 6e 2e 71 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 45 72 72 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 65 76 65 6e 74 20 71 75 65 75 65 22 2c 65 29 7d 29 29 2c 77 69 6e 64 6f 77 2e 61 6d 7a 6e 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 2e 2e 2e 65 29 7b 72 65 74 75 72 6e 20 72 2e 70 72 6f 63 63 65 73 73 43 6f 6d 6d 61 6e 64 28 65 29 2e 63 61 74 63 68 28 28 65 3d Data Ascii: n(){const e=new P(C),t=new A,n=new N(t);let r=new O(e,n);window.amzn&&window.amzn.q&&r.proccessCommandQueue(window.amzn.q).catch((e=>{console.error("Error processing event queue",e)})),window.amzn=async function(...e){return r.proccessCommand(e).catch((e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49919	173.222.249.67	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	481	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487457307&ip=81.181.57.52&cuidchk=1 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:21 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:21 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:21 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49924	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487458951 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:21 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49922	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	1176	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 00:59:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:21 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-19 00:44:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49923	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	1165	OUT	GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	1139	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49920	108.156.154.126	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	527	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Thu, 18 Apr 2024 17:17:13 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aa6f2c1ce9c2a64d958c51bd30439f3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: VwkKQguliyh1WzI1TYKl1hSYcxy6vebmWZwdDmE7sbJuxr54ONkE1Q== Age: 26829
2024-04-19 00:44:21 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49925	151.101.65.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	601	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:21 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:21 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-19 00:44:21 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49921	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	870	OUT	GET /global-elements/lib/script/resize-manager.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0
2024-04-19 00:44:21 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58990 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:21 GMT Etag: "410-5057c23b98e40+gzip+ident" Last-Modified: Wed, 15 Oct 2014 20:40:17 GMT Server: ECAcc (agb/5309) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1040 Connection: close
2024-04-19 00:44:21 UTC	1040	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 72 65 73 69 7a 65 54 68 72 6f 74 74 6c 65 3a 35 30 2c 63 61 6c 6c 62 61 63 6b 54 68 72 6f 74 74 6c 65 3a 31 30 30 2c 62 72 65 61 6b 70 6f 69 6e 74 73 3a 5b 7b 6e 61 6d 65 3a 22 74 61 62 6c 65 74 22 2c 22 6d 69 6e 2d 77 69 64 74 68 22 3a 35 30 30 7d 2c 7b 6e 61 6d 65 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6d 69 6e 2d 77 69 64 74 68 22 3a 39 35 39 7d 5d 7d 2c 74 3d 5b 5d 2c 6e 3d 6e 75 6c 6c 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 29 2c 75 28 29 2c 73 28 75 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 2c 69 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 Data Ascii: USPSRequireNS.define([],function(){var e=function(){var e={resizeThrottle:50,callbackThrottle:100,breakpoints:[{name:"tablet","min-width":500},{name:"desktop","min-width":959}]},t=[],n=null,r=function(){i(),u(),s(u)},i=function(){var r=null,i=window.inner

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49927	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	813	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&_u=YGBAiEABBAAAAGAEq~&z=1427125113 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49928	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	1152	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	2359	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9388747213846246268"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4218096443499257844","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9388747213846246268","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"9388747213846246268","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"9388747213846246268","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"9388747213846246268","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 00:59:22 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49930	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	906	OUT	GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	552	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:21 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af; Max-Age=63072000; Expires=Sun, 19 Apr 2026 00:44:22 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 650ff35853bb75c5 strict-transport-security: max-age=0 x-response-time: 79 x-connection-hash: 5563f163eae9389ba8ac89362e9bf13fa762ad54d3eaae9011ae571709809611 connection: close
2024-04-19 00:44:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49931	146.75.32.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:21 UTC	531	OUT	GET /ct/lib/main.6192ffb7.js HTTP/1.1 Host: s.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	481	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22983 ETag: "693f1816687516917019537449bd881f" x-amz-server-side-encryption: AES256 Content-Encoding: gzip Content-Type: application/javascript X-CDN: fastly alt-svc: h3=":443";ma=600 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Access-Control-Expose-Headers: X-CDN Vary: Accept-Encoding, Origin Cache-Control: max-age=1209600 date: Fri, 19 Apr 2024 00:44:22 GMT
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 1f 8b 08 08 c8 c3 1d 66 00 03 6d 61 69 6e 2e 36 31 39 32 66 66 62 37 2e 6a 73 00 c4 5c 0f 73 db b6 92 ff 2a 32 67 aa 10 21 a5 90 94 2c 3b 14 11 8d 93 e7 ce e4 5e 9b 74 9a f4 e6 3a 1e 8f 87 96 20 8b 8d 0c fa 48 d0 ae 9f a5 7e f6 db 05 08 12 94 48 db 71 df cd 9b 36 36 09 82 8b 1f 16 fb 0f bb a0 0f 96 05 9f 8b 24 e5 36 23 0f b7 71 d6 4b e8 c3 76 aa 1b 7b 99 2d 54 33 9f 66 4c 14 19 b7 93 33 71 be d9 d8 9c e2 05 7d 48 42 e1 ae c3 03 df 65 7f de a4 99 c8 c3 87 ed d6 65 f0 68 38 8f d7 6b 9b 0f cb 76 97 bb f5 75 46 e0 66 4d 0f 3c 97 13 a2 5b b7 d9 f0 9a 32 37 1b ce 69 02 3f 17 b4 42 26 e0 65 40 97 0d 53 bc 24 9b cd e7 cb 3f d8 5c 0c 17 6c 99 70 f6 4b 96 de b0 4c dc cb 6e 0f 8c 17 d7 2c 8b 2f d7 2c 04 f2 57 4c 84 6c 4b b6 40 2f 33 e8 91 07 ab e0 ea ed 85 75 40 c5 Data Ascii: fmain.6192ffb7.js\s*2g!,;^t: H~Hq66$6#qKv{-T3fL3q}HBeeh8kvuFfM<[27i?B&e@S$?\lpKLn,/,WLlK@/3u@
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 3a 2c 4d b5 16 7c e3 39 90 ff ef 84 dd 41 90 bb df 08 23 82 4b ef f2 3c 35 98 da 2f 94 81 ae a1 6c b5 cc ce 2c cb 11 75 74 81 d8 d1 a6 33 4d c7 33 d6 ed c0 9f 4e 49 7e 97 88 39 86 24 0f f3 38 67 56 9c cf 93 c4 0a e5 f5 1a 64 91 fb e5 0d 44 ad 71 76 6f 85 3a 5e 9d ca 56 a9 cf a1 be 1c 94 d7 3d e5 4b 74 df af 76 8d 47 75 9d e7 81 7e 6b 9e 0f 82 9a 82 3f 81 fd 44 4d 4f dd 96 64 82 d7 e5 a0 2b f6 67 8d e3 dd bb 77 be 6a be 84 1f 93 71 f5 e4 0f 63 d4 32 52 0e a5 07 68 41 c5 a9 0d 7c e3 28 3d 3f a5 77 2c fb 00 a4 6c 02 56 0e 36 2d b5 bc 54 db 34 c9 3e 30 59 c0 40 a0 08 1b 97 ca 77 f2 cd 46 a9 26 27 ef 30 c0 d1 6a 53 ba 08 4b f6 67 75 7f b6 d9 30 b3 e3 cc b8 0e 19 89 a8 b7 f3 2a 4c 17 da 22 6a 73 75 55 3f c6 75 15 54 80 6f 92 8b 52 2f ad 28 97 56 b2 0d a1 a7 54 Data Ascii: :,M\|9A#K<5/l,ut3M3NI~9$8gVdDqvo:^V=KtvGu~k?DMOd+gwjqc2RhA\|(=?w,lV6-T4>0Y@wF&'0jSKgu0*L"jsuU?uToR/(VT
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 6d b0 ad 3f 07 e9 53 af c0 55 e6 d0 d5 16 c5 61 4d 13 08 1b d7 86 0d 5d 44 f4 5a 2b 68 4b 64 32 8c 6f 6e d6 f7 b6 7a d2 0c 2c 21 c2 b9 03 8d b8 8b 16 53 72 db 1a d6 ec bc 5c 06 48 77 ee 9d 03 63 56 e2 7f bb fd 36 54 9e 80 ae dc 6f c3 2f eb f4 ae bc 35 0d 81 83 49 25 e0 83 80 08 a2 4e 5f cb 2d b4 0d e1 ce 16 de fc f8 e9 cb 2f a7 1f be 5e fc 7c f2 3f 17 ef 7f ff 7a fa 85 1e 7a ed ae 93 56 9e 43 b4 e6 f8 5a 5b cd 4a 84 c8 ee a5 7a ed 65 ca fd 0a 9c 30 72 84 0f d5 65 ab 8f 75 97 69 da 52 e7 18 07 db ad 3b 0e 64 8c 05 3d 6c d2 ea f1 c5 30 2f 2e 65 2e ab df 57 f1 98 be b7 7d d7 27 c6 d6 7a 3b 8f cb 2d 93 1a e0 c0 df 6e 21 22 fc 36 fc f6 73 fc a7 ea 82 89 0b 60 d9 4d 9a ae bf 24 ff 62 f4 18 04 1c ee 57 ad db 9f f6 24 a8 2b b6 ae 0a 89 f6 2b 80 3a 3d 2f 8d 90 6a Data Ascii: m?SUaM]DZ+hKd2onz,!Sr\HwcV6To/5I%N_-/^\|?zzVCZ[Jze0reuiR;d=l0/.e.W}'z;-n!"6s`M$bW$++:=/j
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 6c e5 dc 9e d3 bb 6d d5 f2 78 ed 70 51 16 3d 3f d9 5f 41 1f ec 42 f2 49 d7 81 07 30 d1 c2 5d b8 71 b3 ae 58 be 7a df 38 32 f7 64 85 bc a5 fb 4e ad 4e 0d 8e 09 7b d8 49 21 24 2c 59 cb d5 4d 5f 56 74 d3 95 c1 c6 c8 46 75 2c 7f 7e 75 0c 0f 21 c9 a2 f8 6e 81 00 25 cf db ee c6 3d ff f5 e5 f3 27 ba 97 9e 79 90 27 be f4 49 26 17 0f 2a 85 bb b5 13 69 c4 cb a2 09 2a ce 45 9c 65 ea 88 a3 0b 5a b9 9d aa d2 e8 d8 7b 3b a9 4f 87 5e 1a a7 24 c5 0f 60 88 41 fb 3a 0f dc 58 ca 84 28 bb 21 7a 45 c2 85 f2 6f 2c 12 4e d7 c9 d0 af d9 3d 9e 17 c2 13 28 f3 39 cb 73 f0 e5 f7 29 5f 68 05 d5 87 44 eb fc f3 55 1d 2d c0 ea 3d 33 5e 78 65 29 7a ad a7 89 de 37 4f a0 bd 2a 7d b2 3c 61 90 76 9d 2d da 3d 0c b9 7b 32 50 51 61 4e 52 05 0a 9d 47 63 c1 ef f4 cc d0 c0 9c ed 45 ed 4b c0 ea c9 Data Ascii: lmxpQ=?_ABI0]qXz82dNN{I!$,YM_VtFu,~u!n%='y'I&iEeZ{;O^$`A:X(!zEo,N=(9s)_hDU-=3^xe)z7O*}<av-={2PQaNRGcEK
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 17 85 ed 55 79 33 4a 06 6c 56 df 3a c8 bf 01 33 0b f8 58 fd c7 3f b2 12 25 e5 39 b1 74 80 79 3f 9a 4d c1 9d 11 3c 01 ce cb 3c 68 e6 b0 f3 aa 5a 9c 46 3e 1b c9 13 89 5d 5f 25 ab e3 62 3a fb de 46 a6 f5 3b 9b 9c 09 fd 79 8d 9c 5e 95 dd 65 2e 73 52 90 93 fa ef 1e 34 65 0f 0f 7a b6 cb de fe e7 ea e5 1f 7b 68 ff 9b 18 f8 89 16 c7 ea 76 b3 de 4d c2 ff 63 ef 5a bb da 46 9a f4 5f 49 7c 12 5e 69 24 1b b5 ee 02 34 bc 04 08 21 e1 b6 06 92 99 10 c2 51 8c 00 25 20 39 b6 4c c2 60 ff f7 7d aa bb 25 b5 2f cc e5 c3 ee 39 fb 9e fd 90 20 f5 b5 ba ba ba ea 69 75 57 79 fe d6 29 9f 85 74 a6 9c c9 14 79 14 b7 3a 54 7f 08 4b d7 d7 00 10 b8 06 1b 54 17 40 84 f3 ce 9c ab 6f b6 f8 30 af 0e d0 b1 20 f6 c6 a2 21 a1 e9 e7 53 2e fc d9 13 77 5b 16 9f 12 72 a7 99 39 e7 2c fe 69 9f fb 65 Data Ascii: Uy3JlV:3X?%9ty?M<<hZF>]_%b:F;y^e.sR4ez{hvMcZF_I\|^i$4!Q% 9L`}%/9 iuWy)ty:TKT@o0 !S.w[r9,ie
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 69 36 de d5 f3 12 4f e1 98 f9 63 c7 d6 f1 b8 79 9b dc f5 d3 4b 5d b4 f0 62 b9 53 62 b1 d3 3d 5a 39 20 81 b0 e7 f8 a2 ae 89 05 37 41 93 e6 ae eb 65 2a e8 1e 0d d2 67 79 91 b7 b9 04 c1 c0 d4 77 dc 3a 9f f2 5d f0 7e 70 49 21 9e 0a be 9a 64 11 93 57 10 11 1a 45 24 32 e9 c3 76 93 dc d3 16 67 4e 48 35 fd d9 5d 5a de 14 97 14 b1 4c 9b 8d 32 a8 3f 4a 57 bb 9c 5f d8 ad ec f9 f4 c7 05 45 7b 5b e4 bb 86 f1 55 a1 1e 79 38 ad 94 9c fb cf 52 11 07 a4 b9 ee 22 e0 c3 e3 64 75 d0 d9 db 3d 3e 89 1f 5f 1f 5d ec 1d 6e 6e ec 5d 1c 9f 1c 76 37 76 b6 57 1e 01 be 31 da 15 66 59 e6 68 90 ad b4 ae fa 17 14 e6 ea f6 18 94 27 d7 69 6b 62 6e 6d 77 77 df 63 eb bc 7d b4 fb 6e be 7c 3f cb db e0 51 76 9f 5e b6 d3 7e f6 0d 15 8e 37 bb 1b 47 db 17 d4 e3 f6 c1 76 f7 78 71 a5 61 6f 90 f4 d3 Data Ascii: i6OcyK]bSb=Z9 7Ae*gyw:]~pI!dWE$2vgNH5]ZL2?JW_E{[Uy8R"du=>_]nn]v7vW1fYh'ikbnmwwc}n\|?Qv^~7Gvxqao
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 15 8e e3 d0 48 e3 c0 e7 e2 a8 bb fd 7a f7 37 a3 b5 fd 93 bc f1 81 e4 fe f5 72 f8 2f b9 72 93 67 2f 87 e6 b3 2f a3 f2 d9 15 9d 20 f3 ac 16 8f a9 96 f3 be 81 69 84 78 cd 86 13 98 8f 53 fc e7 f1 e7 d2 4a 18 b2 b8 e8 9c 68 b4 18 f5 d5 bc 8a ee 56 cd 68 5e 6b 76 2a c3 29 38 59 28 fe 55 78 9c 16 d7 d6 65 ac 84 91 d5 17 73 72 3c 1e 09 55 49 b6 76 d8 3c 5e 55 8f eb e5 0a c5 77 d5 31 4f 37 89 ed f9 10 43 f1 45 8f 74 bd f8 e0 29 02 0f 70 b2 b0 a8 de 80 37 7f b2 44 4b fa 6d 88 a2 c3 5d 39 8b ce 01 19 7c 1e f2 88 6a 7f 5d 5c a1 94 ce ae fc f3 a3 ea f5 ad b5 96 5b 3a 5d c8 af 1a 38 58 d0 00 b1 81 ec 90 08 89 d0 e3 31 e5 ea 09 58 2f b1 de ea ea df 16 f5 7f 53 71 42 85 74 85 02 e9 0a 08 c6 48 fd d4 9e 57 01 1d 46 1a 23 bd 30 d2 b0 c2 7f c4 67 8c 31 df f1 6c d7 0a e9 44 Data Ascii: Hz7r/rg// ixSJhVh^kv*)8Y(Uxesr<UIv<^Uw1O7CEt)p7DKm]9\|j]\[:]8X1X/SqBtHWF#0g1lD
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 82 69 a5 51 2b b0 23 f4 d0 16 b3 a1 d0 15 04 02 22 3d 98 4f 30 62 0a 8c 80 0f 11 8a 90 ad 6f 70 09 e6 34 82 cd 76 88 ac 06 a2 04 be 1f 10 87 7d 15 ac 00 0d c3 72 bb 21 59 4d 05 b7 00 2b c0 7a 61 be 54 08 83 6c 17 60 00 30 43 45 33 b6 eb 13 06 e0 83 68 80 4d e0 85 0e e0 48 a8 62 1c e6 a3 42 10 39 be 82 76 18 c3 4c 04 20 c6 55 81 8f 07 61 71 e9 b2 da 14 06 f2 80 21 2c 48 a6 a7 c2 21 e2 7b 48 7d 38 2a 32 c2 1c a0 b1 00 73 a7 82 24 58 5c 97 a6 8d 44 af c1 4b 0c e2 11 78 11 e4 4a 85 4e 18 aa 15 60 ea a6 40 14 a8 b1 42 1f c6 d6 9a c2 53 8c b8 01 d3 ee 4c 41 2b 0f 12 ed 61 75 04 2a ca 62 96 8f ae 2d 5a aa 53 78 8b ac 3a 41 2b 05 7a 31 d7 b1 b1 66 41 84 8a c2 98 eb 03 55 30 cc 99 02 c8 42 0f ab 26 02 43 15 68 86 15 05 a0 80 89 b0 15 94 86 e9 05 89 58 3d 9e 02 d8 Data Ascii: iQ+#"=O0bop4v}r!YM+zaTl`0CE3hMHbB9vL Uaq!,H!{H}82s$X\DKxJN`@BSLA+aub-ZSx:A+z1fAU0B&ChX=
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 28 8b cb 3a fb 77 91 fd bb 31 aa b2 a1 3f ee eb ec ef 22 fb bb 91 54 d9 50 29 3f ea ec 8f 22 fb a3 31 ac b2 a1 65 1e ea ec 0f 22 fb 83 71 55 65 43 f1 90 f4 fc c5 fe 3f 93 fb ff a9 8f 74 65 1d 05 70 66 5f 4d b2 9d cd de 07 4e a1 a1 ea 13 24 4d ea 67 c9 5a da b5 6b 52 4f 57 fc 0c eb b4 f7 95 2c 88 8d bf 26 55 77 c5 3a be b3 d7 a4 12 af 18 e6 d8 75 e2 f7 4a 1c 00 ed ea c4 8f 95 3c 98 6e d3 d1 87 4a 20 e8 bb 22 45 25 fa 67 df 04 9a 33 70 fe 6b 3c 8b ee 0d f4 06 0f fd b2 58 5a 12 7f e9 34 a3 cb ef 29 bd a7 a3 fc e1 53 e9 e2 17 cb 45 1e ff 7d a8 f9 86 ef 86 9b b2 e9 05 77 2e e4 09 65 55 66 be db a7 72 44 c7 55 ae be 3a 58 d7 d2 b9 5f 13 e1 1f 63 e6 1c 13 9a f0 76 f4 ab ef e9 84 c7 7b 55 f1 e4 13 b5 ea 03 50 53 04 0c 67 fe 6a 6e 18 ba 15 c7 9a b3 24 02 4a 37 be Data Ascii: (:w1?"TP)?"1e"qUeC?tepf_MN$MgZkROW,&Uw:uJ<nJ "E%g3pk<XZ4)SE}w.eUfrDU:X_cv{UPSgjn$J7
2024-04-19 00:44:22 UTC	1378	IN	Data Raw: 4b 6c 8f e9 5c ae ea 42 82 2a da 11 d8 26 62 09 07 1e f9 46 65 53 b5 b0 04 02 9d 38 59 64 a2 2f 43 15 f0 59 18 4f 07 cc 48 c1 39 04 32 ab 25 c6 51 9e 84 cf b5 7c 45 62 99 0f 2e 89 b8 8c 6a ca 45 3d 7f ed e3 86 72 aa 87 84 41 44 f0 e8 6f 12 b2 28 63 74 ff e1 b9 ef 16 30 65 a5 9e 22 7e e5 9d 03 be c0 bc fd 0a 25 60 b1 be f5 1f 0f be d9 fe c3 c3 9d f3 dd f3 47 41 f7 fc 6f ff 75 b3 5a ff f7 60 e7 3f fb e1 ee d7 f3 e8 1c 06 ed e7 7e f9 e2 ed a0 f4 17 2a ed fa 3b de 23 76 2d eb d9 db 7d da 3a df dd 39 77 cf bd f3 47 83 87 0f 1e b1 45 9e 7e be db 92 09 c3 bc c4 8c be e4 e7 37 3d 97 89 f4 2b 08 3e 7e 1a 5e cf b3 d5 62 9e 8a e1 22 a3 53 1b a6 9c f2 8f d0 56 ba 98 ec 02 d1 ef 62 11 bd 95 8b e7 73 82 a1 18 aa fc 46 19 7b 40 3e 34 2e 38 94 6d 6f db 6e 65 84 df a8 cf Data Ascii: Kl\B&bFeS8Yd/CYOH92%Q\|Eb.jE=rADo(ct0e"~%`GAouZ`?~;#v-}:9wGE~7=+>~^b"SVbsF{@>4.8mone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49934	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1255	OUT	GET /td/rul/978081151?random=1713487460484&cv=11&fst=1713487460484&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 00:59:22 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:22 UTC	470	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 37 39 32 37 31 33 31 39 32 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 Data Ascii: interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7792713192"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.double
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 36 33 39 35 35 37 36 37 39 38 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 Data Ascii: adfetch/gda?adg_id=146205439819\u0026cr_id=663955767983\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j7639828228","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 36 36 33 38 38 39 31 31 32 38 30 36 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 Data Ascii: 663889112806\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j7639828228","metadata":["154495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.ne
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 74 69 6f 6e 22 3a 74 72 75 65 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 53 6c 6f 74 53 69 7a 65 4d 6f 64 65 22 3a 22 61 6c 6c 2d 73 6c 6f 74 73 2d 72 65 71 75 65 73 74 65 64 2d 73 69 7a 65 73 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 Data Ascii: tion":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-sizes"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/t
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 36 33 39 35 35 37 36 37 39 38 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 Data Ascii: dg_id=146205439819\u0026cr_id=663955767983\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl"
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 Data Ascii: 6cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metadata":["154495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?a
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 64 64 69 6e 67 53 69 67 6e 61 6c 73 53 6c 6f 74 53 69 7a 65 4d 6f 64 65 22 3a 22 61 6c 6c 2d 73 6c 6f 74 73 2d 72 65 71 75 65 73 74 65 64 2d 73 69 7a 65 73 22 7d 7d 2c 7b 22 61 63 74 69 6f 6e 22 3a 30 2c 22 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 22 3a 32 35 39 32 30 30 30 2c 22 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 Data Ascii: ddingSignalsSlotSizeMode":"all-slots-requested-sizes"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUr
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 30 32 36 63 72 5f 69 64 3d 36 36 33 39 35 35 37 36 37 39 38 33 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 Data Ascii: 026cr_id=663955767983\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j377238866","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.double
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 Data Ascii: ${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j377238866","metadata":["154495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49933	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	923	OUT	GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	572	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:21 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="; Max-Age=63072000; Expires=Sun, 19 Apr 2026 00:44:22 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 80aed0642ea2ff92 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: a05962f0034d5b51213c4267862c4eb40556e38ac7a74ae325cde88e421cacfe connection: close
2024-04-19 00:44:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49936	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=07093c6e-4f8c-47e3-90a9-df076e0b6c1e&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	413	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:22 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49939	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	885	OUT	GET /rp.gif?ts=1713487460175&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:22 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49940	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1239	OUT	GET /activityi;dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-19 00:44:22 UTC	984	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Expires: Fri, 19 Apr 2024 00:44:22 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkcmCwWCvgkHr_k7oV4TTq7LTHKaiTxDcXLmixjONW4_pM6SYscyNtseZbo9Ko; expires=Sun, 19-Apr-2026 00:44:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:22 UTC	271	IN	Data Raw: 63 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 70 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 70 2e 70 6c 3f 61 3d 31 30 30 30 30 26 2e 79 70 3d 31 30 30 34 39 30 38 37 26 65 Data Ascii: c08<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&e
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 6d 65 70 61 67 65 22 2f 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 70 78 6c 2f 3f 61 64 76 3d 72 39 36 33 63 6f 6c 26 63 74 3d 30 3a 6f 74 78 77 7a 70 61 26 66 6d 74 3d 33 22 2f 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 72 6c 64 65 66 65 6e 73 65 2e 63 6f 6d 2f 76 33 2f 5f 5f 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 70 5f 6c 6f 61 64 65 72 2e 31 2e 31 2e 30 2e 6a 73 5f 5f 3b 21 21 4e 39 36 4a 72 6e 49 71 38 49 66 4f 35 77 21 79 52 55 77 6c 44 42 4e 47 Data Ascii: mepage"/><img height="1" width="1" style="border-style:none;" alt="" src="https://insight.adsrvr.org/track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3"/><script src="https://urldefense.com/v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNG
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 20 66 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 66 29 3b 7d 20 7d 20 29 28 64 6f 63 75 6d 65 6e 74 2c 77 69 6e 64 6f 77 2e 52 42 20 7c 7c 20 7b 7d 29 3b 0a 52 42 2e 64 69 73 61 62 6c 65 50 75 73 68 53 74 61 74 65 3d 74 72 75 65 3b 0a 52 42 2e 69 6e 69 74 69 61 6c 69 7a 65 28 22 64 58 4e 77 63 33 77 78 4f 44 55 32 4e 44 63 35 4e 48 77 78 4f 44 55 32 4e 44 63 34 4f 54 6f 78 4d 54 4d 31 4f 44 51 35 66 44 45 34 4e 54 59 30 4e 7a 6b 77 4f 6a 45 78 4d 7a 55 34 4e 44 68 38 4d 54 67 31 4e 6a 51 33 4f 54 55 3d 22 29 3b 0a 52 42 2e 74 72 61 63 6b 28 22 76 69 65 77 22 29 3b 0a 52 42 2e 74 72 61 63 6b 28 22 73 69 67 6e 75 70 22 2c 7b 22 61 6e 5f 73 65 67 22 3a 31 38 35 36 34 37 39 Data Ascii: me("script")[0]; f.parentNode.insertBefore(a,f);} } )(document,window.RB \|\| {});RB.disablePushState=true;RB.initialize("dXNwc3wxODU2NDc5NHwxODU2NDc4OToxMTM1ODQ5fDE4NTY0NzkwOjExMzU4NDh8MTg1NjQ3OTU=");RB.track("view");RB.track("signup",{"an_seg":1856479
2024-04-19 00:44:22 UTC	306	IN	Data Raw: 63 3d 2a 3b 70 73 3d 31 3b 70 63 6f 72 3d 32 30 33 31 35 32 34 36 30 39 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 34 68 30 7a 38 37 38 37 33 33 33 33 33 7a 61 32 30 31 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 Data Ascii: c=*;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~or
2024-04-19 00:44:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49942	31.13.66.19	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1303	OUT	GET /signals/config/533374513433337?v=2.9.154&r=stable&domain=www.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-19 00:44:22 UTC	1513	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-04-19 00:44:22 UTC	543	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-04-19 00:44:22 UTC	1500	IN	Data Raw: 65 2c 66 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 68 3d 62 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2e 69 64 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 6a 3d 6f 28 66 29 2c 6b 3d 71 28 66 2c 6a 29 2c 6c 3d 78 28 72 28 66 29 29 2e 73 61 66 65 3b 69 66 28 6c 21 3d 6e 75 6c 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 44 29 72 65 74 75 72 6e 3b 68 3d 68 3b 66 3d 76 28 7b 62 75 74 74 6f 6e 3a 66 2c 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 6b 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 66 6f 72 6d 3a 6a 2c 70 69 78 65 6c 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d Data Ascii: e,f);if(f==null)return;var h=b.optIns.isOptedIn(c.id,"AutomaticMatching"),j=o(f),k=q(f,j),l=x(r(f)).safe;if(l!=null&&l.length>D)return;h=h;f=v({button:f,buttonFeatures:k,buttonText:l,form:j,pixel:c,shouldExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49935	52.46.151.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	592	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	775	IN	HTTP/1.1 302 Found Server: Server Date: Fri, 19 Apr 2024 00:44:22 GMT Content-Length: 0 Connection: close x-amz-rid: 47NTYSMZS42WTYG6F81C Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49945	151.101.193.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	403	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:22 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-19 00:44:22 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49947	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	581	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-80133954-3&cid=1989466777.1713487459&jid=218402913&_u=YGBAiEABBAAAAGAEq~&z=1427125113 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49946	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487458951 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:22 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49943	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:22 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 42 server: API Gateway alt-svc: clear access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:22 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49949	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	894	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-04-19 00:44:22 UTC	2528	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"9388747213846246268"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4218096443499257844","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"9388747213846246268","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"9388747213846246268","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"9388747213846246268","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"9388747213846246268","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUk_NG8bjNZJ6p2Z4eFLi8-CTdH3EXV5wyDv0Zi0t0wzQVA36kCzwAFDhrss; expires=Sun, 19-Apr-2026 00:44:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49950	74.125.136.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 32 31 38 30 39 36 34 34 33 34 39 39 32 35 37 38 34 34 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"4218096443499257844"},"type":"trigger-no-matching-source"}]
2024-04-19 00:44:22 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:44:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49948	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1183	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487460484&cv=11&fst=1713487460484&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-04-19 00:44:22 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3; expires=Sun, 19-Apr-2026 00:44:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:22 UTC	244	IN	Data Raw: 38 62 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: 8be(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-19 00:44:22 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-19 00:44:22 UTC	746	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4f 44 63 30 4e 6a 41 30 4f 44 51 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTM0ODc0NjA0ODQ',['https://www.google.com/pagead/1p-user-lis
2024-04-19 00:44:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49953	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	1166	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 31 31 32 63 62 31 62 33 2d 38 61 35 66 2d 34 30 30 35 2d 39 64 33 32 2d 30 30 33 62 33 61 65 34 62 64 36 37 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"112cb1b3-8a5f-4005-9d32-003b3ae4bd67","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","df":true,"s
2024-04-19 00:44:22 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:22 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49954	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	653	OUT	GET /rp.gif?ts=1713487460175&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:22 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:22 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49955	52.46.151.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	639	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk\|t
2024-04-19 00:44:22 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:22 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 6NSWV6CX0XW4P4HZFBH2 Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:22 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:22 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49956	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	687	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1713487461003&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 4308214730297431 Date: Fri, 19 Apr 2024 00:44:23 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:23 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49957	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1338	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487461012 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:23 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 2273879348041021 Date: Fri, 19 Apr 2024 00:44:23 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:23 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49959	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	728	OUT	GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:22 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:22 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d04ab27c8394d702 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 7bc905b3a9f21f8e3f5f0c65dd5da7ecf08642c8728860e6b6e01a9fa83a9297 connection: close
2024-04-19 00:44:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49960	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	749	OUT	GET /i/adsct?bci=3&eci=2&event_id=f67ade69-2cdd-448d-8af0-14d69c816b0b&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41bd9edf-9e87-48ac-b935-35815ba2b620&tw_document_href=https%3A%2F%2Fwww.usps.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:23 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:22 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: c7d806806805c511 strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: 3e2e0ef9b54e7fd0735d8f80395800b4ccb8f9fb7c17278a9ab5d8cbffccecfb connection: close
2024-04-19 00:44:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49966	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1083	OUT	GET /ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49963	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:22 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:23 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49964	52.6.56.188	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	657	OUT	GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	174	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 00:44:22 GMT Content-Type: text/html Content-Length: 1971 Connection: close Vary: Accept-Encoding ETag: "631f1a4d-7b3"
2024-04-19 00:44:23 UTC	1971	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 36 39 34 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6f 66 70 6f 69 6e 74 20 54 61 72 67 65 74 65 64 20 41 74 74 61 63 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=694, user-scalable=no"> <title>Proofpoint Targeted Attack Protection</title> <link href="/error/common.css" media="all" rel="styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49968	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	1036	OUT	GET /pagead/1p-user-list/978081151/?random=1713487460484&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqkyqiUTDFCu4oGQySV3fayfazt1IxiO-0kaiLyGNpScI6V1xJ&random=4076281178&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49965	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	557	OUT	GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	1376	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:23 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fpx%3Fid%3D1391229%26seg%3D24232669%26t%3D1 AN-X-Request-Uuid: a7f37805-3aa1-44e1-bb37-8e3e1c9ea8c0 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:23 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:23 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:23 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49962	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:22 UTC	644	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:23 GMT Expires: Fri, 19 Apr 2024 00:44:23 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49970	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	839	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=10, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49969	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	949	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:23 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:44:23 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49971	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 883 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	883	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 38 35 66 64 33 62 61 64 2d 37 31 63 33 2d 34 30 61 64 2d 62 31 33 31 2d 62 39 66 33 34 31 65 36 61 66 63 65 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"85fd3bad-71c3-40ad-b131-b9f341e6afce","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","df":true,"s
2024-04-19 00:44:23 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:23 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49972	108.138.85.59	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	706	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:23 GMT x-amzn-RequestId: 1fc9a5a4-bcbb-4428-9cb4-4ce778efaea4 Access-Control-Allow-Origin: https://www.usps.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 e7f87e384798b4a94964cbcf8e4db94c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: pR9HtzKcYGyEKmZmDKYDb-LISk0AIZDF6HByRwCJuxP_GqjS4CLlJA==
2024-04-19 00:44:23 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49975	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 5234 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	5234	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 35 38 36 61 38 33 39 31 2d 65 65 31 66 2d 34 64 38 65 2d 38 39 35 61 2d 64 65 39 61 36 66 30 35 32 39 33 31 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"586a8391-ee1f-4d8e-895a-de9a6f052931","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","df":true,"s
2024-04-19 00:44:23 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:23 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49976	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	766	OUT	GET /bounce?%2Fpx%3Fid%3D1391229%26seg%3D24232669%26t%3D1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479
2024-04-19 00:44:23 UTC	1552	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:23 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 2f63399d-1cb1-46a0-966b-c87f5fd069c1 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:23 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:23 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:23 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:23 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49978	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	804	OUT	GET /pagead/1p-user-list/978081151/?random=1713487460484&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqkyqiUTDFCu4oGQySV3fayfazt1IxiO-0kaiLyGNpScI6V1xJ&random=4076281178&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49981	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	836	OUT	GET /ddm/fls/z/dc_pre=CLi39puGzYUDFXGvOgUdenIGbw;src=3976941;type=uspsc0;cat=gener0;ord=2194093973356;npa=0;auiddc=;ps=1;pcor=2031524609;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49979	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	540	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GmHZPA42p7DDLScXWVulP3qiI4Nu8Sx3piwiYLhVmTH%2BD0CQXIw71Ldv5KlQGCHfC%2F7Xwa7zw%2Fup5jMKfK7Wb6VhaHmyG2uYVP8QuYWcIlHwx%2F4e1F%2BqFoq45hln7atEUoQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768dda76b04674f-ATL
2024-04-19 00:44:23 UTC	823	IN	Data Raw: 37 64 37 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d7d(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 70 45 72 72 6f 72 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b 5d 3b 20 76 61 72 Data Ascii: pErrorObj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = []; var
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 Data Ascii: , we want to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String.fromC
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 28 27 2e 27 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 Data Ascii: ('.')); } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domain;
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 20 20 20 20 7d 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 79 3a 20 66 75 6e Data Ascii: }) } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCopy: fun
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 76 69 65 77 7c 70 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 54 54 50 42 75 69 Data Ascii: view\|purchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , HTTPBui
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 Data Ascii: function(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {}; var s
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 20 20 20 20 20 20 Data Ascii: ; var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr;
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 3b 22 29 5b 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 Data Ascii: ;")[0] } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElementByI
2024-04-19 00:44:23 UTC	1369	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 64 29 20 7b 0a 20 Data Ascii: } , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(uid) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49973	52.46.128.147	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	480	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
2024-04-19 00:44:23 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:23 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: S9YQZEYFR1KS8Y5C4611 Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:23 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:23 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:23 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49982	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:23 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:23 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49984	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	1160	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487461012 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:24 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:24 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1341334983312282 Date: Fri, 19 Apr 2024 00:44:24 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:24 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49985	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	509	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%7D&cb=1713487461003&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:24 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPVpESTVaRGhtT0dZdFltSXpPQzAwTlRsaUxUZ3hZMkV0TWpFMllUbGtOamN6TXpCbQ cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1555801853014317 Date: Fri, 19 Apr 2024 00:44:24 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:24 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49987	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	607	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49983	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	397	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:23 GMT Expires: Fri, 19 Apr 2024 00:44:23 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49986	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	644	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F&rl=&if=false&ts=1713487461474&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487460303&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:23 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:23 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:23 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49989	3.163.80.95	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	436	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487458958 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:24 GMT x-amzn-RequestId: 4bf05601-061d-4ff4-909a-93fa6d087a23 X-Cache: Miss from cloudfront Via: 1.1 9b26879979e6603c426ea24fcf38661c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: nucpBJxjOeY4iNIbXNr2T5BmGyFGqwES5myikm2hociAjR65tus63A==
2024-04-19 00:44:24 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49990	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	551	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	545	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8MI4hkmIATX28jBThG8k4AW%2FJS44odFjvyF1Y3af%2FRPP3yOTVe2eBUU%2BhfmJ8riKHsUKFpGi%2B%2FkOh99tOsN2ETxHutWT47aCBju%2Fo2ktMuNIpLOSYUke6p%2BOxaATbF%2BrLLQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768ddaaaa01b0b1-ATL
2024-04-19 00:44:24 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-19 00:44:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.4	49991	172.67.71.65	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:23 UTC	550	OUT	GET /jpuid?jsonp=RB.jsonPUID HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	667	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Set-Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36; domain=getrockerbox.com; path=/;Max-Age=2592000; SameSite=None; Secure CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S7Sci%2FfgaY64SjKJtiLHMUWdbFPRZdKO8VZYkdEs0zC2yuhi2snfiSNoKyATRwegz0Yezyz4GiUtFWaaiB1CxOFXsZhFuD1kPxSJwAPwiRIhfrFjQ6pxL%2Fln2V%2Bu48XCg6c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768ddaaada853f9-ATL
2024-04-19 00:44:24 UTC	73	IN	Data Raw: 34 33 0d 0a 52 42 2e 6a 73 6f 6e 50 55 49 44 28 7b 22 72 62 75 69 64 22 3a 22 72 62 6f 73 2d 38 31 30 37 65 65 65 65 2d 33 38 66 36 2d 34 35 37 32 2d 61 30 63 61 2d 32 34 63 61 34 64 36 32 33 61 33 36 22 7d 29 0a 0d 0a Data Ascii: 43RB.jsonPUID({"rbuid":"rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36"})
2024-04-19 00:44:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49996	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	1450	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCLi39puGzYUDFXGvOgUdenIGbw%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D2194093973356%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D2031524609%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=8df227c1-3868-4673-9b60-b3e223bd931f&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:24 UTC	581	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vX8mbqFJD1dFKJdU2E9pxk60L6mCoijRqG2wP18fyB3g9dyjkhWm5MnyHWLC00SFQuYr9mXlx98YRlEetnCf8W663p%2BfREwwkvdQbQL5ckmpYinQ1fL6TLTRreYk79XZ3Hs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768ddad39a14507-ATL
2024-04-19 00:44:24 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49995	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	1477	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCLi39puGzYUDFXGvOgUdenIGbw%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D2194093973356%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D2031524609%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=8df227c1-3868-4673-9b60-b3e223bd931f&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:24 UTC	593	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564790 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Is7YbpAcFn3BEzAHDrXz51XFSL3qMo%2Fd41wSaLuHJnvE6rhaHSiSRj%2Bi%2BoWBsrbb0QxAKC%2FBZ3q%2BEGu7qUp6%2FgzB0laiy1CTC%2FS23yKU1a8PwPvM8Sz7WV58jhYitJfcwc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768ddad4d38b05a-ATL
2024-04-19 00:44:24 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49997	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	865	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
2024-04-19 00:44:24 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 5397c6c6-8150-4936-9929-45bfeab1a51a Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:24 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(i!EKxF!GV/K9sk@3@'s>Tig^G`; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:24 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:24 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:24 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49999	44.196.185.99	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	801	OUT	GET /api/v1/initsync/61e0c856-4d3b-41a1-a161-12dba178d193?partners=Tapad&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 436 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=9af46dc6-3146-0645-5403-8ab211ef2d70; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:24 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-19 00:44:24 UTC	436	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 74 61 70 61 64 2e 63 6f 6d 2f 69 64 73 79 6e 63 2f 65 78 2f 72 65 63 65 69 76 65 3f 70 61 72 74 6e 65 72 5f 69 64 3d 32 37 38 31 26 70 61 72 74 6e 65 72 5f 64 65 76 69 63 65 5f 69 64 3d 31 33 39 62 35 30 32 34 2d 63 66 38 31 2d 34 64 30 33 2d 61 30 62 62 2d 34 62 64 37 37 38 61 65 61 63 33 36 26 70 61 72 74 6e 65 72 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 72 62 2e 6b 61 72 67 6f 2e 63 6f 6d 25 32 46 61 70 69 25 32 46 76 31 25 32 46 73 79 6e 63 25 32 46 54 61 70 61 64 25 32 46 31 33 39 62 35 30 32 34 2d 63 66 38 31 2d 34 64 Data Ascii: <html><head></head><body><img style="display:none;" src="https://pixel.tapad.com/idsync/ex/receive?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50001	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	689	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 681 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	681	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 66 30 35 36 34 32 35 65 2d 65 37 38 36 2d 34 39 63 64 2d 38 30 35 66 2d 63 37 63 61 30 61 38 36 32 62 38 66 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"init","params":{"view_id":"f056425e-e786-49cd-805f-c7ca0a862b8f"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-19 00:44:24 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=75fbbcda-a8ae-0ff4-3a88-32601be44cad; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:24 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50000	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	689	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:24 UTC	685	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 48 6f 6d 65 50 61 67 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 66 30 35 36 34 32 35 65 2d 65 37 38 36 2d 34 39 63 64 2d 38 30 35 66 2d 63 37 63 61 30 61 38 36 32 62 38 66 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"HomePage","params":{"view_id":"f056425e-e786-49cd-805f-c7ca0a862b8f"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doub
2024-04-19 00:44:24 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:24 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:24 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50002	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	851	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
2024-04-19 00:44:25 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fff79d07-3ee4-40c2-9b35-c41682171caa Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50003	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:24 UTC	851	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8CxrEQF']wIg2E?kFGD(i!@wnf-Te9(>wL5L!!'kp$wHZc
2024-04-19 00:44:25 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d9c99da4-f723-4acd-8ca9-762ea7dc3982 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50004	34.111.113.62	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:25 UTC	908	OUT	GET /idsync/ex/receive?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d03-a0bb-4bd778aeac36%3Frid%3Da7f62f15-09b6-4c32-819b-f308e9c9ee1f%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:25 UTC	1335	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:25 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1713487465261;Expires=Tue, 18 Jun 2024 00:44:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=931fa39b-5a72-4e48-add6-b250d9527046;Expires=Tue, 18 Jun 2024 00:44:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d03-a0bb-4bd778aeac36%3Frid%3Da7f62f15-09b6-4c32-819b-f308e9c9ee1f%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50005	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:25 UTC	466	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(i!EKxF!GV/K9sk@3@'s>Tig^G`
2024-04-19 00:44:25 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1c5c1cc8-7bb0-48fd-9010-392b0a78a3e8 Set-Cookie: XANDR_PANID=38ZwnDlk5VO0nDV8SCtJ90WTOD19sIDNKcvV4Zd8-_ME1c1ksezLHLSM0XfIitPlFFdUFpLU63Lwew2nYkUuvBpg_96q5XaLSqseSTwjGzk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50009	34.111.113.62	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:25 UTC	994	OUT	GET /idsync/ex/receive/check?partner_id=2781&partner_device_id=139b5024-cf81-4d03-a0bb-4bd778aeac36&partner_url=https%3A%2F%2Fcrb.kargo.com%2Fapi%2Fv1%2Fsync%2FTapad%2F139b5024-cf81-4d03-a0bb-4bd778aeac36%3Frid%3Da7f62f15-09b6-4c32-819b-f308e9c9ee1f%26gdpr%3D0%26gdpr_consent%3D%26us_privacy%3D%26gpp%3D%26gpp_sid%3D%26exid%3D%24%7BTA_DEVICE_ID%7D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1713487465261; TapAd_DID=931fa39b-5a72-4e48-add6-b250d9527046
2024-04-19 00:44:25 UTC	1290	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:25 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1713487465261;Expires=Tue, 18 Jun 2024 00:44:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=931fa39b-5a72-4e48-add6-b250d9527046;Expires=Tue, 18 Jun 2024 00:44:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Tue, 18 Jun 2024 00:44:25 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://crb.kargo.com/api/v1/sync/Tapad/139b5024-cf81-4d03-a0bb-4bd778aeac36?rid=a7f62f15-09b6-4c32-819b-f308e9c9ee1f&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=931fa39b-5a72-4e48-add6-b250d9527046 Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50007	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:25 UTC	452	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
2024-04-19 00:44:25 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: e7959649-6982-4539-b055-4fec7bbf7034 Set-Cookie: XANDR_PANID=x_u_K8_1xw5RDOZWOLhF_QcjC2JtXo1IGA5qTx9ZjSCaSjEvMZq8FsV6zKDF9_VwB7BRfoYKfl5uhvV8BhOnO9_6y4arYGnwlTxMRPcxtR4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50008	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:25 UTC	452	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
2024-04-19 00:44:25 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:25 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 8379cb86-58a9-4bca-993c-f3259a2fd4a8 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:25 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50010	44.196.185.99	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:26 UTC	806	OUT	GET /api/v1/sync/Tapad/139b5024-cf81-4d03-a0bb-4bd778aeac36?rid=a7f62f15-09b6-4c32-819b-f308e9c9ee1f&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=931fa39b-5a72-4e48-add6-b250d9527046 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://crb.kargo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:26 UTC	456	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:26 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:26 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-19 00:44:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50012	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:27 UTC	557	OUT	GET /static/ct/token_create.js HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:27 UTC	367	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4101 ETag: "2a8d051abafd7b1d3f62592455b15f0c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=7200 Content-Type: application/javascript Age: 7069 Date: Fri, 19 Apr 2024 00:44:27 GMT Vary: Accept-Encoding X-CDN: fastly alt-svc: h3=":443";ma=600 Timing-Allow-Origin: https://ct.pinterest.com
2024-04-19 00:44:27 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 72 5b 6e 5d 7c 7c 28 65 3d 72 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 5b 6e 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 69 29 2c 65 2e 6c 3d 21 30 2c 65 29 29 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 72 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 2e 6f 28 6e 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 69 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 6e 64 65 66 69 6e Data Ascii: !function(t){var r={};function i(n){var e;return(r[n]\|\|(e=r[n]={i:n,l:!1,exports:{}},t[n].call(e.exports,e,e.exports,i),e.l=!0,e)).exports}i.m=t,i.c=r,i.d=function(n,e,t){i.o(n,e)\|\|Object.defineProperty(n,e,{enumerable:!0,get:t})},i.r=function(n){"undefin
2024-04-19 00:44:27 UTC	1378	IN	Data Raw: 3d 74 28 32 29 2c 69 3d 7b 7d 2c 63 3d 22 75 6e 6b 6e 6f 77 6e 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 6e 2e 76 65 72 73 69 6f 6e 3d 63 2c 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 28 72 2e 4c 49 53 54 2e 53 45 4e 44 5f 4c 4f 47 53 2e 63 68 61 6e 63 65 7c 7c 30 29 26 26 69 2e 68 28 6e 29 7d 69 2e 73 65 74 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 63 3d 6e 7d 2c 69 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 2c 65 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 45 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 61 69 Data Ascii: =t(2),i={},c="unknown";function o(n){n.version=c,100*Math.random()<(r.LIST.SEND_LOGS.chance\|\|0)&&i.h(n)}i.setVersion=function(n){c=n},i.h=function(n){var e=new window.XMLHttpRequest;e.withCredentials=!1,e.onerror=function(){console.info("Error message fai
2024-04-19 00:44:27 UTC	1345	IN	Data Raw: 65 74 22 3d 3d 3d 74 3f 41 72 72 61 79 2e 66 72 6f 6d 28 6e 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 74 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 74 29 3f 72 28 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 28 6e 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 Data Ascii: et"===t?Array.from(n):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?r(n,e):void 0}(n,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50014	151.101.128.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:27 UTC	702	OUT	GET /ct.html HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:27 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 565 cache-control: max-age=86400 content-type: text/html; charset=utf-8 x-envoy-upstream-service-time: 0 referrer-policy: origin x-pinterest-rid: 1541555444638252 Date: Fri, 19 Apr 2024 00:44:27 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:27 UTC	565	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 6e 74 65 72 65 73 74 20 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 20 28 65 76 65 6e 74 29 20 3d 3e 20 7b 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 21 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 22 29 20 7b 72 65 74 75 72 6e 3b 7d 74 72 79 20 7b 69 66 20 28 65 76 65 6e 74 2e 64 61 74 61 2e 6b 65 79 20 3d 3d 20 22 5f 65 70 69 6b 5f 6c 6f 63 61 6c 73 74 6f 72 65 Data Ascii: <!DOCTYPE html><html lang="en"><head><title>Pinterest ct</title></head><body><div id="root"></div><script>window.addEventListener("message", (event) => {if (event.origin != "https://www.pinterest.com") {return;}try {if (event.data.key == "_epik_localstore

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50013	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:27 UTC	754	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=ftfeq77&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:27 UTC	136	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:27 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50015	34.199.195.87	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:27 UTC	573	OUT	GET /api/v1/sync/Tapad/139b5024-cf81-4d03-a0bb-4bd778aeac36?rid=a7f62f15-09b6-4c32-819b-f308e9c9ee1f&gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&exid=931fa39b-5a72-4e48-add6-b250d9527046 HTTP/1.1 Host: crb.kargo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:27 UTC	456	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:27 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0
2024-04-19 00:44:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50016	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:28 UTC	1379	OUT	GET /assets/images/home/favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:28 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58995 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:44:28 GMT Etag: "7d26-547e0aa1fa400" Last-Modified: Mon, 06 Feb 2017 18:18:56 GMT Server: ECAcc (agb/531F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 32038 Connection: close
2024-04-19 00:44:28 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-04-19 00:44:28 UTC	15655	IN	Data Raw: 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff Data Ascii: 32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50017	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:29 UTC	1146	OUT	GET /assets/images/home/favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:29 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58996 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:44:29 GMT Etag: "7d26-547e0aa1fa400" Last-Modified: Mon, 06 Feb 2017 18:18:56 GMT Server: ECAcc (agb/531F) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 32038 Connection: close
2024-04-19 00:44:29 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-04-19 00:44:29 UTC	15655	IN	Data Raw: 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff Data Ascii: 32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50019	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1437	OUT	GET /globals/site-index.htm HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:31 UTC	1094	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 1006 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:31 GMT Last-Modified: Fri, 19 Apr 2024 00:27:45 GMT Server: ECAcc (agb/531B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 68321 Connection: close
2024-04-19 00:44:31 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 3c 74 69 74 6c 65 3e 53 69 74 65 20 49 6e 64 65 78 20 7c 20 55 53 50 53 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 21 2d 2d 6c 73 3a 62 65 67 69 6e 5b 73 74 79 6c 65 73 68 65 65 74 5d 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 77 6f 76 2d 72 65 73 6f 75 72 63 65 73 2f 66 69 78 65 64 2d 6c 61 79 6f 75 74 2f 6f 6e 65 2d 63 6f 6c 75 6d 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e Data Ascii: <!DOCTYPE html><html><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Site Index \| USPS</title>...ls:begin[stylesheet]--><link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">
2024-04-19 00:44:31 UTC	16383	IN	Data Raw: 6f 63 61 74 69 6f 6e 2e 68 74 6d 22 3e 46 69 6e 64 20 55 53 50 53 20 4c 6f 63 61 74 69 6f 6e 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 2d 74 72 61 63 6b 22 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 67 6f 2f 54 72 61 63 6b 43 6f 6e 66 69 72 6d 41 63 74 69 6f 6e 5f 69 6e 70 75 74 22 3e 54 72 61 63 6b 69 6e 67 3c 2f 61 3e 3c 2f 6c 69 3e 09 09 09 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 72 6f 6c 65 3d 22 6d 65 6e 75 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0d 0a Data Ascii: ocation.htm">Find USPS Locations</a></li> <li class="tool-track"><a role="menuitem" tabindex="-1" href="https://tools.usps.com/go/TrackConfirmAction_input">Tracking</a></li> </ul> <ul role="menu" aria-hidden="true">
2024-04-19 00:44:31 UTC	2	IN	Data Raw: 2d 6f Data Ascii: -o
2024-04-19 00:44:31 UTC	16383	IN	Data Raw: 6e 6c 79 20 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 61 64 64 69 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2f 67 6f 2d 6e 6f 77 2e 68 74 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2f 67 6f 2d 6e 6f 77 2e 70 6e 67 22 20 61 6c 74 3d 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 20 69 6d 61 67 65 20 77 69 74 68 20 63 61 6c 6c 20 74 6f 20 61 63 74 69 6f 6e 22 20 2f 3e 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 20 20 20 Data Ascii: nly international-addition"> <a role="menuitem" tabindex="-1" href="https://www.usps.com/international/go-now.htm"><img src="https://www.usps.com/international/go-now.png" alt="International image with call to action" /></a></div>
2024-04-19 00:44:31 UTC	16383	IN	Data Raw: 69 6f 6e 20 63 6c 61 73 73 3d 22 73 65 63 74 69 6f 6e 2d 77 72 61 70 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 2d 77 72 61 70 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 20 63 6f 6c 2d 66 69 72 73 74 20 63 6f 6c 2d 74 68 69 72 64 22 3e 0a 09 09 09 09 09 09 3c 70 3e 0a 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 2d 2d 73 65 63 6f 6e 64 61 72 79 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 67 6f 2f 54 72 61 63 6b 43 6f 6e 66 69 72 6d 41 63 74 69 6f 6e 5f 69 6e 70 75 74 22 Data Ascii: ion class="section-wrap" style="padding-top: 10px;"><div class="col--wrap" style="margin-bottom: 10px;"><div class="col col-first col-third"><p><a class="button--secondary" href="https://tools.usps.com/go/TrackConfirmAction_input"
2024-04-19 00:44:31 UTC	2787	IN	Data Raw: 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 69 6d 61 67 65 73 2f 78 5f 6c 6f 67 6f 2e 70 6e 67 22 3e 0d 0a 20 20 20 20 3c 2f 61 3e 0d 0a 3c 2f 6c 69 3e 0d 0a 0d 0a 3c 6c 69 3e 0d 0a 20 20 20 20 3c 61 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 75 73 70 73 22 3e 0d 0a 20 20 20 20 20 3c 69 6d 67 20 61 6c 74 3d 22 49 6d 61 67 65 20 6f 66 20 59 6f 75 74 75 62 65 20 73 6f 63 69 61 6c 20 6d 65 64 69 61 20 69 63 6f 6e 2e 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f Data Ascii: global-elements/footer/images/x_logo.png"> </a></li><li> <a target="_blank" style="text-decoration: none;" href="https://www.youtube.com/usps"> <img alt="Image of Youtube social media icon." src="https://www.usps.com/global-elements/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50018	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1367	OUT	GET /iwov-resources/fixed-layout/one-column.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:31 UTC	1114	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59001 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:31 GMT Etag: "0-502a52586bd80" Last-Modified: Tue, 09 Sep 2014 17:20:06 GMT Server: ECAcc (agb/5342) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50024	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:31 UTC	957	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 63 62 66 32 34 32 62 35 2d 37 37 62 63 2d 34 65 33 65 2d 38 37 63 61 2d 30 66 62 37 65 30 65 66 38 33 30 38 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"cbf242b5-77bc-4e3e-87ca-0fb7e0ef8308","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","bg":true,"s
2024-04-19 00:44:32 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:32 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50020	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1365	OUT	GET /ContentTemplates/common/css/customer.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58935 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "181f-56864783f83c0+ident" Last-Modified: Tue, 27 Mar 2018 13:00:07 GMT ntCoent-Length: 6175 Server: ECAcc (agb/52ED) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 6175 Connection: close
2024-04-19 00:44:32 UTC	6175	IN	Data Raw: 2f 2a 45 6e 74 65 72 20 55 73 65 72 20 44 65 66 69 6e 65 64 20 43 53 53 20 66 6f 72 20 54 69 6e 79 4d 43 45 20 53 74 79 6c 65 73 20 44 72 6f 70 20 44 6f 77 6e 20 2a 2f 0d 0a 0d 0a 2e 54 65 73 74 2d 42 6f 6c 64 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 0d 0a 2e 54 65 73 74 2d 49 74 61 6c 69 63 20 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 0d 0a 2e 54 65 73 74 2d 52 65 64 2d 54 65 78 74 20 7b 63 6f 6c 6f 72 3a 72 65 64 7d 0d 0a 2e 54 65 73 74 2d 4c 61 72 67 65 2d 54 65 78 74 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 30 25 7d 0d 0a 0d 0a 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 36 32 2e 35 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 6b 69 70 2d 6e 61 76 20 7b 0d 0a 20 20 62 61 63 6b 67 72 Data Ascii: /Enter User Defined CSS for TinyMCE Styles Drop Down /.Test-Bold {font-weight:bold}.Test-Italic {font-style:italic}.Test-Red-Text {color:red}.Test-Large-Text {font-size:200%}html {font-size:62.5% !important;}#skip-nav { backgr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50022	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1361	OUT	GET /ContentTemplates/common/css/usps.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58929 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "c9c4-4f11b87d2e900+ident" Last-Modified: Wed, 29 Jan 2014 13:00:52 GMT ntCoent-Length: 51652 Server: ECAcc (agb/5363) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 51652 Connection: close
2024-04-19 00:44:32 UTC	15227	IN	Data Raw: 09 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 75 73 70 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 50 61 67 65 20 6c 61 79 6f 75 74 20 2b 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 73 0d 0a 09 09 31 2e 20 50 61 67 65 20 4c 61 79 6f 75 74 0d 0a 09 09 32 2e 20 47 65 6e 65 72 69 63 20 53 74 79 6c 65 73 0d 0a 09 09 33 2e 20 48 65 61 64 65 72 0d 0a 09 09 34 2e 20 46 6f 6f Data Ascii: /*---------------------------------------------------------------@filenameusps.css@authoraziz.syed@akqa.com@descriptionPage layout + global style definitionsContents1. Page Layout2. Generic Styles3. Header4. Foo
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 70 78 20 2d 32 34 70 78 3b 0d 0a 09 09 09 74 6f 70 3a 31 32 70 78 3b 0d 0a 09 09 09 72 69 67 68 74 3a 30 70 78 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 79 3b 0d 0a 09 09 7d 0d 0a 09 09 2e 62 61 63 6b 67 72 6f 75 6e 64 20 2e 6d 6f 64 61 6c 2d 72 65 70 65 61 74 2d 74 6f 70 7b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 70 78 20 30 70 78 3b 0d 0a 09 09 09 74 6f 70 3a 30 70 78 3b 0d 0a 09 09 09 6c 65 66 74 3a 31 32 70 78 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 0d 0a 09 09 7d 0d 0a 09 09 2e 62 61 63 6b 67 72 6f 75 6e 64 20 2e 6d 6f 64 61 6c 2d 72 65 70 65 61 74 2d 62 6f 74 74 6f 6d 7b 0d 0a 09 09 09 62 61 63 6b 67 72 Data Ascii: px -24px;top:12px;right:0px;background-repeat:repeat-y;}.background .modal-repeat-top{background-position:0px 0px;top:0px;left:12px;background-repeat:repeat-x;}.background .modal-repeat-bottom{backgr
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 74 3a 31 70 78 3b 0d 0a 7d 0d 0a 66 6f 72 6d 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 72 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0d 0a 09 74 65 78 74 2d 69 6e 64 65 6e 74 3a 20 2d 33 30 30 30 70 78 3b 0d 0a 09 2a 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 70 78 3b 0d 0a 09 66 6f 6e 74 3a 30 2f 30 20 41 72 69 61 6c 3b 0d 0a 09 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 65 73 73 2d 63 68 65 63 6b 20 7b 0d 0a Data Ascii: t:1px;}form{display:inline;}.ir{display:-moz-inline-box;display:inline-block;overflow:hidden;text-indent: -3000px;*text-indent:0px;font:0/0 Arial;color:rgba(255,255,255,0);vertical-align:bottom;}.access-check {
2024-04-19 00:44:32 UTC	3659	IN	Data Raw: 6c 20 2e 6d 75 6c 74 69 2d 6f 70 74 69 6f 6e 20 2e 6d 75 6c 74 69 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 3a 23 32 46 36 46 41 39 3b 7d 0d 0a 23 75 74 69 6c 69 74 79 2d 62 61 72 20 23 6e 61 76 2d 74 6f 6f 6c 2d 6d 75 6c 74 69 6c 69 6e 67 75 61 6c 20 2e 6d 75 6c 74 69 2d 6f 70 74 69 6f 6e 20 2e 6d 75 6c 74 69 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 0d 0a 23 75 74 69 6c 69 74 79 2d 62 61 72 20 23 6e 61 76 2d 74 6f 6f 6c 2d 6d 75 6c 74 69 6c 69 6e 67 75 61 6c 20 2e 6d 75 6c 74 69 2d 6f 70 74 69 6f 6e 20 2e 6d 75 6c 74 69 2d 6c 69 6e 6b 2e 63 68 69 6e 65 73 65 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 Data Ascii: l .multi-option .multi-link:hover { text-decoration: none; color:#2F6FA9;}#utility-bar #nav-tool-multilingual .multi-option .multi-link:focus { text-decoration: none;}#utility-bar #nav-tool-multilingual .multi-option .multi-link.chinese { display:bloc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50021	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1361	OUT	GET /assets/css/components/components.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1176	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58046 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 86747 Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "152db-5321832985040+ident" Last-Modified: Thu, 05 May 2016 13:19:53 GMT Server: ECAcc (agb/5371) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 86747 Connection: close
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 2f 2a 0d 0a 53 43 53 53 20 76 61 72 69 61 62 6c 65 73 20 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 69 63 6f 6e 27 73 20 63 6f 6d 70 69 6c 65 64 20 73 74 61 74 65 2c 20 73 74 6f 72 65 64 20 75 6e 64 65 72 20 69 74 73 20 6f 72 69 67 69 6e 61 6c 20 66 69 6c 65 20 6e 61 6d 65 0d 0a 0d 0a 2e 69 63 6f 6e 2d 68 6f 6d 65 20 7b 0d 0a 20 20 77 69 64 74 68 3a 20 24 69 63 6f 6e 2d 68 6f 6d 65 2d 77 69 64 74 68 3b 0d 0a 7d 0d 0a 0d 0a 54 68 65 20 6c 61 72 67 65 20 61 72 72 61 79 2d 6c 69 6b 65 20 76 61 72 69 61 62 6c 65 73 20 63 6f 6e 74 61 69 6e 20 61 6c 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 61 20 73 69 6e 67 6c 65 20 69 63 6f 6e 0d 0a 24 69 63 6f 6e 2d 68 6f 6d 65 3a 20 78 20 79 20 6f 66 66 73 65 74 5f 78 20 6f 66 66 73 Data Ascii: /*SCSS variables are information about icon's compiled state, stored under its original file name.icon-home { width: $icon-home-width;}The large array-like variables contain all information about a single icon$icon-home: x y offset_x offs
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 2f 5f 74 69 70 73 2d 74 61 62 6c 65 74 2e 73 63 73 73 20 2a 2f 0d 0a 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 72 69 67 68 74 2d 63 6f 6c 20 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 74 69 70 2d 77 72 61 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 6c 69 6e 65 20 35 34 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 74 69 70 73 2f 5f 74 69 70 73 2d 74 61 62 6c 65 74 2e 73 63 73 73 20 2a 2f 0d 0a 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 6c 65 61 72 66 69 78 Data Ascii: /assets/styles/components/tips/_tips-tablet.scss /.tips-component--right-col .tips-component--tip-wrap:first-child { border-top: 0;}/ line 54, ../../../../workspace/assets/styles/components/tips/_tips-tablet.scss */.tips-component--clearfix
2024-04-19 00:44:32 UTC	2	IN	Data Raw: 58 52 Data Ascii: XR
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 6d 4c 54 67 69 50 7a 34 67 50 48 4e 32 5a 79 42 32 5a 58 4a 7a 61 57 39 75 50 53 49 78 4c 6a 45 69 49 48 68 74 62 47 35 7a 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 2b 50 47 52 6c 5a 6e 4d 2b 50 47 78 70 62 6d 56 68 63 6b 64 79 59 57 52 70 5a 57 35 30 49 47 6c 6b 50 53 4a 6e 63 6d 46 6b 49 69 42 6e 63 6d 46 6b 61 57 56 75 64 46 56 75 61 58 52 7a 50 53 4a 76 59 6d 70 6c 59 33 52 43 62 33 56 75 5a 47 6c 75 5a 30 4a 76 65 43 49 67 65 44 45 39 49 6a 41 75 4e 53 49 67 65 54 45 39 49 6a 41 75 4d 43 49 67 65 44 49 39 49 6a 41 75 4e 53 49 67 65 54 49 39 49 6a 45 75 4d 43 49 2b 50 48 4e 30 62 33 41 67 62 32 5a 6d 63 32 56 30 50 53 49 77 4a 53 49 67 63 33 52 76 63 43 31 6a 62 32 78 76 63 6a Data Ascii: mLTgiPz4gPHN2ZyB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyI+PGRlZnM+PGxpbmVhckdyYWRpZW50IGlkPSJncmFkIiBncmFkaWVudFVuaXRzPSJvYmplY3RCb3VuZGluZ0JveCIgeDE9IjAuNSIgeTE9IjAuMCIgeDI9IjAuNSIgeTI9IjEuMCI+PHN0b3Agb2Zmc2V0PSIwJSIgc3RvcC1jb2xvcj
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 33 31 30 70 78 3b 0d 0a 20 20 7d 0d 0a 20 20 2f 2a 20 6c 69 6e 65 20 38 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2f 5f 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 64 65 73 6b 74 6f 70 2e 73 63 73 73 20 2a 2f 0d 0a 20 20 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f 6e 65 6e 74 20 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 68 65 61 64 65 72 20 2e 6c 61 6e 64 69 6e 67 2d 68 65 72 6f 2d 63 6f 6d 70 6f Data Ascii: position: absolute; top: 0; left: 0; width: 310px; } /* line 8, ../../../../workspace/assets/styles/components/landing-hero/_landing-hero-desktop.scss */ .landing-hero-component .landing-hero-component--header .landing-hero-compo
2024-04-19 00:44:32 UTC	16383	IN	Data Raw: 3b 0d 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 31 73 2c 20 6f 70 61 63 69 74 79 20 35 30 30 6d 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 31 73 2c 20 6f 70 61 63 69 74 79 20 35 30 30 6d 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 31 73 2c 20 6f 70 61 63 69 74 79 20 35 30 30 6d 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 31 73 2c 20 6f 70 61 63 69 74 79 20 35 30 30 6d 73 20 Data Ascii: ; visibility: visible; -moz-transition: visibility 0s 1s, opacity 500ms linear; -ms-transition: visibility 0s 1s, opacity 500ms linear; -webkit-transition: visibility 0s 1s, opacity 500ms linear; transition: visibility 0s 1s, opacity 500ms
2024-04-19 00:44:32 UTC	4830	IN	Data Raw: 6f 70 75 70 2e 73 63 73 73 20 2a 2f 0d 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 66 69 67 75 72 65 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2f 2a 20 6c 69 6e 65 20 35 35 36 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6c 69 67 68 74 62 6f 78 2f 5f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2e 73 63 73 73 20 2a 2f 0d 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 66 69 67 75 72 65 20 73 6d 61 6c 6c 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d Data Ascii: opup.scss / .mfp-img-mobile .mfp-figure:after { top: 0; bottom: 0; } / line 556, ../../../../workspace/assets/styles/components/lightbox/_magnific-popup.scss */ .mfp-img-mobile .mfp-figure small { display: inline; margin-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50023	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1348	OUT	GET /assets/css/elements.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 53875 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "1246-52212db8167c0+ident" Last-Modified: Wed, 14 Oct 2015 16:14:31 GMT ntCoent-Length: 4678 Server: ECAcc (agb/53CB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 4678 Connection: close
2024-04-19 00:44:32 UTC	4678	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 35 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 4c 69 62 72 61 72 79 2f 52 75 62 79 2f 47 65 6d 73 2f 32 2e 30 2e 30 2f 67 65 6d 73 2f 63 6f 6d 70 61 73 73 2d 63 6f 72 65 2d 31 2e 30 2e 31 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 63 6f 6d 70 61 73 73 2f 72 65 73 65 74 2f 5f 75 74 69 6c 69 74 69 65 73 2e 73 63 73 73 20 2a 2f 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 Data Ascii: /* line 5, ../../../../../../../Library/Ruby/Gems/2.0.0/gems/compass-core-1.0.1/stylesheets/compass/reset/_utilities.scss */html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, address, big, cite, c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50025	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:31 UTC	1351	OUT	GET /ContentTemplates/common/scripts/login.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 84075 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "317e-546c53fe49580+gzip+ident" Last-Modified: Mon, 23 Jan 2017 16:11:18 GMT Server: ECAcc (agb/5328) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 12670 Connection: close
2024-04-19 00:44:32 UTC	12670	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 69 66 20 28 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var lowEnv = false;if ((document.location.hostna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50026	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1344	OUT	GET /assets/script/utility-bar-init.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58287 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "198-50483742ebc00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:58:40 GMT Server: ECAcc (agb/A407) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 408 Connection: close
2024-04-19 00:44:32 UTC	408	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 55 53 50 53 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 55 74 69 6c 69 74 79 42 61 72 3d 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 62 61 73 65 55 72 6c 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 22 2c 63 6f 6e 74 65 78 74 3a 22 75 74 69 6c 69 74 79 2d 62 61 72 22 2c 70 61 74 68 73 3a 7b 6a 71 75 65 72 79 3a 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 22 7d 2c 73 68 69 6d 3a 7b 6a 71 75 65 72 79 3a 7b 65 78 70 6f 72 74 73 3a 22 24 22 7d 7d 2c 77 61 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.requireUtilityBar=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"utility-bar",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min"},shim:{jquery:{exports:"$"}},wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50027	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1397	OUT	GET /ContentTemplates/common/css/globals/widgets/select-box.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58416 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "2211-4a0cf914909c0+ident" Last-Modified: Wed, 13 Apr 2011 16:47:43 GMT ntCoent-Length: 8721 Server: ECAcc (agb/538D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8721 Connection: close
2024-04-19 00:44:32 UTC	8721	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 31 2e 20 44 72 6f 70 20 44 6f 77 6e 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 32 66 36 66 61 39 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 65 72 3b 0d 0a 7d 0d 0a 2e 64 6a 5f 73 61 66 61 72 69 20 2e 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 32 39 70 78 3b 0d 0a 7d 0d 0a Data Ascii: /* =========== 11. Drop Downs ===========*/.select-wrapper{ font-size:12px; height: 28px; font-weight:normal; color:#2f6fa9; position:relative;font-weight: bolder;}.dj_safari .select-wrapper{ height:29px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50028	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1396	OUT	GET /ContentTemplates/common/css/globals/widgets/modal-box.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58342 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "18e3-4aa3efbeab580+ident" Last-Modified: Thu, 11 Aug 2011 18:29:58 GMT ntCoent-Length: 6371 Server: ECAcc (agb/5353) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 6371 Connection: close
2024-04-19 00:44:32 UTC	6371	IN	Data Raw: 0d 0a 23 6d 6f 64 61 6c 2d 62 6f 78 5f 6f 76 65 72 6c 61 79 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 3b 0d 0a 09 74 6f 70 3a 20 30 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0d 0a 09 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 34 30 29 3b 0d 0a 09 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 20 30 2e 34 30 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 34 30 3b 20 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 7d 0d 0a 09 0d 0a 23 6d 6f 64 61 6c 2d 62 6f 78 5f 6f 76 65 72 6c 61 79 2d 70 Data Ascii: #modal-box_overlay {position: fixed;z-index: 10000;top: 0px;left: 0px;height: 100%;width: 100%;background-color: #000;filter: alpha(opacity=40);-moz-opacity: 0.40;opacity: 0.40; background:#000;}#modal-box_overlay-p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50029	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1390	OUT	GET /ContentTemplates/common/css/globals/text-fields.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58884 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 1818 Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "71a-494a1c8010c40+ident" Last-Modified: Tue, 09 Nov 2010 17:07:53 GMT Server: ECAcc (agb/52D5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1818 Connection: close
2024-04-19 00:44:32 UTC	1818	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 74 65 78 74 2d 66 69 65 6c 64 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 74 65 78 74 20 66 69 65 6c 64 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 54 65 78 74 20 66 69 65 6c 64 73 0d 0a 2f 2a 09 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 2e 20 54 65 78 74 20 66 69 65 6c 64 73 20 3d 3d 3d 3d 3d 3d Data Ascii: /---------------------------------------------------------------@filenametext-fields.css@authoraziz.syed@akqa.com@descriptiontext fields global style definitionsContent1. Text fields/=========== 1. Text fields ======

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50031	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1384	OUT	GET /ContentTemplates/common/css/globals/links.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58416 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 1701 Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "6a5-494a1c7f1ca00+ident" Last-Modified: Tue, 09 Nov 2010 17:07:52 GMT Server: ECAcc (agb/53BD) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1701 Connection: close
2024-04-19 00:44:32 UTC	1701	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 6c 69 6e 6b 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 6c 69 6e 6b 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 4c 69 6e 6b 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 20 4c 69 6e 6b 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 61 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 32 66 36 Data Ascii: /---------------------------------------------------------------@filenamelinks.css@authoraziz.syed@akqa.com@descriptionlinks global style definitionsContent1. Links/=========== 1 Links ===========*/a{color:#2f6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50030	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1392	OUT	GET /ContentTemplates/common/css/globals/button-styles.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59148 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "2833-4a417cae43880+ident" Last-Modified: Wed, 25 May 2011 11:13:22 GMT ntCoent-Length: 10291 Server: ECAcc (agb/53F3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 10291 Connection: close
2024-04-19 00:44:32 UTC	10291	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 62 75 74 74 6f 6e 2d 73 74 79 6c 65 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 62 75 74 74 6f 6e 73 73 20 67 6c 6f 62 61 6c 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 42 75 74 74 6f 6e 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 20 42 75 74 74 6f 6e 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a Data Ascii: /---------------------------------------------------------------@filenamebutton-styles.css@authoraziz.syed@akqa.com@descriptionbuttonss global style definitionsContent1. Buttons/=========== 1 Buttons ===========*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50032	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:32 UTC	1385	OUT	GET /ContentTemplates/common/css/globals/modals.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:32 UTC	1173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58929 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:32 GMT Etag: "14ce-494a1c7f1ca00+ident" Last-Modified: Tue, 09 Nov 2010 17:07:52 GMT ntCoent-Length: 5326 Server: ECAcc (agb/53EA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 5326 Connection: close
2024-04-19 00:44:32 UTC	5326	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 6d 6f 64 61 6c 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 67 6c 6f 62 61 6c 20 6d 6f 64 61 6c 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 4d 6f 64 61 6c 73 0d 0a 09 09 32 2e 20 50 72 6f 64 75 63 74 20 41 64 64 65 64 20 4d 6f 64 61 6c 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 38 2e 20 4d 6f 64 61 6c 20 3d Data Ascii: /---------------------------------------------------------------@filenamemodals.css@authoraziz.syed@akqa.com@descriptionglobal modals style definitionsContent1. Modals2. Product Added Modals/=========== 8. Modal =

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50034	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 955 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:33 UTC	955	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 34 39 65 35 38 65 31 39 2d 31 36 35 38 2d 34 37 66 32 2d 62 63 35 63 2d 65 34 30 63 66 31 37 32 64 34 61 61 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"49e58e19-1658-47f2-bc5c-e40cf172d4aa","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","bg":true,"s
2024-04-19 00:44:33 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:33 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50036	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 956 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:33 UTC	956	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 65 33 31 38 31 65 31 32 2d 66 36 36 38 2d 34 34 39 61 2d 61 62 35 61 2d 35 36 64 30 64 33 63 64 33 31 62 61 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"e3181e12-f668-449a-ab5a-56d0d3cd31ba","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","bg":true,"s
2024-04-19 00:44:33 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:33 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50033	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1388	OUT	GET /ContentTemplates/common/css/globals/qt-modals.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58343 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "3edb-4ab2d1dff6f00+ident" Last-Modified: Tue, 23 Aug 2011 14:36:12 GMT ntCoent-Length: 16091 Server: ECAcc (agb/53C3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 16091 Connection: close
2024-04-19 00:44:33 UTC	16091	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 71 74 2d 6d 6f 64 61 6c 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 71 75 69 63 6b 20 74 6f 6f 6c 73 20 6d 6f 64 61 6c 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 51 75 69 63 6b 20 54 6f 6f 6c 73 20 4d 6f 64 61 6c 73 0d 0a 09 09 32 2e 20 50 4f 20 4c 6f 63 61 74 6f 72 20 4d 6f 64 61 6c 0d 0a 09 09 33 2e 20 43 61 63 6c 75 6c Data Ascii: /*---------------------------------------------------------------@filenameqt-modals.css@authoraziz.syed@akqa.com@descriptionquick tools modals style definitionsContent1. Quick Tools Modals2. PO Locator Modal3. Caclul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50035	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1387	OUT	GET /ContentTemplates/common/css/globals/tooltips.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58382 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 2097 Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "831-494a1c8010c40+ident" Last-Modified: Tue, 09 Nov 2010 17:07:53 GMT Server: ECAcc (agb/537E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2097 Connection: close
2024-04-19 00:44:33 UTC	2097	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 74 6f 6f 6c 74 69 70 73 2e 63 73 73 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 67 6c 6f 62 61 6c 20 74 6f 6f 6c 74 69 70 73 20 73 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 0d 0a 09 09 0d 0a 09 09 43 6f 6e 74 65 6e 74 0d 0a 09 09 31 2e 20 54 6f 6f 6c 20 54 69 70 73 0d 0a 2f 2a 0d 0a 09 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 31 2e 20 54 6f 6f 6c 20 54 69 70 73 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a Data Ascii: /---------------------------------------------------------------@filenametooltips.css@authoraziz.syed@akqa.com@descriptionglobal tooltips style definitionsContent1. Tool Tips/=========== 1. Tool Tips ===========*/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50037	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1348	OUT	GET /assets/script/component-guide-init.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58549 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "51d-50483742ebc00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:58:40 GMT Server: ECAcc (agb/5329) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1309 Connection: close
2024-04-19 00:44:33 UTC	1309	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 55 53 50 53 2e 52 65 71 75 69 72 65 2e 63 6f 6d 70 6f 6e 65 6e 74 47 75 69 64 65 3d 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 62 61 73 65 55 72 6c 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 22 2c 63 6f 6e 74 65 78 74 3a 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 2c 70 61 74 68 73 3a 7b 6a 71 75 65 72 79 3a 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 2f 6a 71 75 65 72 79 2f 64 69 73 74 2f 6a 71 75 65 72 79 2e 6d 69 6e 22 2c 22 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 22 3a 22 2f 61 73 73 65 74 73 2f 73 63 72 69 70 74 2f 6c 69 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},USPS.Require.componentGuide=USPSRequireNS.require.config({baseUrl:"/assets/script/",context:"components",paths:{jquery:"/global-elements/lib/script/jquery/dist/jquery.min","magnific-popup":"/assets/script/li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50038	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1406	OUT	GET /assets/fonts/9a2e4855-380f-477f-950e-d98e8db54eac.woff HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.usps.com/global-elements/footer/css/main-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1268	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://www.usps.com Access-Control-Max-Age: 86400 Age: 83134 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/woff Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "113bc-504fd432fdb00" Last-Modified: Thu, 09 Oct 2014 13:18:04 GMT Server: ECAcc (agb/5328) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 70588 Connection: close
2024-04-19 00:44:33 UTC	15134	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 13 bc 00 0f 00 00 00 02 7b 54 00 01 00 00 00 01 0f bc 00 00 04 00 00 00 09 2b 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 58 00 00 00 56 00 00 00 60 86 10 29 8b 63 6d 61 70 00 00 01 b0 00 00 01 07 00 00 01 74 fd 38 91 b6 63 76 74 20 00 00 02 b8 00 00 00 44 00 00 00 44 03 4f 0b e3 66 70 67 6d 00 00 02 fc 00 00 01 38 00 00 02 d5 00 be 8d ba 67 61 73 70 00 00 04 34 00 00 00 10 00 00 00 10 00 21 00 09 67 6c 79 66 00 00 04 44 00 00 ee 60 00 02 2d c0 2f 5e 9f 49 68 65 61 64 00 00 f2 a4 00 00 00 36 00 00 00 36 e9 40 30 e7 68 68 65 61 00 00 f2 dc 00 00 00 21 00 00 00 24 07 3e 04 61 68 6d 74 78 00 00 f3 00 00 00 02 ea 00 00 06 18 03 0c 33 17 6b 65 72 6e 00 00 f5 ec 00 00 0b 98 00 00 1e 18 3d 17 36 96 6c 6f 63 61 00 01 01 84 00 00 04 Data Ascii: wOFF{T+OS/2XV`)cmapt8cvt DDOfpgm8gasp4!glyfD`-/^Ihead66@0hhea!$>ahmtx3kern=6loca
2024-04-19 00:44:33 UTC	16383	IN	Data Raw: 92 ba d3 ec 96 f1 a3 7b eb 17 cc 8b d5 75 f4 d5 5c df 34 d4 59 17 1c 58 7f 48 7a fd d2 c4 84 d3 d4 3f 19 8b 66 7a c3 65 e1 78 e5 77 63 0b 53 0d de 8a e8 e8 31 e3 e3 67 2e 6f f7 bc 3a b0 ac b3 22 10 1d 88 87 3b c3 15 f9 f1 39 d5 6d 43 89 da 45 63 1d f5 83 47 0e b4 8f b6 87 fc 91 fe b6 9a d6 9a 32 6f 47 61 43 c7 58 67 71 5b 57 77 ac aa 61 f4 84 8c 5a 67 dc ff 3e 46 7f 2f f4 9a cf 5a 3e 4d 86 c0 2e 97 ed 93 07 5f 2b ce 5a 40 d3 82 77 76 c9 02 78 b2 d7 13 09 45 c5 bf e5 75 fa f7 4c ec 71 76 0e ed db ec 5c 25 32 2b 63 ce b2 a9 b1 f6 1f 64 dd df 6f 56 94 33 39 27 c3 ea c1 a3 94 92 1e 3c b3 d3 fd b8 79 b9 b6 2a 70 d0 7a 1b ff f4 ac a0 4a 35 2d f5 69 be ca 07 a8 d4 1e a9 02 b0 b7 0f ec ed 03 7b fb 54 fa 99 3c 6d 44 f9 c0 db 3e f0 b6 0f bc ed 83 11 e5 13 23 aa 40 Data Ascii: {u\4YXHz?fzexwcS1g.o:";9mCEcG2oGaCXgq[WwaZg>F/Z>M._+Z@wvxEuLqv\%2+cdoV39'<y*pzJ5-i{T<mD>#@
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 15 91 ff 25 89 16 13 ad 25 3a 95 e8 5c a2 cb 89 ae 23 ba 95 e8 fb 44 8f 12 fd 86 e8 25 a2 f7 b8 4c 8b 92 7a 22 f4 33 22 7a e5 61 cd a0 46 72 22 59 db 4d bd bf 15 35 6b cd 70 19 ab bf b2 69 1c 8e 84 3d 7f 2b df e5 25 c4 60 7c 65 b5 4d 9e 4f 27 6e 99 18 2b ab 8b f8 2e 1e 3e 7f fd b1 99 e2 0e 8b 3f 99 d2 0e fd 35 2f 70 94 04 6b 7c b5 65 b9 d7 bc 66 7e 77 68 a0 b6 b5 b6 2c e7 c1 07 cd b5 99 52 0e ff 4d 64 88 39 f2 97 3e e2 cc 7d d6 45 a6 69 f1 ee d0 f2 4c 3f d5 d9 59 ac 33 8a db 67 2a 9f 19 ea 68 96 f2 19 ef 74 24 ea bd 4b cc 09 eb a2 98 aa cb d4 67 7e d3 5c 47 32 95 c7 88 98 27 65 ad 31 bc b8 56 c8 08 ab 93 7c 5e f2 84 a0 32 f5 e7 db af c0 61 2a 1c a6 24 63 e9 20 1e fb 02 80 bd 66 bf 08 57 b6 83 00 67 02 dc ac 40 be ed 75 ca 9b ad ec 74 9a a3 96 90 0a c8 5b Data Ascii: %%:\#D%Lz"3"zaFr"YM5kpi=+%`\|eMO'n+.>?5/pk\|ef~wh,RMd9>}EiL?Y3ght$Kg~\G2'e1V\|^2a$c fWg@ut[
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 31 ea d5 17 7d 59 b6 4b f8 23 db 4d 7f 05 03 7a 4b be 2d fd 6c cc f5 da ff c7 73 bd 84 ef f7 9e 2a 9f 94 39 d9 53 ec ff ab 8b 2a 85 74 11 65 4e fc 95 38 20 47 34 d3 7f 59 e7 ca e8 a4 23 23 07 e4 87 a4 f0 8b 16 a0 37 17 db 2c ff 20 98 98 5d 19 cb de 6a 7a 1a 22 db d3 d8 62 b4 cb df ac c2 a4 79 16 60 0b b4 d3 2d d8 1e df 92 f6 18 d7 e2 db 3c 38 77 1d 34 74 8a ed 2d c4 ac ce 51 29 d7 58 e7 68 c7 1b cc 53 87 bf 45 80 27 8d a5 2e ea c0 eb 74 03 f4 e0 09 49 ac 07 49 b4 0c a9 5b ec a7 5f 7f 88 c8 52 6f ab 7b 60 bf 5a 10 f8 f0 62 3a bc 18 69 0c b9 5f ec d0 13 27 9b 59 38 1c 45 fd b5 33 06 b0 cb a2 cf 5b af d7 54 73 56 ea 00 47 c8 db 32 3f d2 32 bf b5 c2 dc e9 dd b1 3e 34 d8 d9 98 67 79 4e 1a 1b 5a 93 ac 0a f4 af 19 5c 70 62 85 e5 dd b2 f0 ec ad d3 17 7b 22 43 6d Data Ascii: 1}YK#MzK-ls9SteN8 G4Y##7, ]jz"by`-<8w4t-Q)XhSE'.tII[_Ro{`Zb:i_'Y8E3[TsVG2?2>4gyNZ\pb{"Cm
2024-04-19 00:44:34 UTC	6305	IN	Data Raw: 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 b2 36 27 6b 73 72 cb 94 d8 32 25 b6 d5 db ea 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 20 f7 81 dc 07 72 1f c8 7d 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 48 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 71 44 f1 c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee c0 f9 ee 50 ff 43 fd 0f f5 3f d4 ff 50 ff 43 Data Ascii: s6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ks6'ksr2%r} r} r} r} r}HqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqHqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDqDPC?PC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50040	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1442	OUT	GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58405 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "11c-49c550d788cc0" Last-Modified: Tue, 15 Feb 2011 16:56:59 GMT Server: ECAcc (agb/A425) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 284 Connection: close
2024-04-19 00:44:33 UTC	284	IN	Data Raw: 47 49 46 38 39 61 02 00 22 00 d5 00 00 d0 d0 d1 ce ce cf c3 c3 c4 ee ee ee cf cf cf cc cc cd c7 c7 c8 f4 f4 f5 d4 d4 d5 eb eb eb e7 e7 e8 f4 f4 f4 c5 c5 c6 c4 c4 c5 ea ea ea c8 c8 c9 c9 c9 ca ef ef f0 f0 f0 f1 c1 c1 c2 ea ea eb ed ed ee ec ec ed ee ee ef cd cd cd e9 e9 ea e9 e9 e9 d1 d1 d2 ca ca cb f2 f2 f2 bf bf c1 cd cd ce cf cf d0 ec ec ec d5 d5 d7 eb eb ec c6 c6 c7 d0 d0 d0 cb cb cc f1 f1 f2 e8 e8 e9 f1 f1 f1 d2 d2 d3 c2 c2 c3 bf bf c0 e8 e8 e8 f3 f3 f4 d3 d3 d4 ef ef ef c0 c0 c1 e6 e6 e6 c6 c6 c6 f2 f2 f3 e6 e6 e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 22 00 00 06 39 40 d1 01 b1 78 b9 8c 2a 5a 72 d3 01 9c 4a 29 50 8a 20 09 44 3e 30 0c ac 70 31 0d 38 15 88 Data Ascii: GIF89a"!,"9@x*ZrJ)P D>0p18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50042	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1441	OUT	GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1118	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58285 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "af-49c550cd0b400" Last-Modified: Tue, 15 Feb 2011 16:56:48 GMT Server: ECAcc (agb/53EC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 175 Connection: close
2024-04-19 00:44:33 UTC	175	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 66 08 02 00 00 00 85 86 6c 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 51 49 44 41 54 78 da 62 7a fb f6 3d d3 ff ff ff 80 f8 3f 13 03 03 03 0a 0d 61 83 68 04 1f 97 18 3a c6 ae 8f 01 83 0d a2 19 18 18 19 be 7e fd 0a 65 0f 2c 06 b9 19 e6 76 54 37 fe 87 cb c1 d4 c1 fc 89 ae 0f d9 ff f8 68 54 73 10 62 c0 f0 00 08 30 00 69 29 7a ff ea 60 e1 07 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRfl<tEXtSoftwareAdobe ImageReadyqe<QIDATxbz=?ah:~e,vT7hTsb0i)z`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50041	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1448	OUT	GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58971 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "2117-4a6caeb2c5b80" Last-Modified: Tue, 28 Jun 2011 19:46:06 GMT Server: ECAcc (agb/5377) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8471 Connection: close
2024-04-19 00:44:33 UTC	8471	IN	Data Raw: 47 49 46 38 39 61 20 03 10 01 f7 ff 00 a7 c4 da 70 70 70 4b 4a 4b d2 d2 d2 5a aa ea 8c c4 f4 c0 ce da 81 b0 d5 c5 dd f1 a5 a5 a5 b2 b2 b3 3e 8b c8 78 78 78 f6 f6 f7 c5 c5 c6 20 81 ce 75 b2 e2 e7 ed f3 85 c1 f1 6a 98 ba f0 f6 fb 3b 3b 3b c9 c9 cb 9b ca f2 6e ab db ba ba bb 91 91 91 1a 7b ca cc cc cd 5d 5d 5d d5 d5 d5 aa d2 f3 b6 b6 b6 59 59 59 3f 3f 3f be be be d4 e5 f3 ad ad ae 95 95 95 a9 a9 a9 53 53 53 9e 9e 9e a6 cb e9 7c 7c 7c 8d 8d 8d 31 31 31 8c c2 ee 73 73 73 77 77 77 eb f0 f5 53 a8 ee 44 91 d3 7b b6 e5 79 b9 eb 23 22 23 91 c3 ea 57 56 57 50 4f 50 39 84 bf a1 c7 e4 bd da f2 29 29 29 e8 ed f0 9d c1 dd 7d b8 e7 e6 e6 e7 e8 e8 e8 f2 f2 f3 f3 f3 f4 f1 f1 f1 ef ef ef e7 e7 e8 e5 e5 e6 f2 f2 f2 e6 e6 e6 e9 e9 e9 e5 e5 e5 e8 e8 e9 f1 f1 f2 f4 f4 f4 f4 f4 Data Ascii: GIF89a pppKJKZ>xxx uj;;;n{]]]YYY???SSS\|\|\|111ssswwwSD{y#"#WVWPOP9)))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50039	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1445	OUT	GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1117	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58285 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "39-49c550d87cf00" Last-Modified: Tue, 15 Feb 2011 16:57:00 GMT Server: ECAcc (agb/5330) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 57 Connection: close
2024-04-19 00:44:33 UTC	57	IN	Data Raw: 47 49 46 38 39 61 01 00 22 00 91 00 00 eb eb ec d8 d8 d9 d5 d5 d6 cb cb cd 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 22 00 00 02 0a 84 8f 30 cb cd 01 a1 98 b3 00 00 3b Data Ascii: GIF89a"!,"0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50043	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	1448	OUT	GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:33 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58910 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:33 GMT Etag: "295-49c806d93eac0" Last-Modified: Thu, 17 Feb 2011 20:41:55 GMT Server: ECAcc (agb/538A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 661 Connection: close
2024-04-19 00:44:33 UTC	661	IN	Data Raw: 47 49 46 38 39 61 08 00 2c 01 e6 4d 00 7a c2 ea ff ff ff eb eb ec de de df d4 d4 d7 b8 de f4 42 40 41 35 89 cd ca e7 f7 4d 96 d1 83 c6 eb 9d d2 f0 cd cd d0 f5 f5 f5 57 55 56 df df e0 82 82 82 a1 a1 a1 95 ce ee e1 e1 e2 c7 c7 c9 b6 b6 b6 ec ec ec d6 d6 d7 8b 8a 8b e1 e6 ec a5 a5 a7 8a b7 db ed ed ee 97 be de d5 d5 d5 8b b8 dc bb d2 e4 a6 d6 f1 d5 d4 d5 6c 6b 6c 97 be df d4 d3 d4 c0 c0 c2 ac ab ac 84 84 85 dc ef f9 97 97 97 cb cb cb 8b 8b 8b ac ac ae f4 f4 f4 66 a4 d6 72 aa d8 77 77 77 af da f2 cb cb cc b0 cc e3 e4 f3 fb 8c 8b 8c d2 d2 d2 e0 e5 ea 8c ca ed a3 c4 e0 df e4 ea a1 a0 a1 bb bb bb 77 75 76 b9 b9 bc d3 eb f8 b5 b5 b6 78 78 78 b0 b0 b0 ed f7 fc 8d 8d 8d 97 96 97 91 91 92 b4 b4 b5 c1 c1 c1 ba d1 e4 96 95 96 d4 df e9 ff ff ff 00 00 00 00 00 00 00 00 Data Ascii: GIF89a,MzB@A5MWUVlklfrwwwwuvxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50044	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:44:34 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:33 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2805 Expires: Fri, 19 Apr 2024 00:49:33 GMT Server: cloudflare CF-RAY: 8768dde828ad4569-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50045	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:33 UTC	663	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:44:34 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 71d172b6165b92cb79a89b62ace73224.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7ss-YB6mCZeMB1hnlOZgTB8tuq4oX8VLQvDAknPRpkyWi9eu5iKOCg== Age: 34087

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50049	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:44:34 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:44:34 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840042-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50050	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1459	OUT	GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:34 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58982 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "644-49c550ca2ed40" Last-Modified: Tue, 15 Feb 2011 16:56:45 GMT Server: ECAcc (agb/A42A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1604 Connection: close
2024-04-19 00:44:34 UTC	1604	IN	Data Raw: 47 49 46 38 39 61 30 00 0d 02 c4 12 00 ff ff ff e1 e1 e1 fe fe fe fd fd fd fa fa fa fb fb fb f8 f8 f8 f6 f6 f6 fc fc fc f9 f9 f9 f7 f7 f7 e2 e2 e2 e8 e8 e8 f5 f5 f5 ed ed ed e5 e5 e5 e3 e3 e3 f4 f4 f4 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 12 00 2c 00 00 00 00 30 00 0d 02 00 05 ff a0 20 8e 64 69 9e 68 3a 0e 6c eb be 70 2c cf 6d 61 df 78 ae ef 7c 7f 13 c0 a0 70 48 2c 1a 8f 41 83 72 c9 6c 3a 9f d0 e8 f2 40 ad 5a af d8 ac 76 5b 0d 78 bf e0 b0 78 4c 2e 7f 01 e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 75 66 87 88 89 5e 12 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 96 6a 2a 26 6a 90 01 70 01 90 69 24 Data Ascii: GIF89a0!,0 dih:lp,max\|pH,Arl:@Zv[xxL.zn\|N~uf^j*&jpi$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50051	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1452	OUT	GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ContentTemplates/common/css/usps.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.0.1713487458.0.0.0; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:44:34 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58848 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "87d-4a6caeb0dd700" Last-Modified: Tue, 28 Jun 2011 19:46:04 GMT Server: ECAcc (agb/538E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-19 00:44:34 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50055	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:44:34 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:34 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99175 Server: cloudflare CF-RAY: 8768ddebf89753ab-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50054	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487472640 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:34 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:34 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50052	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1350	OUT	GET /assets/script/components/utility-bar.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0
2024-04-19 00:44:34 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 59014 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "708-50483708bf2c0+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:39 GMT Server: ECAcc (agb/53D2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1800 Connection: close
2024-04-19 00:44:34 UTC	1800	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 29 2c 69 28 29 2c 66 28 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 75 74 69 6c 69 74 79 42 61 72 3d 65 28 22 23 75 74 69 6c 69 74 79 2d 62 61 72 22 29 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 3d 65 28 22 23 6e 61 76 2d 74 6f 6f 6c 2d 6d 75 6c 74 69 6c 69 6e 67 75 61 6c 22 2c 74 2e 75 74 69 6c 69 74 79 42 61 72 29 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 4c 69 6e 6b 3d 65 28 22 2e 61 6e 63 68 6f 72 2c 20 2e 6d 75 6c 74 69 2d 6c 69 6e 6b 22 2c 74 2e 6c 61 6e 67 75 61 67 65 54 6f 6f 6c 29 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(){var t={},n=function(){r(),i(),f()},r=function(){t.utilityBar=e("#utility-bar"),t.languageTool=e("#nav-tool-multilingual",t.utilityBar),t.languageToolLink=e(".anchor, .multi-link",t.languageTool)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50053	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1363	OUT	GET /global-elements/lib/script/jquery/dist/jquery.min.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0
2024-04-19 00:44:34 UTC	1148	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 84134 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "176b1-504838ea5a300+gzip+ident" Last-Modified: Fri, 03 Oct 2014 12:06:04 GMT Server: ECAcc (agb/53EB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 95921 Connection: close
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-04-19 00:44:34 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 72 6e 20 57 2e 74 65 73 74 28 61 7c 7c 22 22 29 7c 7c 66 62 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6c 61 6e 67 3a 20 22 2b 61 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 63 62 2c 64 62 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3b 64 6f 20 69 66 28 63 3d 70 3f 62 2e 6c 61 6e 67 3a 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 78 6d 6c 3a 6c 61 6e 67 22 29 7c 7c 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 61 6e 67 22 29 29 72 65 74 75 72 6e 20 63 3d 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 63 3d 3d 3d 61 7c 7c 30 3d 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 61 2b 22 2d 22 29 3b 77 68 69 6c 65 28 28 62 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 62 2e 6e 6f Data Ascii: rn W.test(a\|\|"")\|\|fb.error("unsupported lang: "+a),a=a.replace(cb,db).toLowerCase(),function(b){var c;do if(c=p?b.lang:b.getAttribute("xml:lang")\|\|b.getAttribute("lang"))return c=c.toLowerCase(),c===a\|\|0===c.indexOf(a+"-");while((b=b.parentNode)&&1===b.no
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 6e 20 64 3f 5b 62 5d 3a 62 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 65 6c 65 74 65 20 64 5b 62 5b 65 5d 5d 3b 69 66 28 63 3f 21 50 28 64 29 3a 21 6d 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 72 65 74 75 72 6e 7d 28 63 7c 7c 28 64 65 6c 65 74 65 20 67 5b 68 5d 2e 64 61 74 61 2c 50 28 67 5b 68 5d 29 29 29 26 26 28 66 3f 6d 2e 63 6c 65 61 6e 44 61 74 61 28 5b 61 5d 2c 21 30 29 3a 6b 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 7c 7c 67 21 3d 67 2e 77 69 6e 64 6f 77 3f 64 65 6c 65 74 65 20 67 5b 68 5d 3a 67 5b 68 5d 3d 6e 75 6c 6c 29 7d 7d 7d 6d 2e 65 78 74 65 6e 64 28 7b 63 61 63 68 65 3a 7b 7d 2c 6e 6f 44 61 74 61 3a 7b 22 61 70 70 6c 65 74 20 22 3a 21 30 2c 22 65 6d 62 65 64 20 22 3a Data Ascii: n d?[b]:b.split(" ")),e=b.length;while(e--)delete d[b[e]];if(c?!P(d):!m.isEmptyObject(d))return}(c\|\|(delete g[h].data,P(g[h])))&&(f?m.cleanData([a],!0):k.deleteExpando\|\|g!=g.window?delete g[h]:g[h]=null)}}}m.extend({cache:{},noData:{"applet ":!0,"embed ":
2024-04-19 00:44:34 UTC	2	IN	Data Raw: 76 6f Data Ascii: vo
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 69 64 20 30 3d 3d 3d 62 7c 7c 62 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 62 29 3f 6d 2e 6d 65 72 67 65 28 5b 61 5d 2c 66 29 3a 66 7d 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 29 7b 57 2e 74 65 73 74 28 61 2e 74 79 70 65 29 26 26 28 61 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 61 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6d 2e 6e 6f 64 65 4e 61 6d 65 28 61 2c 22 74 61 62 6c 65 22 29 26 26 6d 2e 6e 6f 64 65 4e 61 6d 65 28 31 31 21 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 3f 62 3a 62 2e 66 69 72 73 74 43 68 69 6c 64 2c 22 74 72 22 29 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 62 6f 64 79 22 29 5b 30 5d 7c 7c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 2e 6f 77 Data Ascii: id 0===b\|\|b&&m.nodeName(a,b)?m.merge([a],f):f}function vb(a){W.test(a.type)&&(a.defaultChecked=a.checked)}function wb(a,b){return m.nodeName(a,"table")&&m.nodeName(11!==b.nodeType?b:b.firstChild,"tr")?a.getElementsByTagName("tbody")[0]\|\|a.appendChild(a.ow
2024-04-19 00:44:34 UTC	16383	IN	Data Raw: 5b 33 5d 7c 7c 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 3f 22 22 3a 22 70 78 22 29 2c 67 3d 28 6d 2e 63 73 73 4e 75 6d 62 65 72 5b 61 5d 7c 7c 22 70 78 22 21 3d 3d 66 26 26 2b 64 29 26 26 62 63 2e 65 78 65 63 28 6d 2e 63 73 73 28 63 2e 65 6c 65 6d 2c 61 29 29 2c 68 3d 31 2c 69 3d 32 30 3b 69 66 28 67 26 26 67 5b 33 5d 21 3d 3d 66 29 7b 66 3d 66 7c 7c 67 5b 33 5d 2c 65 3d 65 7c 7c 5b 5d 2c 67 3d 2b 64 7c 7c 31 3b 64 6f 20 68 3d 68 7c 7c 22 2e 35 22 2c 67 2f 3d 68 2c 6d 2e 73 74 79 6c 65 28 63 2e 65 6c 65 6d 2c 61 2c 67 2b 66 29 3b 77 68 69 6c 65 28 68 21 3d 3d 28 68 3d 63 2e 63 75 72 28 29 2f 64 29 26 26 31 21 3d 3d 68 26 26 2d 2d 69 29 7d 72 65 74 75 72 6e 20 65 26 26 28 67 3d 63 2e 73 74 61 72 74 3d 2b 67 7c 7c 2b 64 7c 7c 30 2c 63 2e 75 6e 69 74 3d Data Ascii: [3]\|\|(m.cssNumber[a]?"":"px"),g=(m.cssNumber[a]\|\|"px"!==f&&+d)&&bc.exec(m.css(c.elem,a)),h=1,i=20;if(g&&g[3]!==f){f=f\|\|g[3],e=e\|\|[],g=+d\|\|1;do h=h\|\|".5",g/=h,m.style(c.elem,a,g+f);while(h!==(h=c.cur()/d)&&1!==h&&--i)}return e&&(g=c.start=+g\|\|+d\|\|0,c.unit=
2024-04-19 00:44:34 UTC	14003	IN	Data Raw: 72 28 67 20 69 6e 20 61 2e 63 6f 6e 76 65 72 74 65 72 73 29 6a 5b 67 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 5d 3b 66 3d 6b 2e 73 68 69 66 74 28 29 3b 77 68 69 6c 65 28 66 29 69 66 28 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 5b 66 5d 26 26 28 63 5b 61 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 5b 66 5d 5d 3d 62 29 2c 21 69 26 26 64 26 26 61 2e 64 61 74 61 46 69 6c 74 65 72 26 26 28 62 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 62 2c 61 2e 64 61 74 61 54 79 70 65 29 29 2c 69 3d 66 2c 66 3d 6b 2e 73 68 69 66 74 28 29 29 69 66 28 22 2a 22 3d 3d 3d 66 29 66 3d 69 3b 65 6c 73 65 20 69 66 28 22 2a 22 21 3d 3d 69 26 26 69 21 3d 3d 66 29 7b 69 66 28 67 3d 6a 5b 69 2b 22 20 22 2b 66 5d 7c 7c 6a 5b 22 2a 20 Data Ascii: r(g in a.converters)j[g.toLowerCase()]=a.converters[g];f=k.shift();while(f)if(a.responseFields[f]&&(c[a.responseFields[f]]=b),!i&&d&&a.dataFilter&&(b=a.dataFilter(b,a.dataType)),i=f,f=k.shift())if(""===f)f=i;else if(""!==i&&i!==f){if(g=j[i+" "+f]\|\|j["*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50058	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=613e6c51-7685-45b8-bef0-5b31957f2f86&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:34 UTC	454	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:34 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50061	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	885	OUT	GET /rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:34 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:34 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50062	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487472927&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:35 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 5858966920742318 Date: Fri, 19 Apr 2024 00:44:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:35 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50063	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1480	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487472936 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:35 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:34 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1013351766489482 Date: Fri, 19 Apr 2024 00:44:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50064	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:34 UTC	561	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:34 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 37 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:34 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50057	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1342	OUT	GET /assets/script/components/faq.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f
2024-04-19 00:44:34 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58522 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "9ac-50483705e2c00+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:36 GMT Server: ECAcc (agb/53AE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2476 Connection: close
2024-04-19 00:44:34 UTC	2476	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 2c 73 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 29 2c 61 28 29 2c 69 3d 72 2e 61 6c 6c 42 6c 6f 63 6b 73 2e 6c 65 6e 67 74 68 2c 73 3d 31 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 73 65 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 66 61 71 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 22 2c 69 29 2c 72 2e 63 6f 6c 6c 61 70 73 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 66 61 71 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 6f 6c 6c 61 70 73 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".faq-component--see-all-link",i),r.collapseAllLink=e(".faq-component--collaps

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50056	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1343	OUT	GET /assets/script/components/tips.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f
2024-04-19 00:44:34 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58040 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "991-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (agb/53AC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2449 Connection: close
2024-04-19 00:44:34 UTC	2449	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 2c 73 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 29 2c 61 28 29 2c 69 3d 72 2e 61 6c 6c 42 6c 6f 63 6b 73 2e 6c 65 6e 67 74 68 2c 73 3d 31 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 73 65 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 73 65 65 2d 61 6c 6c 2d 6c 69 6e 6b 22 2c 69 29 2c 72 2e 63 6f 6c 6c 61 70 73 65 41 6c 6c 4c 69 6e 6b 3d 65 28 22 2e 74 69 70 73 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 63 6f 6c 6c 61 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i,s,o=function(){u(),a(),i=r.allBlocks.length,s=1},u=function(){var i=e(t);r.component=i,r.seeAllLink=e(".tips-component--see-all-link",i),r.collapseAllLink=e(".tips-component--colla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50073	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1374	OUT	GET /td/rul/978081151?random=1713487473009&cv=11&fst=1713487473009&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:34 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:34 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignals
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 Data Ascii: =2\u0026rp_id=1j7639828228","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 Data Ascii: 4495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u002
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 33 37 37 32 33 38 38 36 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: tributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https:
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d Data Ascii: =1j377238866","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 Data Ascii: 9112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: ttps://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 Data Ascii: ta":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 Data Ascii: 94254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metada

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50066	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1173	OUT	GET /ContentTemplates/common/images/global/header/hdr_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
2024-04-19 00:44:34 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58406 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "11c-49c550d788cc0" Last-Modified: Tue, 15 Feb 2011 16:56:59 GMT Server: ECAcc (agb/A425) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 284 Connection: close
2024-04-19 00:44:34 UTC	284	IN	Data Raw: 47 49 46 38 39 61 02 00 22 00 d5 00 00 d0 d0 d1 ce ce cf c3 c3 c4 ee ee ee cf cf cf cc cc cd c7 c7 c8 f4 f4 f5 d4 d4 d5 eb eb eb e7 e7 e8 f4 f4 f4 c5 c5 c6 c4 c4 c5 ea ea ea c8 c8 c9 c9 c9 ca ef ef f0 f0 f0 f1 c1 c1 c2 ea ea eb ed ed ee ec ec ed ee ee ef cd cd cd e9 e9 ea e9 e9 e9 d1 d1 d2 ca ca cb f2 f2 f2 bf bf c1 cd cd ce cf cf d0 ec ec ec d5 d5 d7 eb eb ec c6 c6 c7 d0 d0 d0 cb cb cc f1 f1 f2 e8 e8 e9 f1 f1 f1 d2 d2 d3 c2 c2 c3 bf bf c0 e8 e8 e8 f3 f3 f4 d3 d3 d4 ef ef ef c0 c0 c1 e6 e6 e6 c6 c6 c6 f2 f2 f3 e6 e6 e7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 22 00 00 06 39 40 d1 01 b1 78 b9 8c 2a 5a 72 d3 01 9c 4a 29 50 8a 20 09 44 3e 30 0c ac 70 31 0d 38 15 88 Data Ascii: GIF89a"!,"9@x*ZrJ)P D>0p18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50067	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1179	OUT	GET /ContentTemplates/common/images/global/header/hdr_icons_roll.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
2024-04-19 00:44:34 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58972 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "2117-4a6caeb2c5b80" Last-Modified: Tue, 28 Jun 2011 19:46:06 GMT Server: ECAcc (agb/5377) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 8471 Connection: close
2024-04-19 00:44:34 UTC	8471	IN	Data Raw: 47 49 46 38 39 61 20 03 10 01 f7 ff 00 a7 c4 da 70 70 70 4b 4a 4b d2 d2 d2 5a aa ea 8c c4 f4 c0 ce da 81 b0 d5 c5 dd f1 a5 a5 a5 b2 b2 b3 3e 8b c8 78 78 78 f6 f6 f7 c5 c5 c6 20 81 ce 75 b2 e2 e7 ed f3 85 c1 f1 6a 98 ba f0 f6 fb 3b 3b 3b c9 c9 cb 9b ca f2 6e ab db ba ba bb 91 91 91 1a 7b ca cc cc cd 5d 5d 5d d5 d5 d5 aa d2 f3 b6 b6 b6 59 59 59 3f 3f 3f be be be d4 e5 f3 ad ad ae 95 95 95 a9 a9 a9 53 53 53 9e 9e 9e a6 cb e9 7c 7c 7c 8d 8d 8d 31 31 31 8c c2 ee 73 73 73 77 77 77 eb f0 f5 53 a8 ee 44 91 d3 7b b6 e5 79 b9 eb 23 22 23 91 c3 ea 57 56 57 50 4f 50 39 84 bf a1 c7 e4 bd da f2 29 29 29 e8 ed f0 9d c1 dd 7d b8 e7 e6 e6 e7 e8 e8 e8 f2 f2 f3 f3 f3 f4 f1 f1 f1 ef ef ef e7 e7 e8 e5 e5 e6 f2 f2 f2 e6 e6 e6 e9 e9 e9 e5 e5 e5 e8 e8 e9 f1 f1 f2 f4 f4 f4 f4 f4 Data Ascii: GIF89a pppKJKZ>xxx uj;;;n{]]]YYY???SSS\|\|\|111ssswwwSD{y#"#WVWPOP9)))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50068	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1172	OUT	GET /ContentTemplates/common/images/global/header/hdr_bkg.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
2024-04-19 00:44:34 UTC	1118	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58286 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "af-49c550cd0b400" Last-Modified: Tue, 15 Feb 2011 16:56:48 GMT Server: ECAcc (agb/53EC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 175 Connection: close
2024-04-19 00:44:34 UTC	175	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 66 08 02 00 00 00 85 86 6c 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 51 49 44 41 54 78 da 62 7a fb f6 3d d3 ff ff ff 80 f8 3f 13 03 03 03 0a 0d 61 83 68 04 1f 97 18 3a c6 ae 8f 01 83 0d a2 19 18 18 19 be 7e fd 0a 65 0f 2c 06 b9 19 e6 76 54 37 fe 87 cb c1 d4 c1 fc 89 ae 0f d9 ff f8 68 54 73 10 62 c0 f0 00 08 30 00 69 29 7a ff ea 60 e1 07 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRfl<tEXtSoftwareAdobe ImageReadyqe<QIDATxbz=?ah:~e,vT7hTsb0i)z`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50069	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1176	OUT	GET /ContentTemplates/common/images/global/header/hdr_sm_pipe.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
2024-04-19 00:44:34 UTC	1117	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58286 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "39-49c550d87cf00" Last-Modified: Tue, 15 Feb 2011 16:57:00 GMT Server: ECAcc (agb/5330) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 57 Connection: close
2024-04-19 00:44:34 UTC	57	IN	Data Raw: 47 49 46 38 39 61 01 00 22 00 91 00 00 eb eb ec d8 d8 d9 d5 d5 d6 cb cb cd 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 22 00 00 02 0a 84 8f 30 cb cd 01 a1 98 b3 00 00 3b Data Ascii: GIF89a"!,"0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50070	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1179	OUT	GET /ContentTemplates/common/images/global/sprites/sprite_arrows.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.0.1713487459.0.0.0; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.2.1989466777.1713487459
2024-04-19 00:44:34 UTC	1119	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58911 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "295-49c806d93eac0" Last-Modified: Thu, 17 Feb 2011 20:41:55 GMT Server: ECAcc (agb/538A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 661 Connection: close
2024-04-19 00:44:34 UTC	661	IN	Data Raw: 47 49 46 38 39 61 08 00 2c 01 e6 4d 00 7a c2 ea ff ff ff eb eb ec de de df d4 d4 d7 b8 de f4 42 40 41 35 89 cd ca e7 f7 4d 96 d1 83 c6 eb 9d d2 f0 cd cd d0 f5 f5 f5 57 55 56 df df e0 82 82 82 a1 a1 a1 95 ce ee e1 e1 e2 c7 c7 c9 b6 b6 b6 ec ec ec d6 d6 d7 8b 8a 8b e1 e6 ec a5 a5 a7 8a b7 db ed ed ee 97 be de d5 d5 d5 8b b8 dc bb d2 e4 a6 d6 f1 d5 d4 d5 6c 6b 6c 97 be df d4 d3 d4 c0 c0 c2 ac ab ac 84 84 85 dc ef f9 97 97 97 cb cb cb 8b 8b 8b ac ac ae f4 f4 f4 66 a4 d6 72 aa d8 77 77 77 af da f2 cb cb cc b0 cc e3 e4 f3 fb 8c 8b 8c d2 d2 d2 e0 e5 ea 8c ca ed a3 c4 e0 df e4 ea a1 a0 a1 bb bb bb 77 75 76 b9 b9 bc d3 eb f8 b5 b5 b6 78 78 78 b0 b0 b0 ed f7 fc 8d 8d 8d 97 96 97 91 91 92 b4 b4 b5 c1 c1 c1 ba d1 e4 96 95 96 d4 df e9 ff ff ff 00 00 00 00 00 00 00 00 Data Ascii: GIF89a,MzB@A5MWUVlklfrwwwwuvxxx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50074	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1250	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487473009&cv=11&fst=1713487473009&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&hn=www.googleadservices.com&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:34 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:34 UTC	552	IN	Data Raw: 38 64 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8db(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:44:34 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:44:34 UTC	467	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 67 6c 6f 62 61 6c 73 25 32 46 73 69 74 65 2d 69 6e 64 65 78 2e 68 74 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 53 69 74 65 25 32 30 49 6e 64 65 78 25 32 30 25 37 Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm\x26frm\x3d0\x26tiba\x3dSite%20Index%20%7
2024-04-19 00:44:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50075	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1190	OUT	GET /ContentTemplates/common/images/global/header/dropdown/hdr_panel_sprite.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58982 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:34 GMT Etag: "644-49c550ca2ed40" Last-Modified: Tue, 15 Feb 2011 16:56:45 GMT Server: ECAcc (agb/A42A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1604 Connection: close
2024-04-19 00:44:35 UTC	1604	IN	Data Raw: 47 49 46 38 39 61 30 00 0d 02 c4 12 00 ff ff ff e1 e1 e1 fe fe fe fd fd fd fa fa fa fb fb fb f8 f8 f8 f6 f6 f6 fc fc fc f9 f9 f9 f7 f7 f7 e2 e2 e2 e8 e8 e8 f5 f5 f5 ed ed ed e5 e5 e5 e3 e3 e3 f4 f4 f4 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 12 00 2c 00 00 00 00 30 00 0d 02 00 05 ff a0 20 8e 64 69 9e 68 3a 0e 6c eb be 70 2c cf 6d 61 df 78 ae ef 7c 7f 13 c0 a0 70 48 2c 1a 8f 41 83 72 c9 6c 3a 9f d0 e8 f2 40 ad 5a af d8 ac 76 5b 0d 78 bf e0 b0 78 4c 2e 7f 01 e8 b4 7a cd 6e bb df f0 b8 7c 4e af db ef f8 bc 7e cf ef fb ff 80 81 82 83 84 75 66 87 88 89 5e 12 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 9e 9f a0 a1 96 6a 2a 26 6a 90 01 70 01 90 69 24 Data Ascii: GIF89a0!,0 dih:lp,max\|pH,Arl:@Zv[xxL.zn\|N~uf^j*&jpi$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50078	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487472640 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:35 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50080	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	653	OUT	GET /rp.gif?ts=1713487472740&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:35 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50076	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1343	OUT	GET /assets/script/components/tabs.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58041 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "9a7-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (agb/53EE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2471 Connection: close
2024-04-19 00:44:35 UTC	2471	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 7b 7d 2c 73 3d 7b 74 79 70 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 78 74 65 6e 64 28 73 2c 6e 29 2c 75 28 29 2c 61 28 29 2c 63 28 29 2c 73 2e 74 79 70 65 3d 3d 3d 22 76 65 72 74 69 63 61 6c 22 26 26 72 2e 69 73 44 65 73 6b 74 6f 70 28 29 26 26 28 69 2e 63 6f 6e 74 61 69 6e 65 72 2e 69 73 28 22 3a 76 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s={type:"horizontal"},o=function(){e.extend(s,n),u(),a(),c(),s.type==="vertical"&&r.isDesktop()&&(i.container.is(":v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50077	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1349	OUT	GET /assets/script/components/learn-more.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1144	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58197 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "388-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (agb/5331) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 904 Connection: close
2024-04-19 00:44:35 UTC	904	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 3d 21 31 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 28 29 2c 75 28 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6f 6e 74 61 69 6e 65 72 3d 65 28 74 29 2c 72 2e 74 72 69 67 67 65 72 3d 65 28 22 5b 68 72 65 66 3d 23 22 2b 74 2e 69 64 2b 22 5d 22 29 2c 72 2e 6c 65 61 72 6e 4d 6f 72 65 53 65 63 74 69 6f 6e 3d 65 28 22 2e 6c 65 61 72 6e 2d 6d 6f 72 65 2d 2d 63 6f 6e 74 65 6e 74 22 2c 72 2e 63 6f 6e 74 61 69 6e 65 72 29 2c 72 2e 61 6c 6c 4c 65 61 72 6e 4d 6f 72 65 3d 65 28 22 2e 6c 65 61 72 6e 2d 6d 6f 72 65 2d 2d 63 6f 6e 74 65 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=!1,s=function(){o(),u()},o=function(){r.container=e(t),r.trigger=e("[href=#"+t.id+"]"),r.learnMoreSection=e(".learn-more--content",r.container),r.allLearnMore=e(".learn-more--conte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50079	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	1353	OUT	GET /assets/script/components/scalable-table.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1145	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58197 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "838-50483707cb080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:57:38 GMT Server: ECAcc (agb/A40D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2104 Connection: close
2024-04-19 00:44:35 UTC	2104	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 28 5b 22 72 65 73 69 7a 65 2d 6d 61 6e 61 67 65 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 69 3d 7b 7d 2c 73 2c 6f 2c 75 2c 61 2c 66 2c 6c 2c 63 3d 7b 6f 66 66 73 65 74 3a 31 35 2c 63 6f 6c 75 6d 6e 4d 69 6e 57 69 64 74 68 3a 37 35 2c 63 6f 6c 75 6d 6e 4d 61 78 57 69 64 74 68 3a 31 35 30 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 78 74 65 6e 64 28 63 2c 6e 29 2c 70 28 29 2c 76 28 29 2c 62 28 29 2c 64 28 29 7d 2c 70 3d 66 75 6e 63 74 69 6f Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){USPSGlobals.Require.requireGlobals(["resize-manager"],function(r){var i={},s,o,u,a,f,l,c={offset:15,columnMinWidth:75,columnMaxWidth:150},h=function(){e.extend(c,n),p(),v(),b(),d()},p=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50084	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	863	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=6, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50085	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	973	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:35 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:44:35 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50088	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:34 UTC	984	OUT	GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:35 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:34 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 19978c9e561c946f strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: c8deb8e453bd2e67f74e099ff1bb8fac8b8e23fbd0fe624d1bff6ae3e9845261 connection: close
2024-04-19 00:44:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50089	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1005	OUT	GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:35 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:35 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 88954c5f19bdfaad strict-transport-security: max-age=631138519 x-response-time: 4 x-connection-hash: c6c3459e3824da39ad04a62a165a0996a556a82b659067306274d2e04276ed86 connection: close
2024-04-19 00:44:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50082	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1351	OUT	GET /assets/script/components/video-player.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1155	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58502 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "196-50483708bf2c0" Last-Modified: Fri, 03 Oct 2014 11:57:39 GMT Server: ECAcc (agb/5361) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 406 Connection: close
2024-04-19 00:44:35 UTC	406	IN	Data Raw: 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 7b 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 29 2c 6f 28 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 65 28 74 29 3b 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 69 2c 72 2e 76 69 64 65 6f 50 6f 73 74 65 72 3d 65 28 22 2e 76 69 64 65 6f 2d 2d 70 6f 73 74 65 72 22 2c 69 29 2c 72 2e 70 6c 61 79 42 75 74 74 6f 6e 3d 65 28 22 2e 76 69 64 65 6f 2d 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 22 2c 69 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 76 69 64 65 6f 50 6f 73 74 65 72 2e 6f 6e 65 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 Data Ascii: USPSRequireNS.define(["jquery"],function(e){var t=function(t,n){var r={},i=function(){s(),o()},s=function(){var i=e(t);r.component=i,r.videoPoster=e(".video--poster",i),r.playButton=e(".video--play-button",i)},o=function(){r.videoPoster.one("click",functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50083	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1353	OUT	GET /assets/script/lib/jquery.magnific-popup.js HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1147	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 57932 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: application/javascript Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "5235-50483781dd080+gzip+ident" Last-Modified: Fri, 03 Oct 2014 11:59:46 GMT Server: ECAcc (agb/5285) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 21045 Connection: close
2024-04-19 00:44:35 UTC	16383	IN	Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 39 20 2d 20 32 30 31 33 2d 31 32 2d 32 37 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 0a 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 64 65 66 69 6e 65 28 22 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 22 2c 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 43 6c 6f 73 65 22 2c 6e 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 72 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 69 3d 22 42 65 66 6f Data Ascii: /! Magnific Popup - v0.9.9 - 2013-12-27 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */USPSRequireNS.define("magnific-popup",["jquery"],function(e){(function(){var t="Close",n="BeforeClose",r="AfterClose",i="Befo
2024-04-19 00:44:35 UTC	4662	IN	Data Raw: 22 6d 66 70 2d 63 6c 6f 73 65 22 3e 3c 2f 64 69 76 3e 3c 69 66 72 61 6d 65 20 63 6c 61 73 73 3d 22 6d 66 70 2d 69 66 72 61 6d 65 22 20 73 72 63 3d 22 2f 2f 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 3e 3c 2f 69 66 72 61 6d 65 3e 3c 2f 64 69 76 3e 27 2c 73 72 63 41 63 74 69 6f 6e 3a 22 69 66 72 61 6d 65 5f 73 72 63 22 2c 70 61 74 74 65 72 6e 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 69 6e 64 65 78 3a 22 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 69 64 3a 22 76 3d 22 2c 73 72 63 3a 22 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 25 69 64 25 3f 61 75 74 6f 70 6c 61 79 3d 31 22 7d 2c 76 69 6d 65 6f 3a 7b 69 6e 64 65 78 3a 22 76 69 6d 65 6f 2e 63 6f 6d 2f Data Ascii: "mfp-close"></div><iframe class="mfp-iframe" src="//about:blank" frameborder="0" allowfullscreen></iframe></div>',srcAction:"iframe_src",patterns:{youtube:{index:"youtube.com",id:"v=",src:"//www.youtube.com/embed/%id%?autoplay=1"},vimeo:{index:"vimeo.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50090	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1183	OUT	GET /ContentTemplates/common/images/global/header/chinese_characters.gif HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487466607; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:35 UTC	1120	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58849 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/gif Date: Fri, 19 Apr 2024 00:44:35 GMT Etag: "87d-4a6caeb0dd700" Last-Modified: Tue, 28 Jun 2011 19:46:04 GMT Server: ECAcc (agb/538E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2173 Connection: close
2024-04-19 00:44:35 UTC	2173	IN	Data Raw: 47 49 46 38 39 61 2c 00 66 00 d5 2d 00 7a 7a 7a 6b 98 c2 9f bc d7 a8 a8 a8 69 69 69 a0 a0 a0 c9 c9 c9 51 51 51 3e 79 af 33 33 33 cc db ea d1 d1 d1 e7 e7 e7 e4 ec f4 e4 e4 e4 d6 d6 d6 4e 4e 4e 50 86 b7 ad ad ad 62 62 62 48 48 48 33 72 ab 85 85 85 f1 f1 f1 92 92 92 5c 5c 5c 44 44 44 2f 6f a9 b4 cb e0 bc bc bc 8b af cf 87 87 87 7a a3 c8 97 97 97 46 7f b2 59 59 59 4b 4b 4b 37 75 ac 5d 8f bc 6d 6d 6d 30 70 a9 45 45 45 77 77 77 41 41 41 bb bb bb ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a,f-zzzkiiiQQQ>y333NNNPbbbHHH3r\\\DDD/ozFYYYKKK7u]mmm0pEEEwwwAAA!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50093	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1282	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487472936 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:35 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:35 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1663935187393033 Date: Fri, 19 Apr 2024 00:44:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50092	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487472927&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:35 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1026920951395668 Date: Fri, 19 Apr 2024 00:44:35 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:35 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50094	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	1065	OUT	GET /pagead/1p-user-list/978081151/?random=1713487473009&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2JHkPVt-tnKlEdHUNi1gsF-jdQdzoqJ3C0tY0l0DOIIWIWmC&random=2215184526&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50095	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1182 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	1182	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 37 38 65 33 30 32 62 2d 66 38 30 39 2d 34 37 64 35 2d 61 64 61 66 2d 37 34 30 30 66 61 63 39 66 63 36 63 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 33 61 62 38 66 64 64 39 2d 36 39 38 62 2d 34 62 61 31 2d 61 36 31 34 2d 61 65 63 61 63 62 65 64 61 62 32 39 22 2c 22 73 73 22 3a 22 36 31 33 65 36 63 35 31 2d 37 36 38 35 2d 34 35 62 38 2d 62 65 66 30 2d 35 62 33 31 39 35 37 66 32 66 38 36 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a78e302b-f809-47d5-adaf-7400fac9fc6c","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"3ab8fdd9-698b-4ba1-a614-aecacbedab29","ss":"613e6c51-7685-45b8-bef0-5b31957f2f86","df":true,"s
2024-04-19 00:44:35 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:35 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50097	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1374 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	1374	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 37 38 65 33 30 32 62 2d 66 38 30 39 2d 34 37 64 35 2d 61 64 61 66 2d 37 34 30 30 66 61 63 39 66 63 36 63 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 30 38 38 33 39 66 66 2d 39 36 36 31 2d 34 35 32 36 2d 39 65 64 34 2d 63 31 30 32 34 66 66 35 36 38 33 31 22 2c 22 73 73 22 3a 22 36 31 33 65 36 63 35 31 2d 37 36 38 35 2d 34 35 62 38 2d 62 65 66 30 2d 35 62 33 31 39 35 37 66 32 66 38 36 22 2c 22 73 68 22 3a 31 30 32 34 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a78e302b-f809-47d5-adaf-7400fac9fc6c","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d08839ff-9661-4526-9ed4-c1024ff56831","ss":"613e6c51-7685-45b8-bef0-5b31957f2f86","sh":1024,"s
2024-04-19 00:44:35 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:35 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50096	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 889 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	889	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 37 38 65 33 30 32 62 2d 66 38 30 39 2d 34 37 64 35 2d 61 64 61 66 2d 37 34 30 30 66 61 63 39 66 63 36 63 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 34 32 65 61 65 39 62 65 2d 36 64 37 30 2d 34 66 62 66 2d 39 66 38 62 2d 33 66 39 30 30 34 65 32 65 36 38 30 22 2c 22 73 73 22 3a 22 36 31 33 65 36 63 35 31 2d 37 36 38 35 2d 34 35 62 38 2d 62 65 66 30 2d 35 62 33 31 39 35 37 66 32 66 38 36 22 2c 22 73 68 22 3a 31 30 32 34 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a78e302b-f809-47d5-adaf-7400fac9fc6c","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"42eae9be-6d70-4fbf-9f8b-3f9004e2e680","ss":"613e6c51-7685-45b8-bef0-5b31957f2f86","sh":1024,"s
2024-04-19 00:44:35 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:35 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50098	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	631	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50100	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	752	OUT	GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:35 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:34 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 49ece0d1ca707b0d strict-transport-security: max-age=0 x-response-time: 78 x-connection-hash: 86c675bba22aa9af502fe9a7c99fa04ab3f682c44d38e0599e17154c11227018 connection: close
2024-04-19 00:44:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50099	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	668	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&rl=&if=false&ts=1713487473055&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487472804&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:35 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:35 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50101	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	773	OUT	GET /i/adsct?bci=3&eci=2&event_id=2857fd5e-2abc-449d-8fbf-04077180dd5d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=87b9b80b-a7d3-4582-8ff7-adc141935d89&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:35 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:35 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d162a2e5addf5f3b strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: fa5825743669a3d9860bb535b30425ec32ea47d3634322836fbe289df6f07c72 connection: close
2024-04-19 00:44:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50102	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:35 UTC	833	OUT	GET /pagead/1p-user-list/978081151/?random=1713487473009&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fglobals%2Fsite-index.htm&frm=0&tiba=Site%20Index%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq2JHkPVt-tnKlEdHUNi1gsF-jdQdzoqJ3C0tY0l0DOIIWIWmC&random=2215184526&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50103	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:36 UTC	1382	OUT	GET /favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/globals/site-index.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
2024-04-19 00:44:36 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58919 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:44:36 GMT Etag: "47e-54f3e483bd280" Last-Modified: Thu, 11 May 2017 11:56:42 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1150 Connection: close
2024-04-19 00:44:36 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50104	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:36 UTC	1127	OUT	GET /favicon.ico HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1
2024-04-19 00:44:36 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58919 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:44:36 GMT Etag: "47e-54f3e483bd280" Last-Modified: Thu, 11 May 2017 11:56:42 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 1150 Connection: close
2024-04-19 00:44:36 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50105	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:37 UTC	1465	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487472.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487473.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487474320; kampyleUserSessionsCount=2; kampyleSessionPageCounter=1 If-Modified-Since: Fri, 19 Apr 2024 00:19:12 GMT
2024-04-19 00:44:37 UTC	1057	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://www.usps.com Age: 1525 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Date: Fri, 19 Apr 2024 00:44:37 GMT Last-Modified: Fri, 19 Apr 2024 00:19:12 GMT Server: ECAcc (agb/538C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50108	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:37 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:44:37 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:37 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2809 Expires: Fri, 19 Apr 2024 00:49:37 GMT Server: cloudflare CF-RAY: 8768de0058f0675e-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50110	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:44:38 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:38 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99179 Server: cloudflare CF-RAY: 8768de04499f071d-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50111	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	663	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:44:38 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7b3fb4ffb47262e20c0ec753e26fc5ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: h-Obg_bARw5dMI8tPFs4WGC5Ze6IGYu_dvpKI7xZannPCFyw9yBZ9A== Age: 34091

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50113	23.194.116.39	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	687	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487476802 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:38 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:38 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:38 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50119	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:44:38 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:44:38 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840032-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50120	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487477011 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:38 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:38 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50122	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	1255	OUT	GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:38 UTC	1139	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50123	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	1266	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:38 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:38 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-19 00:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50126	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=6367275e-57a4-41ca-9aaf-2982466da930&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:38 UTC	454	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:38 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50124	52.46.151.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	645	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
2024-04-19 00:44:38 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:38 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 5SM4WK4XAQQW7XYXK6P6 Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:38 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:38 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:38 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50127	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 971 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:38 UTC	971	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 37 38 65 33 30 32 62 2d 66 38 30 39 2d 34 37 64 35 2d 61 64 61 66 2d 37 34 30 30 66 61 63 39 66 63 36 63 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 65 65 39 61 38 63 63 2d 66 64 31 62 2d 34 36 36 33 2d 39 36 32 34 2d 64 61 62 39 35 37 66 34 32 33 38 64 22 2c 22 73 73 22 3a 22 36 31 33 65 36 63 35 31 2d 37 36 38 35 2d 34 35 62 38 2d 62 65 66 30 2d 35 62 33 31 39 35 37 66 32 66 38 36 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a78e302b-f809-47d5-adaf-7400fac9fc6c","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"dee9a8cc-fd1b-4663-9624-dab957f4238d","ss":"613e6c51-7685-45b8-bef0-5b31957f2f86","bg":true,"s
2024-04-19 00:44:39 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:38 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50107	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487477437&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:39 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1717209061493283 Date: Fri, 19 Apr 2024 00:44:39 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:39 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50128	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	1219	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:39 UTC	2225	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12234838882507216985"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4275727267838066344","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12234838882507216985","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"12234838882507216985","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"12234838882507216985","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"12234838882507216985","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50129	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	885	OUT	GET /rp.gif?ts=1713487477132&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:39 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50131	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	561	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 41 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:39 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50134	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:38 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1155 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:38 UTC	1155	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 33 32 65 66 30 39 63 2d 66 62 37 34 2d 34 36 62 66 2d 39 37 30 38 2d 33 63 37 32 65 37 65 31 30 62 33 61 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 32 35 64 38 62 36 62 36 2d 62 62 38 32 2d 34 64 38 35 2d 61 38 61 61 2d 65 64 39 35 32 66 62 61 39 33 61 65 22 2c 22 73 73 22 3a 22 36 33 36 37 32 37 35 65 2d 35 37 61 34 2d 34 31 63 61 2d 39 61 61 66 2d 32 39 38 32 34 36 36 64 61 39 33 30 22 2c 22 73 68 22 3a 31 30 32 34 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"732ef09c-fb74-46bf-9708-3c72e7e10b3a","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"25d8b6b6-bb82-4d85-a8aa-ed952fba93ae","ss":"6367275e-57a4-41ca-9aaf-2982466da930","sh":1024,"s
2024-04-19 00:44:39 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50135	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1345	OUT	GET /td/rul/978081151?random=1713487477500&cv=11&fst=1713487477500&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:39 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:39 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUr
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b Data Ascii: u0026rp_id=1j806463764","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c Data Ascii: 68","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 33 37 37 32 33 38 38 36 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 Data Ascii: "owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.double
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 Data Ascii: 6","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=$
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 Data Ascii: ll,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j37723886
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 Data Ascii: oubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 Data Ascii: 46205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u00
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 Data Ascii: 54"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j7639828228","metadata

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50136	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1221	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487477500&cv=11&fst=1713487477500&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:39 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:39 UTC	552	IN	Data Raw: 38 62 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8be(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:44:39 UTC	438	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 57 65 6c 63 6f 6d 65 25 32 30 25 37 43 25 32 30 55 53 50 53 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 64 61 74 61 5c Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2F\x26frm\x3d0\x26tiba\x3dWelcome%20%7C%20USPS\x26npa\x3d0\x26data\
2024-04-19 00:44:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50137	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1465	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487477553 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:39 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:39 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7886193284427832 Date: Fri, 19 Apr 2024 00:44:39 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:39 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50138	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	848	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=103, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=12, ullat=3 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50139	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	940	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:39 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:44:39 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50140	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1289	OUT	GET /activityi;dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:39 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Expires: Fri, 19 Apr 2024 00:44:39 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:39 UTC	592	IN	Data Raw: 63 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 70 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 70 2e 70 6c 3f 61 3d 31 30 30 30 30 26 2e 79 70 3d 31 30 30 34 39 30 38 37 26 65 Data Ascii: c08<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&e
2024-04-19 00:44:39 UTC	1255	IN	Data Raw: 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 74 64 5f 64 6f 6d 5f 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 20 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 28 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: "text/javascript"></script> <script type="text/javascript"> ttd_dom_ready( function() { if (typeof TTDUniversalPixelApi === 'function') { var universalPixelApi = new TTDUniversalPixelApi();
2024-04-19 00:44:39 UTC	1240	IN	Data Raw: 72 67 6f 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 2c 6e 2c 6f 2c 63 2c 64 29 7b 65 2e 6b 64 73 7c 7c 28 28 6f 3d 65 2e 6b 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6f 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 75 73 68 3d 6f 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 2c 6f 2e 71 75 65 75 65 3d 5b 5d 2c 28 63 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 61 73 79 6e 63 3d 21 30 2c 63 2e 73 72 63 3d 22 2f 2f 73 74 6f 72 61 67 65 2e 63 6c 6f Data Ascii: rgo Pixel Code --><script>!function(e,s,t,n,o,c,d){e.kds\|\|((o=e.kds=function(){o.callMethod?o.callMethod.apply(o,arguments):o.queue.push(arguments)}).push=o,o.loaded=!0,o.version="1.0",o.queue=[],(c=s.createElement("script")).async=!0,c.src="//storage.clo
2024-04-19 00:44:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50141	108.138.85.59	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	706	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;navigation-source;event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:39 GMT x-amzn-RequestId: feb8d279-6fea-4e92-9a53-123c1e4cfc1e Access-Control-Allow-Origin: https://www.usps.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 3542174e2d71e2c3dffc0069aa7cbb34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: YIL0ob1cGyR7rdrCAOH2T8lYB5AVEniEAr_CTaSDHQRMtiUzYVmrUw==
2024-04-19 00:44:39 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50142	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	969	OUT	GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:39 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:38 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 63f0a36d25017e3d strict-transport-security: max-age=0 x-response-time: 87 x-connection-hash: 39a3db18c2b6676f2ea51458348180dc08bae0532cc873787864900774d32395 connection: close
2024-04-19 00:44:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50150	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487477011 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:39 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50151	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	990	OUT	GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:39 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f6a1795f44243472 strict-transport-security: max-age=631138519 x-response-time: 81 x-connection-hash: aa62b87076e6c2e17632c28493e1087f2df0c15a9baa37941a63b4c0046b9e24 connection: close
2024-04-19 00:44:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50154	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487477437&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:39 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 4186087379997726 Date: Fri, 19 Apr 2024 00:44:39 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:39 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50155	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	653	OUT	GET /rp.gif?ts=1713487477132&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:39 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50153	52.46.128.147	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	474	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
2024-04-19 00:44:39 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:39 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: GZT6TEAJ5S49EV3XZ5PP Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:39 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:39 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:39 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50157	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	932	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:39 UTC	2225	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"12234838882507216985"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4275727267838066344","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"12234838882507216985","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"12234838882507216985","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"12234838882507216985","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"12234838882507216985","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50143	173.222.249.67	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	455	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487476802 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:39 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:39 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:39 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50159	142.251.15.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 32 37 35 37 32 37 32 36 37 38 33 38 30 36 36 33 34 34 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"4275727267838066344"},"type":"trigger-no-matching-source"}]
2024-04-19 00:44:39 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:44:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50160	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 871 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	871	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 33 32 65 66 30 39 63 2d 66 62 37 34 2d 34 36 62 66 2d 39 37 30 38 2d 33 63 37 32 65 37 65 31 30 62 33 61 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 62 31 66 65 31 34 65 65 2d 36 64 32 63 2d 34 30 38 66 2d 39 32 31 32 2d 65 37 66 32 38 62 37 62 33 63 35 33 22 2c 22 73 73 22 3a 22 36 33 36 37 32 37 35 65 2d 35 37 61 34 2d 34 31 63 61 2d 39 61 61 66 2d 32 39 38 32 34 36 36 64 61 39 33 30 22 2c 22 73 68 22 3a 31 30 32 34 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"732ef09c-fb74-46bf-9708-3c72e7e10b3a","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"b1fe14ee-6d2c-408f-9212-e7f28b7b3c53","ss":"6367275e-57a4-41ca-9aaf-2982466da930","sh":1024,"s
2024-04-19 00:44:39 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50161	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1036	OUT	GET /pagead/1p-user-list/978081151/?random=1713487477500&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlW3764nJGY186F_0zXHR01T9Xi6YNZOpnsJEEAbgTbGgGLq8&random=1689325733&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50162	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	616	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50163	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	653	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23endnav&rl=&if=false&ts=1713487477566&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487477083&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:39 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:39 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50164	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 5223 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	5223	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 33 32 65 66 30 39 63 2d 66 62 37 34 2d 34 36 62 66 2d 39 37 30 38 2d 33 63 37 32 65 37 65 31 30 62 33 61 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 30 38 34 34 35 35 66 64 2d 37 34 33 34 2d 34 37 63 63 2d 38 33 33 63 2d 39 33 37 38 39 32 62 34 33 63 66 61 22 2c 22 73 73 22 3a 22 36 33 36 37 32 37 35 65 2d 35 37 61 34 2d 34 31 63 61 2d 39 61 61 66 2d 32 39 38 32 34 36 36 64 61 39 33 30 22 2c 22 73 68 22 3a 31 30 32 34 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"732ef09c-fb74-46bf-9708-3c72e7e10b3a","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"084455fd-7434-47cc-833c-937892b43cfa","ss":"6367275e-57a4-41ca-9aaf-2982466da930","sh":1024,"s
2024-04-19 00:44:39 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50170	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1083	OUT	GET /ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50171	3.163.80.95	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	436	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487477025 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:39 GMT x-amzn-RequestId: 0855ee08-a0d3-4f3f-aac6-53e63b747433 X-Cache: Miss from cloudfront Via: 1.1 a562f14b2c08b760a0c76599ed0eaf98.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: Usa5pmcRkW2n2FG3fKN4JAT4olGsGAUe8fhGls0cx5jKTQWDXo-fFA==
2024-04-19 00:44:39 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50168	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	805	OUT	GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.e!dejT9sk@3@'s>TirSYw
2024-04-19 00:44:40 UTC	1485	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:39 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a55a301a-8738-42de-9c39-997e1f5e3d43 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:39 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:39 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:39 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:39 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50166	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:39 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:39 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50167	52.6.56.188	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	657	OUT	GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:39 UTC	174	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 00:44:39 GMT Content-Type: text/html Content-Length: 1971 Connection: close Vary: Accept-Encoding ETag: "631f1a4d-7b3"
2024-04-19 00:44:39 UTC	1971	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 36 39 34 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6f 66 70 6f 69 6e 74 20 54 61 72 67 65 74 65 64 20 41 74 74 61 63 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=694, user-scalable=no"> <title>Proofpoint Targeted Attack Protection</title> <link href="/error/common.css" media="all" rel="styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50165	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	644	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:40 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:39 GMT Expires: Fri, 19 Apr 2024 00:44:39 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50172	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	737	OUT	GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:40 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 71e7e68e370e59c8 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 6c980d21ce8f6457ebdf3b725a9af4cd96e37e1484d5b66379cfc3850faade42 connection: close
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50174	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	758	OUT	GET /i/adsct?bci=3&eci=2&event_id=0f194327-b63b-49d5-818d-4c4f9d4de74f&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=631cbcab-1ea0-45b9-af94-ae9bed09c622&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23endnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:40 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:39 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: da9e4d91d370b743 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 35f7eaffce1c622e0ffd0ab1755f743737f4aabdadc9a2602f19070d45a4ee79 connection: close
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50173	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	1267	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23endnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487477553 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:40 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:40 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 5138391705003004 Date: Fri, 19 Apr 2024 00:44:40 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50177	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:39 UTC	804	OUT	GET /pagead/1p-user-list/978081151/?random=1713487477500&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqlW3764nJGY186F_0zXHR01T9Xi6YNZOpnsJEEAbgTbGgGLq8&random=1689325733&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50178	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	596	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:40 UTC	542	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ounnace1vqt3rW8nkjJWMSl62L9Qd27x24WDVCgA2O6uDrRYDqKX01H0SBjv2dtd295kTlCJVtTh%2FjxA4deb87nJhOncOpW4Xv%2FEVsLomZLOdPFQJoJ8%2BzhvDp4LZXOKdy8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de108a058bbc-ATL
2024-04-19 00:44:40 UTC	827	IN	Data Raw: 37 64 38 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d81(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 6f 72 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b 5d 3b 20 76 61 72 20 6c 65 6e Data Ascii: orObj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = []; var len
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 20 77 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 Data Ascii: want to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String.fromCharC
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 76 Data Ascii: )); } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domain; v
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 7d 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 79 3a 20 66 75 6e 63 74 69 6f Data Ascii: }) } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCopy: functio
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 7c 70 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 54 54 50 42 75 69 6c 64 51 75 Data Ascii: \|purchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , HTTPBuildQu
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 73 73 69 Data Ascii: ction(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {}; var sessi
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr;
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 73 63 Data Ascii: 0] } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElementById(sc
2024-04-19 00:44:40 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 64 29 20 7b 0a 20 20 20 20 20 Data Ascii: , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(uid) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50181	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	836	OUT	GET /ddm/fls/z/dc_pre=CL_uhKSGzYUDFVxYCAQdSvUJxg;src=3976941;type=uspsc0;cat=gener0;ord=6354536417899;npa=0;auiddc=;ps=1;pcor=1495885406;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:40 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50180	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:40 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:40 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50183	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 681 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:40 UTC	681	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 66 30 30 39 61 31 38 63 2d 64 38 35 35 2d 34 39 66 34 2d 61 39 32 64 2d 64 36 39 36 62 38 31 30 36 66 39 39 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"init","params":{"view_id":"f009a18c-d855-49f4-a92d-d696b8106f99"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-19 00:44:40 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:40 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50182	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:40 UTC	685	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 48 6f 6d 65 50 61 67 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 66 30 30 39 61 31 38 63 2d 64 38 35 35 2d 34 39 66 34 2d 61 39 32 64 2d 64 36 39 36 62 38 31 30 36 66 39 39 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"HomePage","params":{"view_id":"f009a18c-d855-49f4-a92d-d696b8106f99"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doub
2024-04-19 00:44:40 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:40 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50184	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	397	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:40 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:40 GMT Expires: Fri, 19 Apr 2024 00:44:40 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50185	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	607	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:41 UTC	533	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xNb%2FA6ZnltSMmqISlmyPJq7SMcwQgHjtMdraplEVpcjnVOGCCURuBs64pA%2B8YGb0RjO6XacGSnWIegfmHDjt17pwmAK3HvEiqnrCC3yV8pn3C1FqZmvOLmRA0JqFHJzNAUQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de13cacfb085-ATL
2024-04-19 00:44:41 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-19 00:44:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50188	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	1450	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCL_uhKSGzYUDFVxYCAQdSvUJxg%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D6354536417899%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1495885406%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=35e00348-67d6-4649-bf63-5b46cd06d410&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:40 UTC	583	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HvJOlkTSTeeLiUPO54Up74HGpjqqplC%2BoB65ooXCYT8gsmLA44MX0c%2FsQOhosIDU3dLyrQ45BoTDgkdnxz0svBW2KVRmULj6VQ1gRqsVxQzSWnzi5fPHLXZc533sc6RHoXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de12fd3144fd-ATL
2024-04-19 00:44:40 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50187	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	1477	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCL_uhKSGzYUDFVxYCAQdSvUJxg%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D6354536417899%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1495885406%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=35e00348-67d6-4649-bf63-5b46cd06d410&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:40 UTC	585	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564790 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KHZFGU1zriQDpX7YFE1UQUcOsva9PtgYyExsp4bu45eHVYNt1DOQo%2F5iSPbcQUM%2FrJL%2FTlzHinUdHKCNUoU2WQ1mvVTeVRdu8LbviXOlKJgbJLd8sygUZUZ3Fepyzq3UmoE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de12fae57b90-ATL
2024-04-19 00:44:40 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50186	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:40 UTC	870	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
2024-04-19 00:44:41 UTC	1458	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: af15ea4b-f844-49e7-b0f6-2b6ba4492802 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNMeq%n^1.ZD$25ADb6_:!:w<$cb7C:; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50189	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:41 UTC	856	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
2024-04-19 00:44:41 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c4fdc6eb-93dd-4d36-a1dc-e2fc687b40e6 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50190	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:41 UTC	856	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNT1.en_6leD$25ADb6_:!:a7bWhEeo
2024-04-19 00:44:41 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 62fb0ffb-44c8-4f7c-b593-1afac2369d66 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50191	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:41 UTC	623	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNMeq%n^1.ZD$25ADb6_:!:w<$cb7C:
2024-04-19 00:44:41 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:41 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 3a674ffa-1617-4225-a9c4-a50bcb18747e Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:41 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50192	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:41 UTC	604	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f
2024-04-19 00:44:42 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: fddbef8a-1fa6-4dfc-a18e-408ed82e9132 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGin]>TRD$25ADb6_:!:yRhdzOh?; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50193	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:41 UTC	604	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGi!dejT9sk@3@'s>Tk3l'f
2024-04-19 00:44:42 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:42 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 7171ff5c-6e99-48c7-acb0-bc77fdb8d396 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGin]>TRD$25ADb6_:!:yRhdzOh?; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:42 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50194	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:42 UTC	763	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23endnav&upid=ftfeq77&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:42 UTC	136	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:42 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50106	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:42 UTC	1465	OUT	GET / HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487476.0.0.0; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487477.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487480400; kampyleUserSessionsCount=3; kampyleSessionPageCounter=1 If-Modified-Since: Fri, 19 Apr 2024 00:19:12 GMT
2024-04-19 00:44:43 UTC	1057	IN	HTTP/1.1 304 Not Modified Access-Control-Allow-Origin: https://www.usps.com Age: 1531 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Date: Fri, 19 Apr 2024 00:44:43 GMT Last-Modified: Fri, 19 Apr 2024 00:19:12 GMT Server: ECAcc (agb/538C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50197	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:43 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:44:43 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:43 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2815 Expires: Fri, 19 Apr 2024 00:49:43 GMT Server: cloudflare CF-RAY: 8768de238e3b07ce-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50198	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:43 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:44:44 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:44 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99185 Server: cloudflare CF-RAY: 8768de26fa75673e-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50199	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:43 UTC	663	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:44:44 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bd8c7f0951e70bd86f786490a15e7a7e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: idHtO6sIbNsY5Ax-wJWs3TT6UCpJMzcJHHuv5DXOnxv16G3HL32ZPA== Age: 34097

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50201	23.194.116.39	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	687	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362 HTTP/1.1 Host: trkn.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:44 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:44 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50207	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:44:44 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:44:44 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840020-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50196	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487482936&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:44 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 4 referrer-policy: origin x-pinterest-rid: 1740354185553720 Date: Fri, 19 Apr 2024 00:44:44 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:44 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50209	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1266	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:44 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:44 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-19 00:44:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50210	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487482608 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50208	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1255	OUT	GET /activityi;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:44 UTC	1139	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50212	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1237	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:44 UTC	2216	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"117559928313842939"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"14479215566959168464","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"117559928313842939","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"117559928313842939","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"117559928313842939","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"117559928313842939","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50214	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9c988a59-cae7-410a-9543-1318a7b675ba&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	454	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50215	52.46.151.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	645	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
2024-04-19 00:44:44 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:44 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: J8EVE1556JW1R85FDN5X Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:44 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:44 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:44 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50216	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 954 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	954	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 33 32 65 66 30 39 63 2d 66 62 37 34 2d 34 36 62 66 2d 39 37 30 38 2d 33 63 37 32 65 37 65 31 30 62 33 61 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 34 35 30 30 65 65 35 2d 65 62 61 31 2d 34 32 34 62 2d 61 61 33 30 2d 65 35 31 37 61 34 34 31 63 34 39 38 22 2c 22 73 73 22 3a 22 36 33 36 37 32 37 35 65 2d 35 37 61 34 2d 34 31 63 61 2d 39 61 61 66 2d 32 39 38 32 34 36 36 64 61 39 33 30 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"732ef09c-fb74-46bf-9708-3c72e7e10b3a","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d4500ee5-eba1-424b-aa30-e517a441c498","ss":"6367275e-57a4-41ca-9aaf-2982466da930","bg":true,"s
2024-04-19 00:44:44 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50218	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	885	OUT	GET /rp.gif?ts=1713487482777&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50219	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1345	OUT	GET /td/rul/978081151?random=1713487482897&cv=11&fst=1713487482897&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:44 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:44 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 33 37 37 32 33 38 38 36 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUr
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b Data Ascii: u0026rp_id=1j377238866","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c Data Ascii: 68","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 Data Ascii: "owner":"https://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.double
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 34 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 Data Ascii: 4","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=$
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 Data Ascii: ll,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j80646376
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 35 32 39 37 35 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 Data Ascii: oubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","tr
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 Data Ascii: 5439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026se
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 34 34 39 Data Ascii: RenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481529751","metadata":["15449

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50221	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1469	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23skipallnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487482942 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:45 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:44 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1042583039918900 Date: Fri, 19 Apr 2024 00:44:45 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:45 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50224	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	561	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 39 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:44 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50225	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1221	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487482897&cv=11&fst=1713487482897&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&hn=www.googleadservices.com&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:44 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:44 UTC	552	IN	Data Raw: 38 62 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8be(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:44:44 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:44:44 UTC	438	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 57 65 6c 63 6f 6d 65 25 32 30 25 37 43 25 32 30 55 53 50 53 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 64 61 74 61 5c Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2F\x26frm\x3d0\x26tiba\x3dWelcome%20%7C%20USPS\x26npa\x3d0\x26data\
2024-04-19 00:44:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50226	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	852	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=4, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:44 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50227	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	944	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:44 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:44 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:44:44 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50234	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	973	OUT	GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:45 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 810152d8d1f8d769 strict-transport-security: max-age=0 x-response-time: 77 x-connection-hash: a07ae5d9cdc69fc31fce956f066daacb30ff210586fe1998ee1e5d84dd2888da connection: close
2024-04-19 00:44:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50228	173.222.249.67	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	455	OUT	GET /pixel/c?ppt=557&g=dm_homepage&gid=2679&ord=1713487482362 HTTP/1.1 Host: trkn.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4
2024-04-19 00:44:44 UTC	674	IN	HTTP/1.1 200 OK Content-Length: 42 Content-Type: image/gif Pragma: no-cache Date: Fri, 19 Apr 2024 00:44:44 GMT Connection: close X-Content-Type-Options: nosniff P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Set-Cookie: barometric[cuid]=cuid_6621be64-2797-4c01-973b-15eb551991d4; expires=Sat, 19-Apr-2025 00:44:44 GMT; Max-Age=31536000; path=/; SameSite=None; Secure; domain=.trkn.us; Expires: Sun, 9 Nov 1980 12:58:00 GMT Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate Set-Cookie: barometric[idfa]=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; SameSite=None; Secure; domain=.trkn.us
2024-04-19 00:44:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50235	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487482608 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50236	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	1289	OUT	GET /activityi;dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:45 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Expires: Fri, 19 Apr 2024 00:44:44 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:45 UTC	592	IN	Data Raw: 63 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 70 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 70 70 2e 70 6c 3f 61 3d 31 30 30 30 30 26 2e 79 70 3d 31 30 30 34 39 30 38 37 26 65 Data Ascii: c08<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://sp.analytics.yahoo.com/spp.pl?a=10000&.yp=10049087&e
2024-04-19 00:44:45 UTC	1255	IN	Data Raw: 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 74 64 5f 64 6f 6d 5f 72 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 20 3d 20 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 28 29 3b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: "text/javascript"></script> <script type="text/javascript"> ttd_dom_ready( function() { if (typeof TTDUniversalPixelApi === 'function') { var universalPixelApi = new TTDUniversalPixelApi();
2024-04-19 00:44:45 UTC	1240	IN	Data Raw: 72 67 6f 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 2c 6e 2c 6f 2c 63 2c 64 29 7b 65 2e 6b 64 73 7c 7c 28 28 6f 3d 65 2e 6b 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6f 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 75 73 68 3d 6f 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 2c 6f 2e 71 75 65 75 65 3d 5b 5d 2c 28 63 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 61 73 79 6e 63 3d 21 30 2c 63 2e 73 72 63 3d 22 2f 2f 73 74 6f 72 61 67 65 2e 63 6c 6f Data Ascii: rgo Pixel Code --><script>!function(e,s,t,n,o,c,d){e.kds\|\|((o=e.kds=function(){o.callMethod?o.callMethod.apply(o,arguments):o.queue.push(arguments)}).push=o,o.loaded=!0,o.version="1.0",o.queue=[],(c=s.createElement("script")).async=!0,c.src="//storage.clo
2024-04-19 00:44:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50237	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	994	OUT	GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:45 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 89483980cd8e8625 strict-transport-security: max-age=631138519 x-response-time: 67 x-connection-hash: eb0ceee7c280bdb334ca87300a6e48e7290c841eac45a750ebc56c488e2090ce connection: close
2024-04-19 00:44:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50240	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	932	OUT	GET /activity;register_conversion=1;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:45 UTC	2216	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"117559928313842939"}],"aggregatable_trigger_data":[{"filters":[{"14":["8937389"]}],"key_piece":"0x8772b1da97d1bc0e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x9c424149ae76f2fa","not_filters":{"14":["8937389"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["8937389"]}],"key_piece":"0xb97d140fd65e626","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x7322cf3dcae950d9","not_filters":{"14":["8937389"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"14479215566959168464","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"117559928313842939","filters":[{"14":["8937389"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"117559928313842939","filters":[{"14":["8937389"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"117559928313842939","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"117559928313842939","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:44:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50242	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	653	OUT	GET /rp.gif?ts=1713487482777&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:44 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50241	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1164 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	1164	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 66 34 66 34 30 62 33 2d 61 66 62 30 2d 34 65 61 39 2d 38 30 31 62 2d 65 35 65 31 30 32 31 39 64 33 34 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 37 33 30 30 63 37 66 2d 34 37 64 62 2d 34 32 61 31 2d 62 36 36 35 2d 32 65 36 31 32 65 62 36 66 36 31 65 22 2c 22 73 73 22 3a 22 39 63 39 38 38 61 35 39 2d 63 61 65 37 2d 34 31 30 61 2d 39 35 34 33 2d 31 33 31 38 61 37 62 36 37 35 62 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"3f4f40b3-afb0-4ea9-801b-e5e10219d343","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d7300c7f-47db-42a1-b665-2e612eb6f61e","ss":"9c988a59-cae7-410a-9543-1318a7b675ba","df":true,"s
2024-04-19 00:44:45 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:45 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50244	108.138.85.59	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	675	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	575	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:45 GMT x-amzn-RequestId: 56082834-d72f-46ec-8ffc-45144c73bde7 Access-Control-Allow-Origin: https://www.usps.com Vary: Origin Access-Control-Expose-Headers: x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date Access-Control-Allow-Credentials: true X-Cache: Miss from cloudfront Via: 1.1 bf7159e30a38421f642619d6da9a8eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: yPQG7OtEcYObpfOh4h6gdlpREo3ksgDRpU1SuGWsiMExv4aycegAGQ==
2024-04-19 00:44:45 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50245	142.251.15.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:44 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:44 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 34 34 37 39 32 31 35 35 36 36 39 35 39 31 36 38 34 36 34 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"14479215566959168464"},"type":"trigger-no-matching-source"}]
2024-04-19 00:44:45 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:44:45 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50253	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 880 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	880	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 66 34 66 34 30 62 33 2d 61 66 62 30 2d 34 65 61 39 2d 38 30 31 62 2d 65 35 65 31 30 32 31 39 64 33 34 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 31 32 30 31 64 61 33 32 2d 64 34 37 31 2d 34 32 36 31 2d 39 35 38 38 2d 30 64 34 37 62 33 39 65 35 61 36 38 22 2c 22 73 73 22 3a 22 39 63 39 38 38 61 35 39 2d 63 61 65 37 2d 34 31 30 61 2d 39 35 34 33 2d 31 33 31 38 61 37 62 36 37 35 62 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"3f4f40b3-afb0-4ea9-801b-e5e10219d343","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"1201da32-d471-4261-9588-0d47b39e5a68","ss":"9c988a59-cae7-410a-9543-1318a7b675ba","df":true,"s
2024-04-19 00:44:45 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:45 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50252	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	657	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:45 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:45 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50248	52.46.128.147	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	474	OUT	GET /iu3?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; ad-privacy=0
2024-04-19 00:44:45 UTC	826	IN	HTTP/1.1 200 OK Server: Server Date: Fri, 19 Apr 2024 00:44:45 GMT Content-Type: text/html;charset=ISO-8859-1 Content-Length: 65 Connection: close x-amz-rid: 102KJ342QPGDA2F9KBQ3 Set-Cookie: ad-id=AxLMc0Go3k5Av1hQrWx6zXk; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 00:44:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 00:44:45 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-04-19 00:44:45 UTC	65	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body style="background-color:transparent"></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50249	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487482936&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:45 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 6789484216175763 Date: Fri, 19 Apr 2024 00:44:45 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:45 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50250	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	620	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&rl=&if=false&ts=1713487482929&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487482689&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=109, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:45 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50247	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	1036	OUT	GET /pagead/1p-user-list/978081151/?random=1713487482897&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcq2kl4KEppHztJrKN02A6Rdv2Z7g1SfOedZkYAl3SmuY_a6F&random=3131734260&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50254	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 5233 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	5233	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 66 34 66 34 30 62 33 2d 61 66 62 30 2d 34 65 61 39 2d 38 30 31 62 2d 65 35 65 31 30 32 31 39 64 33 34 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 30 35 33 38 30 35 64 36 2d 35 39 66 35 2d 34 33 37 37 2d 61 64 66 36 2d 64 65 66 31 33 65 61 61 62 37 31 65 22 2c 22 73 73 22 3a 22 39 63 39 38 38 61 35 39 2d 63 61 65 37 2d 34 31 30 61 2d 39 35 34 33 2d 31 33 31 38 61 37 62 36 37 35 62 61 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"3f4f40b3-afb0-4ea9-801b-e5e10219d343","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"053805d6-59f5-4377-adf6-def13eaab71e","ss":"9c988a59-cae7-410a-9543-1318a7b675ba","df":true,"s
2024-04-19 00:44:45 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:45 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50260	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	1083	OUT	GET /ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50263	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	1271	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2F%23skipallnav%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487482942 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:46 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:45 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1474098856685698 Date: Fri, 19 Apr 2024 00:44:45 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:46 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50261	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	741	OUT	GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:45 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:44 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4361a71783c26dfb strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 4e7a942595881b2e71b639692a5e1ba8bae40aabfba3592fd34c39c4e5b14a7a connection: close
2024-04-19 00:44:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50264	3.163.80.95	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	436	OUT	GET /aat?pid=92ea6c7e-9120-4bf6-8692-a1fb27eb5a6b&event=PageView&ts=1713487482615 HTTP/1.1 Host: ara.paa-reporting-advertising.amazon Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2 Connection: close Date: Fri, 19 Apr 2024 00:44:45 GMT x-amzn-RequestId: bf60145d-1c33-46df-8d0a-8ef511499f37 X-Cache: Miss from cloudfront Via: 1.1 c2eb082c7c9da19c441d80e4c661fea8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P7 X-Amz-Cf-Id: IzCHUTadgJa3TbBjlvG3QH8aI3pMRPSyPfa68Xvnz3yBTztHitfdpw==
2024-04-19 00:44:45 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50262	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	762	OUT	GET /i/adsct?bci=3&eci=2&event_id=91572ce5-2b8e-4a18-858e-0da43cc8d063&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=be8379ec-9122-46b2-822b-e3d103a14b6c&tw_document_href=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:45 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:45 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f73a3df4671be9ab strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 31da33047b26ed213fef1e2a184fee3bf0e1e7bfee7fa2387555e88d80ed6716 connection: close
2024-04-19 00:44:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50258	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	810	OUT	GET /px?id=1391229&seg=24232669&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNTVGin]>TRD$25ADb6_:!:yRhdzOh?
2024-04-19 00:44:45 UTC	1485	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 6e3b1b4f-836a-4ea3-af2b-70af56c78cac Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:45 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:45 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:45 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:45 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50257	52.6.56.188	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	657	OUT	GET /v3/__https://js.adsrvr.org/up_loader.1.1.0.js__;!!N96JrnIq8IfO5w!yRUwlDBNGUqjnIjLIJHdFTmrMfxo8nkoUoCWgJOampgJJMUfjZ8E7BX9dRKKdxBO-Q$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	174	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 00:44:45 GMT Content-Type: text/html Content-Length: 1971 Connection: close Vary: Accept-Encoding ETag: "631f1a4d-7b3"
2024-04-19 00:44:45 UTC	1971	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 36 39 34 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 6f 6f 66 70 6f 69 6e 74 20 54 61 72 67 65 74 65 64 20 41 74 74 61 63 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 65 72 72 6f 72 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=694, user-scalable=no"> <title>Proofpoint Targeted Attack Protection</title> <link href="/error/common.css" media="all" rel="styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50256	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:45 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:45 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:45 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50255	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:45 UTC	644	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:46 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:45 GMT Expires: Fri, 19 Apr 2024 00:44:45 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50265	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	804	OUT	GET /pagead/1p-user-list/978081151/?random=1713487482897&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2F&frm=0&tiba=Welcome%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqcq2kl4KEppHztJrKN02A6Rdv2Z7g1SfOedZkYAl3SmuY_a6F&random=3131734260&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:46 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50266	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	836	OUT	GET /ddm/fls/z/dc_pre=CJuM26aGzYUDFT2xOgUdteENwA;src=3976941;type=uspsc0;cat=gener0;ord=7597053583434;npa=0;auiddc=;ps=1;pcor=1863172012;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:46 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50267	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	596	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:46 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Z92%2FFlA3WN86iQR5L2RUXDbnacI3oacmTmV1gpXvo5hvCwGv1lUy8b%2Bfc5HnBSUlhVSjKIxlB97KGVTKkV124HldVofm476poeLY9bKbEfZwCDUprTnbxWEvc6YtQ6SCys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de37ab7dbe15-ATL
2024-04-19 00:44:46 UTC	829	IN	Data Raw: 37 64 38 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d83(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b 5d 3b 20 76 61 72 20 6c 65 6e 67 74 Data Ascii: Obj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = []; var lengt
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 Data Ascii: ant to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String.fromCharCod
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 76 61 72 Data Ascii: ; } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domain; var
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 79 3a 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCopy: function(
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 54 54 50 42 75 69 6c 64 51 75 65 72 Data Ascii: urchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , HTTPBuildQuer
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 65 73 73 69 6f 6e Data Ascii: ion(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {}; var session
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr; }
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 73 63 72 69 Data Ascii: } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElementById(scri
2024-04-19 00:44:46 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 64 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(uid) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50269	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 681 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:46 UTC	681	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 33 61 30 64 38 61 31 62 2d 65 32 39 62 2d 34 30 30 65 2d 61 66 33 62 2d 64 38 37 33 38 66 65 63 63 36 65 63 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"init","params":{"view_id":"3a0d8a1b-e29b-400e-af3b-d8738fecc6ec"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-19 00:44:46 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:46 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:46 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50268	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:44:46 UTC	685	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 48 6f 6d 65 50 61 67 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 33 61 30 64 38 61 31 62 2d 65 32 39 62 2d 34 30 30 65 2d 61 66 33 62 2d 64 38 37 33 38 66 65 63 63 36 65 63 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"HomePage","params":{"view_id":"3a0d8a1b-e29b-400e-af3b-d8738fecc6ec"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doub
2024-04-19 00:44:46 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:44:46 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:44:46 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:44:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50271	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:otxwzpa&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:46 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:46 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:44:46 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50272	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	397	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=general_uspshomepage HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:46 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:46 GMT Expires: Fri, 19 Apr 2024 00:44:46 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:44:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50273	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	607	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:47 UTC	541	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8rV%2B9X17I1%2BXARA8nDcRls61mro4ZST8WDTHV3Pyp3zFNmC8hfq47sxYR1IRDkZjg8va%2FDuLOw4Q9h%2FZuZFzoe4MJ%2FvCjRilLqsoWcNein6A8RECTtXEnRJj%2BYtRYML074Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de3add32673b-ATL
2024-04-19 00:44:47 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-19 00:44:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50275	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	1450	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCJuM26aGzYUDFT2xOgUdteENwA%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7597053583434%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1863172012%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=2bc5471e-866f-4918-89f2-3c6d58560ca6&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:47 UTC	581	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hs96yj%2Fh6COuLlhF5QV6ZMLrDlxRKHsIk8zGPhRkPciZpLPpHptMDdAGYQaJUl2x1O2WYUANZm2Brcie5P8rMCJYuIkNGyWbcJpfahvqOJIkP3YuUq70L535pqsmsPqaNFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de3a0db6b077-ATL
2024-04-19 00:44:47 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50276	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:46 UTC	1477	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCJuM26aGzYUDFT2xOgUdteENwA%3Bsrc%3D3976941%3Btype%3Duspsc0%3Bcat%3Dgener0%3Bord%3D7597053583434%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1863172012%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252F%3F&action=signup&source=usps&rb_source=usps&script_version=xyz.js&sessionId=2bc5471e-866f-4918-89f2-3c6d58560ca6&seg=18564790&id=1135848&type=conv&an_seg=18564790&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:44:47 UTC	585	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564790 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zCWtfOtkoHE0hubud0zXQGroB%2FFv4V4m4YJYi6YQFj4p7Mk1yXKvi%2BPlK8ZinBrzhAjCqnrG1oLLOXrjqKwC0Uh76FAIwdTfYrzFdXnr5t%2FIXMDWxztXrXrvyvTmtyLZw2I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768de3a0e0253ba-ATL
2024-04-19 00:44:47 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:44:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50274	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:47 UTC	870	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
2024-04-19 00:44:47 UTC	1458	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 79a0b46d-8056-47d5-8766-54d62ecc1ba9 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50277	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:47 UTC	856	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
2024-04-19 00:44:47 UTC	1525	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 6f984010-2ddf-4602-8de2-77d22a19db26 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNYajC!dejT9sk@3@'s>Tk^j6T; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50278	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:47 UTC	856	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNQ20Hn^VG_D$25ADb6_:!<$]0gU'ZG
2024-04-19 00:44:47 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: ef49052b-dee8-4ea9-9b54-4699899a57a4 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50279	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:47 UTC	623	OUT	GET /px?t=2&id=1135848&seg=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS
2024-04-19 00:44:47 UTC	1453	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:47 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a26967bb-c7c0-4239-8de9-c3b8d50fc26e Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNYajC!dejT9sk@3@'s>Tk^j6T; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:47 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50280	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:48 UTC	609	OUT	GET /seg?add=18564790 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNRp<Xn_IxgD$25ADb6_:!<-pSkHprS
2024-04-19 00:44:48 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: bcf09260-300d-4d64-be31-9f89e56d3d03 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?CFQw3PVX23nXm/!9LHrmzIe[; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50281	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:48 UTC	604	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNYajC!dejT9sk@3@'s>Tk^j6T
2024-04-19 00:44:48 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:44:48 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 9c0b8fd0-cf36-4c4f-acb4-70869d7ae0f6 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?CFQw3PVX23nXm/!9LHrmzIe[; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:44:48 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:44:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50282	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:48 UTC	767	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F%23skipallnav&upid=ftfeq77&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:48 UTC	136	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:44:48 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50286	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:51 UTC	1327	OUT	GET /find-location.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:44:51 UTC	482	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:51 GMT Server: ECAcc (dce/26B2) Set-Cookie: TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; path=/; domain=.USPS.com; Secure; Set-Cookie: NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3;path=/;secure;httponly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:51 UTC	5	IN	Data Raw: 37 62 36 0d 0a Data Ascii: 7b6
2024-04-19 00:44:51 UTC	1974	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 73 63 72 69 70 74 3e 0a 09 66 75 6e 63 74 69 6f 6e 20 69 6e 63 6c 75 64 65 48 54 4d 4c 28 29 20 7b 0a 09 09 76 61 72 20 7a 2c 20 69 2c 20 65 6c 6d 6e 74 2c 20 66 69 6c 65 2c 20 78 68 74 74 70 3b 0a 09 09 2f 2a 6c 6f 6f 70 20 74 68 72 6f 75 67 68 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 61 6c 6c 20 48 54 4d 4c 20 65 6c 65 6d 65 6e 74 73 3a 2a 2f 0a 09 09 7a 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 3b 0a 09 09 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 7a 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 09 09 09 65 6c 6d 6e 74 20 3d 20 7a 5b 69 5d 3b 0a 09 09 09 2f 2a 73 65 Data Ascii: <!doctype html><html lang="en"><script>function includeHTML() {var z, i, elmnt, file, xhttp;/loop through a collection of all HTML elements:/z = document.getElementsByTagName("");for (i = 0; i < z.length; i++) {elmnt = z[i];/se
2024-04-19 00:44:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:51 UTC	6	IN	Data Raw: 38 64 35 62 0d 0a Data Ascii: 8d5b
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 63 73 73 2f 6d 65 67 61 6d 65 6e 75 2d 76 34 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 7d 0d 0a 20 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0d 0a 20 20 0d 0a 2f 2a 20 61 6c 65 72 74 20 73 74 79 6c 65 73 20 73 74 61 72 74 20 2a 2f 0d 0a 2f 2a 20 20 20 20 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 38 70 78 29 7b 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 Data Ascii: <link href="/global-elements/header/css/megamenu-v4.css" type="text/css" rel="stylesheet"> <style> body{min-width:0!important;overflow-x:hidden;} a{text-decoration:none;} /* alert styles start // @media (min-width: 958px){.global--navi
2024-04-19 00:44:51 UTC	15421	IN	Data Raw: 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 70 6f 2d 62 6f 78 65 73 2e 68 74 6d 22 3e 50 4f 20 42 6f 78 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 6d 61 69 6c 62 6f 78 65 73 2e 68 74 6d 22 3e 4d 61 69 6c 62 6f 78 20 47 75 69 64 65 6c 69 6e 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f Data Ascii: /www.usps.com/manage/po-boxes.htm">PO Boxes</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/mailboxes.htm">Mailbox Guidelines</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.co
2024-04-19 00:44:51 UTC	4383	IN	Data Raw: 73 3d 22 6e 61 76 2d 73 65 61 72 63 68 20 6d 65 6e 75 68 65 61 64 65 72 22 3e 0d 0a 09 20 20 09 3c 61 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 6e 61 6d 65 3d 22 6e 61 76 73 65 61 72 63 68 22 20 69 64 3d 22 6e 61 76 73 65 61 72 63 68 22 20 68 72 65 66 3d 22 23 65 6e 64 6e 61 76 22 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 2d 73 6b 69 70 22 3e 53 6b 69 70 20 53 65 61 72 63 68 3c 2f 61 3e 0d 0a 09 09 3c 61 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 72 69 61 2d 68 61 73 70 6f 70 75 70 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 53 65 61 72 63 68 20 55 53 50 53 2e 63 6f 6d 3c 2f 61 3e Data Ascii: s="nav-search menuheader"> <a tabindex="-1" name="navsearch" id="navsearch" href="#endnav" class="hidden-skip">Skip Search</a><a aria-expanded="false" class="menuitem" tabindex="0" aria-haspopup="true" role="menuitem" href="#">Search USPS.com</a>
2024-04-19 00:44:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:51 UTC	3	IN	Data Raw: 33 0d 0a Data Ascii: 3
2024-04-19 00:44:51 UTC	3	IN	Data Raw: 0a 09 09 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50285	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:51 UTC	1352	OUT	GET /styles/libs/bootstrap.min.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:51 UTC	401	IN	HTTP/1.1 200 OK Age: 9915 Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:51 GMT Etag: "206c0-6124db7945f80+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT Server: ECAcc (agb/5352) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 132800 Connection: close
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 20 7b 0a 20 66 6f 6e Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html { fon
2024-04-19 00:44:51 UTC	1	IN	Data Raw: 6e Data Ascii: n
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 20 7b 0a 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 34 38 22 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 62 6a 65 63 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 34 39 22 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 30 22 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0a 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 31 22 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 62 6f 74 74 6f 6d 3a 62 65 66 6f 72 65 20 7b 0a 20 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 32 22 Data Ascii: -vertical:before { content:"\e248"}.glyphicon-object-align-right:before { content:"\e249"}.glyphicon-triangle-right:before { content:"\e250"}.glyphicon-triangle-left:before { content:"\e251"}.glyphicon-triangle-bottom:before { content:"\e252"
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 31 20 7b 0a 20 20 72 69 67 68 74 3a 38 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 6c 6c 2d 30 20 7b 0a 20 20 72 69 67 68 74 3a 61 75 74 6f 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 32 20 7b 0a 20 20 6c 65 66 74 3a 31 30 30 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 31 20 7b 0a 20 20 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 31 30 20 7b 0a 20 20 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 39 20 7b 0a 20 20 6c 65 66 74 3a 37 35 25 3b 0a 20 7d 0a 20 2e 63 6f 6c 2d 6c 67 2d 70 75 73 68 2d 38 20 7b 0a 20 20 Data Ascii: } .col-lg-pull-1 { right:8.33333333%; } .col-lg-pull-0 { right:auto; } .col-lg-push-12 { left:100%; } .col-lg-push-11 { left:91.66666667%; } .col-lg-push-10 { left:83.33333333%; } .col-lg-push-9 { left:75%; } .col-lg-push-8 {
2024-04-19 00:44:51 UTC	2	IN	Data Raw: 65 2d Data Ascii: e-
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 62 6c 6f 63 6b 0a 20 7d 0a 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 74 61 62 6c 65 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 20 7d 0a 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 20 7b 0a 20 20 77 69 64 74 68 3a 61 75 74 6f 3b 0a 20 7d 0a 20 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 69 6e Data Ascii: block } .form-inline .input-group { display:inline-table; vertical-align:middle; } .form-inline .input-group .form-control,.form-inline .input-group .input-group-addon,.form-inline .input-group .input-group-btn { width:auto; } .form-inline .in
2024-04-19 00:44:51 UTC	16383	IN	Data Raw: 6e 2d 6c 65 66 74 3a 30 3b 0a 7d 0a 2e 62 74 6e 2d 6c 67 20 2e 63 61 72 65 74 20 7b 0a 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 35 70 78 20 35 70 78 20 30 3b 0a 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 3b 0a 7d 0a 2e 64 72 6f 70 75 70 20 2e 62 74 6e 2d 6c 67 20 2e 63 61 72 65 74 20 7b 0a 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 35 70 78 20 35 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 20 7b 0a 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a Data Ascii: n-left:0;}.btn-lg .caret { border-width:5px 5px 0; border-bottom-width:0;}.dropup .btn-lg .caret { border-width:0 5px 5px;}.btn-group-vertical>.btn,.btn-group-vertical>.btn-group,.btn-group-vertical>.btn-group>.btn { display:block; float:none;
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 6c 6f 72 3a 23 64 64 64 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 20 2e 69 63 6f 6e 2d 62 61 72 20 7b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 38 38 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 7b 0a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 37 65 37 65 37 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 6f 70 65 6e 3e 61 2c 2e 6e 61 76 62 61 72 2d 64 65 66 61 75 6c 74 20 2e 6e 61 76 62 61 72 2d 6e 61 76 3e 2e 6f 70 65 6e 3e 61 3a 66 6f 63 75 73 2c 2e 6e 61 76 62 61 72 Data Ascii: lor:#ddd;}.navbar-default .navbar-toggle .icon-bar { background-color:#888;}.navbar-default .navbar-collapse,.navbar-default .navbar-form { border-color:#e7e7e7;}.navbar-default .navbar-nav>.open>a,.navbar-default .navbar-nav>.open>a:focus,.navbar
2024-04-19 00:44:52 UTC	3	IN	Data Raw: 20 7b 0a Data Ascii: {
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 20 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 35 70 78 3b 0a 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 0a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 20 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 34 70 78 3b 0a 7d 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 6d 61 72 67 69 Data Ascii: position:relative; display:block; padding:10px 15px; margin-bottom:-1px; background-color:#fff; border:1px solid #ddd;}.list-group-item:first-child { border-top-left-radius:4px; border-top-right-radius:4px;}.list-group-item:last-child { margi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50287	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:51 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 953 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:51 UTC	953	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 66 34 66 34 30 62 33 2d 61 66 62 30 2d 34 65 61 39 2d 38 30 31 62 2d 65 35 65 31 30 32 31 39 64 33 34 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 63 36 61 39 61 65 66 66 2d 61 62 34 61 2d 34 64 33 39 2d 61 38 32 30 2d 35 37 32 66 39 31 63 31 39 30 37 39 22 2c 22 73 73 22 3a 22 39 63 39 38 38 61 35 39 2d 63 61 65 37 2d 34 31 30 61 2d 39 35 34 33 2d 31 33 31 38 61 37 62 36 37 35 62 61 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"3f4f40b3-afb0-4ea9-801b-e5e10219d343","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"c6a9aeff-ab4a-4d39-a820-572f91c19079","ss":"9c988a59-cae7-410a-9543-1318a7b675ba","bg":true,"s
2024-04-19 00:44:52 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:52 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50289	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1348	OUT	GET /styles/default-styles.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	362	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "84c0-6124db7945f80" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT Server: ECAcc (dce/26E4) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 33984 Connection: close
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 47 65 6e 65 72 61 6c 20 45 6c 65 6d 65 6e 74 73 20 53 74 79 6c 69 6e 67 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 68 31 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 22 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 33 36 36 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 Data Ascii: /************* General Elements Styling **************/html, body {min-width: 0px !important;}h1 {font-family: "HelveticaNeueW02-75Bold", "Helvetica Neue", Helvetica, Arial, sans-serif; font-size: 30px; color: #333366; margin: 0;
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 39 35 39 35 39 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 2e 63 61 6c 65 6e 64 61 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2b 20 2e 63 61 6c 65 6e 64 61 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 70 78 20 30 70 78 20 34 30 70 78 3b 0a 7d 0a 0a 74 64 2e 63 61 6c 2d 55 6e 61 76 61 69 6c 61 62 6c 65 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 64 33 64 33 64 33 3b 0a 7d 0a 0a 74 64 2e 63 61 6c 2d 61 76 61 69 6c 61 62 6c 65 2e 63 61 6c 2d 73 65 6c 65 63 74 65 64 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 33 36 36 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 Data Ascii: x; color: #595959; display: inline;}.calendar-container + .calendar-container{ margin: 20px 0px 0px 40px;}td.cal-Unavailable{ background-color: #d3d3d3;}td.cal-available.cal-selected{ background-color: #333366; color: #fff
2024-04-19 00:44:52 UTC	1218	IN	Data Raw: 2d 31 35 70 78 3b 0a 09 7d 0a 09 0a 09 2e 67 72 61 79 2d 62 6f 78 2d 63 6f 6c 75 6d 6e 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 7d 0a 09 0a 09 2e 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 7d 0a 09 0a 09 2e 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0a 09 7d 0a 7d 0a 0a 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 54 61 62 6c 65 74 20 61 6e 64 20 44 65 73 6b 74 6f 70 20 56 69 65 77 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 Data Ascii: -15px;}.gray-box-column {padding-top: 10px;}.button-container {text-align: center;}.button-wrapper {padding-bottom: 40px;}}/************* Tablet and Desktop View *************/@media only screen and (min-width: 768px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50288	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1344	OUT	GET /styles/po-locator.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	400	IN	HTTP/1.1 200 OK Age: 62578 Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "db38-6124db7945f80+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT Server: ECAcc (agb/52D0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 56120 Connection: close
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 20 50 4f 20 4c 6f 63 61 74 6f 72 20 43 53 53 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 0a 68 35 20 2b 20 70 20 7b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 34 70 78 3b 0a 7d 0a 0a 2e 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 20 7b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d Data Ascii: /*******************************************//********** PO Locator CSS ***********//*******************************************/h5 + p {padding-top: 14px;}.visuallyhidden {border: 0;clip: rect(0 0 0 0);height: 1px;margin: -
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 34 70 78 3b 0a 09 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 31 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 09 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 36 37 25 3b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0a 7d 0a 0a 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 31 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 6d 65 64 69 61 2f 73 61 70 2f 62 6c 75 65 2d 63 Data Ascii: ock;margin-bottom: -4px;outline: none !important;background-repeat: no-repeat;background-position: 0px 1px;height: 30px;width: 30px;background-size: 67%;margin-top: 0px;}.dropdown-menu1 {background: transparent url(../media/sap/blue-c
2024-04-19 00:44:52 UTC	2	IN	Data Raw: 63 61 Data Ascii: ca
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 74 69 6f 6e 2d 74 78 74 20 7b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 33 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 36 36 3b 0a 7d 0a 0a 2e 72 65 73 75 6c 74 2d 70 65 72 2d 76 69 65 77 2d 68 6f 6c 64 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 36 36 3b 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 3b 0a 7d 0a 0a 2e 72 65 73 75 6c 74 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 63 6f 6c 6f 72 3a 20 23 33 33 33 33 36 36 3b 0a 09 70 61 64 64 Data Ascii: tion-txt {padding-left: 10px;padding-right: 30px;font-size: 14px;color: #333366;}.result-per-view-holder {display: inline-block;color: #333366;padding-top: 0px;}.result-pagination-holder {display: inline-block;color: #333366;padd
2024-04-19 00:44:52 UTC	6969	IN	Data Raw: 20 31 35 70 78 3b 0a 09 09 68 65 69 67 68 74 3a 20 34 35 30 70 78 3b 0a 09 7d 0a 0a 09 2e 77 6f 72 6b 69 6e 67 2d 68 6f 75 72 73 20 70 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 7d 0a 0a 09 2e 6c 69 73 74 2d 69 74 65 6d 2d 6c 6f 63 61 74 69 6f 6e 20 2e 61 64 64 72 65 73 73 20 7b 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 70 78 3b 0a 09 7d 0a 0a 09 2e 6c 6f 62 62 79 2d 68 6f 75 72 73 2d 77 72 61 70 70 65 72 20 7b 0a 09 09 6f 72 64 65 72 3a 20 31 3b 0a 09 7d 0a 0a 09 2e 72 65 74 61 69 6c 2d 68 6f 75 72 73 2d 77 72 61 70 70 65 72 20 7b 0a 09 09 6f 72 64 65 72 3a 20 32 3b 0a 09 7d 0a 0a 09 2e 6c 61 73 74 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 68 6f 75 72 73 2d 77 72 61 70 Data Ascii: 15px;height: 450px;}.working-hours p {font-size: 12px;}.list-item-location .address {font-size: 12px;padding-top: 5px;}.lobby-hours-wrapper {order: 1;}.retail-hours-wrapper {order: 2;}.last-collection-hours-wrap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50290	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1365	OUT	GET /global-elements/header/css/megamenu-v4.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	400	IN	HTTP/1.1 200 OK Age: 34046 Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "ad9f-5fdb1f8841e00+gzip+ident" Last-Modified: Fri, 09 Jun 2023 13:01:44 GMT Server: ECAcc (agb/A42A) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 44447 Connection: close
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 62 62 72 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 63 72 6f 6e 79 6d 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 64 64 72 65 73 73 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 70 70 6c 65 74 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 72 74 69 63 6c 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 73 69 64 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 75 64 69 6f 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 62 69 67 Data Ascii: .global--navigation a,.global--navigation abbr,.global--navigation acronym,.global--navigation address,.global--navigation applet,.global--navigation article,.global--navigation aside,.global--navigation audio,.global--navigation b,.global--navigation big
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2e 61 63 74 69 76 65 2e 6e 61 76 2d 66 69 72 73 74 2d 65 6c 65 6d 65 6e 74 7b 63 6f 6c 6f 72 3a 23 33 33 36 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 6e 61 76 2d 73 65 61 72 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 69 6d 61 67 65 73 2f 75 74 69 6c 69 74 79 2d 68 65 61 64 65 72 2f 73 65 61 72 63 68 2e 73 76 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 7a 2d 69 6e 64 65 78 3a 35 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 Data Ascii: .active.nav-first-element{color:#336}.global--navigation nav .nav-search{background:url(https://www.usps.com/global-elements/header/images/utility-header/search.svg) no-repeat;background-repeat:no-repeat;z-index:5;text-indent:-9999px;background-position:5
2024-04-19 00:44:52 UTC	2	IN	Data Raw: 20 61 Data Ascii: a
2024-04-19 00:44:52 UTC	11679	IN	Data Raw: 2e 6d 75 6c 74 69 2d 6c 61 6e 67 2d 6c 69 6e 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 63 68 69 6e 65 73 65 5f 63 68 61 72 61 63 74 65 72 73 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 6c 65 66 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 61 76 2d 75 74 69 6c 69 74 79 20 23 6c 69 6e 6b 2d 6c 61 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 35 70 78 3b 77 69 64 74 68 Data Ascii: .multi-lang-link{background:url(https://www.usps.com/assets/images/home/chinese_characters.gif);background-repeat:no-repeat;width:80px;height:25px;left:20px;position:relative}.nav-utility #link-lang:before{content:"";display:inline-block;height:15px;width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50292	18.67.65.14	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	556	OUT	GET /4.11/esri/themes/light/main.css HTTP/1.1 Host: js.arcgis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:52 UTC	780	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 179377 Connection: close Date: Thu, 18 Apr 2024 20:40:40 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 3000 Cache-Control: max-age=86400 Last-Modified: Wed, 21 Oct 2020 16:22:32 GMT x-amz-version-id: ZZM4XXC9F15es0ZV89PsYC6YFn9a3psm ETag: "80705f182a5b143fdd3e130c9e42dab5" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4a66fbee8ce857225d1bddf53b79420c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: Xx9z7EPwA50sR8jDj75Vn8AlE9Pmx_EiyA0bhGB6l0Bfeo4qpMbMgA== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 00:44:52 UTC	15990	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 2e 64 67 72 69 64 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 20 68 65 69 67 68 74 3a 20 33 30 65 6d 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 64 67 72 69 64 2d 68 65 61 64 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 3b 7d 2e 64 67 72 69 64 2d 68 65 61 64 65 72 2d 72 6f 77 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 72 69 67 68 74 3a 20 31 37 70 78 3b 20 6c 65 66 74 3a 20 30 3b 7d 2e 64 67 72 69 64 2d 68 65 61 64 65 72 2d 73 63 72 6f 6c 6c 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 Data Ascii: @charset "utf-8";.dgrid {position: relative; overflow: hidden; border: 1px solid #ddd; height: 30em; display: block;}.dgrid-header {background-color: #eee;}.dgrid-header-row {position: absolute; right: 17px; left: 0;}.dgrid-header-scroll {position: absolu
2024-04-19 00:44:52 UTC	394	IN	Data Raw: 39 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 2d 6d 61 67 6e 69 66 79 69 6e 67 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 37 61 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 37 62 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 2d 6d 61 67 6e 69 66 79 69 6e 67 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 37 63 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 6c 6f 63 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 Data Ascii: 9";color:inherit}.esri-icon-zoom-in-magnifying-glass:before{content:"\e67a";color:inherit}.esri-icon-search:before{content:"\e67b";color:inherit}.esri-icon-zoom-out-magnifying-glass:before{content:"\e67c";color:inherit}.esri-icon-locked:before{content:"\e
2024-04-19 00:44:52 UTC	15990	IN	Data Raw: 2d 69 63 6f 6e 2d 63 6f 6d 70 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 38 30 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 38 31 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 38 32 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 63 68 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 38 33 22 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 65 73 72 69 2d 69 63 6f 6e 2d 64 6f 63 6b 2d 62 6f 74 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 38 34 22 3b 63 Data Ascii: -icon-compass:before{content:"\e680";color:inherit}.esri-icon-down:before{content:"\e681";color:inherit}.esri-icon-up:before{content:"\e682";color:inherit}.esri-icon-chat:before{content:"\e683";color:inherit}.esri-icon-dock-bottom:before{content:"\e684";c
2024-04-19 00:44:52 UTC	394	IN	Data Raw: 6f 6e 3a 65 73 72 69 2d 72 6f 74 61 74 65 20 31 32 35 30 6d 73 20 69 6e 66 69 6e 69 74 65 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 65 73 72 69 2d 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 65 73 72 69 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 65 73 72 69 2d 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 73 72 69 2d 69 6e 74 65 72 61 63 74 69 76 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 73 72 69 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 65 73 72 69 2d 69 6e 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 Data Ascii: on:esri-rotate 1250ms infinite linear;transform:translateZ(0)}.esri-clearfix:before,.esri-clearfix:after{content:" ";display:table}.esri-clearfix:after{clear:both}.esri-interactive{cursor:pointer}.esri-hidden{display:none !important}.esri-invisible{visibi
2024-04-19 00:44:52 UTC	15990	IN	Data Raw: 69 6e 67 3a 31 32 70 78 20 30 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 7d 2e 65 73 72 69 2d 61 72 65 61 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2d 33 64 5f 5f 63 6f 6e 74 61 69 6e 65 72 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 65 73 72 69 2d 61 72 65 61 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2d 33 64 5f 5f 6d 65 61 73 75 72 65 6d 65 6e 74 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 35 70 78 3b 6d 61 72 67 69 6e 3a 31 32 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 35 66 35 3b 61 6e 69 6d 61 74 69 6f 6e 3a 65 73 72 69 2d 66 61 64 65 2d 69 6e 20 32 35 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 61 72 65 61 2d 6d 65 61 73 75 72 65 6d 65 6e 74 2d 33 64 5f 5f 68 65 61 64 Data Ascii: ing:12px 0;overflow-y:auto}.esri-area-measurement-3d__container a{text-decoration:none}.esri-area-measurement-3d__measurement{padding:12px 15px;margin:12px 0;background-color:#f5f5f5;animation:esri-fade-in 250ms ease-in-out}.esri-area-measurement-3d__head
2024-04-19 00:44:52 UTC	14530	IN	Data Raw: 3a 30 20 30 2e 33 38 37 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 31 35 30 6d 73 20 6c 69 6e 65 61 72 7d 2e 65 73 72 69 2d 62 72 6f 77 73 65 69 74 65 6d 73 20 2e 67 61 6c 6c 65 72 79 2d 6c 65 66 74 20 6c 69 2e 61 63 74 69 76 65 3e 61 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 36 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 32 65 39 66 39 7d 2e 65 73 72 69 2d 62 72 6f 77 73 65 69 74 65 6d 73 20 2e 67 61 6c 6c 65 72 79 2d 6c 65 66 74 20 6c 69 2e 61 63 74 69 76 65 3e 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 36 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 32 65 39 66 39 7d 2e 65 73 72 69 2d 62 72 6f 77 73 65 Data Ascii: :0 0.3875rem;transition:all 150ms linear}.esri-browseitems .gallery-left li.active>a{color:#6e6e6e;cursor:default;background-color:#d2e9f9}.esri-browseitems .gallery-left li.active>a:focus{color:#6e6e6e;cursor:default;background-color:#d2e9f9}.esri-browse
2024-04-19 00:44:52 UTC	1055	IN	Data Raw: 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 65 36 65 36 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 20 2e 65 73 72 69 2d 74 72 61 6e 73 70 61 72 65 6e 63 79 2d 73 6c 69 64 65 72 5b 74 79 70 65 3d 22 72 61 6e 67 65 22 5d 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 6c 6f 77 65 72 2c 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 20 2e 65 73 72 69 2d 74 72 61 6e 73 70 61 72 65 6e 63 79 2d 73 6c 69 64 65 72 5b 74 79 70 65 3d 22 72 61 6e 67 65 22 5d 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 75 70 70 65 72 7b 62 61 63 6b 67 72 6f Data Ascii: hadow:none;border:none;height:16px;width:10px;border-radius:2px;background:#6e6e6e;cursor:pointer}.esri-color-picker .esri-transparency-slider[type="range"]::-ms-fill-lower,.esri-color-picker .esri-transparency-slider[type="range"]::-ms-fill-upper{backgro
2024-04-19 00:44:52 UTC	16384	IN	Data Raw: 74 3a 2d 31 30 30 25 3b 6c 65 66 74 3a 30 7d 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 20 2e 65 73 72 69 2d 63 6f 6c 6f 72 2d 70 69 63 6b 65 72 2d 74 69 63 6b 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 32 35 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 63 6f 6d 70 61 73 73 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 2e 65 73 72 69 2d 63 6f 6d 70 61 73 73 20 2e 65 73 72 69 2d 63 6f 6d 70 61 73 73 5f 5f 69 63 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 2e 65 73 72 69 2d 63 6f 6f 72 64 69 6e 61 74 65 2d 63 6f 6e 76 65 Data Ascii: t:-100%;left:0}.esri-color-picker .esri-color-picker-ticks{margin-top:6px;display:flex;justify-content:space-between;transition:color 250ms ease-in-out}.esri-compass{border-radius:50%}.esri-compass .esri-compass__icon{font-size:20px}.esri-coordinate-conve
2024-04-19 00:44:52 UTC	15596	IN	Data Raw: 23 66 66 66 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 33 70 78 20 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 31 32 35 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 2e 65 73 72 69 2d 65 64 69 74 6f 72 5f 5f 66 65 61 74 75 72 65 2d 6c 69 73 74 2d 69 74 65 6d 3a 68 6f 76 65 72 2c 2e 65 73 72 69 2d 65 64 69 74 6f 72 5f 5f 66 65 61 74 75 72 65 2d 6c 69 73 74 2d 69 74 65 6d Data Ascii: #fff;cursor:pointer;margin:3px 0;border:1px solid #e0e0e0;border-color:transparent;border-radius:2px;display:flex;justify-content:space-between;transition:border-color 125ms ease-in-out}.esri-editor__feature-list-item:hover,.esri-editor__feature-list-item
2024-04-19 00:44:52 UTC	788	IN	Data Raw: 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 65 73 72 69 2d 66 65 61 74 75 72 65 2d 66 6f 72 6d 5f 5f 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 65 73 72 69 2d 66 65 61 74 75 72 65 2d 66 6f 72 6d 5f 5f 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 72 65 73 69 7a 65 3a 68 6f 72 69 7a 6f 6e 74 61 6c 7d 2e 65 73 72 69 2d 66 65 61 74 75 72 65 2d 66 6f 72 6d 5f 5f 69 6e 70 75 74 2d 2d 64 61 74 65 2c 2e 65 73 72 Data Ascii: ion:column}.esri-feature-form__label{display:flex;justify-content:space-between;flex-direction:column;margin-bottom:12px;position:relative;opacity:1}.esri-feature-form__input{margin-top:4px;width:100%;resize:horizontal}.esri-feature-form__input--date,.esr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50291	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1354	OUT	GET /global-elements/footer/script/jquery-3.5.1.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	417	IN	HTTP/1.1 200 OK Age: 54707 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "15d84-5affcd6633ac0+gzip+ident" Last-Modified: Wed, 23 Sep 2020 15:35:47 GMT Server: ECAcc (agb/5375) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 89476 Connection: close
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 6b 2c 64 5d 29 2c 61 3d 3d 3d Data Ascii: =(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[k,d]),a===
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c Data Ascii: (e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.defineProperty(e,this.expando,{val
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 Data Ascii: test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:f
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 70 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d 6f Data Ascii: .extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?pt:void 0)),void 0!==n?null===n?void S.remo
2024-04-19 00:44:52 UTC	7561	IN	Data Raw: 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 22 29 2c 65 29 72 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 Data Ascii: r(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-Requested-With"]="XMLHttpRequest"),e)r.setRequestHeader(n,e[n]);o=function(e){return function(){o&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50294	18.67.65.14	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	516	OUT	GET /4.11/ HTTP/1.1 Host: js.arcgis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:52 UTC	628	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Server: CloudFront Date: Thu, 18 Apr 2024 15:59:14 GMT Location: /4.11/dojo/dojo.js Access-Control-Allow-Methods: HEAD, GET Access-Control-Allow-Origin: * Access-Control-Max-Age: 3000 X-Cache: Hit from cloudfront Via: 1.1 126bc2e5c4c1b9ac0ffa004edc6f02c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: yIEa80j3PPD-0qM1cDfJW7G5LYJt9fkw_5G9QFINk5gBaoXjTIjbMw== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50293	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1358	OUT	GET /global-elements/lib/script/modernizr/modernizr.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	435	IN	HTTP/1.1 200 OK Age: 70783 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "2bfd-50569d709c540+gzip+ident" Last-Modified: Tue, 14 Oct 2014 22:50:21 GMT nnCoection: close Server: ECAcc (agb/53C7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 11261 Connection: close
2024-04-19 00:44:52 UTC	11261	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 38 2e 33 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 74 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 2c 62 29 7b 72 65 74 Data Ascii: /! Modernizr v2.8.3 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ */window.Modernizr=function(a,b,c){function d(a){t.cssText=a}function e(a,b){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50295	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1353	OUT	GET /global-elements/header/script/megamenu-v3.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	416	IN	HTTP/1.1 200 OK Age: 50326 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "3458-5b39a71ac3540+gzip+ident" Last-Modified: Sun, 08 Nov 2020 15:53:17 GMT Server: ECAcc (agb/52BE) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 13400 Connection: close
2024-04-19 00:44:52 UTC	13400	IN	Data Raw: 76 61 72 20 55 53 50 53 3d 55 53 50 53 7c 7c 7b 7d 3b 55 53 50 53 2e 52 65 71 75 69 72 65 3d 55 53 50 53 2e 52 65 71 75 69 72 65 7c 7c 7b 7d 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 22 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 3d 24 2e 6e 6f 43 6f 6e 66 6c 69 63 74 28 21 30 29 2c 67 6c 6f 62 61 6c 5f 65 6c 65 6d 65 6e 74 73 5f 6a 71 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 63 28 22 2e 6d 6f 62 69 6c 65 2d 68 61 6d 62 75 72 67 65 72 22 29 2e 6f 6e 28 22 74 6f 75 63 68 20 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 63 Data Ascii: var USPS=USPS\|\|{};USPS.Require=USPS.Require\|\|{},document.addEventListener("touch",{passive:!0}),global_elements_jq=$.noConflict(!0),global_elements_jq(document).ready(function(c){for(c(".mobile-hamburger").on("touch click",function(e){e.preventDefault(),c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50296	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1350	OUT	GET /global-elements/header/script/ge-login.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	416	IN	HTTP/1.1 200 OK Age: 61891 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "288b-5ebf9ca4d4940+gzip+ident" Last-Modified: Thu, 27 Oct 2022 01:09:17 GMT Server: ECAcc (agb/5388) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 10379 Connection: close
2024-04-19 00:44:52 UTC	10379	IN	Data Raw: 2f 2f 20 44 65 66 69 6e 65 20 56 61 72 69 61 62 6c 65 73 0d 0a 76 61 72 20 69 73 55 73 65 72 4c 6f 67 67 65 64 49 6e 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 66 69 72 73 74 3b 0d 0a 76 61 72 20 70 72 6f 66 69 6c 65 4c 61 6e 67 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 48 6f 73 74 20 3d 20 22 72 65 67 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 74 6f 6f 6c 73 48 6f 73 74 20 3d 20 22 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 73 74 6f 72 65 48 6f 73 74 20 3d 20 22 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 22 3b 0d 0a 76 61 72 20 63 61 74 53 74 6f 72 65 20 3d 20 22 22 3b 0d 0a 76 61 72 20 70 66 73 6c 48 6f 73 74 20 3d 20 22 70 66 73 6c 2e 75 73 70 73 2e 63 6f 6d 22 0d 0a 76 61 72 20 6c 6f 77 45 6e 76 20 3d 20 66 61 6c 73 65 3b 0d Data Ascii: // Define Variablesvar isUserLoggedIn = false;var first;var profileLang;var regHost = "reg.usps.com";var toolsHost = "tools.usps.com";var storeHost = "store.usps.com";var catStore = "";var pfslHost = "pfsl.usps.com"var lowEnv = false;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50300	18.67.65.14	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	528	OUT	GET /4.11/dojo/dojo.js HTTP/1.1 Host: js.arcgis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:52 UTC	795	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1246962 Connection: close Date: Thu, 18 Apr 2024 17:00:20 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 3000 Cache-Control: max-age=86400 Last-Modified: Wed, 21 Oct 2020 16:21:43 GMT x-amz-version-id: p1sSBwlPCzNmFNpQYsZUjaid7VLejCdD ETag: "9ac096251df1304b7610aeeb71834ea4" Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 470d4277236d0557f3e42c6bfe9dac78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: 2rK0XqUEjcGGAY5FUxCmoaZ0HgahxPUlQSrHTpehvqh3iz9gKdOfDg== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 00:44:52 UTC	16384	IN	Data Raw: 2f 2f 20 41 6c 6c 20 6d 61 74 65 72 69 61 6c 20 63 6f 70 79 72 69 67 68 74 20 45 53 52 49 2c 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2c 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 77 69 73 65 20 73 70 65 63 69 66 69 65 64 2e 0d 0a 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 72 63 67 69 73 2e 63 6f 6d 2f 34 2e 31 31 2f 65 73 72 69 2f 63 6f 70 79 72 69 67 68 74 2e 74 78 74 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0d 0a 2f 2f 3e 3e 62 75 69 6c 74 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 65 29 7b 76 61 72 20 6d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 76 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 76 3f 76 3a 22 75 6e 64 65 66 69 6e Data Ascii: // All material copyright ESRI, All Rights Reserved, unless otherwise specified.// See https://js.arcgis.com/4.11/esri/copyright.txt for details.//>>built(function(b,e){var m,d=function(){return"undefined"!==typeof v&&"function"!==typeof v?v:"undefin
2024-04-19 00:44:52 UTC	16384	IN	Data Raw: 64 6f 6a 6f 22 2c 63 5d 2c 64 69 6a 69 74 3a 5b 22 64 69 6a 69 74 22 2c 68 5d 2c 64 6f 6a 6f 78 3a 5b 22 64 6f 6a 6f 78 22 2c 61 5d 7d 3b 6b 3d 0a 64 2e 6d 61 70 26 26 64 2e 6d 61 70 5b 6b 2e 69 64 2e 6d 61 74 63 68 28 2f 5b 5e 5c 2f 5d 2b 2f 29 5b 30 5d 5d 3b 66 6f 72 28 6c 20 69 6e 20 6b 29 68 5b 6c 5d 3f 68 5b 6c 5d 5b 30 5d 3d 6b 5b 6c 5d 3a 68 5b 6c 5d 3d 5b 6b 5b 6c 5d 2c 7b 7d 5d 3b 66 6f 72 28 6c 20 69 6e 20 68 29 6b 3d 68 5b 6c 5d 2c 6b 5b 31 5d 2e 5f 73 63 6f 70 65 4e 61 6d 65 3d 6b 5b 30 5d 2c 6d 2e 6e 6f 47 6c 6f 62 61 6c 73 7c 7c 28 62 5b 6b 5b 30 5d 5d 3d 6b 5b 31 5d 29 3b 63 2e 73 63 6f 70 65 4d 61 70 3d 68 3b 63 2e 62 61 73 65 55 72 6c 3d 63 2e 63 6f 6e 66 69 67 2e 62 61 73 65 55 72 6c 3d 64 2e 62 61 73 65 55 72 6c 3b 63 2e 69 73 41 73 79 Data Ascii: dojo",c],dijit:["dijit",h],dojox:["dojox",a]};k=d.map&&d.map[k.id.match(/[^\/]+/)[0]];for(l in k)h[l]?h[l][0]=k[l]:h[l]=[k[l],{}];for(l in h)k=h[l],k[1]._scopeName=k[0],m.noGlobals\|\|(b[k[0]]=k[1]);c.scopeMap=h;c.baseUrl=c.config.baseUrl=d.baseUrl;c.isAsy
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 74 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 7b 78 3a 30 2c 79 3a 30 7d 7d 3b 61 2e 66 69 78 49 65 42 69 44 69 53 63 72 6f 6c 6c 4c 65 66 74 3d 0a 66 75 6e 63 74 69 6f 6e 28 63 2c 6e 29 7b 6e 3d 6e 7c 7c 65 2e 64 6f 63 3b 76 61 72 20 66 3d 62 28 22 69 65 22 29 3b 69 66 28 66 26 26 21 61 2e 69 73 42 6f 64 79 4c 74 72 28 6e 29 29 7b 6e 3d 6e 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 76 61 72 20 68 3d 65 2e 67 6c 6f 62 61 6c 3b 36 3d 3d 66 26 26 68 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 26 26 6e 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 6e 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 26 26 28 63 2b 3d 6e 2e 63 6c 69 65 6e 74 4c 65 66 74 29 3b 72 65 74 75 72 6e 20 38 3e 66 3f 63 2b 6e 2e 63 6c 69 65 6e 74 57 69 64 74 68 2d Data Ascii: tOffset=function(a){return{x:0,y:0}};a.fixIeBiDiScrollLeft=function(c,n){n=n\|\|e.doc;var f=b("ie");if(f&&!a.isBodyLtr(n)){n=n.documentElement;var h=e.global;6==f&&h.frameElement&&n.scrollHeight>n.clientHeight&&(c+=n.clientLeft);return 8>f?c+n.clientWidth-
2024-04-19 00:44:53 UTC	14808	IN	Data Raw: 70 29 66 6f 72 28 3b 67 3c 62 3b 2b 2b 67 29 7b 69 66 28 65 3d 21 6e 2e 63 61 6c 6c 28 70 2c 66 5b 67 5d 2c 67 2c 66 29 2c 61 5e 0a 65 29 72 65 74 75 72 6e 21 65 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 62 3b 2b 2b 67 29 69 66 28 65 3d 21 6e 28 66 5b 67 5d 2c 67 2c 66 29 2c 61 5e 65 29 72 65 74 75 72 6e 21 65 3b 72 65 74 75 72 6e 20 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 66 29 7b 76 61 72 20 6e 3d 31 2c 67 3d 30 2c 68 3d 30 3b 66 7c 7c 28 6e 3d 67 3d 68 3d 2d 31 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 70 2c 64 2c 62 2c 65 29 7b 69 66 28 65 26 26 30 3c 6e 29 72 65 74 75 72 6e 20 63 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 70 2c 64 2c 62 29 3b 65 3d 70 26 26 70 2e 6c 65 6e 67 74 68 7c 7c 30 3b 76 61 72 20 71 3d 66 3f 65 2b 68 3a 67 3b 62 3d 3d Data Ascii: p)for(;g<b;++g){if(e=!n.call(p,f[g],g,f),a^e)return!e}else for(;g<b;++g)if(e=!n(f[g],g,f),a^e)return!e;return c}}function l(f){var n=1,g=0,h=0;f\|\|(n=g=h=-1);return function(p,d,b,e){if(e&&0<n)return c.lastIndexOf(p,d,b);e=p&&p.length\|\|0;var q=f?e+h:g;b==
2024-04-19 00:44:53 UTC	1576	IN	Data Raw: 20 68 3d 6d 5b 6c 5d 3b 69 66 28 68 21 3d 65 5b 6c 5d 29 7b 76 61 72 20 61 3d 64 28 6c 29 2b 22 5c 78 33 64 22 3b 69 66 28 62 2e 69 73 41 72 72 61 79 28 68 29 29 66 6f 72 28 76 61 72 20 63 3d 30 2c 66 3d 68 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 2b 2b 63 29 6b 2e 70 75 73 68 28 61 2b 64 28 68 5b 63 5d 29 29 3b 65 6c 73 65 20 6b 2e 70 75 73 68 28 61 2b 64 28 68 29 29 7d 7d 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 22 5c 78 32 36 22 29 7d 2c 71 75 65 72 79 54 6f 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 3b 65 3d 65 2e 73 70 6c 69 74 28 22 5c 78 32 36 22 29 3b 66 6f 72 28 76 61 72 20 6b 3d 7b 7d 2c 6c 2c 68 2c 61 3d 30 2c 63 3d 65 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 2b 2b 61 Data Ascii: h=m[l];if(h!=e[l]){var a=d(l)+"\x3d";if(b.isArray(h))for(var c=0,f=h.length;c<f;++c)k.push(a+d(h[c]));else k.push(a+d(h))}}return k.join("\x26")},queryToObject:function(e){var d=decodeURIComponent;e=e.split("\x26");for(var k={},l,h,a=0,c=e.length;a<c;++a
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 7d 29 7d 2c 22 64 6f 6a 6f 2f 5f 62 61 73 65 2f 44 65 66 65 72 72 65 64 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 66 69 6e 65 28 22 2e 2f 6b 65 72 6e 65 6c 20 2e 2e 2f 44 65 66 65 72 72 65 64 20 2e 2e 2f 70 72 6f 6d 69 73 65 2f 50 72 6f 6d 69 73 65 20 2e 2e 2f 65 72 72 6f 72 73 2f 43 61 6e 63 65 6c 45 72 72 6f 72 20 2e 2e 2f 68 61 73 20 2e 2f 6c 61 6e 67 20 2e 2e 2f 77 68 65 6e 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 65 2c 6d 2c 64 2c 6b 2c 6c 2c 68 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 3d 62 2e 44 65 66 65 72 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 Data Ascii: })},"dojo/_base/Deferred":function(){define("./kernel ../Deferred ../promise/Promise ../errors/CancelError ../has ./lang ../when".split(" "),function(b,e,m,d,k,l,h){var a=function(){},c=Object.freeze\|\|function(){},f=b.Deferred=function(n){function g(a){if
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 61 5b 63 5d 3b 66 2e 73 74 61 72 74 20 69 6e 73 74 61 6e 63 65 6f 66 0a 6b 26 26 28 66 2e 74 65 6d 70 43 6f 6c 6f 72 3d 6e 65 77 20 6b 29 7d 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 7b 7d 2c 66 3b 66 6f 72 28 66 20 69 6e 20 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 5b 66 5d 2c 6e 3d 67 2e 73 74 61 72 74 3b 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 6b 3f 63 5b 66 5d 3d 6b 2e 62 6c 65 6e 64 43 6f 6c 6f 72 73 28 6e 2c 67 2e 65 6e 64 2c 61 2c 67 2e 74 65 6d 70 43 6f 6c 6f 72 29 2e 74 6f 43 73 73 28 29 3a 6d 2e 69 73 41 72 72 61 79 28 6e Data Ascii: ;for(var c in a){var f=a[c];f.start instanceofk&&(f.tempColor=new k)}};u.prototype.getValue=function(a){var c={},f;for(f in this._properties){var g=this._properties[f],n=g.start;n instanceof k?c[f]=k.blendColors(n,g.end,a,g.tempColor).toCss():m.isArray(n
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 65 73 6f 6c 76 65 72 3d 0a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 2c 66 3b 61 3d 6c 28 66 75 6e 63 74 69 6f 6e 28 61 2c 67 29 7b 63 3d 61 3b 66 3d 67 7d 2c 61 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 28 61 29 7d 3b 64 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 61 29 7d 3b 64 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 28 61 29 7d 3b 64 2e 70 72 6f 6d 69 73 65 3d 61 3b 72 65 74 75 72 6e 20 64 7d 7d 29 7d 2c 22 64 6f 6a 6f 2f 70 72 6f 6d 69 73 65 2f 61 6c 6c 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 66 69 6e 65 28 5b 22 2e 2e 2f 5f 62 61 73 65 2f 61 72 72 61 79 22 2c 22 2e 2e 2f 5f 62 61 73 65 2f 6c 61 6e 67 22 2c 22 2e 2e 2f 44 65 66 Data Ascii: esolver=function(a){var c,f;a=l(function(a,g){c=a;f=g},a);var d=function(a){c(a)};d.resolve=function(a){return c(a)};d.reject=function(a){return f(a)};d.promise=a;return d}})},"dojo/promise/all":function(){define(["../_base/array","../_base/lang","../Def
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 6e 28 62 2c 65 29 7b 76 61 72 20 6d 3d 2f 5b 26 3c 3e 27 22 5c 2f 5d 2f 67 2c 64 3d 7b 22 5c 78 32 36 22 3a 22 5c 78 32 36 61 6d 70 3b 22 2c 22 5c 78 33 63 22 3a 22 5c 78 32 36 6c 74 3b 22 2c 22 5c 78 33 65 22 3a 22 5c 78 32 36 67 74 3b 22 2c 27 22 27 3a 22 5c 78 32 36 71 75 6f 74 3b 22 2c 22 27 22 3a 22 5c 78 32 36 23 78 32 37 3b 22 2c 22 2f 22 3a 22 5c 78 32 36 23 78 32 46 3b 22 7d 2c 0a 6b 3d 7b 7d 3b 65 2e 73 65 74 4f 62 6a 65 63 74 28 22 64 6f 6a 6f 2e 73 74 72 69 6e 67 22 2c 6b 29 3b 6b 2e 65 73 63 61 70 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3f 62 2e 72 65 70 6c 61 63 65 28 6d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 64 5b 62 5d 7d 29 3a 22 22 7d 3b 6b 2e 72 65 70 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 62 Data Ascii: n(b,e){var m=/[&<>'"\/]/g,d={"\x26":"\x26amp;","\x3c":"\x26lt;","\x3e":"\x26gt;",'"':"\x26quot;","'":"\x26#x27;","/":"\x26#x2F;"},k={};e.setObject("dojo.string",k);k.escape=function(b){return b?b.replace(m,function(b){return d[b]}):""};k.rep=function(d,b
2024-04-19 00:44:53 UTC	16384	IN	Data Raw: 66 3f 62 3f 64 3a 30 3a 66 2c 30 29 2c 64 29 5d 7d 3b 65 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 3b 0a 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 21 64 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 76 61 72 20 61 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 63 3d 5b 5d 2c 66 3d 2d 31 2c 62 3d 22 22 3b 2b 2b 66 3c 64 3b 29 7b 76 61 72 20 67 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 66 5d 29 3b 69 66 28 21 28 69 73 46 69 6e 69 74 65 28 67 29 26 26 4d 61 74 68 2e 66 6c 6f 6f 72 28 67 29 3d 3d 3d 67 26 26 30 3c 3d 67 26 26 31 31 31 34 31 31 31 3e 3d 67 29 29 74 68 72 6f Data Ascii: f?b?d:0:f,0),d)]};e.fromCodePoint=function(){for(var d=0;d<arguments.length;d++);d=arguments.length;if(!d)return"";for(var a=String.fromCharCode,c=[],f=-1,b="";++f<d;){var g=Number(arguments[f]);if(!(isFinite(g)&&Math.floor(g)===g&&0<=g&&1114111>=g))thro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50298	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1356	OUT	GET /global-elements/lib/script/requirejs/require.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	416	IN	HTTP/1.1 200 OK Age: 54706 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "440f-5057c2658f140+gzip+ident" Last-Modified: Wed, 15 Oct 2014 20:41:01 GMT Server: ECAcc (agb/5310) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 17423 Connection: close
2024-04-19 00:44:52 UTC	16383	IN	Data Raw: 2f 2a 2a 20 0a 20 76 69 6d 3a 20 65 74 3a 74 73 3d 34 3a 73 77 3d 34 3a 73 74 73 3d 34 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 71 75 69 72 65 4a 53 20 32 2e 31 2e 31 35 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 2c 20 54 68 65 20 44 6f 6a 6f 20 46 6f 75 6e 64 61 74 69 6f 6e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 76 69 61 20 74 68 65 20 4d 49 54 20 6f 72 20 6e 65 77 20 42 53 44 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 73 65 65 3a 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 72 62 75 72 6b 65 2f 72 65 71 75 69 72 65 6a 73 20 66 6f 72 20 64 65 74 61 69 6c 73 0a 20 2a 2f 0a 0a 76 61 72 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 3b 28 66 75 6e 63 74 Data Ascii: /** vim: et:ts=4:sw=4:sts=4 * @license RequireJS 2.1.15 Copyright (c) 2010-2014, The Dojo Foundation All Rights Reserved. * Available via the MIT or new BSD license. * see: http://github.com/jrburke/requirejs for details */var USPSRequireNS;(funct
2024-04-19 00:44:52 UTC	1040	IN	Data Raw: 74 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 73 72 63 2e 70 6f 70 28 29 2c 73 75 62 50 61 74 68 3d 73 72 63 2e 6c 65 6e 67 74 68 3f 73 72 63 2e 6a 6f 69 6e 28 22 2f 22 29 2b 22 2f 22 3a 22 2e 2f 22 2c 63 66 67 2e 62 61 73 65 55 72 6c 3d 73 75 62 50 61 74 68 29 2c 6d 61 69 6e 53 63 72 69 70 74 3d 6d 61 69 6e 53 63 72 69 70 74 2e 72 65 70 6c 61 63 65 28 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 2c 22 22 29 2c 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 2e 74 65 73 74 28 6d 61 69 6e 53 63 72 69 70 74 29 26 26 28 6d 61 69 6e 53 63 72 69 70 74 3d 64 61 74 61 4d 61 69 6e 29 2c 63 66 67 2e 64 65 70 73 3d 63 66 67 2e 64 65 70 73 3f 63 66 67 2e 64 65 70 73 2e 63 6f 6e 63 61 74 28 6d 61 69 6e 53 63 72 69 70 74 29 3a 5b 6d 61 69 6e 53 63 Data Ascii: t.split("/"),mainScript=src.pop(),subPath=src.length?src.join("/")+"/":"./",cfg.baseUrl=subPath),mainScript=mainScript.replace(jsSuffixRegExp,""),req.jsExtRegExp.test(mainScript)&&(mainScript=dataMain),cfg.deps=cfg.deps?cfg.deps.concat(mainScript):[mainSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50297	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1360	OUT	GET /global-elements/header/script/header-init-search.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	413	IN	HTTP/1.1 200 OK Age: 50206 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "388-5b3971b6b3e40+gzip+ident" Last-Modified: Sun, 08 Nov 2020 11:54:25 GMT Server: ECAcc (agb/53AA) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 904 Connection: close
2024-04-19 00:44:52 UTC	904	IN	Data Raw: 76 61 72 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 20 7c 7c 20 7b 7d 3b 0d 0a 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 3d 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 20 7c 7c 20 7b 7d 2c 20 55 53 50 53 47 6c 6f 62 61 6c 73 2e 52 65 71 75 69 72 65 2e 72 65 71 75 69 72 65 47 6c 6f 62 61 6c 73 20 3d 20 55 53 50 53 52 65 71 75 69 72 65 4e 53 2e 72 65 71 75 69 72 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 6c 69 62 2f 73 63 72 69 70 74 22 2c 0d 0a 20 20 20 20 63 6f 6e 74 65 78 74 3a 20 22 67 6c 6f 62 61 6c 22 0d 0a 7d 29 2c 20 55 53 50 53 47 6c 6f Data Ascii: var USPSGlobals = USPSGlobals \|\| {};USPSGlobals.Require = USPSGlobals.Require \|\| {}, USPSGlobals.Require.requireGlobals = USPSRequireNS.require.config({ baseUrl: "https://www.usps.com/global-elements/lib/script", context: "global"}), USPSGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50299	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1445	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:52 UTC	422	IN	HTTP/1.1 200 OK Age: 41322 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT nnCoection: close Server: ECAcc (agb/534C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 2340 Connection: close
2024-04-19 00:44:52 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50301	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1447	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	414	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 48466 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:52 GMT Etag: "efd-5685373448d40" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/53E5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 3837 Connection: close
2024-04-19 00:44:53 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50302	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:52 UTC	1450	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	422	IN	HTTP/1.1 200 OK Age: 38024 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT nnCoection: close Server: ECAcc (agb/A40E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1827 Connection: close
2024-04-19 00:44:53 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50303	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1462	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/global-elements/header/css/megamenu-v4.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	404	IN	HTTP/1.1 200 OK Age: 56917 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 7250 Connection: close
2024-04-19 00:44:53 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50304	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1408	OUT	GET /media/polocator/blue-caret-down.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/styles/po-locator.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	402	IN	HTTP/1.1 200 OK Age: 50794 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "232-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53F1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 562 Connection: close
2024-04-19 00:44:53 UTC	562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50305	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1413	OUT	GET /media/zipcode-lookup/blue-caret-down.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/styles/po-locator.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	402	IN	HTTP/1.1 200 OK Age: 34394 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "232-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/5398) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 562 Connection: close
2024-04-19 00:44:53 UTC	562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50306	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1417	OUT	GET /media/zipcode-lookup/nav-red-chevron.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/styles/default-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	402	IN	HTTP/1.1 200 OK Age: 27669 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "265-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53B2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 613 Connection: close
2024-04-19 00:44:53 UTC	613	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50307	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1400	OUT	GET /media/polocator/compass.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/styles/po-locator.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	403	IN	HTTP/1.1 200 OK Age: 41782 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "b28-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 2856 Connection: close
2024-04-19 00:44:53 UTC	2856	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="21px" viewBox="0 0 20 21" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50308	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1396	OUT	GET /media/polocator/backtop.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	387	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58160 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "79e-6124db7575680" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/5315) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1950 Connection: close
2024-04-19 00:44:53 UTC	1950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 40 08 02 00 00 00 2f 57 48 db 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR9@/WHtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50310	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1168	OUT	GET /global-elements/header/images/package-intercept.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	422	IN	HTTP/1.1 200 OK Age: 41323 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "924-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT nnCoection: close Server: ECAcc (agb/534C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 2340 Connection: close
2024-04-19 00:44:53 UTC	2340	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 33 34 35 39 20 31 30 31 33 2e 31 20 32 33 2e 35 20 32 34 2e 39 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 36 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 39 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 47 72 6f 75 70 20 31 30 39 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 33 34 35 39 20 39 34 33 29 22 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 47 72 6f 75 70 5f 31 30 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="3459 1013.1 23.5 24.9"> <defs> <style> .cls-1 { fill: #336; } </style> </defs> <g id="Group_109" data-name="Group 109" transform="translate(3459 943)"> <g id="Group_104

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50309	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1170	OUT	GET /global-elements/header/images/schedule-redelivery.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	414	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 48467 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "efd-5685373448d40" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/53E5) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 3837 Connection: close
2024-04-19 00:44:53 UTC	3837	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50311	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1173	OUT	GET /global-elements/header/images/utility-header/mailman.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:53 UTC	422	IN	HTTP/1.1 200 OK Age: 38024 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:53 GMT Etag: "723-55885af730a40+gzip+ident" Last-Modified: Wed, 06 Sep 2017 13:54:41 GMT nnCoection: close Server: ECAcc (agb/A40E) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1827 Connection: close
2024-04-19 00:44:53 UTC	1827	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50312	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1420	OUT	GET /media/zipcode-lookup/navigation-divider.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/styles/default-styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	406	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58543 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "fa7-6124db7575680" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT nnCoection: close Server: ECAcc (agb/5365) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 4007 Connection: close
2024-04-19 00:44:54 UTC	4007	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 32 08 06 00 00 00 6c f0 ea 07 00 00 0a 45 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 Data Ascii: PNGIHDR2lEiCCPICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50313	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1336	OUT	GET /scripts/libs/jquery3.min.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	437	IN	HTTP/1.1 200 OK Age: 41245 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "45a82-6124db775db00+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:20 GMT nnCoection: close Server: ECAcc (agb/A420) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 285314 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 37 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 32 33 2d 30 38 2d 32 38 54 31 33 3a 33 37 5a 0a 20 2a 2f 0a 28 20 66 75 6e 63 74 69 6f 6e 28 20 67 6c 6f 62 61 6c 2c 20 66 61 63 74 6f 72 79 20 29 20 7b 0a 0a 09 22 75 73 Data Ascii: /! jQuery JavaScript Library v3.7.1 * https://jquery.com/ * * Copyright OpenJS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2023-08-28T13:37Z */( function( global, factory ) {"us
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 0a 09 09 77 68 69 74 65 73 70 61 63 65 20 2b 20 22 2a 5c 5c 5d 22 2c 0a 0a 09 70 73 65 75 64 6f 73 20 3d 20 22 3a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 5c 5c 28 28 22 20 2b 0a 0a 09 09 2f 2f 20 54 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 6c 65 63 74 6f 72 73 20 6e 65 65 64 69 6e 67 20 74 6f 6b 65 6e 69 7a 65 20 69 6e 20 74 68 65 20 70 72 65 46 69 6c 74 65 72 2c 20 70 72 65 66 65 72 20 61 72 67 75 6d 65 6e 74 73 3a 0a 09 09 2f 2f 20 31 2e 20 71 75 6f 74 65 64 20 28 63 61 70 74 75 72 65 20 33 3b 20 63 61 70 74 75 72 65 20 34 20 6f 72 20 63 61 70 74 75 72 65 20 35 29 0a 09 09 22 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e Data Ascii: whitespace + "\\]",pseudos = ":(" + identifier + ")(?:\\((" +// To reduce the number of selectors needing tokenize in the preFilter, prefer arguments:// 1. quoted (capture 3; capture 4 or capture 5)"('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 20 6e 6f 64 65 20 3d 20 74 79 70 65 6f 66 20 65 6c 65 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 26 26 0a 09 09 09 09 09 65 6c 65 6d 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 20 22 69 64 22 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 2e 76 61 6c 75 65 20 3d 3d 3d 20 61 74 74 72 49 64 3b 0a 09 09 09 7d 3b 0a 09 09 7d 3b 0a 0a 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 20 36 20 2d 20 37 20 6f 6e 6c 79 0a 09 09 2f 2f 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 20 69 73 20 6e 6f 74 20 72 65 6c 69 61 62 6c 65 20 61 73 20 61 20 66 69 6e 64 20 73 68 6f 72 74 63 75 74 0a 09 09 45 78 70 72 2e 66 69 6e 64 2e 49 44 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: node = typeof elem.getAttributeNode !== "undefined" &&elem.getAttributeNode( "id" );return node && node.value === attrId;};};// Support: IE 6 - 7 only// getElementById is not reliable as a find shortcutExpr.find.ID = function(
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 73 74 61 72 74 2e 70 6f 70 28 29 20 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 28 20 6f 66 54 79 70 65 20 3f 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 4e 61 6d 65 28 20 6e 6f 64 65 2c 20 6e 61 6d 65 20 29 20 3a 0a 09 09 09 09 09 09 09 09 09 09 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 26 26 0a 09 09 09 09 09 09 09 09 09 09 2b 2b 64 69 66 66 20 29 20 7b 0a 0a 09 09 09 09 09 09 09 09 09 09 2f 2f 20 43 61 63 68 65 20 74 68 65 20 69 6e 64 65 78 20 6f 66 20 65 61 63 68 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 65 6c 65 6d 65 6e 74 0a 09 09 09 09 09 09 09 09 09 09 69 66 20 28 20 75 73 65 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 6f 75 74 65 72 43 61 63 68 65 20 3d 20 6e 6f 64 65 5b 20 65 78 70 61 Data Ascii: start.pop() ) ) {if ( ( ofType ?nodeName( node, name ) :node.nodeType === 1 ) &&++diff ) {// Cache the index of each encountered elementif ( useCache ) {outerCache = node[ expa
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 39 29 0a 09 09 09 63 68 65 63 6b 43 6f 6e 74 65 78 74 20 3d 20 6e 75 6c 6c 3b 0a 09 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 09 7d 20 5d 3b 0a 0a 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 69 66 20 28 20 28 20 6d 61 74 63 68 65 72 20 3d 20 45 78 70 72 2e 72 65 6c 61 74 69 76 65 5b 20 74 6f 6b 65 6e 73 5b 20 69 20 5d 2e 74 79 70 65 20 5d 20 29 20 29 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 61 64 64 43 6f 6d 62 69 6e 61 74 6f 72 28 20 65 6c 65 6d 65 6e 74 4d 61 74 63 68 65 72 28 20 6d 61 74 63 68 65 72 73 20 29 2c 20 6d 61 74 63 68 65 72 20 29 20 5d 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 20 3d 20 45 78 70 72 2e 66 69 6c 74 65 72 5b 20 74 6f 6b 65 6e 73 5b 20 69 20 5d Data Ascii: 9)checkContext = null;return ret;} ];for ( ; i < len; i++ ) {if ( ( matcher = Expr.relative[ tokens[ i ].type ] ) ) {matchers = [ addCombinator( elementMatcher( matchers ), matcher ) ];} else {matcher = Expr.filter[ tokens[ i ]
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 61 72 67 65 74 73 2e 69 6e 64 65 78 28 20 63 75 72 20 29 20 3e 20 2d 31 20 3a 0a 0a 09 09 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 70 61 73 73 20 6e 6f 6e 2d 65 6c 65 6d 65 6e 74 73 20 74 6f 20 6a 51 75 65 72 79 23 66 69 6e 64 0a 09 09 09 09 09 09 63 75 72 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 0a 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 20 63 75 72 2c 20 73 65 6c 65 63 74 6f 72 73 20 29 20 29 20 29 20 7b 0a 0a 09 09 09 09 09 09 6d 61 74 63 68 65 64 2e 70 75 73 68 28 20 63 75 72 20 29 3b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 20 6d 61 74 Data Ascii: argets.index( cur ) > -1 :// Don't pass non-elements to jQuery#findcur.nodeType === 1 &&jQuery.find.matchesSelector( cur, selectors ) ) ) {matched.push( cur );break;}}}}return this.pushStack( mat
2024-04-19 00:44:54 UTC	6	IN	Data Raw: 0a 09 09 09 09 09 Data Ascii:
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 09 09 29 0a 09 09 09 09 09 09 29 3b 0a 0a 09 09 09 09 09 09 2f 2f 20 66 75 6c 66 69 6c 6c 65 64 5f 68 61 6e 64 6c 65 72 73 2e 61 64 64 28 20 2e 2e 2e 20 29 0a 09 09 09 09 09 09 74 75 70 6c 65 73 5b 20 31 20 5d 5b 20 33 20 5d 2e 61 64 64 28 0a 09 09 09 09 09 09 09 72 65 73 6f 6c 76 65 28 0a 09 09 09 09 09 09 09 09 30 2c 0a 09 09 09 09 09 09 09 09 6e 65 77 44 65 66 65 72 2c 0a 09 09 09 09 09 09 09 09 69 73 46 75 6e 63 74 69 6f 6e 28 20 6f 6e 46 75 6c 66 69 6c 6c 65 64 20 29 20 3f 0a 09 09 09 09 09 09 09 09 09 6f 6e 46 75 6c 66 69 6c 6c 65 64 20 3a 0a 09 09 09 09 09 09 09 09 09 49 64 65 6e 74 69 74 79 0a 09 09 09 09 09 09 09 29 0a 09 09 09 09 09 09 29 3b 0a 0a 09 09 09 09 09 09 2f 2f 20 72 65 6a 65 63 74 65 64 5f 68 61 6e 64 6c 65 72 73 2e 61 64 64 28 20 2e Data Ascii: ));// fulfilled_handlers.add( ... )tuples[ 1 ][ 3 ].add(resolve(0,newDefer,isFunction( onFulfilled ) ?onFulfilled :Identity));// rejected_handlers.add( .
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 28 20 74 79 70 65 20 7c 7c 20 22 66 78 22 20 29 20 2b 20 22 71 75 65 75 65 22 3b 0a 09 09 09 71 75 65 75 65 20 3d 20 64 61 74 61 50 72 69 76 2e 67 65 74 28 20 65 6c 65 6d 2c 20 74 79 70 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 53 70 65 65 64 20 75 70 20 64 65 71 75 65 75 65 20 62 79 20 67 65 74 74 69 6e 67 20 6f 75 74 20 71 75 69 63 6b 6c 79 20 69 66 20 74 68 69 73 20 69 73 20 6a 75 73 74 20 61 20 6c 6f 6f 6b 75 70 0a 09 09 09 69 66 20 28 20 64 61 74 61 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 21 71 75 65 75 65 20 7c 7c 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 20 64 61 74 61 20 29 20 29 20 7b 0a 09 09 09 09 09 71 75 65 75 65 20 3d 20 64 61 74 61 50 72 69 76 2e 61 63 63 65 73 73 28 20 65 6c 65 6d 2c 20 74 79 70 65 2c 20 6a 51 75 65 72 79 2e 6d 61 6b 65 41 Data Ascii: ( type \|\| "fx" ) + "queue";queue = dataPriv.get( elem, type );// Speed up dequeue by getting out quickly if this is just a lookupif ( data ) {if ( !queue \|\| Array.isArray( data ) ) {queue = dataPriv.access( elem, type, jQuery.makeA
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 73 20 73 65 70 61 72 61 74 65 64 20 62 79 20 61 20 73 70 61 63 65 0a 09 09 74 79 70 65 73 20 3d 20 28 20 74 79 70 65 73 20 7c 7c 20 22 22 20 29 2e 6d 61 74 63 68 28 20 72 6e 6f 74 68 74 6d 6c 77 68 69 74 65 20 29 20 7c 7c 20 5b 20 22 22 20 5d 3b 0a 09 09 74 20 3d 20 74 79 70 65 73 2e 6c 65 6e 67 74 68 3b 0a 09 09 77 68 69 6c 65 20 28 20 74 2d 2d 20 29 20 7b 0a 09 09 09 74 6d 70 20 3d 20 72 74 79 70 65 6e 61 6d 65 73 70 61 63 65 2e 65 78 65 63 28 20 74 79 70 65 73 5b 20 74 20 5d 20 29 20 7c 7c 20 5b 5d 3b 0a 09 09 09 74 79 70 65 20 3d 20 6f 72 69 67 54 79 70 65 20 3d 20 74 6d 70 5b 20 31 20 5d 3b 0a 09 09 09 6e 61 6d 65 73 70 61 63 65 73 20 3d 20 28 20 74 6d 70 5b 20 32 20 5d 20 7c 7c 20 22 22 20 29 2e 73 70 6c 69 74 28 20 22 2e 22 20 29 2e 73 6f 72 74 28 Data Ascii: s separated by a spacetypes = ( types \|\| "" ).match( rnothtmlwhite ) \|\| [ "" ];t = types.length;while ( t-- ) {tmp = rtypenamespace.exec( types[ t ] ) \|\| [];type = origType = tmp[ 1 ];namespaces = ( tmp[ 2 ] \|\| "" ).split( "." ).sort(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50314	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1338	OUT	GET /scripts/libs/bootstrap.min.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	416	IN	HTTP/1.1 200 OK Age: 41058 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "9002-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/52DB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 36866 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 7d 2b 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 63 3d 64 2e 66 6e 2e 6a 71 75 65 72 79 2e 73 70 6c 69 74 28 22 20 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 63 5b 30 5d 3c 32 26 26 63 5b 31 5d 3c 39 7c 7c 31 3d 3d 63 5b 30 5d 26 26 39 3d 3d 63 5b 31 5d 26 26 63 5b 32 5d 3c 31 7c 7c 63 5b 30 5d 3e 33 29 7b 74 68 72 Data Ascii: /! Bootstrap v3.3.7 (http://getbootstrap.com) */if("undefined"==typeof jQuery){throw new Error("Bootstrap's JavaScript requires jQuery")}+function(d){var c=d.fn.jquery.split(" ")[0].split(".");if(c[0]<2&&c[1]<9\|\|1==c[0]&&9==c[1]&&c[2]<1\|\|c[0]>3){thr
2024-04-19 00:44:54 UTC	1	IN	Data Raw: 28 Data Ascii: (
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 29 7b 74 68 69 73 2e 69 73 53 68 6f 77 6e 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 2c 66 2e 70 72 6f 78 79 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 32 37 3d 3d 62 2e 77 68 69 63 68 26 26 74 68 69 73 2e 68 69 64 65 28 29 7d 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 69 73 53 68 6f 77 6e 7c 7c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 73 53 68 6f 77 6e 3f 66 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 Data Ascii: ){this.isShown&&this.options.keyboard?this.$element.on("keydown.dismiss.bs.modal",f.proxy(function(b){27==b.which&&this.hide()},this)):this.isShown\|\|this.$element.off("keydown.dismiss.bs.modal")},h.prototype.resize=function(){this.isShown?f(window).on("re
2024-04-19 00:44:54 UTC	4099	IN	Data Raw: 65 77 20 6a 28 74 68 69 73 29 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 62 5b 61 5d 28 29 7d 29 7d 76 61 72 20 6a 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 67 28 61 29 7d 3b 6a 2e 56 45 52 53 49 4f 4e 3d 22 33 2e 33 2e 37 22 2c 6a 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 3d 31 35 30 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 70 3d 61 2e 63 6c 6f 73 65 73 74 28 22 75 6c 3a 6e 6f 74 28 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 29 22 29 2c 6f 3d 61 2e 64 61 74 61 28 22 74 61 72 67 65 74 22 29 3b 69 66 28 6f 7c 7c 28 6f 3d 61 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 6f 3d 6f 26 26 Data Ascii: ew j(this)),"string"==typeof a&&b[a]()})}var j=function(a){this.element=g(a)};j.VERSION="3.3.7",j.TRANSITION_DURATION=150,j.prototype.show=function(){var a=this.element,p=a.closest("ul:not(.dropdown-menu)"),o=a.data("target");if(o\|\|(o=a.attr("href"),o=o&&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50315	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:53 UTC	1335	OUT	GET /scripts/libs/moment.min.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	416	IN	HTTP/1.1 200 OK Age: 47611 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "c27e-6124db775db00+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:20 GMT Server: ECAcc (agb/53F7) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 49790 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 63 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 63 29 3a 64 2e 6d 6f 6d 65 6e 74 3d 63 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 35 28 29 7b 72 65 74 75 72 6e 20 62 37 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 65 33 28 62 29 7b 62 37 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 65 31 28 62 29 7b 72 65 74 75 72 6e 20 62 20 Data Ascii: !function(d,c){"object"==typeof exports&&"undefined"!=typeof module?module.exports=c():"function"==typeof define&&define.amd?define(c):d.moment=c()}(this,function(){function e5(){return b7.apply(null,arguments)}function e3(b){b7=b}function e1(b){return b
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 3d 62 54 28 68 5b 69 2b 31 5d 29 2c 6c 3d 6c 3f 6c 2e 73 70 6c 69 74 28 22 2d 22 29 3a 6e 75 6c 6c 3b 67 3e 30 3b 29 7b 69 66 28 6b 3d 62 73 28 6a 2e 73 6c 69 63 65 28 30 2c 67 29 2e 6a 6f 69 6e 28 22 2d 22 29 29 29 7b 72 65 74 75 72 6e 20 6b 7d 69 66 28 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 3d 67 26 26 65 45 28 6a 2c 6c 2c 21 30 29 3e 3d 67 2d 31 29 7b 62 72 65 61 6b 7d 67 2d 2d 7d 69 2b 2b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 62 73 28 64 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 3b 69 66 28 21 61 38 5b 64 5d 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 29 7b 74 72 79 7b 63 3d 61 6a 2e 5f 61 62 62 72 2c 72 65 71 75 69 72 65 Data Ascii: =bT(h[i+1]),l=l?l.split("-"):null;g>0;){if(k=bs(j.slice(0,g).join("-"))){return k}if(l&&l.length>=g&&eE(j,l,!0)>=g-1){break}g--}i++}return null}function bs(d){var c=null;if(!a8[d]&&"undefined"!=typeof module&&module&&module.exports){try{c=aj._abbr,require
2024-04-19 00:44:54 UTC	2	IN	Data Raw: 6e 28 Data Ascii: n(
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 65 2c 64 2c 66 2c 22 77 65 65 6b 64 61 79 73 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 7a 28 65 2c 64 2c 66 29 7b 72 65 74 75 72 6e 20 64 6e 28 65 2c 64 2c 66 2c 22 77 65 65 6b 64 61 79 73 53 68 6f 72 74 22 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6a 28 65 2c 64 2c 66 29 7b 72 65 74 75 72 6e 20 64 6e 28 65 2c 64 2c 66 2c 22 77 65 65 6b 64 61 79 73 4d 69 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 32 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 5f 64 61 74 61 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 3d 62 6f 28 74 68 69 73 2e 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 29 2c 74 68 69 73 2e 5f 64 61 79 73 3d 62 6f 28 74 68 69 73 2e 5f 64 61 79 73 29 2c 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 3d 62 6f 28 74 68 69 73 2e 5f 6d 6f 6e 74 68 73 29 Data Ascii: e,d,f,"weekdays")}function cz(e,d,f){return dn(e,d,f,"weekdaysShort")}function cj(e,d,f){return dn(e,d,f,"weekdaysMin")}function b2(){var b=this._data;return this._milliseconds=bo(this._milliseconds),this._days=bo(this._days),this._months=bo(this._months)
2024-04-19 00:44:54 UTC	639	IN	Data Raw: 61 6e 67 3d 63 34 2c 66 6e 28 22 58 22 2c 30 2c 30 2c 22 75 6e 69 78 22 29 2c 66 6e 28 22 78 22 2c 30 2c 30 2c 22 76 61 6c 75 65 4f 66 22 29 2c 66 68 28 22 78 22 2c 63 69 29 2c 66 68 28 22 58 22 2c 62 46 29 2c 66 4c 28 22 58 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 64 2c 66 29 7b 66 2e 5f 64 3d 6e 65 77 20 44 61 74 65 28 31 30 30 30 2a 70 61 72 73 65 46 6c 6f 61 74 28 65 2c 31 30 29 29 7d 29 2c 66 4c 28 22 78 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 64 2c 66 29 7b 66 2e 5f 64 3d 6e 65 77 20 44 61 74 65 28 65 46 28 65 29 29 7d 29 2c 65 35 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 31 37 2e 31 22 2c 65 33 28 62 6d 29 2c 65 35 2e 66 6e 3d 62 50 2c 65 35 2e 6d 69 6e 3d 61 57 2c 65 35 2e 6d 61 78 3d 61 4d 2c 65 35 2e 6e 6f 77 3d 65 6b 2c 65 35 2e 75 74 63 3d 65 50 2c 65 Data Ascii: ang=c4,fn("X",0,0,"unix"),fn("x",0,0,"valueOf"),fh("x",ci),fh("X",bF),fL("X",function(e,d,f){f._d=new Date(1000*parseFloat(e,10))}),fL("x",function(e,d,f){f._d=new Date(eF(e))}),e5.version="2.17.1",e3(bm),e5.fn=bP,e5.min=aW,e5.max=aM,e5.now=ek,e5.utc=eP,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50316	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1335	OUT	GET /scripts/polo/po-locator.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	416	IN	HTTP/1.1 200 OK Age: 48655 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "6474-6124db7945f80+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT Server: ECAcc (agb/A409) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 25716 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 69 66 28 66 2e 69 6e 64 65 78 4f 66 28 22 3f 6c 6f 63 61 74 69 6f 6e 3d 22 29 3e 3d 30 29 7b 24 28 22 2e 73 65 61 72 63 68 2d 63 6f 6c 6c 61 70 73 65 22 29 2e 68 69 64 65 28 29 7d 76 61 72 20 63 3d 6a 51 75 65 72 79 28 22 23 70 6f 73 74 2d 6f 66 66 69 63 65 73 2d 73 65 6c 65 63 74 22 29 2e 76 61 6c 28 29 3b 24 28 22 2e 62 6c 75 65 62 6f 78 22 29 2e 68 69 64 65 28 29 3b 24 28 22 2e 65 78 70 72 65 73 73 6d 61 69 6c 22 29 2e 68 69 64 65 28 29 3b 24 28 22 2e 73 74 61 6d 70 42 6f 6f 6b 6c 65 74 22 29 2e 68 69 64 65 28 29 3b 69 66 28 63 3d 3d 22 70 6f 22 29 7b 6a 51 75 65 72 79 28 Data Ascii: jQuery(document).ready(function(){var f=window.location.href;if(f.indexOf("?location=")>=0){$(".search-collapse").hide()}var c=jQuery("#post-offices-select").val();$(".bluebox").hide();$(".expressmail").hide();$(".stampBooklet").hide();if(c=="po"){jQuery(
2024-04-19 00:44:54 UTC	9333	IN	Data Raw: 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2c 20 2e 73 74 6f 72 65 2d 6d 61 70 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6c 6f 73 65 64 22 29 3b 6a 51 75 65 72 79 28 22 2e 6c 6f 63 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2d 70 68 6f 6e 65 2c 20 2e 67 65 74 2d 64 69 72 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 2d 6d 64 2d 36 20 63 6f 6c 2d 73 6d 2d 36 22 29 3b 6a 51 75 65 72 79 28 22 2e 6c 6f 63 61 74 69 6f 6e 2d 61 64 64 72 65 73 73 2d 70 68 6f 6e 65 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f 6c 2d 6d 64 2d 34 20 63 6f 6c 2d 73 6d 2d 34 22 29 3b 6a 51 75 65 72 79 28 22 2e 67 65 74 2d 64 69 72 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 6f Data Ascii: on-collapse, .store-map").removeClass("closed");jQuery(".location-address-phone, .get-direction-container").addClass("col-md-6 col-sm-6");jQuery(".location-address-phone").removeClass("col-md-4 col-sm-4");jQuery(".get-direction-container").removeClass("co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50317	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1340	OUT	GET /scripts/polo/po-locator-ajax.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	417	IN	HTTP/1.1 200 OK Age: 48931 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "15605-6124db7945f80+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT Server: ECAcc (agb/53B8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 87557 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 2f 2f 20 41 4a 41 58 20 46 75 6e 63 74 69 6f 6e 73 20 66 6f 72 20 50 4f 4c 4f 0a 76 61 72 20 70 6f 4c 6f 63 61 74 69 6f 6e 44 61 74 61 20 3d 20 7b 7d 3b 0a 76 61 72 20 70 6f 50 61 67 65 44 61 74 61 20 3d 20 5b 5d 3b 0a 76 61 72 20 69 73 5a 69 70 53 65 61 72 63 68 20 3d 20 74 72 75 65 3b 0a 76 61 72 20 69 73 41 64 64 72 65 73 73 53 65 61 72 63 68 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 50 61 73 73 70 6f 72 74 41 70 70 74 53 65 61 72 63 68 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 50 61 73 73 70 6f 72 74 50 68 6f 74 6f 53 65 61 72 63 68 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 50 61 73 73 70 6f 72 74 57 61 6c 6b 69 6e 53 65 61 72 63 68 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 73 65 72 76 69 63 65 43 6f 64 65 73 20 3d 20 7b 0a 0a 20 20 Data Ascii: // AJAX Functions for POLOvar poLocationData = {};var poPageData = [];var isZipSearch = true;var isAddressSearch = false;var isPassportApptSearch = false;var isPassportPhotoSearch = false;var isPassportWalkinSearch = false;var serviceCodes = {
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 74 61 74 65 5a 69 70 45 72 72 6f 72 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 20 22 62 6c 6f 63 6b 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 09 7d 65 6c 73 65 20 69 66 28 65 72 72 6f 72 43 6f 64 65 20 3d 3d 20 27 38 30 30 34 30 65 65 33 27 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 09 09 6a 51 75 65 72 79 28 27 23 72 65 73 75 6c 74 42 6f 78 27 29 2e 68 74 6d 6c 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 52 65 73 75 6c 74 44 69 76 22 3e 3c 73 70 61 6e 20 72 6f 6c 65 3d 22 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 6e 6f 52 65 73 75 6c 74 53 70 61 6e 22 20 3e 57 65 20 63 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 61 20 6c 6f 63 61 74 69 6f 6e 20 74 68 61 74 20 6d 61 74 63 68 65 73 20 79 6f 75 72 20 73 65 61 72 63 68 2e 20 50 6c 65 61 73 Data Ascii: tateZipError").css("display", "block"); }else if(errorCode == '80040ee3'){ jQuery('#resultBox').html('<div class="noResultDiv"><span role="alert" class="noResultSpan" >We could not find a location that matches your search. Pleas
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 6e 74 28 67 65 74 52 65 73 75 6c 74 73 50 65 72 50 61 67 65 29 20 3e 3d 20 30 20 3f 20 31 20 3a 20 30 29 3b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 31 3b 20 69 20 3c 3d 20 70 61 67 65 73 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 2e 6e 65 78 74 22 29 2e 62 65 66 6f 72 65 28 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 70 61 67 65 6f 66 52 65 73 75 6c 74 73 5c 22 20 69 64 3d 5c 22 70 61 67 65 22 20 2b 20 69 20 2b 20 22 52 65 73 75 6c 74 73 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 23 5c 22 3e 22 20 2b 20 69 20 2b 20 22 3c 2f 61 3e 3c 2f 6c 69 3e 22 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 20 3e 20 35 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 23 70 61 67 65 22 20 2b 20 69 20 2b 20 22 Data Ascii: nt(getResultsPerPage) >= 0 ? 1 : 0); for (var i = 1; i <= pages; i++) { jQuery(".next").before("<li class=\"pageofResults\" id=\"page" + i + "Results\"><a href=\"#\">" + i + "</a></li>"); if (i > 5) { jQuery("#page" + i + "
2024-04-19 00:44:54 UTC	3	IN	Data Raw: 20 20 6a Data Ascii: j
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 51 75 65 72 79 28 22 23 64 65 74 61 69 6c 46 61 78 22 29 2e 74 65 78 74 28 66 75 6e 63 74 69 6f 6e 20 28 69 2c 20 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 66 61 78 20 3d 20 66 61 78 2e 72 65 70 6c 61 63 65 28 2f 28 5c 64 7b 33 7d 29 28 5c 64 7b 33 7d 29 28 5c 64 7b 34 7d 29 2f 2c 20 22 24 31 2d 24 32 2d 24 33 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 78 3b 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 6a 51 75 65 72 79 28 22 23 64 65 74 61 69 6c 54 54 59 22 29 2e 74 65 78 74 28 66 75 6e 63 74 69 6f 6e 20 28 69 2c 20 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 54 54 59 20 3d 20 54 54 59 2e 72 65 70 6c 61 63 65 28 2f 28 5c 64 7b 33 7d 29 28 5c 64 7b 33 7d 29 28 5c 64 7b 34 7d 29 2f 2c 20 22 24 31 2d 24 32 2d 24 33 22 29 3b 0a 20 Data Ascii: Query("#detailFax").text(function (i, text) { fax = fax.replace(/(\d{3})(\d{3})(\d{4})/, "$1-$2-$3"); return fax; }); jQuery("#detailTTY").text(function (i, text) { TTY = TTY.replace(/(\d{3})(\d{3})(\d{4})/, "$1-$2-$3");
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 3d 22 22 20 74 69 74 6c 65 3d 22 22 3e 3c 2f 61 3e 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 61 74 75 72 64 61 79 48 72 73 20 3d 20 73 65 72 76 69 63 65 48 6f 75 72 73 54 79 70 65 5b 22 53 61 74 22 5d 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 75 6e 64 61 79 48 72 73 20 3d 20 73 65 72 76 69 63 65 48 6f 75 72 73 54 79 70 65 5b 22 53 75 6e 22 5d 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 0a 20 20 20 20 Data Ascii: ="" title=""></a>'; } var saturdayHrs = serviceHoursType["Sat"].toString(); var sundayHrs = serviceHoursType["Sun"].toString();
2024-04-19 00:44:54 UTC	5639	IN	Data Raw: 6e 76 61 6c 69 64 50 6f 6c 6f 41 64 64 72 65 73 73 4d 6f 64 61 6c 22 29 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 3b 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 51 75 65 72 79 28 22 23 73 65 61 72 63 68 4c 6f 63 61 74 69 6f 6e 73 22 29 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 68 65 63 6b 43 69 74 79 5a 69 70 20 3d 3d 20 27 27 29 20 7b 0a 09 09 09 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nvalidPoloAddressModal").modal("show"); } }); jQuery("#searchLocations").on('click', function () { if (checkCityZip == '') {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50318	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1185	OUT	GET /global-elements/header/images/icon-personalize-stamped-envelopes.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	404	IN	HTTP/1.1 200 OK Age: 56918 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "1c52-5685373448d40+gzip+ident" Last-Modified: Mon, 26 Mar 2018 16:41:49 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 7250 Connection: close
2024-04-19 00:44:54 UTC	7250	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 30 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50320	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1157	OUT	GET /media/zipcode-lookup/blue-caret-down.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	402	IN	HTTP/1.1 200 OK Age: 34395 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "232-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/5398) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 562 Connection: close
2024-04-19 00:44:54 UTC	562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50319	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1152	OUT	GET /media/polocator/blue-caret-down.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	402	IN	HTTP/1.1 200 OK Age: 50795 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "232-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53F1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 562 Connection: close
2024-04-19 00:44:54 UTC	562	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50321	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1157	OUT	GET /media/zipcode-lookup/nav-red-chevron.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	402	IN	HTTP/1.1 200 OK Age: 27670 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "265-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53B2) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 613 Connection: close
2024-04-19 00:44:54 UTC	613	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4f 72 69 67 69 6e 61 6c 5f 41 72 74 77 6f 72 6b 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 19.2.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Original_Artwork" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50323	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1144	OUT	GET /media/polocator/compass.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	403	IN	HTTP/1.1 200 OK Age: 41783 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "b28-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 2856 Connection: close
2024-04-19 00:44:54 UTC	2856	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 70 78 22 20 68 65 69 67 68 74 3d 22 32 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="20px" height="21px" viewBox="0 0 20 21" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50322	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1144	OUT	GET /media/polocator/backtop.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	387	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58161 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "79e-6124db7575680" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/5315) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1950 Connection: close
2024-04-19 00:44:54 UTC	1950	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 39 00 00 00 40 08 02 00 00 00 2f 57 48 db 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR9@/WHtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50324	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1339	OUT	GET /scripts/polo/po-locator-map.js HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	435	IN	HTTP/1.1 200 OK Age: 42397 Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "4856-6124db7945f80+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:22 GMT nnCoection: close Server: ECAcc (agb/52F3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 18518 Connection: close
2024-04-19 00:44:54 UTC	16383	IN	Data Raw: 76 61 72 20 6c 6f 63 61 74 69 6f 6e 47 50 53 3d 7b 7d 3b 76 61 72 20 64 74 46 61 63 69 6c 69 74 69 65 73 4c 69 73 74 3d 7b 7d 3b 76 61 72 20 6d 61 70 3b 76 61 72 20 76 69 65 77 3b 76 61 72 20 6c 6f 63 3b 76 61 72 20 69 73 4c 6f 63 61 74 69 6f 6e 53 65 6c 65 63 74 65 64 3b 76 61 72 20 6c 61 73 74 53 65 6c 65 63 74 65 64 4c 6f 63 61 74 69 6f 6e 3b 76 61 72 20 6c 61 73 74 45 78 70 61 6e 64 65 64 4c 6f 63 61 74 69 6f 6e 3b 76 61 72 20 69 73 49 45 3d 0a 2f 2a 40 63 63 5f 6f 6e 21 40 2a 2f 0a 66 61 6c 73 65 7c 7c 21 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3b 76 61 72 20 6c 6f 63 74 79 70 65 73 3d 7b 70 6f 3a 22 20 50 6f 73 74 20 4f 66 66 69 63 65 3c 73 75 70 3e e2 84 a2 3c 2f 73 75 70 3e 22 2c 62 75 79 73 74 61 6d 70 73 3a 22 20 4e 61 Data Ascii: var locationGPS={};var dtFacilitiesList={};var map;var view;var loc;var isLocationSelected;var lastSelectedLocation;var lastExpandedLocation;var isIE=/@cc_on!@/false\|\|!!document.documentMode;var loctypes={po:" Post Office<sup></sup>",buystamps:" Na
2024-04-19 00:44:54 UTC	2135	IN	Data Raw: 22 3b 69 66 28 64 2e 73 70 65 63 69 61 6c 4d 65 73 73 61 67 65 29 7b 62 3d 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 32 20 63 6f 6c 2d 73 6d 2d 31 32 20 63 6f 6c 2d 78 73 2d 31 32 22 3e 3c 70 20 63 6c 61 73 73 3d 22 61 64 64 72 65 73 73 20 73 70 65 63 69 61 6c 4d 65 73 73 61 67 65 22 3e 27 2b 64 2e 73 70 65 63 69 61 6c 4d 65 73 73 61 67 65 2b 22 3c 2f 70 3e 3c 2f 64 69 76 3e 22 7d 69 66 28 64 2e 6c 6f 63 61 74 69 6f 6e 53 65 72 76 69 63 65 48 6f 75 72 73 3d 3d 22 53 50 43 42 55 53 49 4e 45 53 53 22 29 7b 62 3d 22 3c 70 3e 4c 6f 63 61 74 69 6f 6e 20 48 61 73 20 53 70 65 63 69 61 6c 20 48 6f 75 72 73 3c 2f 70 3e 22 7d 76 61 72 20 65 3d 22 22 3b 69 66 28 64 2e 73 70 65 63 69 61 6c 4d 65 73 73 61 67 65 3d 3d 75 6e 64 65 66 69 6e 65 64 29 Data Ascii: ";if(d.specialMessage){b='<div class="col-md-12 col-sm-12 col-xs-12"><p class="address specialMessage">'+d.specialMessage+"</p></div>"}if(d.locationServiceHours=="SPCBUSINESS"){b="<p>Location Has Special Hours</p>"}var e="";if(d.specialMessage==undefined)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50325	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1361	OUT	GET /global-elements/footer/css/main-sb.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	399	IN	HTTP/1.1 200 OK Age: 34047 Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "225c-522270bf185c0+gzip+ident" Last-Modified: Thu, 15 Oct 2015 16:19:43 GMT Server: ECAcc (agb/52D3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 8796 Connection: close
2024-04-19 00:44:54 UTC	8796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 22 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 3b 73 72 63 3a 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 66 6f 6e 74 73 2f 35 35 66 36 30 34 31 39 2d 30 39 63 33 2d 34 32 62 64 2d 62 38 31 66 2d 31 39 38 33 66 66 30 39 33 38 35 32 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6f 74 22 29 2c 75 72 6c 28 22 68 Data Ascii: @font-face{font-family:"HelveticaNeueW02-65Medi";src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix");src:url("https://www.usps.com/assets/fonts/55f60419-09c3-42bd-b81f-1983ff093852.eot?#iefix") format("eot"),url("h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50326	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1363	OUT	GET /global-elements/footer/css/footer-sb.css HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	398	IN	HTTP/1.1 200 OK Age: 34047 Content-Type: text/css Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "c6d-5b371de5f09c0+gzip+ident" Last-Modified: Fri, 06 Nov 2020 15:28:47 GMT Server: ECAcc (agb/5353) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 3181 Connection: close
2024-04-19 00:44:54 UTC	3181	IN	Data Raw: 2e 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 32 30 70 78 20 33 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 35 30 6d 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 32 Data Ascii: .global-footer--wrap{-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;background-color:#f7f7f7;border-top:1px solid #dadada;left:0;padding:30px 20px 35px;position:relative;-moz-transition:left 250ms ease;-ms-transition:left 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50327	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1398	OUT	GET /media/polocator/list-icon.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	403	IN	HTTP/1.1 200 OK Age: 46519 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "67d-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/52DC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1661 Connection: close
2024-04-19 00:44:54 UTC	1661	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50328	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1397	OUT	GET /media/polocator/map-icon.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	404	IN	HTTP/1.1 200 OK Age: 45406 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "19b9-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/A40B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 6585 Connection: close
2024-04-19 00:44:54 UTC	6585	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 33 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 32 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="18px" height="23px" viewBox="0 0 18 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50329	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:54 UTC	1407	OUT	GET /media/votebymail/success-checkmark.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:54 UTC	402	IN	HTTP/1.1 200 OK Age: 49546 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:54 GMT Etag: "34a-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53F9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 842 Connection: close
2024-04-19 00:44:54 UTC	842	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50330	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1160	OUT	GET /media/zipcode-lookup/navigation-divider.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	406	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58544 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "fa7-6124db7575680" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT nnCoection: close Server: ECAcc (agb/5365) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 4007 Connection: close
2024-04-19 00:44:55 UTC	4007	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 32 08 06 00 00 00 6c f0 ea 07 00 00 0a 45 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 Data Ascii: PNGIHDR2lEiCCPICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`cbP-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50331	18.67.65.14	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	538	OUT	GET /4.11/dojo/nls/dojo_en-us.js HTTP/1.1 Host: js.arcgis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:55 UTC	792	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 8111 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: HEAD, GET Access-Control-Max-Age: 3000 Last-Modified: Wed, 21 Oct 2020 16:21:43 GMT x-amz-version-id: VQVP54TP88D7AE9vF0jZfd9KdBAse5L7 Server: AmazonS3 Date: Thu, 18 Apr 2024 20:40:40 GMT Cache-Control: max-age=86400 ETag: "499f729d37c977973d7264cc74d103b7" X-Cache: Hit from cloudfront Via: 1.1 3500e6db5ae43764ed5ca43fc6d56058.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: ikWJ4dUb2aO68JH5X82VYWLhRDp6bTw1_qavbjMNqypoarXUP_ge4A== Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: upgrade-insecure-requests Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-04-19 00:44:55 UTC	8111	IN	Data Raw: 2f 2f 3e 3e 62 75 69 6c 74 0a 64 65 66 69 6e 65 28 7b 22 65 73 72 69 2f 6e 6c 73 2f 63 6f 6d 6d 6f 6e 22 3a 7b 61 62 6f 75 74 3a 22 41 62 6f 75 74 22 2c 61 64 64 3a 22 41 64 64 22 2c 61 6c 6c 3a 22 41 6c 6c 22 2c 61 70 70 6c 79 3a 22 41 70 70 6c 79 22 2c 61 75 74 68 3a 7b 6c 6f 67 4f 75 74 3a 22 4c 6f 67 20 4f 75 74 22 2c 73 69 67 6e 49 6e 3a 22 53 69 67 6e 20 49 6e 22 7d 2c 62 61 63 6b 3a 22 42 61 63 6b 22 2c 63 61 6e 63 65 6c 3a 22 43 61 6e 63 65 6c 22 2c 63 68 61 6e 67 65 3a 22 43 68 61 6e 67 65 22 2c 63 6c 65 61 72 3a 22 43 6c 65 61 72 22 2c 63 6c 6f 73 65 3a 22 43 6c 6f 73 65 22 2c 63 6f 6c 6c 61 70 73 65 3a 22 43 6f 6c 6c 61 70 73 65 22 2c 63 6f 6e 66 69 67 75 72 65 3a 22 43 6f 6e 66 69 67 75 72 65 22 2c 63 6f 6e 74 72 6f 6c 3a 7b 70 61 75 73 65 3a Data Ascii: //>>builtdefine({"esri/nls/common":{about:"About",add:"Add",all:"All",apply:"Apply",auth:{logOut:"Log Out",signIn:"Sign In"},back:"Back",cancel:"Cancel",change:"Change",clear:"Clear",close:"Close",collapse:"Collapse",configure:"Configure",control:{pause:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50332	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	589	OUT	GET /assets/fonts/db5f9ba6-05a4-433a-9461-0a6f257a0c3a.ttf HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://tools.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:55 UTC	1270	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://tools.usps.com Access-Control-Max-Age: 86400 Age: 59011 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/ttf Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "195e0-504fd434e5f80" Last-Modified: Thu, 09 Oct 2014 13:18:06 GMT Server: ECAcc (agb/A412) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 103904 Connection: close
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 4f 53 2f 32 86 18 2d d5 00 00 00 fc 00 00 00 60 63 6d 61 70 fd 38 91 b6 00 00 01 5c 00 00 01 74 63 76 74 20 03 0f 0e ae 00 00 02 d0 00 00 00 40 66 70 67 6d 00 be 8d ba 00 00 03 10 00 00 02 d5 67 61 73 70 00 12 00 09 00 00 05 e8 00 00 00 10 67 6c 79 66 12 7b 34 d4 00 00 05 f8 00 01 49 68 68 65 61 64 e9 5c 32 97 00 01 4f 60 00 00 00 36 68 68 65 61 07 6f 04 83 00 01 4f 98 00 00 00 24 68 6d 74 78 49 94 2d db 00 01 4f bc 00 00 06 18 6b 65 72 6e 1c cf 17 ab 00 01 55 d4 00 00 1d 4c 6c 6f 63 61 01 20 7f b0 00 01 73 20 00 00 06 1c 6d 61 78 70 03 a8 04 c7 00 01 79 3c 00 00 00 20 6e 61 6d 65 1a 1d 6a 2d 00 01 79 5c 00 00 1b 72 70 6f 73 74 ff b8 00 32 00 01 94 d0 00 00 00 20 70 72 65 70 c3 0c c7 d2 00 01 94 f0 00 00 00 ee 00 03 02 Data Ascii: pOS/2-`cmap8\tcvt @fpgmgaspglyf{4Ihhead\2O`6hheaoO$hmtxI-OkernULloca s maxpy< namej-y\rpost2 prep
2024-04-19 00:44:55 UTC	1	IN	Data Raw: 07 Data Ascii:
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 01 5d 41 03 00 29 00 07 00 01 5d 41 03 00 cf 00 0a 00 01 5d 41 03 00 cf 00 0b 00 01 5d 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 1d 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 1d 3e 59 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 0d 3e 59 b8 00 00 45 58 b8 00 0a 2f 1b b9 00 0a 00 0d 3e 59 41 05 00 10 00 02 00 20 00 02 00 02 5d 41 03 00 80 00 02 00 01 5d 41 03 00 60 00 02 00 01 5d 41 03 00 70 00 03 00 01 5d 41 07 00 0f 00 08 00 1f 00 08 00 2f 00 08 00 03 5d 41 07 00 6f 00 08 00 7f 00 08 00 8f 00 08 00 03 5d 30 31 01 41 05 00 86 00 01 00 96 00 01 00 02 5d 41 03 00 c6 00 01 00 01 5d 41 05 00 8b 00 07 00 9b 00 07 00 02 5d 00 41 03 00 30 00 02 00 01 5d 41 03 00 90 00 02 00 01 5d 41 07 00 d0 00 02 00 e0 00 02 00 f0 00 02 00 03 5d 41 03 00 a2 00 02 00 01 Data Ascii: ]A)]A]A]EX/>YEX/>YEX/>YEX/>YA ]A]A`]Ap]A/]Ao]01A]A]A]A0]A]A]A
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 03 23 03 23 03 33 13 33 13 33 13 33 13 33 02 85 92 5c 02 58 93 a4 96 5f 02 56 8a 58 02 5f 92 01 5b fe a5 02 05 fe a1 01 5f fe a2 01 5e 00 01 00 00 00 00 02 19 02 05 00 0b 01 e2 b0 09 1c 49 94 2d db fd 38 91 b6 bb 00 02 00 07 00 01 00 04 2b bb 00 05 00 07 00 04 00 04 2b bb 00 0a 00 07 00 0b 00 04 2b bb 00 07 00 07 00 08 00 04 2b 41 03 00 68 00 00 00 01 5d 41 03 00 72 00 01 00 01 5d 41 05 00 80 00 01 00 90 00 01 00 02 5d 41 03 00 85 00 02 00 01 5d 41 03 00 68 00 02 00 01 5d 41 03 00 20 00 02 00 01 5d 41 03 00 90 00 02 00 01 5d 41 03 00 67 00 04 00 01 5d 41 03 00 2f 00 04 00 01 5d 41 03 00 75 00 04 00 01 5d 41 03 00 84 00 04 00 01 5d 41 03 00 2f 00 05 00 01 5d 41 03 00 67 00 06 00 01 5d 41 03 00 b0 00 07 00 01 5d 41 03 00 80 00 07 00 01 5d 41 05 00 65 00 08 Data Ascii: ##33333\X_VX_[_^I-8++++Ah]Ar]A]A]Ah]A ]A]Ag]A/]Au]A]A/]Ag]A]A]Ae
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 17 00 32 00 24 11 12 39 30 31 25 1e 01 33 32 3e 02 35 34 26 2f 01 2e 01 23 22 0e 02 15 14 16 17 07 2e 01 35 34 3e 02 33 32 16 17 37 17 07 1e 01 15 14 0e 02 23 22 26 27 07 27 01 05 17 3f 2a 35 4a 2e 15 0d 0e 25 17 40 2b 35 4a 2e 15 0d 0f 67 29 29 30 5a 82 53 45 71 2b 50 32 54 27 29 30 5a 82 53 45 70 2a 53 31 a4 17 1a 29 44 55 2d 24 45 1f 3a 17 1c 29 45 58 2f 23 45 1f 72 32 7f 48 4f 8a 66 3a 28 25 59 2c 5d 32 80 4a 4d 88 64 3a 29 23 5c 2b 00 00 00 ff ff 00 42 ff ef 02 a3 03 99 02 26 00 38 00 00 01 07 00 43 00 dd 00 be 00 0c 00 41 03 00 3f 00 17 00 01 5d 30 31 00 00 ff ff 00 42 ff ef 02 a3 03 99 02 26 00 38 00 00 01 07 00 76 01 05 00 be 00 0c 00 41 03 00 3f 00 14 00 01 5d 30 31 00 00 ff ff 00 42 ff ef 02 a3 03 99 02 26 00 38 00 00 01 07 01 41 00 f3 00 be 00 Data Ascii: 2$901%32>54&/.#".54>327#"&''?5J.%@+5J.g))0ZSEq+P2T')0ZSEpS1)DU-$E:)EX/#Er2HOf:(%Y,]2JMd:)#\+B&8CA?]01B&8vA?]01B&8A
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 9d 00 00 00 0b 41 03 00 3f 00 08 00 01 5d 30 31 00 00 00 ff ff 00 06 ff 27 01 52 02 a0 02 26 00 57 00 00 00 06 01 75 41 00 00 00 ff ff 00 0d 00 00 02 56 03 99 02 26 00 37 00 00 01 07 01 42 00 af 00 be 00 0c 00 41 03 00 3f 00 08 00 01 5d 30 31 00 00 ff ff 00 06 ff fa 01 fe 02 ca 00 27 01 77 00 f2 00 00 00 06 00 57 00 00 00 01 00 0d 00 00 02 56 02 ca 00 0f 00 70 b0 09 1c 49 94 2d db fd 38 91 b6 bb 00 07 00 08 00 02 00 04 2b b8 00 07 10 b8 00 0b d0 b8 00 02 10 b8 00 0e d0 00 b8 00 00 45 58 b8 00 05 2f 1b b9 00 05 00 1d 3e 59 b8 00 00 45 58 b8 00 0c 2f 1b b9 00 0c 00 0d 3e 59 bb 00 0f 00 03 00 00 00 04 2b b8 00 05 10 b9 00 06 00 02 fc b8 00 03 d0 b8 00 00 10 b8 00 09 d0 b9 00 0a 00 03 fc 30 31 13 33 35 23 35 21 15 23 15 33 15 23 11 23 11 23 48 9b d6 02 49 d6 Data Ascii: A?]01'R&WuAV&7BA?]01'wWVpI-8+EX/>YEX/>Y+0135#5!#3###HI
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 02 5d 41 03 00 4f 00 30 00 01 5d 41 05 00 af 00 35 00 bf 00 35 00 02 5d 41 05 00 ef 00 35 00 ff 00 35 00 02 5d 30 31 01 0e 01 07 06 23 22 2e 02 23 22 06 07 23 3e 03 33 32 1e 02 33 32 36 37 33 07 0e 03 23 22 2e 02 23 22 06 07 23 3e 03 33 32 1e 02 33 32 36 37 33 02 3c 05 28 33 1f 21 1c 40 42 3e 1b 1a 1d 03 55 03 15 27 3c 2a 1e 3d 3c 3c 1e 1b 1c 03 56 01 03 13 25 39 28 1d 42 44 3f 19 1a 1c 04 55 02 14 26 39 27 1d 3f 41 40 1e 1a 1b 04 56 01 da 37 5b 1b 11 14 17 14 26 17 26 43 33 1d 12 15 11 22 19 e2 23 44 37 22 14 18 14 26 17 21 44 37 22 13 17 13 25 17 00 00 00 01 00 1e ff b8 02 33 02 5c 00 13 01 18 b0 09 1c 49 94 2d db fd 38 91 b6 bb 00 0d 00 07 00 0a 00 04 2b bb 00 11 00 07 00 06 00 04 2b bb 00 00 00 07 00 03 00 04 2b 00 bb 00 0f 00 02 00 0e 00 04 2b bb Data Ascii: ]AO0]A55]A55]01#".#"#>3232673#".#"#>3232673<(3!@B>U'<*=<<V%9(BD?U&9'?A@V7[&&C3"#D7"&!D7"%3\I-8++++
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 74 65 64 20 62 Data Ascii: ted b
2024-04-19 00:44:55 UTC	5600	IN	Data Raw: 79 20 6f 6e 65 20 6f 66 20 4c 69 6e 6f 74 79 70 65 27 73 20 6c 69 63 65 6e 73 65 65 73 2e 0d 0a 0d 0a 54 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 69 73 20 61 20 76 61 6c 75 61 62 6c 65 20 61 73 73 65 74 20 6f 66 20 4c 69 6e 6f 74 79 70 65 20 47 6d 62 48 2e 20 55 6e 6c 65 73 73 20 79 6f 75 20 68 61 76 65 20 65 6e 74 65 72 65 64 20 69 6e 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 6c 69 63 65 6e 73 65 20 61 67 72 65 65 6d 65 6e 74 20 67 72 61 6e 74 69 6e 67 20 79 6f 75 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 69 67 68 74 73 2c 20 79 6f 75 72 20 75 73 65 20 6f 66 20 74 68 69 73 20 66 6f 6e 74 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 6d 69 74 65 64 20 74 6f 20 79 6f 75 72 20 77 6f 72 6b 73 74 61 74 69 6f 6e 20 66 6f 72 20 79 6f 75 72 20 6f 77 6e Data Ascii: y one of Linotype's licensees.This font software is a valuable asset of Linotype GmbH. Unless you have entered into a specific license agreement granting you additional rights, your use of this font software is limited to your workstation for your own

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50333	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	589	OUT	GET /assets/fonts/1d238354-d156-4dde-89ea-4770ef04b9f9.ttf HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://tools.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:55 UTC	1270	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://tools.usps.com Access-Control-Max-Age: 86400 Age: 59012 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/ttf Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "2040c-504fd43021440" Last-Modified: Thu, 09 Oct 2014 13:18:01 GMT Server: ECAcc (agb/52F1) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 132108 Connection: close
2024-04-19 00:44:55 UTC	15132	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 4f 53 2f 32 86 12 2b a8 00 00 00 fc 00 00 00 60 63 6d 61 70 fd 38 91 b6 00 00 01 5c 00 00 01 74 63 76 74 20 03 43 0e fb 00 00 02 d0 00 00 00 48 66 70 67 6d 00 be 8d ba 00 00 03 18 00 00 02 d5 67 61 73 70 00 19 00 09 00 00 05 f0 00 00 00 10 67 6c 79 66 7d 95 00 6e 00 00 06 00 00 01 b7 c8 68 65 61 64 e9 5a 31 79 00 01 bd c8 00 00 00 36 68 68 65 61 07 5e 04 87 00 01 be 00 00 00 00 24 68 6d 74 78 20 00 38 11 00 01 be 24 00 00 06 18 6b 65 72 6e 08 f7 06 d0 00 01 c4 3c 00 00 1c c2 6c 6f 63 61 01 8d 1d f8 00 01 e1 00 00 00 06 1c 6d 61 78 70 03 a8 06 d0 00 01 e7 1c 00 00 00 20 6e 61 6d 65 7c 68 4e 18 00 01 e7 3c 00 00 1b 7e 70 6f 73 74 ff b8 00 32 00 02 02 bc 00 00 00 20 70 72 65 70 49 8c ed 87 00 02 02 dc 00 00 01 2e 00 03 02 Data Ascii: pOS/2+`cmap8\tcvt CHfpgmgaspglyf}nheadZ1y6hhea^$hmtx 8$kern<locamaxp name\|hN<~post2 prepI.
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 30 28 21 1e 1e 23 2b 1c 37 3e 1a 2c 3d 22 00 00 00 02 00 2a ff ef 02 f1 02 db 00 4f 00 61 04 c3 b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 15 00 0d 00 2a 00 04 2b bb 00 55 00 10 00 45 00 04 2b bb 00 34 00 0d 00 0b 00 04 2b bb 00 00 00 10 00 5b 00 04 2b 41 03 00 a2 00 00 00 01 71 41 03 00 34 00 00 00 01 5d 41 03 00 b5 00 00 00 01 71 41 03 00 d5 00 00 00 01 71 41 03 00 15 00 00 00 01 72 41 03 00 75 00 00 00 01 72 41 03 00 f5 00 00 00 01 71 41 05 00 75 00 00 00 85 00 00 00 02 5d 41 03 00 65 00 00 00 01 71 41 03 00 94 00 00 00 01 5d 41 03 00 10 00 00 00 01 5d 41 03 00 c0 00 00 00 01 5d 41 05 00 8a 00 0b 00 9a 00 0b 00 02 5d 41 11 00 09 00 0b 00 19 00 0b 00 29 00 0b 00 39 00 0b 00 49 00 0b 00 59 00 0b 00 69 00 0b 00 79 00 0b 00 08 5d 41 03 00 c4 00 0b 00 01 5d 41 Data Ascii: 0(!#+7>,="Oa 88+UE+4+[+AqA4]AqAqArAurAqAu]AeqA]A]A]A]A)9IYiy]A]A
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 07 00 5a b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 02 00 09 00 05 00 04 2b b8 00 05 10 b8 00 04 dc b8 00 00 d0 00 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 21 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 13 3e 59 b8 00 06 10 b9 00 00 00 01 fc b8 00 04 10 b9 00 02 00 01 fc 30 31 01 23 11 33 15 23 11 33 01 03 6b 6b bb bb 02 97 fc e7 44 03 a1 00 00 00 00 01 ff ee ff ef 01 5f 02 db 00 03 00 83 b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 03 00 09 00 02 00 04 2b bb 00 00 00 09 00 01 00 04 2b 41 03 00 43 00 00 00 01 5d 41 03 00 12 00 00 00 01 5d 41 03 00 71 00 00 00 01 5d 41 03 00 08 00 01 00 01 5d 41 03 00 43 00 01 00 01 5d 41 03 00 97 00 03 00 01 5d 41 03 00 36 00 03 00 01 5d 00 b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 21 3e 59 b8 00 00 45 58 b8 00 00 2f 1b b9 00 Data Ascii: Z 88+EX/!>YEX/>Y01#3#3kkD_ 88++AC]A]Aq]A]AC]A]A6]EX/!>YEX/
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 35 21 15 01 21 15 21 16 01 38 fe dc 01 92 fe c4 01 4a fe 4c 41 01 79 4b 3a fe 80 4b 00 00 00 01 00 30 ff 3a 01 35 02 db 00 31 00 7c b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 13 00 09 00 20 00 04 2b b8 00 20 10 b8 00 19 dc b8 00 00 d0 b8 00 13 10 b8 00 06 d0 b8 00 20 10 b8 00 2a d0 00 b8 00 24 2f b8 00 25 2f b8 00 00 45 58 b8 00 30 2f 1b b9 00 30 00 21 3e 59 b8 00 00 45 58 b8 00 1a 2f 1b b9 00 1a 00 13 3e 59 b8 00 30 10 b9 00 00 00 01 fc ba 00 0d 00 1a 00 30 11 12 39 b8 00 1a 10 b9 00 18 00 01 fc 30 31 01 23 22 0e 02 1d 01 14 0e 02 07 15 1e 03 1d 01 14 1e 02 3b 01 15 23 22 2e 02 3d 01 34 26 23 35 32 3e 02 3d 01 34 3e 02 3b 01 01 35 32 0f 12 0b 04 15 1c 1d 09 09 1d 1c 15 04 0b 12 0f 32 46 13 26 1f 14 33 20 10 1e 17 0e 14 1f 26 13 46 02 9f 0f 18 1f 10 b7 23 31 Data Ascii: 5!!!8JLAyK:K0:51\| 88 + *$/%/EX0/0!>YEX/>Y00901#";#".=4&#52>=4>;522F&3 &F#1
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 01 00 1f 00 01 00 02 5d 41 03 00 9f 00 01 00 01 5d ba 00 18 00 01 00 00 11 12 39 b8 00 18 2f b9 00 1b 00 09 fc 41 05 00 25 00 1e 00 35 00 1e 00 02 5d 41 03 00 94 00 1f 00 01 5d 41 11 00 06 00 24 00 16 00 24 00 26 00 24 00 36 00 24 00 46 00 24 00 56 00 24 00 66 00 24 00 76 00 24 00 08 5d 41 05 00 85 00 24 00 95 00 24 00 02 5d 41 03 00 5a 00 29 00 01 5d b8 00 04 10 b8 00 2e dc 00 b8 00 19 2f b8 00 04 2f b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 1d 3e 59 b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 13 3e 59 b8 00 02 10 b9 00 00 00 01 fc b8 00 09 10 b9 00 27 00 01 fc 41 11 00 07 00 27 00 17 00 27 00 27 00 27 00 37 00 27 00 47 00 27 00 57 00 27 00 67 00 27 00 77 00 27 00 08 5d 41 05 00 86 00 27 00 96 00 27 00 02 5d 30 31 01 41 05 00 6b 00 29 00 7b 00 29 00 02 5d Data Ascii: ]A]9/A%5]A]A$$&$6$F$V$f$v$]A$$]AZ)].//EX/>YEX/>Y'A''''7'G'W'g'w']A'']01Ak){)]
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 01 07 01 7d 00 93 00 00 00 0c 00 41 03 00 30 00 44 00 01 5d 30 31 00 00 ff ff 00 4e 00 00 02 84 03 9a 02 26 00 2b 00 00 00 07 01 41 00 f8 00 be ff ff 00 40 00 00 01 ec 03 9a 02 26 00 4b 00 00 00 07 01 41 00 a7 00 be 00 02 00 4e 00 00 02 84 02 ca 00 0b 00 0f 00 eb b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 01 00 09 00 00 00 04 2b bb 00 05 00 09 00 04 00 04 2b 41 03 00 af 00 00 00 01 5d 41 03 00 af 00 01 00 01 5d 41 03 00 c0 00 04 00 01 5d 41 03 00 c0 00 05 00 01 5d b8 00 04 10 b8 00 0d d0 b8 00 08 d0 b8 00 01 10 b8 00 0e d0 b8 00 09 d0 00 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 1f 3e 59 b8 00 00 45 58 b8 00 01 2f 1b b9 00 01 00 1f 3e 59 b8 00 00 45 58 b8 00 0a 2f 1b b9 00 0a 00 11 3e 59 b8 00 00 45 58 b8 00 07 2f 1b b9 00 07 00 11 3e 59 bb 00 0e 00 03 00 02 Data Ascii: }A0D]01N&+A@&KAN 88++A]A]A]A]EX/>YEX/>YEX/>YEX/>Y
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 64 00 03 00 74 00 03 00 84 00 03 00 94 00 03 00 04 71 41 05 00 c5 00 03 00 d5 00 03 00 02 5d 41 05 00 39 00 03 00 49 00 03 00 02 72 41 03 00 f9 00 03 00 01 72 41 03 00 5a 00 03 00 01 72 41 03 00 a0 00 04 00 01 5d 41 05 00 90 00 05 00 a0 00 05 00 02 5d 41 03 00 74 00 06 00 01 71 41 09 00 64 00 07 00 74 00 07 00 84 00 07 00 94 00 07 00 04 71 41 05 00 c5 00 07 00 d5 00 07 00 02 5d 41 05 00 39 00 07 00 49 00 07 00 02 72 41 03 00 f9 00 07 00 01 72 41 03 00 5a 00 07 00 01 72 13 33 07 23 27 33 07 23 bd 69 78 42 4b 69 78 42 02 dc 8f 8f 8f 00 00 00 02 00 0d 00 00 02 96 02 c8 00 02 00 06 01 9b b0 09 1c 20 00 38 11 fd 38 91 b6 bb 00 06 00 0b 00 02 00 04 2b bb 00 01 00 0b 00 03 00 04 2b 41 03 00 ab 00 01 00 01 5d 41 03 00 56 00 01 00 01 5d 00 b8 00 00 45 58 b8 00 04 Data Ascii: dtqA]A9IrArAZrA]A]AtqAdtqA]A9IrArAZr3#'3#ixBKixB 88++A]AV]EX
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: b0 09 1c 20 00 38 11 fd 38 91 b6 b8 00 0a 2b 00 b8 00 00 2f b8 00 02 2f 30 31 03 33 17 23 17 6d 56 40 03 9a 8f 00 00 02 ff d0 03 0b 01 26 03 9a 00 03 00 07 00 2a b0 09 1c 20 00 38 11 fd 38 91 b6 b8 00 0a 2b 00 ba 00 00 00 02 00 0d 2b b8 00 00 10 b8 00 04 d0 b8 00 02 10 b8 00 06 d0 30 31 13 33 07 23 27 33 07 23 bd 69 78 42 4b 69 78 42 03 9a 8f 8f 8f 00 00 01 ff c5 03 31 01 1a 03 68 00 03 00 1a b0 09 1c 20 00 38 11 fd 38 91 b6 b8 00 0a 2b 00 ba 00 01 00 02 00 0d 2b 30 31 03 21 15 21 3b 01 55 fe ab 03 68 37 00 02 ff fe 02 ed 00 e0 03 cd 00 13 00 1f 01 03 b0 09 1c 20 00 38 11 fd 38 91 b6 b8 00 20 2f b8 00 21 2f b8 00 20 10 b8 00 00 d0 b8 00 00 2f b8 00 21 10 b8 00 0a dc b8 00 00 10 b9 00 14 00 0e fc 41 21 00 06 00 14 00 16 00 14 00 26 00 14 00 36 00 14 00 46 Data Ascii: 88+//013#mV@&* 88++013#'3#ixBKixB1h 88++01!!;Uh7 88 /!/ /!A!&6F
2024-04-19 00:44:55 UTC	2295	IN	Data Raw: 45 00 45 00 4d 00 45 00 4e 00 54 00 0d 00 0a 00 0d 00 0a 00 59 00 6f 00 75 00 20 00 68 00 61 00 76 00 65 00 20 00 6f 00 62 00 74 00 61 00 69 00 6e 00 65 00 64 00 20 00 74 00 68 00 69 00 73 00 20 00 66 00 6f 00 6e 00 74 00 20 00 73 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 65 00 69 00 74 00 68 00 65 00 72 00 20 00 64 00 69 00 72 00 65 00 63 00 74 00 6c 00 79 00 20 00 66 00 72 00 6f 00 6d 00 20 00 4c 00 69 00 6e 00 6f 00 74 00 79 00 70 00 65 00 20 00 47 00 6d 00 62 00 48 00 20 00 6f 00 72 00 20 00 74 00 6f 00 67 00 65 00 74 00 68 00 65 00 72 00 20 00 77 00 69 00 74 00 68 00 20 00 73 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 64 00 69 00 73 00 74 00 72 00 69 00 62 00 75 00 74 00 65 00 64 00 20 00 62 00 79 00 20 00 6f 00 6e 00 65 00 20 00 6f Data Ascii: EEMENTYou have obtained this font software either directly from Linotype GmbH or together with software distributed by one o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50338	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	797	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:44:55 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:55 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2827 Expires: Fri, 19 Apr 2024 00:49:55 GMT Server: cloudflare CF-RAY: 8768de6eceb844d7-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50334	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1348	OUT	GET /global-elements/header/POLOCATOR-header.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	363	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "8d5b-600045a0dffc0" Last-Modified: Sun, 09 Jul 2023 02:09:11 GMT Server: ECAcc (dce/26B6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 36187 Connection: close
2024-04-19 00:44:55 UTC	16039	IN	Data Raw: 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 63 73 73 2f 6d 65 67 61 6d 65 6e 75 2d 76 34 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 7d 0d 0a 20 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0d 0a 20 20 0d 0a 2f 2a 20 61 6c 65 72 74 20 73 74 79 6c 65 73 20 73 74 61 72 74 20 2a 2f 0d 0a 2f 2a 20 20 20 20 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 38 70 78 29 7b 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 Data Ascii: <link href="/global-elements/header/css/megamenu-v4.css" type="text/css" rel="stylesheet"> <style> body{min-width:0!important;overflow-x:hidden;} a{text-decoration:none;} /* alert styles start // @media (min-width: 958px){.global--navi
2024-04-19 00:44:55 UTC	7814	IN	Data Raw: 44 65 6c 69 76 65 72 79 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 66 6f 72 77 61 72 64 2e 68 74 6d 22 3e 46 6f 72 77 61 72 64 69 6e 67 20 4d 61 69 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 70 61 63 6b 61 67 65 2d 69 6e 74 65 72 63 65 70 74 2e 68 74 6d 22 3e 52 65 64 69 72 65 63 74 Data Ascii: Delivery</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/forward.htm">Forwarding Mail</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/package-intercept.htm">Redirect
2024-04-19 00:44:55 UTC	7951	IN	Data Raw: 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 62 75 73 69 6e 65 73 73 2f 63 6f 6e 6e 65 63 74 2f 6c 6f 63 61 6c 2e 68 74 6d 22 3e 4c 6f 63 61 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 62 75 73 69 6e 65 73 73 2f 70 6f 73 74 61 67 65 2d 6f 70 74 69 6f 6e 73 2e 68 74 6d 22 3e 50 6f 73 74 61 67 65 20 4f 70 74 69 6f 6e 73 3c Data Ascii: role="menuitem" tabindex="-1" href="https://www.usps.com/business/connect/local.htm">Local</a></li> </ul> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/business/postage-options.htm">Postage Options<
2024-04-19 00:44:55 UTC	4383	IN	Data Raw: 73 3d 22 6e 61 76 2d 73 65 61 72 63 68 20 6d 65 6e 75 68 65 61 64 65 72 22 3e 0d 0a 09 20 20 09 3c 61 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 6e 61 6d 65 3d 22 6e 61 76 73 65 61 72 63 68 22 20 69 64 3d 22 6e 61 76 73 65 61 72 63 68 22 20 68 72 65 66 3d 22 23 65 6e 64 6e 61 76 22 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 2d 73 6b 69 70 22 3e 53 6b 69 70 20 53 65 61 72 63 68 3c 2f 61 3e 0d 0a 09 09 3c 61 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 61 72 69 61 2d 68 61 73 70 6f 70 75 70 3d 22 74 72 75 65 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 68 72 65 66 3d 22 23 22 3e 53 65 61 72 63 68 20 55 53 50 53 2e 63 6f 6d 3c 2f 61 3e Data Ascii: s="nav-search menuheader"> <a tabindex="-1" name="navsearch" id="navsearch" href="#endnav" class="hidden-skip">Skip Search</a><a aria-expanded="false" class="menuitem" tabindex="0" aria-haspopup="true" role="menuitem" href="#">Search USPS.com</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50335	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1473	OUT	GET /UspsToolsRestServices/rest/security/ipAddress HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json;charset=utf-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	651	IN	HTTP/1.1 200 OK ADRUM_0: g:29f4a368-78c8-488b-8eff-82395836e905 ADRUM_1: n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a ADRUM_2: i:132169 ADRUM_3: e:0 Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:55 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26D3) Set-Cookie: JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:55 UTC	4	IN	Data Raw: 32 32 0d 0a Data Ascii: 22
2024-04-19 00:44:55 UTC	34	IN	Data Raw: 7b 22 43 6c 69 65 6e 74 49 50 41 64 64 72 65 73 73 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 7d Data Ascii: {"ClientIPAddress":"81.181.57.52"}
2024-04-19 00:44:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50337	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1482	OUT	GET /UspsToolsRestServices/rest/POLocator/getOnlineServices HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json;charset=utf-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	651	IN	HTTP/1.1 200 OK ADRUM_0: g:0ce16e37-d203-47b5-b87e-b80410da3784 ADRUM_1: n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a ADRUM_2: i:132208 ADRUM_3: e:1 Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:55 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/2686) Set-Cookie: JSESSIONID=0000ymimRkF9maI9EBhEMDDkjzu:1bbcn1vof; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 31 64 39 0d 0a Data Ascii: 1d9
2024-04-19 00:44:55 UTC	473	IN	Data Raw: 7b 22 50 46 53 52 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 66 6f 72 77 61 72 64 2e 68 74 6d 22 2c 22 53 41 50 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 73 63 68 65 64 75 6c 65 2d 70 69 63 6b 75 70 2d 73 74 65 70 73 2e 68 74 6d 22 2c 22 52 45 44 45 4c 49 56 45 52 59 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 65 6c 69 76 65 72 79 2e 75 73 70 73 2e 63 6f 6d 2f 72 65 64 65 6c 69 76 65 72 79 2f 22 2c 22 43 4e 53 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6e 73 2e 75 73 70 73 2e 63 6f 6d 22 2c 22 4d 45 44 49 41 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 75 73 70 73 2e 63 6f 6d 2f 6e 65 77 73 72 6f 6f 6d 2f 6e 61 74 69 6f 6e 61 6c 2d 72 65 6c 65 61 73 65 73 2f 77 65 6c 63 6f Data Ascii: {"PFSR":"https://www.usps.com/manage/forward.htm","SAP":"https://tools.usps.com/schedule-pickup-steps.htm","REDELIVERY":"https://redelivery.usps.com/redelivery/","CNS":"https://cns.usps.com","MEDIA":"https://about.usps.com/newsroom/national-releases/welco
2024-04-19 00:44:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50336	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1476	OUT	GET /UspsToolsRestServices/rest/POLocator/getfaqlinks HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json;charset=utf-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	651	IN	HTTP/1.1 200 OK ADRUM_0: g:921ea5ff-2162-4fbd-a82e-bb82387aa71a ADRUM_1: n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a ADRUM_2: i:132201 ADRUM_3: e:0 Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:55 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26E4) Set-Cookie: JSESSIONID=0000NuX66tv6eE2F95VIANDi1yc:1bbcn1u8c; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:55 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2024-04-19 00:44:55 UTC	60	IN	Data Raw: 7b 22 46 41 51 22 3a 22 68 74 74 70 73 3a 2f 2f 66 61 71 2e 75 73 70 73 2e 63 6f 6d 2f 73 2f 61 72 74 69 63 6c 65 2f 46 69 6e 64 2d 55 53 50 53 2d 4c 6f 63 61 74 69 6f 6e 73 22 7d Data Ascii: {"FAQ":"https://faq.usps.com/s/article/Find-USPS-Locations"}
2024-04-19 00:44:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50339	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1481	OUT	GET /UspsToolsRestServices/rest/POLocator/getglossarylinks HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json;charset=utf-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	665	IN	HTTP/1.1 200 OK ADRUM_0: g:11fdb458-dbd0-4578-a8ff-ce972cd7acbe ADRUM_1: n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a ADRUM_2: i:139192 ADRUM_3: e:0 ADRUM_4: s:f Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:55 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26A1) Set-Cookie: JSESSIONID=0000RsW73Jb2FnIXKzGw7ETgplq:1bbcn1rqj; Path=/; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:55 UTC	4	IN	Data Raw: 33 34 0d 0a Data Ascii: 34
2024-04-19 00:44:55 UTC	52	IN	Data Raw: 7b 22 47 4c 4f 53 53 41 52 59 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 2f 6c 6f 63 61 74 6f 72 2f 67 6c 6f 73 73 61 72 79 2e 68 74 6d 22 7d Data Ascii: {"GLOSSARY":"https://usps.com/locator/glossary.htm"}
2024-04-19 00:44:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50340	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	1437	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/global-elements/footer/css/footer-sb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487482.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; _ga=GA1.1.1989466777.1713487459; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3
2024-04-19 00:44:55 UTC	407	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58197 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT nnCoection: close Server: ECAcc (agb/5393) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 5390 Connection: close
2024-04-19 00:44:55 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50342	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	589	OUT	GET /assets/fonts/4a3ef5d8-cfd9-4b96-bd67-90215512f1e5.ttf HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://tools.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:55 UTC	1270	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Credentials: false Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,POST Access-Control-Allow-Origin: https://tools.usps.com Access-Control-Max-Age: 86400 Age: 58365 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: font/ttf Date: Fri, 19 Apr 2024 00:44:55 GMT Etag: "1c518-504fd43115680" Last-Modified: Thu, 09 Oct 2014 13:18:02 GMT Server: ECAcc (agb/52F6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 115992 Connection: close
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 01 00 00 00 0f 00 80 00 03 00 70 4f 53 2f 32 86 1a 2b a3 00 00 00 fc 00 00 00 60 63 6d 61 70 fd 38 91 b6 00 00 01 5c 00 00 01 74 63 76 74 20 04 6b 0d 63 00 00 02 d0 00 00 00 48 66 70 67 6d 00 be 8d ba 00 00 03 18 00 00 02 d5 67 61 73 70 00 16 00 09 00 00 05 f0 00 00 00 10 67 6c 79 66 d2 5a ae 68 00 00 06 00 00 01 77 f4 68 65 61 64 e9 23 09 93 00 01 7d f4 00 00 00 36 68 68 65 61 07 45 04 7f 00 01 7e 2c 00 00 00 24 68 6d 74 78 32 dd 34 05 00 01 7e 50 00 00 06 18 6b 65 72 6e 16 44 17 a8 00 01 84 68 00 00 1d 58 6c 6f 63 61 01 55 38 ec 00 01 a1 c0 00 00 06 1c 6d 61 78 70 03 a8 06 4c 00 01 a7 dc 00 00 00 20 6e 61 6d 65 f0 b5 6a 05 00 01 a7 fc 00 00 1b 8a 70 6f 73 74 ff b8 00 32 00 01 c3 88 00 00 00 20 70 72 65 70 55 fb c9 9a 00 01 c3 a8 00 00 01 6e 00 03 02 Data Ascii: pOS/2+`cmap8\tcvt kcHfpgmgaspglyfZhwhead#}6hheaE~,$hmtx24~PkernDhXlocaU8maxpL namejpost2 prepUn
2024-04-19 00:44:55 UTC	1	IN	Data Raw: 04 Data Ascii:
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 2b 41 03 00 7f 00 00 00 01 5d 41 03 00 9f 00 00 00 01 5d 41 03 00 7f 00 01 00 01 5d 41 03 00 9f 00 01 00 01 5d 41 03 00 ef 00 04 00 01 5d 41 03 00 30 00 04 00 01 5d 41 03 00 ef 00 05 00 01 5d 41 03 00 30 00 05 00 01 5d b8 00 04 10 b8 00 07 d0 b8 00 01 10 b8 00 09 d0 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 21 3e 59 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 21 3e 59 b8 00 00 45 58 b8 00 06 2f 1b b9 00 06 00 15 3e 59 b8 00 00 45 58 b8 00 0a 2f 1b b9 00 0a 00 15 3e 59 bb 00 03 00 01 00 08 00 04 2b 30 31 13 33 11 21 11 33 11 23 11 21 11 23 49 7d 01 45 7d 7d fe bb 7d 02 ca fe e4 01 1c fd 36 01 42 fe be 00 00 01 00 4c 00 00 00 c9 02 ca 00 03 00 3a b0 09 1c 32 dd 34 05 fd 38 91 b6 bb 00 01 00 0b 00 00 00 04 2b 00 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 21 Data Ascii: +A]A]A]A]A]A0]A]A0]EX/!>YEX/!>YEX/>YEX/>Y+013!3#!#I}E}}}6BL:248+EX/!
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 41 03 00 ff 00 02 00 01 5d 41 03 00 ff 00 03 00 01 5d 13 33 15 23 15 33 11 23 3f 72 72 72 72 02 ca 6c 59 fd fb 00 02 ff ea ff 33 00 b1 02 ca 00 03 00 13 00 c4 b0 09 1c 32 dd 34 05 fd 38 91 b6 bb 00 05 00 0b 00 04 00 04 2b 41 03 00 6f 00 04 00 01 5d 41 03 00 af 00 04 00 01 5d b8 00 04 10 b8 00 03 d0 b9 00 02 00 0b fc 41 03 00 6f 00 05 00 01 5d 41 03 00 af 00 05 00 01 5d 00 b8 00 00 45 58 b8 00 04 2f 1b b9 00 04 00 1d 3e 59 b8 00 00 45 58 b8 00 00 2f 1b b9 00 00 00 21 3e 59 b8 00 00 45 58 b8 00 09 2f 1b b9 00 09 00 17 3e 59 b8 00 00 45 58 b8 00 0c 2f 1b b9 00 0c 00 17 3e 59 41 03 00 0f 00 00 00 01 5d 41 03 00 30 00 00 00 01 5d 41 03 00 a0 00 00 00 01 5d b8 00 00 10 b8 00 02 dc 41 03 00 ff 00 02 00 01 5d b8 00 09 10 b9 00 10 00 01 fc 30 31 13 33 15 23 15 33 Data Ascii: A]A]3#3#?rrrrlY3248+Ao]A]Ao]A]EX/>YEX/!>YEX/>YEX/>YA]A0]A]A]013#3
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 6a 0f 19 22 14 13 23 19 0f 0f 19 23 13 14 22 19 0f 38 18 28 37 1f 1f 37 28 18 18 28 37 1f 1f 37 28 18 02 34 14 22 19 0f 0f 19 22 14 13 23 19 0f 0f 19 23 13 1f 37 28 18 18 28 37 1f 1f 37 28 18 18 28 37 00 00 00 00 02 00 30 00 00 02 28 01 fa 00 03 00 0f 00 65 b0 09 1c 32 dd 34 05 fd 38 91 b6 bb 00 05 00 12 00 04 00 04 2b b8 00 05 10 b8 00 09 d0 b8 00 04 10 b8 00 0b d0 00 b8 00 04 2f b8 00 0a 2f b8 00 00 45 58 b8 00 02 2f 1b b9 00 02 00 15 3e 59 bb 00 07 00 01 00 08 00 04 2b b8 00 02 10 b9 00 00 00 01 fc b8 00 08 10 b8 00 0c d0 b8 00 07 10 b8 00 0e d0 30 31 37 21 15 21 13 33 15 33 15 23 15 23 35 23 35 33 30 01 f8 fe 08 c9 66 c9 c9 66 c9 c9 66 66 01 fa 7d 66 7d 7d 66 00 00 00 01 00 15 01 11 01 5a 02 ca 00 25 01 6c b0 09 1c 32 dd 34 05 fd 38 91 b6 bb 00 1a 00 Data Ascii: j"##"8(77((77(4""##7((77((70(e248+//EX/>Y+017!!33##5#530ffff}f}}fZ%l248
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 16 00 01 5d 41 03 00 6f 00 1b 00 01 5d 41 03 00 89 00 1b 00 01 5d 41 03 00 06 00 1b 00 01 5d 41 03 00 5a 00 1d 00 01 71 41 05 00 dd 00 1e 00 ed 00 1e 00 02 5d 41 03 00 bb 00 1e 00 01 5d 41 03 00 5a 00 1e 00 01 71 41 03 00 e3 00 1f 00 01 71 41 05 00 5b 00 20 00 6b 00 20 00 02 5d 41 03 00 51 00 21 00 01 5d 41 03 00 03 00 22 00 01 5d 41 03 00 16 00 22 00 01 5d 41 03 00 8a 00 22 00 01 5d 41 03 00 6b 00 22 00 01 5d 41 03 00 cd 00 22 00 01 71 41 03 00 5f 00 22 00 01 71 41 03 00 4d 00 22 00 01 72 41 03 00 dd 00 22 00 01 5d 41 03 00 bb 00 22 00 01 5d 41 03 00 1a 00 22 00 01 71 41 03 00 54 00 22 00 01 72 41 03 00 e3 00 22 00 01 71 41 03 00 60 00 22 00 01 72 41 03 00 26 00 23 00 01 5d 41 03 00 78 00 23 00 01 5d 41 03 00 5a 00 23 00 01 71 41 03 00 b8 00 23 00 01 Data Ascii: ]Ao]A]A]AZqA]A]AZqAqA[ k ]AQ!]A"]A"]A"]Ak"]A"qA_"qAM"rA"]A"]A"qAT"rA"qA`"rA&#]Ax#]AZ#qA#
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: 00 40 00 00 00 01 72 41 03 00 60 00 06 00 01 5d 41 03 00 10 00 06 00 01 72 41 03 00 c0 00 06 00 01 71 41 03 00 80 00 06 00 01 5d 41 03 00 df 00 11 00 01 71 41 03 00 7f 00 11 00 01 5d 41 05 00 bf 00 11 00 cf 00 11 00 02 5d 41 03 00 40 00 11 00 01 72 41 03 00 c0 00 1b 00 01 71 41 03 00 10 00 1b 00 01 72 41 03 00 80 00 1b 00 01 5d 41 03 00 60 00 1b 00 01 5d 00 bb 00 09 00 04 00 16 00 04 2b bb 00 0c 00 04 00 03 00 04 2b 41 03 00 bf 00 03 00 01 71 41 03 00 68 00 03 00 01 5d 41 03 00 50 00 03 00 01 5d 41 03 00 70 00 09 00 01 71 41 05 00 10 00 09 00 20 00 09 00 02 72 41 07 00 c0 00 09 00 d0 00 09 00 e0 00 09 00 03 72 41 05 00 c0 00 09 00 d0 00 09 00 02 71 41 03 00 b0 00 09 00 01 5d 41 07 00 50 00 09 00 60 00 09 00 70 00 09 00 03 5d 41 03 00 bf 00 0c 00 01 71 41 Data Ascii: @rA`]ArAqA]AqA]A]A@rAqArA]A`]++AqAh]AP]ApqA rArAqA]AP`p]AqA
2024-04-19 00:44:55 UTC	16383	IN	Data Raw: e9 03 20 00 21 01 7c 00 10 01 cf 00 32 02 58 00 30 01 85 00 31 03 20 00 21 00 f1 ff e9 01 90 00 32 02 58 00 30 01 68 00 15 01 68 00 10 00 f1 00 2d 02 3e 00 3c 02 58 00 1f 01 16 00 40 00 f1 00 09 01 68 00 24 01 7c 00 0f 01 cf 00 3c 03 42 00 25 03 42 00 24 03 42 00 10 02 2c 00 31 02 9b ff f9 02 9b ff f9 02 9b ff f9 02 9b ff f9 02 9b ff f9 02 9b ff f9 03 c3 ff f9 02 d2 00 26 02 76 00 4c 02 76 00 4c 02 76 00 4c 02 76 00 4c 01 16 ff e8 01 16 00 4c 01 16 ff e8 01 16 ff fc 02 d2 00 09 02 d2 00 47 02 f8 00 26 02 f8 00 26 02 f8 00 26 02 f8 00 26 02 f8 00 26 02 58 00 37 02 f8 00 26 02 d2 00 44 02 d2 00 44 02 d2 00 44 02 d2 00 44 02 88 ff fa 02 9b 00 4c 02 3e 00 3f 02 2c 00 20 02 2c 00 20 02 2c 00 20 02 2c 00 20 02 2c 00 20 02 2c 00 20 03 79 00 20 02 2c 00 23 02 2c Data Ascii: !\|2X01 !2X0hh-><X@h$\|<B%B$B,1&vLvLvLvLLG&&&&&X7&DDDDL>?, , , , , , y ,#,
2024-04-19 00:44:55 UTC	1310	IN	Data Raw: 00 79 00 6f 00 75 00 20 00 72 00 65 00 63 00 65 00 69 00 76 00 65 00 64 00 20 00 77 00 69 00 74 00 68 00 20 00 74 00 68 00 65 00 20 00 73 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 2e 00 0d 00 0a 00 0d 00 0a 00 47 00 65 00 6e 00 65 00 72 00 61 00 6c 00 20 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 20 00 74 00 65 00 72 00 6d 00 73 00 20 00 61 00 6e 00 64 00 20 00 75 00 73 00 61 00 67 00 65 00 20 00 72 00 69 00 67 00 68 00 74 00 73 00 20 00 63 00 61 00 6e 00 20 00 62 00 65 00 20 00 76 00 69 00 65 00 77 00 65 00 64 00 20 00 61 00 74 00 20 00 77 00 77 00 77 00 2e 00 6c 00 69 00 6e 00 6f 00 74 00 79 00 70 00 65 00 2e 00 63 00 6f 00 6d 00 2f 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 2e 00 0d 00 0a 00 0d 00 0a 00 47 00 65 00 6e 00 65 00 72 00 65 00 6c 00 Data Ascii: you received with the software.General license terms and usage rights can be viewed at www.linotype.com/license.Generel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50344	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:55 UTC	665	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:44:55 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b0fb1c9e2b29c1f8f95b0c91bf30eace.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 5kPDG963lDX5kfcBmRhaP8m6jICVl-4mL8pDqOtlu-O9mO7KLZTImg== Age: 34108

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50347	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	627	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:44:56 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:44:56 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840038-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50349	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	675	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:56 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:56 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50348	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	860	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:44:56 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:44:56 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99197 Server: cloudflare CF-RAY: 8768de737c75b066-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50353	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	887	OUT	GET /rp.gif?ts=1713487495013&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:57 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50356	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1247	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487495162&cv=11&fst=1713487495162&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:57 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:57 UTC	552	IN	Data Raw: 38 64 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8d6(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:44:57 UTC	462	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 25 32 46 66 69 6e 64 2d 6c 6f 63 61 74 69 6f 6e 2e 68 74 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 50 4f 25 32 30 4c 6f 63 61 74 6f 72 25 32 30 25 37 43 25 32 30 55 Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Ftools.usps.com%2Ffind-location.htm\x26frm\x3d0\x26tiba\x3dPO%20Locator%20%7C%20U
2024-04-19 00:44:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50358	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	811	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=9eaae524-fc57-4196-aa0a-a0c7cf304e37&u_sclid=8660dedb-6af1-4531-b113-d51105e7c3d9 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	413	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:57 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50357	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1371	OUT	GET /td/rul/978081151?random=1713487495162&cv=11&fst=1713487495162&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&hn=www.googleadservices.com&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:44:57 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:44:57 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignals
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 Data Ascii: =2\u0026rp_id=1j7639828228","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 Data Ascii: 4495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u002
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 33 37 37 32 33 38 38 36 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: tributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https:
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d Data Ascii: =1j377238866","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 Data Ascii: 9112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: ttps://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 Data Ascii: ta":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA
2024-04-19 00:44:57 UTC	1255	IN	Data Raw: 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 Data Ascii: 94254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metada

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50352	31.13.66.19	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1307	OUT	GET /signals/config/533374513433337?v=2.9.154&r=stable&domain=tools.usps.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-19 00:44:57 UTC	1513	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 69 64 74 68 3d 28 29 2c Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(),
2024-04-19 00:44:57 UTC	22	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 Data Ascii: /*** Copyright (c) 20
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 77 65 62 20 73 65 72 76 69 63 65 73 20 61 6e Data Ascii: 17-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the web services an
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?Symbol.prototype
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e Data Ascii: Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeven
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 74 3a 65 7d 29 5b 30 5d 7d 3b 72 65 74 75 72 Data Ascii: actUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,target:e})[0]};retur
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 6f 3d 22 22 2b 6e 2e 74 61 67 4e 61 6d 65 Data Ascii: ll)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var o=""+n.tagName
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c 3b 69 66 28 63 3d 3d 3d 22 40 22 29 72 65 74 Data Ascii: Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null;if(c==="@")ret
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b Data Ascii: _passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return!0;for(var g=0;
2024-04-19 00:44:57 UTC	1500	IN	Data Raw: 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 65 3d 63 2e 74 61 72 67 65 74 20 69 6e 73 74 Data Ascii: ignalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var e=c.target inst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50359	151.101.65.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	605	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:57 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-19 00:44:57 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50360	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	981	OUT	GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:57 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:56 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e6d9527998efe3c8 strict-transport-security: max-age=0 x-response-time: 75 x-connection-hash: 0abd2a92e4a81189b09a5d7186869ecc8b6daa3920808a2bac864906a09a304c connection: close
2024-04-19 00:44:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50351	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1402	OUT	GET /global-elements/navigation/TOOLS-navigation.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487483.0.0.0; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc
2024-04-19 00:44:57 UTC	356	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:57 GMT Etag: "0-549b12b892300" Last-Modified: Wed, 01 Mar 2017 20:29:32 GMT Server: ECAcc (dce/26C0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50365	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	608	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1178 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:56 UTC	1178	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 31 38 63 37 30 32 64 34 2d 63 61 30 38 2d 34 39 63 36 2d 61 32 34 63 2d 31 32 65 32 63 31 61 33 30 64 34 38 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"18c702d4-ca08-49c6-a24c-12e2c1a30d48","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","df":true,"s
2024-04-19 00:44:57 UTC	522	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:57 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50361	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1002	OUT	GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:57 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:57 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 439c844948468ebd strict-transport-security: max-age=631138519 x-response-time: 81 x-connection-hash: bc82527351a9f9dda96287c802c5074a4018cfe7f526dc0d022105e1bbda6a63 connection: close
2024-04-19 00:44:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50363	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	809	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487495449&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:57 UTC	683	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1796445273573238 Date: Fri, 19 Apr 2024 00:44:57 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:57 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50366	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	612	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://tools.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	563	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:57 GMT access-control-allow-origin: https://tools.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 38 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:57 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50364	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:56 UTC	1479	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftools.usps.com%2Ffind-location.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487495455 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:57 UTC	655	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:57 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 4 referrer-policy: origin x-pinterest-rid: 1526018706408133 Date: Fri, 19 Apr 2024 00:44:57 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:57 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50367	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:57 UTC	1062	OUT	GET /pagead/1p-user-list/978081151/?random=1713487495162&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeerc4GmYpORgVSkmi6THNJOe9nZm5zWbv-RJfK0xrtU7_Kz6&random=1497933720&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50370	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:57 UTC	608	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 895 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	895	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 39 63 33 63 34 33 35 32 2d 36 65 63 35 2d 34 37 38 31 2d 62 61 37 37 2d 38 33 66 35 30 37 66 35 36 66 32 33 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"9c3c4352-6ec5-4781-ba77-83f507f56f23","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","df":true,"s
2024-04-19 00:44:57 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:57 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50369	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:57 UTC	1465	OUT	GET /global-elements/footer/POLOCATOR-footer.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
2024-04-19 00:44:57 UTC	362	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:44:57 GMT Etag: "1b55-6125ec2e0c480" Last-Modified: Tue, 27 Feb 2024 15:34:26 GMT Server: ECAcc (dce/26B3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 6997 Connection: close
2024-04-19 00:44:57 UTC	6997	IN	Data Raw: 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 22 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 22 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 63 73 73 2f 6d 61 69 6e 2d 73 62 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 63 73 73 2f 66 6f 6f 74 65 72 2d 73 62 2e 63 73 73 22 3e 0d 0a 09 09 0d 0a 09 09 09 3c 21 2d 2d 5b 69 Data Ascii: <div id="global-footer--wrap" class="global-footer--wrap"><link type="text/css" rel="stylesheet" href="/global-elements/footer/css/main-sb.css"><link type="text/css" rel="stylesheet" href="/global-elements/footer/css/footer-sb.css">...[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50373	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:57 UTC	860	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3406, tp=-1, tpl=-1, uplat=6, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50372	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:57 UTC	952	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:57 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:57 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:57 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:44:57 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50375	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	608	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1289 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	1289	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 61 37 36 35 62 38 33 61 2d 32 38 38 66 2d 34 64 39 33 2d 39 38 30 35 2d 36 61 64 65 38 63 66 35 63 35 31 62 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"a765b83a-288f-4d93-9805-6ade8cf5c51b","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","df":true,"s
2024-04-19 00:44:58 UTC	522	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:58 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50374	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1347	OUT	GET /media/polocator/list-icon.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	403	IN	HTTP/1.1 200 OK Age: 46523 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:58 GMT Etag: "67d-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/52DC) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1661 Connection: close
2024-04-19 00:44:58 UTC	1661	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 35 70 78 22 20 68 65 69 67 68 74 3d 22 32 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 35 20 32 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="25px" height="20px" viewBox="0 0 25 20" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50383	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487494294 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:58 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50384	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	653	OUT	GET /rp.gif?ts=1713487495013&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:44:58 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:44:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50386	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	747	OUT	GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:44:58 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:58 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: afa3f6cb55c15049 strict-transport-security: max-age=0 x-response-time: 84 x-connection-hash: 08f565c7384610e63054427279f7fa7569fd35521e36d9b67ba3cdebb1c7eb1a connection: close
2024-04-19 00:44:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50379	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1356	OUT	GET /media/votebymail/success-checkmark.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	402	IN	HTTP/1.1 200 OK Age: 49550 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:58 GMT Etag: "34a-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/53F9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 842 Connection: close
2024-04-19 00:44:58 UTC	842	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 32 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 22.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50377	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1363	OUT	GET /global-elements/footer/images/footer-logo.png HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	407	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 58200 Content-Type: image/png Date: Fri, 19 Apr 2024 00:44:58 GMT Etag: "150e-5b35fb5ce1440" Last-Modified: Thu, 05 Nov 2020 17:48:57 GMT nnCoection: close Server: ECAcc (agb/5393) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 5390 Connection: close
2024-04-19 00:44:58 UTC	5390	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dd 00 00 00 1b 08 06 00 00 00 f8 75 8a b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 Data Ascii: PNGIHDRutEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50376	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1346	OUT	GET /media/polocator/map-icon.svg HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	404	IN	HTTP/1.1 200 OK Age: 45410 Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 00:44:58 GMT Etag: "19b9-6124db7575680+gzip+ident" Last-Modified: Mon, 26 Feb 2024 19:14:18 GMT Server: ECAcc (agb/A40B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 6585 Connection: close
2024-04-19 00:44:58 UTC	6585	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 38 70 78 22 20 68 65 69 67 68 74 3d 22 32 33 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 20 32 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="18px" height="23px" viewBox="0 0 18 23" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50380	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1371	OUT	GET /UspsToolsRestServices/rest/POLocator/getglossarylinks HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	971	IN	HTTP/1.1 200 OK Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:58 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26A1) Set-Cookie: ADRUM_BTa=R:0\|g:7c64725d-fa0e-40dc-b11c-d1b213d54fef; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:7c64725d-fa0e-40dc-b11c-d1b213d54fef\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:139192; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:139192\|e:0; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:58 UTC	4	IN	Data Raw: 33 34 0d 0a Data Ascii: 34
2024-04-19 00:44:58 UTC	52	IN	Data Raw: 7b 22 47 4c 4f 53 53 41 52 59 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 2f 6c 6f 63 61 74 6f 72 2f 67 6c 6f 73 73 61 72 79 2e 68 74 6d 22 7d Data Ascii: {"GLOSSARY":"https://usps.com/locator/glossary.htm"}
2024-04-19 00:44:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50378	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1366	OUT	GET /UspsToolsRestServices/rest/POLocator/getfaqlinks HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:58 UTC	971	IN	HTTP/1.1 200 OK Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:58 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26E4) Set-Cookie: ADRUM_BTa=R:0\|g:d465c5b9-779d-4cb4-b2f2-f5bc7ae9b47a; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:d465c5b9-779d-4cb4-b2f2-f5bc7ae9b47a\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132201; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132201\|e:0; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:58 UTC	4	IN	Data Raw: 33 63 0d 0a Data Ascii: 3c
2024-04-19 00:44:58 UTC	60	IN	Data Raw: 7b 22 46 41 51 22 3a 22 68 74 74 70 73 3a 2f 2f 66 61 71 2e 75 73 70 73 2e 63 6f 6d 2f 73 2f 61 72 74 69 63 6c 65 2f 46 69 6e 64 2d 55 53 50 53 2d 4c 6f 63 61 74 69 6f 6e 73 22 7d Data Ascii: {"FAQ":"https://faq.usps.com/s/article/Find-USPS-Locations"}
2024-04-19 00:44:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50389	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1277	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Ftools.usps.com%2Ffind-location.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487495455 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:59 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:44:58 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 1330676778242692 Date: Fri, 19 Apr 2024 00:44:58 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50388	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487495449&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:44:59 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 4 referrer-policy: origin x-pinterest-rid: 1504580191945313 Date: Fri, 19 Apr 2024 00:44:58 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:44:59 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50390	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	768	OUT	GET /i/adsct?bci=3&eci=2&event_id=2d278988-0929-4001-aa54-b80e75b8e0b3&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=2ee9604d-c62b-4dfd-ac41-80d1f7318aa7&tw_document_href=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:44:58 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:44:58 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 84dc619e20baf07c strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 2efd80a6c02770722a5d017210196b403ac078457cb096bc9e97926e61f72fba connection: close
2024-04-19 00:44:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50392	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	626	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:44:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50391	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	828	OUT	GET /pagead/1p-user-list/978081151/?random=1713487495162&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&frm=0&tiba=PO%20Locator%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeerc4GmYpORgVSkmi6THNJOe9nZm5zWbv-RJfK0xrtU7_Kz6&random=1497933720&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:44:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:44:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50393	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	663	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Ftools.usps.com%2Ffind-location.htm&rl=&if=false&ts=1713487496128&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487494973&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:44:58 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:44:58 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:44:58 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50394	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:44:58 UTC	1372	OUT	GET /UspsToolsRestServices/rest/POLocator/getOnlineServices HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:44:59 UTC	971	IN	HTTP/1.1 200 OK Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:44:58 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/2686) Set-Cookie: ADRUM_BTa=R:0\|g:962e5571-11f5-42f6-b37a-177042c883f2; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:962e5571-11f5-42f6-b37a-177042c883f2\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132208; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132208\|e:2; Expires=Fri, 19-Apr-24 00:45:28 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:44:59 UTC	5	IN	Data Raw: 31 64 39 0d 0a Data Ascii: 1d9
2024-04-19 00:44:59 UTC	473	IN	Data Raw: 7b 22 50 46 53 52 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 66 6f 72 77 61 72 64 2e 68 74 6d 22 2c 22 53 41 50 22 3a 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 73 63 68 65 64 75 6c 65 2d 70 69 63 6b 75 70 2d 73 74 65 70 73 2e 68 74 6d 22 2c 22 52 45 44 45 4c 49 56 45 52 59 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 64 65 6c 69 76 65 72 79 2e 75 73 70 73 2e 63 6f 6d 2f 72 65 64 65 6c 69 76 65 72 79 2f 22 2c 22 43 4e 53 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6e 73 2e 75 73 70 73 2e 63 6f 6d 22 2c 22 4d 45 44 49 41 22 3a 22 68 74 74 70 73 3a 2f 2f 61 62 6f 75 74 2e 75 73 70 73 2e 63 6f 6d 2f 6e 65 77 73 72 6f 6f 6d 2f 6e 61 74 69 6f 6e 61 6c 2d 72 65 6c 65 61 73 65 73 2f 77 65 6c 63 6f Data Ascii: {"PFSR":"https://www.usps.com/manage/forward.htm","SAP":"https://tools.usps.com/schedule-pickup-steps.htm","REDELIVERY":"https://redelivery.usps.com/redelivery/","CNS":"https://cns.usps.com","MEDIA":"https://about.usps.com/newsroom/national-releases/welco
2024-04-19 00:44:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50397	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:00 UTC	1363	OUT	GET /UspsToolsRestServices/rest/security/ipAddress HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:45:00 UTC	971	IN	HTTP/1.1 200 OK Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Type: application/json Date: Fri, 19 Apr 2024 00:45:00 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Server: ECAcc (dce/26D3) Set-Cookie: ADRUM_BTa=R:0\|g:a03a9fca-43e6-44df-8406-b045456edd1b; Expires=Fri, 19-Apr-24 00:45:30 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:a03a9fca-43e6-44df-8406-b045456edd1b\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 19-Apr-24 00:45:30 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 19-Apr-24 00:45:30 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132169; Expires=Fri, 19-Apr-24 00:45:30 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:132169\|e:0; Expires=Fri, 19-Apr-24 00:45:30 GMT; Path=/; Secure Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 5.1 Transfer-Encoding: chunked Connection: close
2024-04-19 00:45:00 UTC	4	IN	Data Raw: 32 32 0d 0a Data Ascii: 22
2024-04-19 00:45:00 UTC	34	IN	Data Raw: 7b 22 43 6c 69 65 6e 74 49 50 41 64 64 72 65 73 73 22 3a 22 38 31 2e 31 38 31 2e 35 37 2e 35 32 22 7d Data Ascii: {"ClientIPAddress":"81.181.57.52"}
2024-04-19 00:45:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 00:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50395	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:00 UTC	1361	OUT	GET /global-elements/header/POLOCATOR-header.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:45:00 UTC	363	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:45:00 GMT Etag: "8d5b-600045a0dffc0" Last-Modified: Sun, 09 Jul 2023 02:09:11 GMT Server: ECAcc (dce/26B6) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 36187 Connection: close
2024-04-19 00:45:00 UTC	16039	IN	Data Raw: 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 63 73 73 2f 6d 65 67 61 6d 65 6e 75 2d 76 34 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 62 6f 64 79 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 7d 0d 0a 20 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0d 0a 20 20 0d 0a 2f 2a 20 61 6c 65 72 74 20 73 74 79 6c 65 73 20 73 74 61 72 74 20 2a 2f 0d 0a 2f 2a 20 20 20 20 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 35 38 70 78 29 7b 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 Data Ascii: <link href="/global-elements/header/css/megamenu-v4.css" type="text/css" rel="stylesheet"> <style> body{min-width:0!important;overflow-x:hidden;} a{text-decoration:none;} /* alert styles start // @media (min-width: 958px){.global--navi
2024-04-19 00:45:00 UTC	16383	IN	Data Raw: 44 65 6c 69 76 65 72 79 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 66 6f 72 77 61 72 64 2e 68 74 6d 22 3e 46 6f 72 77 61 72 64 69 6e 67 20 4d 61 69 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 6d 61 6e 61 67 65 2f 70 61 63 6b 61 67 65 2d 69 6e 74 65 72 63 65 70 74 2e 68 74 6d 22 3e 52 65 64 69 72 65 63 74 Data Ascii: Delivery</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/forward.htm">Forwarding Mail</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/manage/package-intercept.htm">Redirect
2024-04-19 00:45:00 UTC	3765	IN	Data Raw: 09 09 3c 73 70 61 6e 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 66 61 6c 73 65 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 2d 77 72 61 70 22 3e 0d 0a 09 09 09 09 3c 6c 61 62 65 6c 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 22 20 20 66 6f 72 3d 22 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 2d 73 65 61 72 63 68 22 3e 53 65 61 72 63 68 20 55 53 50 53 2e 63 6f 6d 3c 2f 6c 61 62 65 6c 3e 0d 0a 09 09 09 09 3c 69 6e 70 75 74 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 53 65 61 72 63 68 20 6f 72 20 45 6e 74 65 72 20 61 20 54 Data Ascii: <span tabindex="-1" aria-hidden="false" class="input--wrap"><label tabindex="-1" class="visuallyhidden" for="global-header--search-track-search">Search USPS.com</label><input tabindex="-1" autocomplete="off" placeholder="Search or Enter a T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50396	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:00 UTC	1365	OUT	GET /global-elements/navigation/TOOLS-navigation.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg
2024-04-19 00:45:00 UTC	356	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:45:00 GMT Etag: "0-549b12b892300" Last-Modified: Wed, 01 Mar 2017 20:29:32 GMT Server: ECAcc (dce/26C0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50398	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:00 UTC	1468	OUT	GET /global-elements/footer/POLOCATOR-footer.htm HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1
2024-04-19 00:45:00 UTC	362	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: text/html Date: Fri, 19 Apr 2024 00:45:00 GMT Etag: "1b55-6125ec2e0c480" Last-Modified: Tue, 27 Feb 2024 15:34:26 GMT Server: ECAcc (dce/26B3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 6997 Connection: close
2024-04-19 00:45:00 UTC	6997	IN	Data Raw: 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 22 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 66 6f 6f 74 65 72 2d 2d 77 72 61 70 22 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 63 73 73 2f 6d 61 69 6e 2d 73 62 2e 63 73 73 22 3e 0d 0a 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 67 6c 6f 62 61 6c 2d 65 6c 65 6d 65 6e 74 73 2f 66 6f 6f 74 65 72 2f 63 73 73 2f 66 6f 6f 74 65 72 2d 73 62 2e 63 73 73 22 3e 0d 0a 09 09 0d 0a 09 09 09 3c 21 2d 2d 5b 69 Data Ascii: <div id="global-footer--wrap" class="global-footer--wrap"><link type="text/css" rel="stylesheet" href="/global-elements/footer/css/main-sb.css"><link type="text/css" rel="stylesheet" href="/global-elements/footer/css/footer-sb.css">...[i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50399	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:00 UTC	1834	OUT	GET /favicon.ico HTTP/1.1 Host: tools.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tools.usps.com/find-location.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; SameSite=None; ADRUM_BTa=R:0\|g:962e5571-11f5-42f6-b37a-177042c883f2\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; ADRUM_BT1=R:0\|i:132208\|e:2
2024-04-19 00:45:00 UTC	390	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 59006 Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:45:00 GMT Etag: "47e-6124db6262980" Last-Modified: Mon, 26 Feb 2024 19:13:58 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1150 Connection: close
2024-04-19 00:45:00 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50401	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:01 UTC	1582	OUT	GET /favicon.ico HTTP/1.1 Host: tools.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; NSC_uppmt-usvf-ofx=ffffffff3b22378945525d5f4f58455e445a4a4212d3; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; JSESSIONID=00008P7H65VCnm8lnQLOmC8VcEI:1bbcn20cc; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga=GA1.3.1989466777.1713487459; _gid=GA1.3.1668540185.1713487459; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487496839; kampyleUserSessionsCount=1; kampyleSessionPageCounter=1; SameSite=None; ADRUM_BTa=R:0\|g:a03a9fca-43e6-44df-8406-b045456edd1b\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; ADRUM_BT1=R:0\|i:132169\|e:0
2024-04-19 00:45:01 UTC	390	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 59007 Content-Type: image/x-icon Date: Fri, 19 Apr 2024 00:45:01 GMT Etag: "47e-6124db6262980" Last-Modified: Mon, 26 Feb 2024 19:13:58 GMT Server: ECAcc (agb/537B) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Frame-Options: SAMEORIGIN x-ruleset-version: 5.1 Content-Length: 1150 Connection: close
2024-04-19 00:45:01 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 eb e6 e7 ff ca ba b7 ff cd bb bb ff c9 b9 ba ff ca b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff cb b9 b9 ff ca b9 b9 ff cb b9 ba ff c9 b6 b5 ff ec e6 e6 ff c7 b5 b6 ff 4d 17 17 ff 5a 24 23 ff 62 2f 2c ff 64 2f 2d ff 60 2e 2c ff 5f 2d 2b ff 62 2c 2b ff 61 2d 2b ff 60 2d 2b ff 60 2d 2b ff 61 2d 2b ff 61 2d 2a ff 63 2e 2d ff 56 26 24 ff c9 b6 b6 ff f7 f4 f4 ff c9 b5 b3 ff 84 5e 5e ff 61 2b 2a ff 5f 28 27 ff 67 32 31 ff 6b 38 37 ff 68 37 36 ff 68 35 34 ff 69 34 34 ff 69 34 34 ff 69 35 34 ff 67 36 33 ff 6b 36 35 ff 63 2e 2d ff cb b9 ba ff d4 Data Ascii: h( MZ$#b/,d/-`.,_-+b,+a-+`-+`-+a-+a-c.-V&$^^a+_('g21k87h76h54i44i44i54g63k65c.-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50195	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:03 UTC	1475	OUT	GET /help/contact-us.htm HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
2024-04-19 00:45:03 UTC	1095	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 433 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Fri, 19 Apr 2024 00:45:03 GMT Last-Modified: Fri, 19 Apr 2024 00:37:50 GMT Server: ECAcc (agb/5336) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 133453 Connection: close
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 6e 74 61 63 74 20 55 73 20 7c 20 55 53 50 53 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 21 2d 2d 6c 73 3a 62 65 67 69 6e 5b 73 74 79 6c 65 73 68 65 65 74 5d 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 77 6f 76 2d 72 65 73 6f 75 72 63 65 73 2f 66 69 78 65 64 2d 6c 61 79 6f 75 74 2f 6f 6e 65 2d 63 6f 6c 75 6d 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e Data Ascii: <!DOCTYPE html><html><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Contact Us \| USPS</title>...ls:begin[stylesheet]--><link href="/iwov-resources/fixed-layout/one-column.css" type="text/css" rel="stylesheet">
2024-04-19 00:45:03 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 75 73 70 73 2e 63 6f 6d 2f 73 74 6f 72 65 2f 72 65 73 75 6c 74 73 2f 66 72 65 65 2d 73 68 69 70 70 69 6e 67 2d 73 75 70 70 6c 69 65 73 2f 73 68 69 70 70 69 6e 67 2d 73 75 70 70 6c 69 65 73 2f 5f 2f 4e 2d 61 6c 6e 78 34 6a 5a 37 64 30 76 38 76 22 3e 0d 0a 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 66 72 65 65 5f 62 6f 78 65 73 2e 73 76 67 22 20 61 6c 74 3d 22 53 68 69 70 70 69 6e 67 20 53 75 70 70 6c 69 65 73 20 49 63 6f 6e 22 3e 0d 0a 09 09 09 09 09 09 3c 70 3e 46 72 65 65 20 42 6f 78 65 73 3c 2f 70 3e 0d 0a 09 09 09 09 09 Data Ascii: m" tabindex="-1" href="https://store.usps.com/store/results/free-shipping-supplies/shipping-supplies/_/N-alnx4jZ7d0v8v"><img src="https://www.usps.com/assets/images/home/free_boxes.svg" alt="Shipping Supplies Icon"><p>Free Boxes</p>
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 62 75 73 69 6e 65 73 73 2f 70 72 69 63 65 73 2e 68 74 6d 22 3e 50 72 69 63 65 73 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0d 0a 09 09 20 20 3c 66 6f 72 6d 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 20 72 6f 6c 65 3d 22 73 65 61 72 63 68 22 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 63 6c 61 73 73 3d 22 73 65 61 72 63 68 20 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 20 62 75 73 69 6e 65 73 73 2d 62 6f 74 74 6f 6d 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 73 65 61 72 63 68 22 3e 0d 0a 09 09 09 3c 73 70 61 6e 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 66 61 6c 73 Data Ascii: ://www.usps.com/business/prices.htm">Prices</a></li> </ul> <form tabindex="-1" role="search" method="get" class="search global-header--search business-bottom" action="https://www.usps.com/search"><span tabindex="-1" aria-hidden="fals
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 6c 64 22 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 09 63 6f 6c 6f 72 3a 23 33 33 33 33 36 36 3b 0a 09 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 2e 68 65 61 64 65 72 2d 33 2e 64 72 61 77 65 72 2c 2e 6a 75 6d 62 6f 74 72 6f 6e 20 2e 68 65 61 64 65 72 2d 33 2e 64 72 61 77 65 72 20 7b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 2e 68 65 61 64 65 72 2d 33 2e 69 6e 76 65 72 73 65 2c 2e 6a 75 6d 62 6f Data Ascii: ld", "Helvetica Neue", Helvetica, Arial, sans-serif;font-size: 22px;line-height: 24px;color:#333366;}.container-fluid .header-3.drawer,.jumbotron .header-3.drawer {line-height: 22px;font-size: 18px;}.container-fluid .header-3.inverse,.jumbo
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 6e 64 2d 61 6c 6c 2e 61 63 74 69 76 65 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 0a 2e 65 78 70 61 6e 64 2d 75 6e 69 74 20 2e 64 72 61 77 65 72 20 68 34 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 33 70 78 3b 0a 7d 0a 61 20 73 75 70 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: nd-all.active:after { -ms-transform: rotate(-90deg); -webkit-transform: rotate(-90deg); transform: rotate(-90deg); top: 0; transition: transform 0.2s ease-out;}.expand-unit .drawer h4 { margin-top: 23px;}a sup { text-decor
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 2d 2d 6c 69 6e 6b 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2f 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 68 6f 6d 65 2f 74 65 78 74 2d 6c 69 6e 6b 2d 63 61 72 61 74 2d 72 65 64 2e 73 76 67 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 Data Ascii: elvetica, Arial, sans-serif;}.button--link:after { content: ""; display: inline-block; height: 15px; width: 20px; background-image: url(/assets/images/home/text-link-carat-red.svg); background-repeat: no-repeat; margin-left:
2024-04-19 00:45:03 UTC	5	IN	Data Raw: 6f 76 65 72 2c Data Ascii: over,
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 20 3a 6c 69 6e 6b 3a 66 6f 63 75 73 2c 20 3a 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 37 61 62 37 3b 0a 7d 0a 0a 2e 6e 6f 2d 74 6f 75 63 68 20 61 3a 68 6f 76 65 72 2c 20 2e 6e 6f 2d 74 6f 75 63 68 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 37 61 62 37 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 0a 20 20 20 20 2e 72 6f 77 20 3e 64 69 76 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0a 20 20 20 20 7d 0a 09 2e 70 68 6f 6e 65 2d 69 6d 67 Data Ascii: :link:focus, :link:hover { text-decoration:none; color: #337ab7;}.no-touch a:hover, .no-touch a:focus { text-decoration:none; color: #337ab7;}@media (min-width:992px){ .row >div { padding-left: 30px; }.phone-img
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 6e 74 3b 0a 09 09 7d 0a 09 09 2e 6c 67 2d 74 78 74 2d 63 72 64 20 61 2e 65 78 70 61 6e 64 20 7b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 09 09 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 39 32 70 78 29 7b 0a 09 09 2f 2a 20 4c 41 52 47 45 20 49 4d 41 47 45 20 43 41 52 44 20 2a 2f 0a 20 20 20 20 2e 6c 67 2d 69 6d 67 2d 63 61 72 64 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 61 6c 74 2d 69 6d 67 2d 63 6f 70 79 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 Data Ascii: nt;}.lg-txt-crd a.expand {display:none;}@media (max-width: 992px){/* LARGE IMAGE CARD */ .lg-img-card { padding-bottom: 10px !important; padding-left: 10px!important; } .alt-img-copy { padding-left: 10px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50404	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:03 UTC	1399	OUT	GET /assets/css/globals/bootstrap.min.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/help/contact-us.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
2024-04-19 00:45:03 UTC	1178	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58365 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 175676 Date: Fri, 19 Apr 2024 00:45:03 GMT Etag: "2ae3c-5c29b459a1ac0+ident" Last-Modified: Tue, 18 May 2021 14:10:27 GMT Server: ECAcc (agb/5326) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 175676 Connection: close
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-04-19 00:45:03 UTC	1	IN	Data Raw: 33 Data Ascii: 3
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 32 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 78 6c 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 78 6c 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 78 6c 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 Data Ascii: 3%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-xl-12{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-xl-first{-ms-flex-order:-1;order:-1}.order-xl-last{-ms-flex-order:13;order:13}.order-xl-0{-ms-flex-order:0;orde
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f Data Ascii: d .form-check-input:invalid~.invalid-tooltip{display:block}.custom-control-input.is-invalid~.custom-control-label,.was-validated .custom-control-input:invalid~.custom-control-label{color:#dc3545}.custom-control-input.is-invalid~.custom-control-label::befo
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 6c 65 66 74 2c 2e 64 72 6f 70 72 69 67 68 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 Data Ascii: ion:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid transpare
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 63 6f 6e 74 65 6e 74 3a 22 42 72 6f 77 73 65 22 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 2e 32 35 72 65 6d 20 2e 32 35 72 65 6d 20 30 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 72 65 6d 20 2b 20 2e 34 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a Data Ascii: 75rem .75rem;line-height:1.5;color:#495057;content:"Browse";background-color:#e9ecef;border-left:inherit;border-radius:0 .25rem .25rem 0}.custom-range{width:100%;height:calc(1rem + .4rem);padding:0;background-color:transparent;-webkit-appearance:none;-moz
2024-04-19 00:45:03 UTC	4	IN	Data Raw: 6e 65 2d 68 Data Ascii: ne-h
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 7a 2d 69 6e 64 65 78 3a 32 3b 63 6f 6c 6f 72 3a 23 30 30 35 36 62 33 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 7d 2e 70 61 67 65 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 7a 2d 69 6e 64 65 78 3a 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c Data Ascii: eight:1.25;color:#007bff;background-color:#fff;border:1px solid #dee2e6}.page-link:hover{z-index:2;color:#0056b3;text-decoration:none;background-color:#e9ecef;border-color:#dee2e6}.page-link:focus{z-index:2;outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 3e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 73 63 72 6f 6c 6c 62 61 72 2d 6d 65 61 73 75 72 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 39 39 39 39 70 78 3b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 Data Ascii: er-bottom-right-radius:.3rem;border-bottom-left-radius:.3rem}.modal-footer>:not(:first-child){margin-left:.25rem}.modal-footer>:not(:last-child){margin-right:.25rem}.modal-scrollbar-measure{position:absolute;top:-9999px;width:50px;height:50px;overflow:scr
2024-04-19 00:45:03 UTC	16383	IN	Data Raw: 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 65 6d 62 65 64 2d 72 65 73 70 6f 6e 73 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 Data Ascii: lay:table-cell!important}.d-print-flex{display:-ms-flexbox!important;display:flex!important}.d-print-inline-flex{display:-ms-inline-flexbox!important;display:inline-flex!important}}.embed-responsive{position:relative;display:block;width:100%;padding:0;ove

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50407	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:04 UTC	1447	OUT	GET /assets/images/help/hero-contact-us.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/help/contact-us.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
2024-04-19 00:45:04 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58523 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:04 GMT Etag: "94b4-599744906ed00" Last-Modified: Wed, 11 Dec 2019 21:26:44 GMT Server: ECAcc (agb/5323) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 38068 Connection: close
2024-04-19 00:45:04 UTC	16383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 83 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:45:04 UTC	16383	IN	Data Raw: ed b8 ec af b5 a7 24 da 66 5c c6 6a ce 71 2b 81 cf a4 7d 4a 61 ac b2 30 c6 fd 7a d9 ee bb e0 3f 09 1c 0d 16 e3 35 7a 37 16 1c 32 38 60 2a 7a f0 2b ae b5 c7 6d 58 dd e7 95 06 e5 6c 59 1b db 1d c3 a9 aa 67 b7 56 a6 f4 57 87 57 15 ea d3 93 0f 0f 27 16 5a f1 f2 b7 77 73 c3 ed d8 64 8a 22 35 12 2a 5c f3 ee 81 c3 15 d2 fb 9d 63 97 fc 5d aa 58 79 6b 99 b6 09 a5 92 1b 09 64 ba 73 31 b9 11 3a 56 46 5e 2a e6 b5 c2 a6 b4 c0 f7 68 b5 39 74 db d5 9b c5 bc f4 63 6e 77 d9 1f 0b b6 c9 a3 78 91 8d 0c 63 1e d2 c2 6e 25 00 07 37 aa b8 f1 4d f4 98 ca f1 ed b6 71 5b 77 2a ec 7b 7e cc 63 61 1a ee 24 15 b9 bc 7e 2f 71 39 e3 f0 b7 a1 a1 7c 7e 4e 4b bd fc 1f 63 5e 29 ac c4 ee de ef 2c 85 b5 93 6e a4 91 ae b7 2d d4 1e d3 51 4a 60 6a 16 3c 6a 6b b6 6e 18 9f 2f b9 d7 c7 93 7e 9d d3 Data Ascii: $f\jq+}Ja0z?5z728`z+mXlYgVWW'Zwsd"5\c]Xykds1:VF^h9tcnwxcn%7Mq[w{~ca$~/q9\|~NKc^),n-QJ`j<jkn/~
2024-04-19 00:45:04 UTC	5302	IN	Data Raw: 94 03 92 08 9c 2a 55 32 89 cc 44 ca 27 34 ab 84 f3 41 21 21 3c 53 ee 2a c9 71 a5 3c 13 ef 21 76 e0 c6 e6 68 9e 15 67 36 ae 7b e6 47 3b c6 1c cd 96 d2 f8 da 4f 37 f1 24 6e 07 4f 40 2b b7 1e 98 ee 9b 6d 9e cd 27 97 ac 77 6e 50 e7 0d ab 72 b6 dc e5 ba b3 dc 27 6c 17 b0 3d da da e1 26 47 d2 0a e9 74 cc ac e9 c9 9e 8e a3 cc c7 f2 df 32 f9 6b 75 1d d8 ee 7c 4b 29 4f fc 41 a9 bf 4a e3 c7 33 ad 8e b9 75 70 6a d0 7a 57 96 bd 33 b0 a8 ac 54 ee 26 67 15 d2 b9 6a 89 c2 a2 85 49 70 b6 27 db 6f 1d e2 1b 59 4d 5c 05 63 77 48 5b df 5c cc c6 34 db c6 e1 93 aa e2 ee ad 78 da 51 fd ab 53 b3 3e a8 58 e5 96 d3 b1 ca 0b 0c 2a 50 f6 a8 d0 91 88 5a f5 65 e0 df 3a 6b ff 00 96 f9 a0 3b 85 f1 07 d4 d6 ad c7 3d 7b 3d 65 e4 8c b5 f2 df 69 6d 7d c8 dc 3f b6 57 3d ef 54 e0 ed 7f 36 fc Data Ascii: U2D'4A!!<Sq<!vhg6{G;O7$nO@+m'wnPr'l=&Gt2ku\|K)OAJ3upjzW3T&gjIp'oYM\cwH[\4xQS>X*PZe:k;={=eim}?W=T6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50408	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:04 UTC	1454	OUT	GET /assets/images/help/hero-contact-us-mobile.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/help/contact-us.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga=GA1.1.1989466777.1713487459; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487494.0.0.0; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487495.0.0.0
2024-04-19 00:45:04 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 57959 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:04 GMT Etag: "764d-5997448408fc0" Last-Modified: Wed, 11 Dec 2019 21:26:31 GMT Server: ECAcc (agb/5353) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 30285 Connection: close
2024-04-19 00:45:04 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d Data Ascii: JFIFddDucky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf=
2024-04-19 00:45:04 UTC	13902	IN	Data Raw: af d3 b6 a6 f9 8b 7e db ea 57 1a 63 d9 a4 5b 09 24 33 36 68 a5 64 92 38 65 66 50 d7 57 28 e3 53 cd 75 fc 16 75 2f 93 85 c2 e3 ab b1 db ba 86 ee b0 d4 a4 fe 21 a7 4c cd 39 ef 26 39 99 47 86 02 70 ae 52 4a df 1f 7e 37 ac e8 e3 cd 8f 16 58 fd b6 77 38 bf 39 fc b5 9d b0 dc 6e 6d b5 6c 66 b5 78 74 ba be 9d 08 2e 7c 6e 38 ba e2 16 0c 4b 0f 19 1a 38 71 18 55 7d 1e 2c f5 e9 ea f9 5c bc 7d 1f 31 48 f6 be 57 bd a4 16 b8 92 08 e6 17 d0 9b 3e 55 85 2a d4 4e 4b 23 a6 f2 dc 57 72 c2 a6 7e d7 4c 77 7d 32 30 85 9f 64 2f 9f 5e bc 36 8a 25 59 6a 8c 3c 96 a3 8d dd 9d 17 15 59 66 44 11 57 b5 45 58 d0 8a b1 a1 05 b1 92 de 08 d4 66 c0 f2 e6 e2 b2 d3 21 aa 34 70 82 c0 8a 0f 2a 88 d2 81 aa 88 0a 88 80 d3 05 02 d1 54 02 85 00 68 54 16 07 82 8d 4a 2a 28 15 14 15 01 40 42 55 10 a5 Data Ascii: ~Wc[$36hd8efPW(Suu/!L9&9GpRJ~7Xw89nmlfxt.\|n8K8qU},\}1HW>UNK#Wr~Lw}20d/^6%Yj<YfDWEXf!4pThTJ*(@BU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50406	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:04 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:45:05 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:45:05 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2837 Expires: Fri, 19 Apr 2024 00:50:05 GMT Server: cloudflare CF-RAY: 8768deaa6cb66777-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50409	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:05 UTC	607	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:05 UTC	969	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 34 37 31 38 64 36 35 63 2d 64 66 62 35 2d 34 35 38 31 2d 39 33 35 39 2d 65 31 31 32 66 31 31 61 39 61 35 62 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"4718d65c-dfb5-4581-9359-e112f11a9a5b","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","bg":true,"s
2024-04-19 00:45:05 UTC	522	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:05 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50410	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:05 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:45:05 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:45:05 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99206 Server: cloudflare CF-RAY: 8768deaefaa27cc4-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50412	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:05 UTC	663	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:45:05 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 49037ed470aa68665b89eb07416d61de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AGAy7vInaw-jd4X26mzg-5lyGMHFkEbZcKRyRcEfYZyxmL4aQo50Cg== Age: 34118

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50415	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:45:06 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:45:06 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840098-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50416	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487504527 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:06 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50420	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	561	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:06 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 46 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:06 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50418	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	885	OUT	GET /rp.gif?ts=1713487504636&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:06 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50419	151.101.65.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	601	OUT	GET /ads/conversions-config/v1/pixel/config/t2_txtps67_telemetry HTTP/1.1 Host: www.redditstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86 access-control-allow-origin: * cache-control: max-age=300 content-type: application/json Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:06 GMT Via: 1.1 varnish Vary: Accept-Encoding,Origin Server: snooserv Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.02, "failure_fraction": 0.02}
2024-04-19 00:45:06 UTC	86	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 5f 68 61 73 68 22 3a 22 35 38 31 64 33 35 39 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 64 64 69 74 73 74 61 74 69 63 2e 63 6f 6d 2f 61 64 73 2f 35 38 31 64 33 35 39 64 2f 70 69 78 65 6c 2e 6a 73 22 7d Data Ascii: {"version_hash":"581d359d","url":"https://www.redditstatic.com/ads/581d359d/pixel.js"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50421	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=ecda5467-35e3-4845-bddf-a3130a7b7a3f&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	413	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:06 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50405	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487505373&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:07 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 4 referrer-policy: origin x-pinterest-rid: 1659063845302303 Date: Fri, 19 Apr 2024 00:45:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:07 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50422	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1177 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:06 UTC	1177	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 31 34 34 34 62 35 39 2d 63 32 66 33 2d 34 38 64 61 2d 61 30 34 61 2d 62 62 64 38 61 61 33 33 65 36 33 66 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d1444b59-c2f3-48da-a04a-bbd8aa33e63f","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","df":true,"s
2024-04-19 00:45:07 UTC	479	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:06 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: clear access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50424	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	1247	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487505235&cv=11&fst=1713487505235&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&hn=www.googleadservices.com&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:07 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:07 UTC	552	IN	Data Raw: 38 64 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8d8(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:45:07 UTC	464	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 68 65 6c 70 25 32 46 63 6f 6e 74 61 63 74 2d 75 73 2e 68 74 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 43 6f 6e 74 61 63 74 25 32 30 55 73 25 32 30 25 37 43 25 32 Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm\x26frm\x3d0\x26tiba\x3dContact%20Us%20%7C%2
2024-04-19 00:45:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50425	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:06 UTC	1371	OUT	GET /td/rul/978081151?random=1713487505235&cv=11&fst=1713487505235&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&hn=www.googleadservices.com&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:07 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:07 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 33 37 37 32 33 38 38 36 36 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j377238866","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j377238866\u0026tag_eid=44805651","trustedBiddingSignalsUr
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 33 37 37 32 33 38 38 36 36 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b Data Ascii: u0026rp_id=1j377238866","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c Data Ascii: 68","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 Data Ascii: "owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doub
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 Data Ascii: 28228","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026r
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a Data Ascii: 2806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 35 32 39 37 35 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: ttps://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 Data Ascii: ta":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA
2024-04-19 00:45:07 UTC	1255	IN	Data Raw: 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 Data Ascii: 94254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j481529751","metada

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50428	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	1477	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487505384 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:07 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:45:07 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 9993295891472653 Date: Fri, 19 Apr 2024 00:45:07 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50429	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	981	OUT	GET /i/adsct?bci=3&eci=2&event_id=402bba14-1493-4d3d-9699-cad8a3398b3a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=33bedbd5-18d5-4f19-900a-8d3d611dae6b&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:45:07 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:06 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5f2d473ae66c86ee strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: a2885b1d658a32067b8300bee0baaaeb5ca26e96277a0c33cb2a851ba1dd5890 connection: close
2024-04-19 00:45:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50430	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	1002	OUT	GET /i/adsct?bci=3&eci=2&event_id=402bba14-1493-4d3d-9699-cad8a3398b3a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=33bedbd5-18d5-4f19-900a-8d3d611dae6b&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:45:07 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5ff63275d6f18750 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: d8f37963854a0d8f33d0cb5003482b48015f0837fff3001256debda1515bf6d0 connection: close
2024-04-19 00:45:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50431	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	860	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&rl=&if=false&ts=1713487505556&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487505106&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:45:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50432	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	970	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&rl=&if=false&ts=1713487505556&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487505106&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:45:07 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:45:07 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:45:07 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50433	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 894 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	894	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 65 66 39 32 37 30 65 62 2d 31 33 61 31 2d 34 62 30 33 2d 61 39 62 37 2d 31 39 63 35 31 65 39 39 37 39 38 36 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"ef9270eb-13a1-4b03-a9b7-19c51e997986","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","df":true,"s
2024-04-19 00:45:07 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50435	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 3682 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	3682	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 36 35 30 35 63 39 63 30 2d 64 61 66 32 2d 34 30 31 34 2d 38 30 66 65 2d 62 62 65 66 33 64 63 64 36 64 66 61 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"6505c9c0-daf2-4014-80fe-bbef3dcd6dfa","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","df":true,"s
2024-04-19 00:45:07 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50436	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	1062	OUT	GET /pagead/1p-user-list/978081151/?random=1713487505235&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqIadPiMeI5-FnT0bb_MiiMzBzMX5wfmLNFT-aAWqsyeN9dk84&random=1693434779&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50442	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	607	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 967 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	967	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 31 63 33 61 62 66 64 39 2d 66 62 37 62 2d 34 66 30 62 2d 39 64 34 39 2d 35 66 63 61 65 35 36 66 63 39 30 38 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"1c3abfd9-fb7b-4f0b-9d49-5fcae56fc908","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","bg":true,"s
2024-04-19 00:45:07 UTC	522	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50443	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	607	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 967 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	967	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 34 36 34 32 35 63 61 66 2d 33 31 62 30 2d 34 37 37 65 2d 62 31 66 66 2d 62 36 65 66 35 31 32 39 63 32 37 35 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"46425caf-31b0-477e-b1ff-b6ef5129c275","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","bg":true,"s
2024-04-19 00:45:07 UTC	481	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear access-control-allow-origin: https://tools.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50438	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	1195	OUT	GET /assets/images/help/hero-contact-us.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:45:07 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58526 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:07 GMT Etag: "94b4-599744906ed00" Last-Modified: Wed, 11 Dec 2019 21:26:44 GMT Server: ECAcc (agb/5323) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 38068 Connection: close
2024-04-19 00:45:07 UTC	15279	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 83 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xm
2024-04-19 00:45:07 UTC	16383	IN	Data Raw: ad 71 fa ad 45 72 ec d6 36 21 b6 af fc 51 e8 53 5e e5 64 e3 3d c0 bd 51 83 aa b4 1a e3 82 82 a4 e5 15 8f 99 15 51 d9 a0 08 12 04 80 a0 43 3e d4 1b 0a db 04 81 20 d6 b9 b5 ee 32 41 18 39 02 ee d3 45 a8 e5 c8 c0 8a 85 58 10 a2 8a 02 06 0a 29 c1 03 82 29 c0 22 9e 02 8a 78 08 1b 7f 77 6f b6 6d d7 3b 95 eb 84 56 96 91 3e 69 1f 21 d2 d2 18 d2 43 6a 78 b8 e1 82 8d 69 af 95 c4 71 8e 43 f3 4b 75 df 6f 27 b1 e6 09 cc 97 93 c8 66 b0 6d 1a c8 db 1d 29 e1 31 a0 0c 5b d7 89 5e 8d 75 91 7d cf 16 2e 67 d2 e8 25 c1 cc 0e e0 ab c8 c1 73 c5 9f 31 ee d6 70 cd 69 74 fb af 93 6d 1b b7 b8 fb cd 1c 63 e9 78 eb cd 70 f7 1a 6d b4 e8 f7 7b 3e 7d 74 e9 7d 7d 5a 2d bf 31 07 44 db 5a e9 11 54 3c 1c 08 7f 10 e0 71 05 7c dd 9f 63 5c 67 29 fc 76 c8 2a de d2 b3 23 79 38 12 5a 5d 5a d7 21 Data Ascii: qEr6!QS^d=QQC> 2A9EX))"xwom;V>i!CjxiqCKuo'fm)1[^u}.g%s1pitmcxpm{>}t}}Z-1DZT<q\|c\g)v*#y8Z]Z!
2024-04-19 00:45:07 UTC	6406	IN	Data Raw: cb 9e 58 dc 76 99 6f 77 7b 18 ef 2e 24 73 4b 59 28 24 46 da 54 69 00 f1 e2 be 5e fe 5c 9b d9 e5 75 d6 7c 3a 3d 5a f1 6b 7b f5 ec e8 0c f2 eb 91 1a 28 36 2b 3c a9 8c 4d 38 7a d3 fe 2e bf 1d bf fd a9 78 b4 f8 26 1c 8f c9 d1 b6 91 ec b6 6d 03 01 48 19 c3 d4 9f f1 34 fc 7f 7b fe ad 4d 35 f8 41 1c b7 b0 43 fc 2d be dd 9f b3 13 07 d4 ac f6 da cf 8f ef 5a 9a eb f0 84 6c 6c a3 fe 1c 0c 67 ec b4 05 d6 71 c8 b8 81 40 30 18 05 b5 24 09 02 40 90 11 9f 6a 0c ce e1 37 83 61 71 2f d8 8d c7 b0 2e 93 bb 96 d7 11 c9 eb 55 eb 7c d3 9a 80 d5 03 85 50 38 1c 10 10 50 3c 20 70 45 39 01 08 a2 a0 28 84 8a 20 20 75 14 04 04 05 03 82 02 10 38 20 72 29 20 28 08 0a a1 ce fe 19 50 71 6f 34 ee 34 6e b0 71 06 37 d4 52 bc 57 a2 4f 95 f6 bf 8d db 1a 56 95 b9 6e e6 cf 94 2e 71 22 49 66 f0 Data Ascii: Xvow{.$sKY($FTi^\u\|:=Zk{(6+<M8z.x&mH4{M5AC-Zllgq@0$@j7aq/.U\|P8P< pE9( u8 r) (Pqo44nq7RWOVn.q"If

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50439	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	1202	OUT	GET /assets/images/help/hero-contact-us-mobile.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; kampyleUserSession=1713487486635; kampyleUserSessionsCount=4; kampyleSessionPageCounter=1; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:45:07 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 57962 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:07 GMT Etag: "764d-5997448408fc0" Last-Modified: Wed, 11 Dec 2019 21:26:31 GMT Server: ECAcc (agb/5353) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 30285 Connection: close
2024-04-19 00:45:07 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d Data Ascii: JFIFddDucky<1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf=
2024-04-19 00:45:07 UTC	13902	IN	Data Raw: af d3 b6 a6 f9 8b 7e db ea 57 1a 63 d9 a4 5b 09 24 33 36 68 a5 64 92 38 65 66 50 d7 57 28 e3 53 cd 75 fc 16 75 2f 93 85 c2 e3 ab b1 db ba 86 ee b0 d4 a4 fe 21 a7 4c cd 39 ef 26 39 99 47 86 02 70 ae 52 4a df 1f 7e 37 ac e8 e3 cd 8f 16 58 fd b6 77 38 bf 39 fc b5 9d b0 dc 6e 6d b5 6c 66 b5 78 74 ba be 9d 08 2e 7c 6e 38 ba e2 16 0c 4b 0f 19 1a 38 71 18 55 7d 1e 2c f5 e9 ea f9 5c bc 7d 1f 31 48 f6 be 57 bd a4 16 b8 92 08 e6 17 d0 9b 3e 55 85 2a d4 4e 4b 23 a6 f2 dc 57 72 c2 a6 7e d7 4c 77 7d 32 30 85 9f 64 2f 9f 5e bc 36 8a 25 59 6a 8c 3c 96 a3 8d dd 9d 17 15 59 66 44 11 57 b5 45 58 d0 8a b1 a1 05 b1 92 de 08 d4 66 c0 f2 e6 e2 b2 d3 21 aa 34 70 82 c0 8a 0f 2a 88 d2 81 aa 88 0a 88 80 d3 05 02 d1 54 02 85 00 68 54 16 07 82 8d 4a 2a 28 15 14 15 01 40 42 55 10 a5 Data Ascii: ~Wc[$36hd8efPW(Suu/!L9&9GpRJ~7Xw89nmlfxt.\|n8K8qU},\}1HW>UNK#Wr~Lw}20d/^6%Yj<YfDWEXf!4pThTJ*(@BU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50445	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	653	OUT	GET /rp.gif?ts=1713487504636&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:07 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50444	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:07 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487504527 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:07 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:07 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50446	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:08 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1030 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:08 UTC	1030	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 39 34 38 35 64 62 34 63 2d 37 61 61 34 2d 34 62 66 62 2d 38 35 33 32 2d 63 65 30 63 38 31 31 32 64 36 35 35 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"9485db4c-7aa4-4bfb-8532-ce0c8112d655","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","df":true,"s
2024-04-19 00:45:08 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:08 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50448	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:08 UTC	749	OUT	GET /i/adsct?bci=3&eci=2&event_id=402bba14-1493-4d3d-9699-cad8a3398b3a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=33bedbd5-18d5-4f19-900a-8d3d611dae6b&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:45:08 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:07 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 98a2e5e038794bfa strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: ff1dbae56ccfdcf479df1585a12e24be606a3fca050c981d0763fdc07326ac88 connection: close
2024-04-19 00:45:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50449	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:08 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487505373&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:08 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 4 referrer-policy: origin x-pinterest-rid: 1158173209137444 Date: Fri, 19 Apr 2024 00:45:08 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:08 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50450	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:08 UTC	628	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&rl=&if=false&ts=1713487505556&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487505106&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:08 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:45:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50454	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:09 UTC	1279	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487505384 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:09 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:45:09 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 1464756004841129 Date: Fri, 19 Apr 2024 00:45:09 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50452	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:09 UTC	770	OUT	GET /i/adsct?bci=3&eci=2&event_id=402bba14-1493-4d3d-9699-cad8a3398b3a&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=33bedbd5-18d5-4f19-900a-8d3d611dae6b&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:45:09 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:08 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2a85a6d635cfe356 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 935b905401cdea46b2f7446dfee210eea409a07e87afd48a2b3cfaa0bded01ae connection: close
2024-04-19 00:45:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50453	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:09 UTC	665	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&rl=&if=false&ts=1713487505556&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487505106&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:09 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:45:09 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:45:09 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50455	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:09 UTC	830	OUT	GET /pagead/1p-user-list/978081151/?random=1713487505235&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fhelp%2Fcontact-us.htm&frm=0&tiba=Contact%20Us%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqIadPiMeI5-FnT0bb_MiiMzBzMX5wfmLNFT-aAWqsyeN9dk84&random=1693434779&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50458	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:11 UTC	1362	OUT	GET / HTTP/1.1 Host: informeddelivery.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:45:11 UTC	307	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 19 Apr 2024 00:45:11 GMT Location: https://informeddelivery.usps.com/box/pages/intro/start.action Server: ECAcc (agb/538C) Strict-Transport-Security: max-age=31536000 ; includeSubDomains x-ruleset-version: 1.0 Transfer-Encoding: chunked Connection: close
2024-04-19 00:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50457	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:11 UTC	1390	OUT	GET /box/pages/intro/start.action HTTP/1.1 Host: informeddelivery.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459
2024-04-19 00:45:11 UTC	1865	IN	HTTP/1.1 302 Found Cache-Control: no-cache="set-cookie, set-cookie2" Content-Language: en-US Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/plain Date: Fri, 19 Apr 2024 00:45:11 GMT Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://www.usps.com/manage/informed-delivery.htm Server: ECAcc (agb/536B) Set-Cookie: ADRUM_BTa=R:0\|g:1a135abe-c2b7-40b1-ac47-a73706b69d94; Expires=Fri, 19-Apr-24 00:45:41 GMT; Path=/; Secure Set-Cookie: ADRUM_BTa=R:0\|g:1a135abe-c2b7-40b1-ac47-a73706b69d94\|n:customer1_c94569eb-be75-421e-99c6-a91f34c7994a; Expires=Fri, 19-Apr-24 00:45:41 GMT; Path=/; Secure Set-Cookie: SameSite=None; Expires=Fri, 19-Apr-24 00:45:41 GMT; Path=/; Secure Set-Cookie: JSESSIONID=00003F8te6i2FfW2Tdeosun7sx7:1dudvoba7; Path=/; Secure; HttpOnly Set-Cookie: ADRUM_BT1=R:0\|i:34143; Expires=Fri, 19-Apr-24 00:45:41 GMT; Path=/; Secure Set-Cookie: ADRUM_BT1=R:0\|i:34143\|e:51; Expires=Fri, 19-Apr-24 00:45:41 GMT; Path=/; Secure Set-Cookie: NSC_jogpsnfeefmjwfsz-mc_443=ffffffff3b462a1e45525d5f4f58455e445a4a4212d3;path=/;secure;httponly Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Frame-Options: SAMEORIGIN X-Powered-By: Servlet/3.0 x-ruleset-version: 1.0 Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50459	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:11 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 965 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:11 UTC	965	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 66 65 64 33 37 39 65 62 2d 36 62 66 65 2d 34 32 31 33 2d 38 63 36 39 2d 64 62 63 36 61 65 30 30 62 66 31 34 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"fed379eb-6bfe-4213-8c69-dbc6ae00bf14","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","bg":true,"s
2024-04-19 00:45:12 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:12 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50460	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:12 UTC	1484	OUT	GET /manage/informed-delivery.htm HTTP/1.1 Host: www.usps.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:12 UTC	1093	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 961 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/html Date: Fri, 19 Apr 2024 00:45:12 GMT Last-Modified: Fri, 19 Apr 2024 00:29:11 GMT Server: ECAcc (agb/53B0) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 78828 Connection: close
2024-04-19 00:45:12 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 4d 45 54 41 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 3c 74 69 74 6c 65 3e 49 6e 66 6f 72 6d 65 64 20 44 65 6c 69 76 65 72 79 20 2d 20 4d 61 69 6c 20 26 20 50 61 63 6b 61 67 65 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 20 7c 20 55 53 50 53 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 21 2d 2d 6c 73 3a 62 65 67 69 6e 5b 73 74 79 6c 65 73 68 65 65 74 5d 2d 2d 3e 0d 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 69 77 6f 76 2d 72 65 73 6f 75 72 63 65 73 2f 66 69 78 65 64 2d 6c 61 79 6f 75 74 2f 6f 6e 65 2d 63 6f 6c 75 6d 6e 2e Data Ascii: <!DOCTYPE html><html><head><META http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Informed Delivery - Mail & Package Notifications \| USPS</title>...ls:begin[stylesheet]--><link href="/iwov-resources/fixed-layout/one-column.
2024-04-19 00:45:12 UTC	16383	IN	Data Raw: 65 6d 65 6e 74 73 2f 68 65 61 64 65 72 2f 69 6d 61 67 65 73 2f 75 74 69 6c 69 74 79 2d 68 65 61 64 65 72 2f 6d 61 69 6c 6d 61 6e 2e 73 76 67 22 20 61 6c 74 3d 22 49 6e 66 6f 72 6d 65 64 20 44 65 6c 69 76 65 72 79 20 49 63 6f 6e 22 3e 0d 0a 09 09 09 09 09 09 3c 70 3e 49 6e 66 6f 72 6d 65 64 20 44 65 6c 69 76 65 72 79 3c 2f 70 3e 0d 0a 09 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 3c 2f 6c 69 3e 0d 0a 09 09 09 09 3c 6c 69 3e 0d 0a 09 09 09 09 09 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 6f 6f 6c 73 2e 75 73 70 73 2e 63 6f 6d 2f 66 69 6e 64 2d 6c 6f 63 61 74 69 6f 6e 2e 68 74 6d 22 3e 0d 0a 09 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: ements/header/images/utility-header/mailman.svg" alt="Informed Delivery Icon"><p>Informed Delivery</p></a></li><li><a role="menuitem" tabindex="-1" href="https://tools.usps.com/find-location.htm"><img src="https:/
2024-04-19 00:45:12 UTC	16383	IN	Data Raw: 7a 65 64 2d 64 69 72 65 63 74 2d 6d 61 69 6c 2e 68 74 6d 22 3e 43 75 73 74 6f 6d 69 7a 65 64 20 44 69 72 65 63 74 20 4d 61 69 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 62 75 73 69 6e 65 73 73 2f 70 6f 6c 69 74 69 63 61 6c 2d 6d 61 69 6c 2e 68 74 6d 22 3e 50 6f 6c 69 74 69 63 61 6c 20 4d 61 69 6c 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 3c 61 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e Data Ascii: zed-direct-mail.htm">Customized Direct Mail</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.usps.com/business/political-mail.htm">Political Mail</a></li> <li><a role="menuitem" tabindex="-1" href="https://www.
2024-04-19 00:45:12 UTC	16383	IN	Data Raw: 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 73 2d 72 6f 77 20 70 61 67 65 2d 77 72 61 70 20 74 65 6d 70 6c 61 74 65 2d 6e 6f 2d 6c 65 66 74 2d 6e 61 76 22 20 69 64 3d 22 6d 61 69 6e 63 6f 6e 74 65 6e 74 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 73 2d 66 78 72 22 20 69 64 3d 22 6c 73 2d 67 65 6e 37 2d 6c 73 2d 66 78 72 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 73 2d 63 6f 6c 22 20 69 64 3d 22 6c 73 2d 72 6f 77 2d 34 2d 63 6f 6c 2d 31 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 73 2d 63 6f 6c 2d 62 6f 64 79 22 20 69 64 3d 22 6c 73 2d 67 65 6e 38 2d 6c 73 2d 63 6f 6c 2d 62 6f 64 79 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 73 2d 72 6f 77 20 70 61 67 65 2d 77 Data Ascii: </div></div></div><div class="ls-row page-wrap template-no-left-nav" id="maincontent"><div class="ls-fxr" id="ls-gen7-ls-fxr"><div class="ls-col" id="ls-row-4-col-1"><div class="ls-col-body" id="ls-gen8-ls-col-body"><div class="ls-row page-w
2024-04-19 00:45:12 UTC	4	IN	Data Raw: 20 44 65 6c Data Ascii: Del
2024-04-19 00:45:12 UTC	13292	IN	Data Raw: 69 76 65 72 79 20 77 69 74 68 20 61 20 62 75 73 69 6e 65 73 73 20 73 74 72 65 65 74 20 6f 72 20 50 4f 20 42 6f 78 3c 73 75 70 3e 26 74 72 61 64 65 3b 3c 2f 73 75 70 3e 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 63 72 65 61 74 65 20 61 20 55 53 50 53 2e 63 6f 6d 20 62 75 73 69 6e 65 73 73 20 61 63 63 6f 75 6e 74 2e 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 3c 6c 69 3e 45 6e 74 65 72 20 79 6f 75 72 20 61 64 64 72 65 73 73 20 74 6f 20 63 68 65 63 6b 20 69 66 20 69 74 27 73 20 65 6c 69 67 69 62 6c 65 20 66 6f 72 20 49 6e 66 6f 72 6d 65 64 20 44 65 6c 69 76 65 72 79 2e 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 3c 6c 69 3e 50 72 6f 76 69 64 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 69 6e 66 6f 72 6d 61 74 Data Ascii: ivery with a business street or PO Box<sup>™</sup> address, you need to create a USPS.com business account.</span></li><li>Enter your address to check if it's eligible for Informed Delivery.</li><li>Provide your account informat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50461	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:12 UTC	1409	OUT	GET /ContentTemplates/common/css/reset.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58325 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 2062 Date: Fri, 19 Apr 2024 00:45:12 GMT Etag: "80e-4a6eec6e27600+ident" Last-Modified: Thu, 30 Jun 2011 14:32:56 GMT Server: ECAcc (agb/53C3) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2062 Connection: close
2024-04-19 00:45:13 UTC	2062	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 20 20 20 20 53 74 79 6c 69 6e 67 20 66 6f 72 20 68 74 6d 6c 20 65 6c 65 6d 65 6e 74 73 20 61 63 63 72 6f 73 73 20 61 6c 6c 20 6d 61 6a 6f 72 20 62 72 6f 77 73 65 72 73 20 69 73 20 72 65 73 65 74 2e 0d 0a 2a 2f 0d 0a 0d 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 75 6c 2c 20 6f 6c 2c 20 64 6c 2c 20 6c 69 2c 20 64 74 2c 20 64 64 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 72 65 2c 20 66 6f 72 6d 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 66 69 65 6c 64 73 65 74 2c 20 69 6e 70 75 74 2c 20 69 66 72 61 6d 65 2c 20 74 61 62 6c 65 2c 20 74 72 2c 20 74 68 2c 20 74 64 2c 20 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 Data Ascii: /* Styling for html elements accross all major browsers is reset.*/html, body, ul, ol, dl, li, dt, dd, h1, h2, h3, h4, h5, h6, pre, form, p, blockquote, fieldset, input, iframe, table, tr, th, td, caption { padding: 0; mar

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50462	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:12 UTC	1409	OUT	GET /ContentTemplates/common/css/fonts.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58325 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Cteonnt-Length: 2754 Date: Fri, 19 Apr 2024 00:45:12 GMT Etag: "ac2-494a1c35adcc0+ident" Last-Modified: Tue, 09 Nov 2010 17:06:35 GMT Server: ECAcc (agb/A421) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 2754 Connection: close
2024-04-19 00:45:13 UTC	2754	IN	Data Raw: 2f 2a 09 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 09 09 40 66 69 6c 65 6e 61 6d 65 09 09 66 6f 6e 74 73 2e 6a 73 70 20 28 63 6f 6e 74 65 6e 74 20 74 79 70 65 20 3d 20 22 74 65 78 74 2f 63 73 73 22 29 0d 0a 09 09 40 61 75 74 68 6f 72 09 09 09 61 7a 69 7a 2e 73 79 65 64 40 61 6b 71 61 2e 63 6f 6d 0d 0a 09 09 40 64 65 73 63 72 69 70 74 69 6f 6e 09 53 74 79 6c 65 20 64 65 66 69 6e 69 74 69 6f 6e 73 20 66 6f 72 20 74 68 65 20 67 6c 6f 62 61 6c 20 74 79 70 65 20 73 74 79 6c 65 73 20 26 61 6d 70 3b 20 63 6f 6c 6f 72 73 0d 0a 09 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: /*-----------------------------------------------------------------------------------@filenamefonts.jsp (content type = "text/css")@authoraziz.syed@akqa.com@descriptionStyle definitions for the global type styles & colors--------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50463	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:12 UTC	1403	OUT	GET /assets/css/bootstrap-custom.css HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1175	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.usps.com Age: 58968 Cache-Control: private Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: text/css Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "8691-587e872d0c400+ident" Last-Modified: Thu, 02 May 2019 14:28:32 GMT ntCoent-Length: 34449 Server: ECAcc (agb/5318) Strict-Transport-Security: max-age=31536000 ; includeSubDomains Vary: Accept-Encoding X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 34449 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 2e 69 6d 67 2d 62 67 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 74 6f 70 20 72 69 67 Data Ascii: .img-bg { position: absolute; right: 0; top: 0; position: relative; max-height: 100%; overflow: hidden; min-height: 300px; background-repeat: no-repeat; background-size: cover; background-position: top rig
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 09 Data Ascii:
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 0d 0a 09 0d 0a 09 0d 0a 0d 0a 7d 0d 0a 2e 70 61 67 65 2d 77 72 61 70 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 31 31 37 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 74 79 6c 65 3e 0d 0a 2e 6c 67 2d 74 78 74 2d 63 72 64 20 68 32 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 20 34 35 70 78 20 30 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 2e 6c 67 2d 69 6d 67 2d 63 61 72 64 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a Data Ascii: }.page-wrap{ max-width:none!important; padding: 0!important;}.container-fluid { max-width:1170px;}</style><style>.lg-txt-crd h2 { padding: 10px 0 45px 0; margin: 0;}.lg-img-card { padding-left:
2024-04-19 00:45:13 UTC	1682	IN	Data Raw: 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2e 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2d 2d 65 6d 62 65 64 64 65 64 20 74 62 6f 64 79 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0d 0a 7d 0d 0a 2f 2a 20 6c 69 6e 65 20 38 34 2c 20 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 77 6f 72 6b 73 70 61 63 65 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2f 5f 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2d 74 61 62 6c 65 74 2e 73 63 73 73 20 2a 2f 0d 0a 2e 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2e 72 65 67 75 6c 61 72 2d 74 61 62 6c 65 2d 2d 65 6d 62 65 64 64 65 64 20 74 68 65 61 64 Data Ascii: regular-table.regular-table--embedded tbody td:first-child { border-left: none; padding-left: 0;}/* line 84, ../../../../workspace/assets/styles/components/regular-table/_regular-table-tablet.scss */.regular-table.regular-table--embedded thead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50464	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:12 UTC	1477	OUT	GET /assets/images/business/informed-delivery/id_hero-mobile.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58320 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "11269-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 70249 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 de a0 03 00 04 00 00 00 01 00 00 00 e1 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 00 e1 03 de 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 46 Data Ascii: F
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 02 b3 10 3e 7e 7d 31 5f d6 6b 34 a2 95 ee 7e 39 f5 2a 97 d5 1f 31 7e cb bf 1e 17 e1 9f c4 8d 03 c4 1e 1f b3 b9 8e ca 70 da 4e a4 57 cb 96 33 b0 ee 0f 1e 37 48 42 e7 24 e7 8a fd fa 4d 60 5c 5d 69 fa ce 9d 2f 1a aa 08 dd 91 f8 e4 64 31 62 3f 1c 7e 62 bf 32 2f 7f e0 96 9f 0f 60 bc 59 3c 21 e2 5d 46 d6 c2 d5 e4 91 21 20 18 61 dd fe b3 70 52 86 46 6f a8 1e c6 be ba 9f 4a b8 d0 7c 2d 06 8d 69 79 72 d0 59 c0 90 5a 24 6f b5 54 20 08 59 8e 4f cc 71 90 09 38 f5 35 fc e5 e3 07 86 12 ce b1 94 f3 0c ba 4a 33 b5 a5 7d 2e ba 3d 16 f6 6d 7a 5b b1 fa 6f 05 f1 3c 70 34 a5 87 c4 a6 e3 ba f2 f2 3b 1d 7a 3d 4b 54 bf b8 59 64 29 75 a3 4c 3a 6d 3f bb 3c fd d0 02 93 9f f7 4d 73 1e 28 44 99 ee ed 65 b8 56 8b 50 8f e4 2e ea e0 3a fc c1 49 c6 72 0e 72 3e 6c 7a d2 5b 78 53 59 b7 46 Data Ascii: >~}1_k4~9*1~pNW37HB$M`\]i/d1b?~b2/`Y<!]F! apRFoJ\|-iyrYZ$oT YOq85J3}.=mz[o<p4;z=KTYd)uL:m?<Ms(DeVP.:Irr>lz[xSYF
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 5f Data Ascii: _
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: fd a7 0d b3 79 37 09 fe 96 a4 e0 f1 b5 c2 9c 86 f5 0c 07 6e f4 eb ab 8b 1d 4c 2d b5 d0 db 13 1f 94 90 77 02 dc 02 b8 1c 72 2b 8a bd 46 58 d2 29 1d 64 84 e5 92 61 f7 99 89 e3 9f fe bd 31 f5 69 8b c8 92 c4 65 9f 84 de ce 54 6c db f7 d5 57 b8 ef f5 ae 8a 75 9d ec cc ed a6 85 19 75 2d 57 42 d6 a2 b5 69 3c cf de 12 84 0d a8 40 1d 03 11 f3 7d 0e 6a 1f 10 9b 63 a5 1d 7f 4c 89 63 59 9c b9 55 ce 11 ba 32 fb 03 8c f3 c0 e6 b3 35 74 9f 50 89 ec 6e 01 28 f8 31 b1 fe 12 06 46 d2 3a 64 fe 55 8b e0 3f 12 a7 9d 73 a3 eb ff 00 ea 0e 62 98 6e 0c 59 1f 8d f8 fd 33 cf 35 96 26 0d ec f5 1f 3d 8f d2 bf f8 27 ef fc 14 f7 50 fd 9a 7c 49 6b f0 97 e2 e5 c3 dd 78 1e fe 5d b1 39 cc 8d a6 bc 84 7c d1 9c e4 c3 93 f3 47 8e 9c af 23 0d fd 45 dc fc 43 b1 d4 2d e3 ba f0 c4 a9 3d ac e8 b2 Data Ascii: y7nL-wr+FX)da1ieTlWuu-WBi<@}jcLcYU25tPn(1F:dU?sbnY35&='P\|Ikx]9\|G#EC-=
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 07 Data Ascii:
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 52 b4 94 62 ba b7 64 7d 80 15 4f 2a 6a dc 25 5b 86 af ca 1f d9 5f fe 0a 61 67 fb 7d cf e2 54 fd 8e bc 38 92 58 f8 62 48 a0 ba d4 7c 4f 72 6c 41 79 d4 b4 66 3b 4b 74 b9 9d d0 85 3c b1 8f 91 8a f0 8f db 63 e2 f7 fc 16 7f f6 68 f0 7d ef c6 bf 87 b6 7f 0f fc 63 e1 ad 22 36 b9 d4 2c 74 eb 2b ff 00 b6 41 02 72 d2 14 9a e0 34 88 a3 96 31 9d c0 02 db 70 0d 7a 54 f2 6a ce af b1 9d a3 2e cd d8 f1 2b f1 46 1a 38 7f ad d2 52 9c 35 d6 2a eb 4d df 9a f4 b9 fb af 8d f2 60 54 ab 11 8c 64 64 93 c6 05 7e 39 ff 00 c1 2a 3f e0 ac de 0d ff 00 82 8d 78 7b 53 f0 de b7 a4 af 86 3c 79 e1 d8 92 6b fd 3a 39 0c 96 f7 10 39 da 2e 6d 59 be 7d 81 be 57 46 f9 90 91 c9 04 1a fd 5f f1 e8 d7 db c0 1a f4 7e 17 f9 75 36 d3 6e c5 99 1d 45 c7 90 fe 51 ff 00 be f1 5c 98 bc 0d 5a 15 5d 1a ca cd Data Ascii: Rbd}Oj%[_ag}T8XbH\|OrlAyf;Kt<ch}c"6,t+Ar41pzTj.+F8R5M`Tdd~9*?x{S<yk:99.mY}WF_~u6nEQ\Z]
2024-04-19 00:45:13 UTC	4714	IN	Data Raw: e4 7a 83 86 1f cd b7 56 90 ce bf 63 85 44 f1 b1 6d aa a7 0c ac 3b c6 dd 43 0f 4f c3 1d 87 33 87 43 b2 95 5e e8 f8 8b f6 80 fd 9b 7e 11 fc 6f d0 67 d0 3c 5d a0 db dd db 4c 98 78 d9 32 a5 88 c6 51 b1 f2 3f 7e b9 1f a5 7f 30 ff 00 b5 ff 00 fc 12 1b c7 3f 0a e7 b9 f1 67 c0 e6 7d 63 4b 52 59 ac 5b 99 a3 1e 88 fd 1f d8 1e 4f 62 4f 15 fd 96 5c 58 59 b5 b9 99 e5 79 14 e1 5a 5d a3 6e 47 f0 ce a3 ee 93 da 41 c6 7d 3b f2 1a a7 86 b4 cb a8 64 d3 ad 8a 99 18 10 b1 4a 01 6c 11 c8 ee 18 73 c1 fc eb e8 b8 77 8a f1 b9 6c ef 42 5e ef 54 f6 7f d7 96 a7 81 c4 5c 2d 81 cc a1 cb 88 8e bd 24 b7 5f 3f f3 fb 8f f3 70 d4 74 dd 43 47 be 97 4a d5 e0 92 da e6 06 29 24 52 a9 47 56 1d 41 53 c8 35 44 f4 e3 ad 7f 6b 5f b5 6f fc 13 53 e0 b7 ed 11 69 2d c5 d5 af f6 7e b0 ab b6 2b cb 65 0b Data Ascii: zVcDm;CO3C^~og<]Lx2Q?~0?g}cKRY[ObO\XYyZ]nGA};dJlswlB^T\-$_?ptCGJ)$RGVAS5Dk_oSi-~+e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50466	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1470	OUT	GET /assets/images/business/informed-delivery/id_hero.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58320 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "18f8f-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53CF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 102287 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 ce a0 03 00 04 00 00 00 01 00 00 01 9d 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 9d 03 ce 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: a8 66 71 92 4e 45 42 d2 19 0e 4d 55 b9 94 46 86 47 21 55 41 24 9e 80 0a 4d 89 f6 45 3d 63 c4 3a 67 87 34 c9 b5 9d 5e 45 86 08 14 b3 b3 1e 00 15 f9 75 f1 1b c5 5a f7 ed 03 e2 f3 72 4c 90 e8 f6 cc 45 ac 40 e3 76 3f 8d bd cd 77 df 1b be 28 0f 89 ba f7 fc 21 7a 0c d8 d2 ec df 12 be 48 13 48 3b 0c 75 03 f5 ae 9f e1 cf 87 61 b1 89 23 83 69 db 8e 02 70 07 bf cb 5f 86 78 81 c6 7e d2 4f 05 87 7e ea dd f7 ff 00 80 7e d9 c0 bc 21 2a 30 58 dc 42 f7 9e cb b7 fc 12 a7 80 7e 15 32 46 82 70 76 fa 6e 1c d7 d3 5a 37 c2 db 16 81 52 48 9d 06 39 e0 81 f9 e2 b7 3c 27 6f a7 e3 ca b8 2b cf 18 0a 08 fc 8d 7d 05 a4 68 28 88 0d 8b a6 c3 ef b4 8f c2 bf 28 a5 08 cd ea cf d1 6b d6 9c 4f 20 d2 3c 09 71 a2 b1 6b 3b a9 a0 07 f8 b6 12 a4 7b 91 9a eb f4 ed 22 4b 22 26 90 b4 c5 89 f9 d3 0e Data Ascii: fqNEBMUFG!UA$ME=c:g4^EuZrLE@v?w(!zHH;ua#ip_x~O~~!*0XB~2FpvnZ7RH9<'o+}h((kO <qk;{"K"&
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 60 3a 9a ee c3 af 76 e4 b7 66 68 22 9c 85 ad 08 cb 47 8f 73 50 43 0b 3f 35 a1 1a 6c c2 9a e8 8a ee 64 59 85 33 96 61 5a 96 f1 87 4c 74 c5 50 25 80 f9 07 bd 69 da 6e f2 f7 63 9a a3 37 3d 44 36 cd bb 8e 95 a8 8b 20 c0 4a 89 17 cc 00 0a d0 55 f2 57 71 e6 82 1c ae 39 6e 8a 7c 8d d6 93 ce 0e c0 d4 06 35 91 f2 3b d4 e9 0c 60 e3 bd 04 b3 42 10 a7 96 fc aa 75 8c 1a 85 14 2a 70 2b cd be 2a fc 55 d0 be 12 f8 52 5f 11 eb 2d b9 c8 db 6f 0a f2 f2 c8 7a 28 1f ce b2 af 5e 14 a0 ea 54 76 48 da 85 09 d4 9a a7 4d 5d b3 96 f8 f1 f1 9e c7 e1 67 85 da db 4f 2b 2e b1 78 0a 5b 45 dd 73 fc 6c 3d 07 ea 6b f3 83 c2 9f 0c 74 dd 6f 54 97 c5 5e 26 b5 5b fb db c7 f3 27 9e 79 01 76 62 7d fb 7a 0e d5 a5 67 e2 4f 14 f8 f7 c4 93 f8 cf c4 d6 2f 2c d7 27 e5 dc 06 11 73 f2 aa 82 78 00 57 d5 Data Ascii: `:vfh"GsPC?5ldY3aZLtP%inc7=D6 JUWq9n\|5;`Bup+UR_-oz(^TvHM]gO+.x[Esl=ktoT^&['yvb}zgO/,'sxW
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 3a d7 59 17 ec d1 f0 ce 2d 46 1d 59 ae 7c 41 34 d1 bb 30 0d af ea 98 3b fa 8d a2 e3 69 1e 9c 71 d8 d0 2d 0f e5 7f f6 b9 f0 bf ed 45 e1 b8 bc 5d e0 0d 67 c1 3e 1a f0 fb 68 fa da 5e 26 dd 6e f2 f8 c5 15 c8 38 11 45 1d 84 29 e5 8c f2 db 93 3d 85 7e 4a 78 e3 f6 60 bf f8 84 64 d6 7e 20 f8 da da c2 f1 80 63 61 69 13 5a 5b 4e 00 e8 48 79 6e 9d be 84 03 dc 57 f5 67 ff 00 05 20 fd 9c 3c 11 e0 5f 10 ea fa 80 9b 56 7b 0f 17 68 41 64 37 3a d5 e3 04 b8 b3 7e 30 67 9f 69 c2 1e 81 b7 7a 03 5f 82 7f 0a fc 35 e0 cf 06 ea ab 7b a4 da 43 1c cc 36 1b 96 cc 92 b0 1d 33 2c 85 9c fe 26 be 2b 03 8d ab 80 cc 5c a8 ca cf f4 be ce f7 3e b7 2f e2 1c 6e 0a d8 8c 2c da 7d 7b 35 d5 35 b3 4f b3 3e 5c f8 13 fb 0d 7c 6c f1 1e a9 06 97 e1 4d 36 db c3 da 1e e1 fe 97 75 19 55 65 27 25 e3 83 Data Ascii: :Y-FY\|A40;iq-E]g>h^&n8E)=~Jx`d~ caiZ[NHynWg <_V{hAd7:~0giz_5{C63,&+\>/n,}{55O>\\|lM6uUe'%
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: d8 c5 b6 7d 94 90 54 80 a7 83 53 a1 bf bf d1 59 1f 7c fc 16 f8 1b e1 7f d9 c2 df 5d d4 ec b5 6f 2b 4f d5 9e 2b cb c8 65 09 0d a4 17 11 c6 12 69 d1 a4 66 91 7c dc 6e 7f 32 57 c1 ef 53 f8 d7 f6 b3 fd 9f 7c 09 e2 5b 7f 04 6a 9e 24 86 eb 5f bb 0a d0 69 7a 74 72 df de 4a 19 77 82 b0 da a4 8d 82 bf 36 4e 06 de 7a 57 cf fe 16 f0 e7 c5 ff 00 8e ff 00 b1 e6 bf e1 0f 8b ba 45 cf 8a 2f af 6e ae 20 d3 e3 d6 18 f8 7a f3 52 d3 d2 55 36 d3 5c 1b 78 c1 b5 9d 93 24 1f 29 32 40 2c 8b 9a c3 f0 6f ec 7f f1 9a ef e1 d7 83 ad 3c 5d e3 26 d0 f5 9f 0a 6b af ac c3 72 b1 43 aa df ad ba 8d 90 58 cb 79 22 c3 1c c5 63 25 24 95 a1 62 c3 00 74 cd 55 df 43 1e 48 b7 79 b3 6f 4f fd bf 2d 3c 5b f1 4b c5 1f 02 fc 15 e0 fb f8 3c 53 a1 58 5e 5e 5b a6 af 71 6b 14 53 bd a4 42 62 b2 43 6b 35 c5 Data Ascii: }TSY\|]o+O+eif\|n2WS\|[j$_iztrJw6NzWE/n zRU6\x$)2@,o<]&krCXy"c%$btUCHyoO-<[K<SX^^[qkSBbCk5
2024-04-19 00:45:13 UTC	5	IN	Data Raw: 4c 90 79 57 44 Data Ascii: LyWD
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ed c6 7e f2 7a ed f5 fa 75 af e5 d3 fe 0a e9 fb 60 bf 8d bc 6f 37 ec df e0 0b b5 fe c5 d0 64 0d ab 3c 2d 8f b4 df 0f e0 e3 19 48 7a 11 8e 5f 3e 82 be b0 f8 ef fb 69 f8 bf e0 0f c1 ed 4a f3 53 3f 6f d4 ee 23 fb 16 8f 70 48 f3 a3 b8 71 85 67 04 e2 45 8d 72 db 87 39 c0 20 e7 35 fc c6 f8 83 59 d4 35 4b f9 6f 6f 5c cd 35 c3 b4 92 48 f9 2c ce c7 2c c4 93 9c b1 e7 a9 af 93 9c 1a 97 24 8f 33 8d 73 e8 f2 2c 35 07 be fe 9d be 7f 97 a9 6a da 6d ea 1c 82 7c be 80 f4 19 ff 00 1a 82 f7 50 97 7f 92 0e 4a f5 ef c9 f7 ac b8 64 24 6c 0d 94 3d 4f 5e 9e c6 a1 95 a1 f3 55 61 f9 c9 e4 90 0e 4f b7 d4 57 5d 3a 67 e5 e8 e8 12 f3 33 94 43 88 f8 ce 33 fa fa 55 bb 8b a8 27 7f b3 59 2f cb d3 60 3d fd 7e b5 cc d9 cc 00 7d d9 e7 20 03 d7 23 bf 51 f9 73 5a 16 4d 24 b7 03 71 39 2d 9d cb Data Ascii: ~zu`o7d<-Hz_>iJS?o#pHqgEr9 5Y5Koo\5H,,$3s,5jm\|PJd$l=O^UaOW]:g3C3U'Y/`=~} #QsZM$q9-
2024-04-19 00:45:13 UTC	3984	IN	Data Raw: 81 fe c1 61 5a f6 be 3b f0 96 a1 20 6b 7b c4 19 20 e0 ee 5f d1 d4 73 5f 28 2c 52 0f 96 2c 80 79 c0 1c e6 ba 2b 0b 79 d4 65 c3 7c bc 82 6b 1a d8 4a 69 5d 37 fd 7c 8c 67 42 29 5e e7 d3 9f db da 38 f9 8c b0 b6 47 27 7a f5 1d fa e2 bf 67 7f e0 88 7a b6 9b 75 fb 58 f8 8f c8 96 19 71 e1 4b be 8e 0e 3f d3 ac 73 5f cf a5 85 9c 65 0e e8 c6 19 73 9c f1 c7 7c d7 ee 37 fc 10 8f 4a 8e df f6 b2 f1 14 c0 a8 0d e1 1b c0 33 d7 fe 3f ec 3e a2 b9 f0 b4 ed 55 6a 71 24 ae 7f ff d0 fe ee 4f 53 49 4a 7a 9a 4a 00 28 a2 8a 00 28 00 9e 07 5a 29 44 be 41 f3 b1 9d 9f 36 3d 71 cd 00 7f 9d 2f fc 14 ef c4 b1 7c 48 fd bf 3e 2c 78 93 7e f4 ff 00 84 82 e2 ce 36 1d 0a 58 85 b5 18 f6 c4 55 f9 d7 7f 61 7b 66 f9 8f ee 8e f5 f4 3f c5 4d 5a f3 c4 bf 14 7c 4d af 6a 6d be e2 f3 56 be 9e 43 ea d2 Data Ascii: aZ; k{ _s_(,R,y+ye\|kJi]7\|gB)^8G'zgzuXqK?s_es\|7J3?>Ujq$OSIJzJ((Z)DA6=q/\|H>,x~6XUa{f?MZ\|MjmVC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50465	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1484	OUT	GET /assets/images/business/informed-delivery/busy-person-red-shirt.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58458 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "13ace-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/A40D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 80590 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 71 a0 03 00 04 00 00 00 01 00 00 01 71 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 71 02 71 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*iqq8Photoshop 3.08BIM8BIM%B~qq"}!1AQa"q2#BR$3br
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 1c 10 33 59 57 9f 33 b9 f9 f6 63 53 df 48 69 da 1b f5 a9 e3 1b 88 63 c5 55 2f f3 54 f1 10 0e 09 e4 75 ac 25 0b 6a 8f 39 33 42 32 14 e2 ba 2d 26 d6 5b a1 e5 c7 c9 66 c5 73 49 80 bc 9f c6 bd 2b c1 51 09 2f 11 00 cf cd 5c b8 a8 fe ed 95 42 ab 53 56 47 bb fc 38 f8 7f aa dc de db 4f b8 84 07 35 fa 09 e0 ff 00 04 cf 15 ba ef 71 90 2b c4 fe 1c 41 1d b5 bc 3f 21 e0 0e d5 f4 ee 93 ad a4 31 85 20 fe 55 f9 1d 5c 1d 05 ce e5 3d 59 f6 15 31 18 89 b8 b5 1d 8b 10 f8 26 e1 c9 0b 8a 65 e7 85 1e dd 7e 7c 71 df 15 dd f8 77 5a 82 fd dc 05 3c 0a 4f 13 de b4 36 86 48 90 f3 5f 1b 8c e1 6a 11 a6 eb fb 47 6f 53 db a3 c4 35 dc bd 8f 2e be 87 90 5d 69 2b 18 20 9c 01 5c e4 f6 a9 06 e2 64 c6 54 f4 ae 9a ea e6 79 d4 fc a6 bc bf c5 07 50 86 33 24 08 d8 19 ce 3d eb c3 a1 47 0b 4a a2 9f Data Ascii: 3YW3cSHicU/Tu%j93B2-&[fsI+Q/\BSVG8O5q+A?!1 U\=Y1&e~\|qwZ<O6H_jGoS5.]i+ \dTyP3$=GJ
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: c2 b5 cf ac ca f3 4c 3d d4 25 03 c7 ad af 60 ba 8f 7c d1 70 de d5 e4 5f 1a fc 07 2f 8c b4 94 d3 34 98 03 33 e3 26 bd db c2 b7 8f ad 7f ac b4 28 83 81 f2 e2 ad 6b 5a d4 7e 1c 9e 33 77 06 d5 66 0a b9 15 f9 37 11 66 79 9e 5c f9 e9 fb c7 ea b9 36 5f 85 c4 c7 55 ca 7c ed fb 29 fe ce be 23 f8 7f e3 b5 d7 ae 6d 46 d5 7d c0 81 8e d5 fb 01 0e 3e ce 88 f0 9c 92 33 c5 79 bf c3 6b fb 1b cd 3e 39 14 a9 66 19 af 6f b4 4b 79 40 04 f3 5e c6 55 e2 7e 75 0a 56 9d 1f 8b c8 f8 3c eb 87 30 6a a3 f6 6d b5 b5 ee 7d 39 a5 eb 3a 74 da 6c 6d b9 63 54 40 08 3d b0 2b f9 bc ff 00 82 bb 68 57 de 20 9f 52 f8 93 6b 6c 46 9f 6d e1 ff 00 12 d8 09 7d 4b 68 f7 8c b9 fa ed 35 fb 91 e6 5d 98 0c 0b 29 0a 7d 2b f2 f7 fe 0a c1 a6 c5 67 fb 28 6a 72 a0 e4 da 6b 63 ff 00 28 5a 8d 7e e9 c2 be 34 e3 Data Ascii: L=%`\|p_/43&(kZ~3wf7fy\6_U\|)#mF}>3yk>9foKy@^U~uV<0jm}9:tlmcT@=+hW RklFm}Kh5])}+g(jrkc(Z~4
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 53 47 97 85 e3 ea 78 77 fb ea 2a 6b b3 3f ce c3 e1 97 ec bd f1 7b e0 05 f2 5c 5d e9 17 90 ac 27 96 11 b5 7d 87 a5 7e d4 5e 28 d1 64 4b 1b f1 3c 0c 9f 28 de 18 74 af ec ff 00 c7 1f 0a 7c 0f ac d9 c9 1d e6 9f 03 82 0f 54 5f f0 af c8 df da 1f f6 60 f8 68 f2 4b 71 06 97 08 6e 48 c2 0a ef ce 72 bc d6 84 ed 5e 51 97 a1 f5 f8 0e 33 cb 71 51 5e d7 0f 65 e4 cf c6 2d 5f f6 a4 bc be b2 58 ee ee 1d 83 75 ce 6b 88 f1 bf 8d 62 f1 67 c3 5f 10 3c 79 e3 40 f1 03 7f e5 16 f6 bd ff 00 c6 5f 09 bc 2b a5 5d 34 1f 61 40 aa 7d 2b c9 fe 27 69 ba 06 99 f0 ab c4 10 69 71 2c 72 7f 61 78 83 a7 a7 f6 2d ee 6b a7 83 a8 d7 59 9d 1e 7b 7c 48 e3 e3 3a f9 7c b2 da 9f 56 8b 4e c7 c5 bf f0 64 8f fc 9d bf c6 bf fb 15 ac 7f f4 b4 d7 fa 26 6a 1f eb e6 fa b5 7f 9d 9f fc 19 23 ff 00 27 6f f1 af Data Ascii: SGxw*k?{\]'}~^(dK<(t\|T_`hKqnHr^Q3qQ^e-_Xukbg_<y@_+]4a@}+'iiq,rax-kY{\|H:\|VNd&j#'o
2024-04-19 00:45:13 UTC	15057	IN	Data Raw: 66 01 22 6b 25 53 12 f9 64 48 8e 5f 78 22 be 58 ff 00 87 11 7f c1 4f 47 fc d3 39 7f f0 26 df ff 00 8b a4 ff 00 87 10 7f c1 4e ff 00 e8 99 cb ff 00 81 36 ff 00 fc 5d 37 2c 37 fd 06 ae 9f 69 74 f9 ef ae bd fb 07 2c bf 94 fd 24 d4 fe 02 7e c5 e3 f6 90 d6 74 0b 1f 07 78 6d b4 01 0b c7 a4 c8 93 40 cb e5 9d 42 34 7b 83 08 d4 8b 5c 46 b6 dc 34 9b a3 78 d5 8b 88 db b7 f3 5b f1 87 45 d0 3c 37 f1 77 c5 5e 1d f0 a5 c5 b5 de 95 61 ab de db d9 cf 66 ed 25 bc 90 47 3b ac 6d 0b b7 cc d1 95 03 69 3c 91 8a fd 2d 1f f0 41 ff 00 f8 29 d0 e9 f0 ca 4f fc 09 b7 ff 00 e2 ea 41 ff 00 04 25 ff 00 82 a0 28 c2 fc 35 98 7f db d5 bf ff 00 17 5d 99 56 2f 07 87 6d cb 14 a5 a2 5a c9 7d fb b2 67 4e 6f ec 9f 91 14 57 eb c7 fc 38 9f fe 0a 83 ff 00 44 d6 6f fc 0a b7 ff 00 e2 e8 ff 00 87 13 Data Ascii: f"k%SdH_x"XOG9&N6]7,7it,$~txm@B4{\F4x[E<7w^af%G;mi<-A)OA%(5]V/mZ}gNoW8Do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50467	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1475	OUT	GET /assets/images/business/informed-delivery/id_mockups-1.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59038 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "d3c4-5e87ccdbf2c40" Last-Modified: Mon, 12 Sep 2022 15:46:49 GMT Server: ECAcc (agb/52F9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 54212 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 95 08 06 00 00 00 a0 6e c0 5d 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 4d f7 ff c0 f1 57 76 24 32 90 08 89 11 62 8f 48 ad 18 25 a9 d2 9a b5 5a ad bd a5 a5 4a 7d ad 16 2d 35 8a d2 52 e5 2b 55 a3 a8 5f 97 0a f5 15 44 88 bd 49 cc 50 91 04 31 13 89 0c d9 39 bf 3f ae 7b 9a 2b 21 c3 cd 20 ef e7 e3 71 1f ee 3d e3 f3 f9 9c 7b e3 bc cf 67 9c cf 31 50 14 05 21 84 10 42 3c 9b 61 51 17 40 08 21 84 28 ee 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 03 09 96 42 08 21 44 0e 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 03 09 96 42 08 21 44 0e 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 Data Ascii: PNGIHDRn]pHYs&? IDATxw\|MWv$2bH%ZJ}-5R+U_DIP19?{+! q={g1P!B<aQ@!($X!9`)B@BB!D$X!9`)B@BB!D$X!9`)B@B
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: a2 76 ed da 38 3a 3a f2 d1 47 1f 15 48 39 0e 1c 38 40 99 32 65 d4 cf 4f 0f 1a 72 77 77 07 a0 4c 99 32 94 2a 55 0a 67 67 67 f5 b3 76 e2 e0 86 0d 1b f2 dd 77 df b1 74 e9 52 82 83 83 d9 b3 67 4f 81 cd 93 28 84 10 25 49 89 0f 9f 95 96 90 00 00 20 00 49 44 41 54 96 a5 4a 95 c2 c2 c2 82 71 e3 c6 a9 cb c6 8d 1b 47 c3 86 0d d5 cf 5b b7 6e c5 ca ca 8a 88 88 08 8e 1d 3b 46 9b 36 6d f4 5e 0e 67 67 e7 6c fb 2c b5 b4 7d 92 cf b3 63 c7 0e ba 75 eb c6 a2 45 8b e8 d9 b3 27 ed db b7 67 e2 c4 89 fa 2c a6 10 42 94 48 25 be 19 f6 ed b7 df 26 3a 3a 1a 80 4e 9d 3a e1 e8 e8 c8 3b ef bc 43 44 44 04 a0 e9 33 fc fc f3 cf f9 e1 87 1f 98 30 61 02 53 a6 4c 41 51 14 40 53 03 2d a8 c7 c1 e4 c7 91 23 47 28 5b b6 2c 1f 7f fc 31 6e 6e 6e f8 f9 f9 91 91 91 51 d4 c5 12 42 88 97 5e 89 0f 96 Data Ascii: v8::GH98@2eOrwwL2*UgggvwtRgO(%I IDATJqG[n;F6m^ggl,}cuE'g,BH%&::N:;CDD30aSLAQ@S-#G([,1nnnQB^
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: d4 d4 54 ec ec ec d0 d7 cf fd cf 35 25 25 85 47 8f 1e 61 6b 6b 4b b1 62 c5 f2 2d 93 46 a3 21 26 26 06 73 73 73 ad 32 e5 26 21 21 01 63 63 63 2a 56 ac 98 eb ba c4 c4 44 4a 96 2c 99 67 d9 00 92 92 92 d0 d5 d5 cd f3 58 65 cb 96 a5 4e 9d 3a ea fb 7a f5 ea 71 f9 f2 65 56 ad 5a 85 46 a3 c9 b3 ad b2 eb 58 bb 9d 5b 00 00 20 00 49 44 41 54 61 6a 6a 8a 89 89 c9 4b eb f1 a6 e2 e3 e3 51 14 e5 a5 c3 de 42 bc cb 64 18 56 e4 6a c5 8a 15 b4 6e dd 1a 27 27 27 5a b4 68 c1 8a 15 2b d4 75 7b f7 ee c5 c2 c2 82 c3 87 0f 6b ed 33 6f de 3c 2a 55 aa 44 46 46 06 cf 9e 3d 63 d4 a8 51 58 58 58 e0 e0 e0 80 b9 b9 39 3d 7a f4 20 25 25 05 80 a3 47 8f 62 61 61 41 64 64 64 ae c7 df b4 69 13 95 2a 55 c2 da da 1a 7b 7b 7b 4a 96 2c c9 f7 df 7f af b5 8d a2 28 8c 1c 39 12 4b 4b 4b ca 96 2d 8b Data Ascii: T5%%GakkKb-F!&&sss2&!!cccVDJ,gXeN:zqeVZFX[ IDATajjKQBdVjn'''Zh+u{k3o<UDFF=cQXXX9=z %%GbaaAdddi*U{{{J,(9KKK-
2024-04-19 00:45:13 UTC	5062	IN	Data Raw: 3b 04 51 46 2a 44 b2 0c 08 f0 e7 d8 b1 8b 5c b9 92 50 de a1 08 21 2a 88 2b 57 12 30 18 0c e5 1d 86 28 23 16 e5 1d c0 c3 e0 e6 e6 c8 ab af f6 61 d8 b0 d9 34 6c e8 87 ad ad 75 79 87 24 84 78 8c 65 66 e6 70 fa 74 0c 33 67 be 58 de a1 88 32 52 21 92 25 40 8f 1e 21 b4 6e 1d c4 d9 b3 31 64 65 e5 94 77 38 42 88 c7 98 8d 8d 35 f5 eb fb e1 ec 6c 5f de a1 88 32 52 61 92 25 80 b3 bf a2 0a 5a 00 00 13 2e 49 44 41 54 b3 3d 21 21 81 e5 1d 86 10 42 88 7f 99 0a 71 cf 52 08 21 84 b8 1f 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 3c 12 cc cd cd cb 3b 84 12 49 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 Data Ascii: ;QFD\P!+W0(#a4luy$xefpt3gX2R!%@!n1dew8B5l_2Ra%Z.IDAT=!!BqR!,B,B,B,B,B,B,B,B<;IB!4HB!4HB!4HB!4HB!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50468	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1475	OUT	GET /assets/images/business/informed-delivery/id_mockups-2.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59032 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "bacd-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/53CB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 47821 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 97 08 06 00 00 00 ed a6 61 56 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 7d 74 1b d5 9d 3f fe b7 e4 c4 04 93 28 69 eb 40 8b d2 38 cb 53 2d 7a 38 18 6c 64 da 25 24 05 d1 d0 3d 9c c6 16 db f2 3d 0d a9 dc b2 89 a9 83 48 fa 00 f5 3a b0 a4 34 71 c5 69 17 9c 3a 36 71 d2 2e 11 26 f4 89 4a 71 e9 39 6d 1a d5 84 b8 14 2c 6c 6a 68 d2 71 b6 01 12 27 a2 d0 f8 07 44 26 5e 92 d8 9e df 1f d2 8c 67 46 a3 47 eb c9 f2 fb b5 eb 12 4b a3 d1 d5 48 9e 8f 3e f7 7e ee 1d 83 28 8a 20 22 22 a2 e8 8c b9 6e 00 11 11 51 be 63 b0 24 22 22 8a 83 c1 92 88 88 28 0e 06 4b 22 22 a2 38 18 2c 89 88 88 e2 60 b0 24 22 22 8a 83 c1 92 88 88 28 0e 06 4b 22 22 a2 38 18 2c 89 Data Ascii: PNGIHDRaVpHYs&? IDATx}t?(i@8S-z8ld%$==H:4qi:6q.&Jq9m,ljhq'D&^gFGKH>~( ""nQc$""(K""8,`$""(K""8,
2024-04-19 00:45:13 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 44 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 44 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 00 de e0 e3 00 00 20 00 49 44 41 54 44 14 07 83 25 11 11 65 c4 c4 c4 44 ae 9b 90 36 0c 96 44 44 44 71 30 58 12 11 51 46 18 0c 86 5c 37 21 6d 18 2c 89 88 28 23 b2 1d 2c 17 2e 5c 78 eb 93 4f 3e b9 20 13 fb 66 b0 24 22 a2 82 30 7b f6 ec ea b3 67 cf 1e fd c9 4f 7e 52 91 ee 7d 33 58 12 11 51 41 18 1f 1f c7 99 33 67 e6 9f 39 73 66 4f 5b 5b 5b 5a 33 4c 06 4b 22 22 2a 08 63 63 63 38 73 e6 0c ce 9c 39 53 76 e6 cc 99 9a 74 ee 7b 56 3a 77 46 44 44 94 2b e1 cc 52 fa 75 49 3a f7 cd 60 49 44 44 05 41 ca 2c 33 81 c1 92 88 88 0a c2 f8 f8 38 ce 9e 3d 9b Data Ascii: %QDDDq0X`IDD%QDDDq0X`IDD%QDDDq0X`ID IDATD%eD6DDDq0XQF\7!m,(#,.\xO> f$"0{gO~R}3XQA3g9sfO[[[Z3LK""*ccc8s9Svt{V:wFDD+RuI:`IDDA,38=
2024-04-19 00:45:13 UTC	15054	IN	Data Raw: 0e 39 84 fb ef bf 9f 44 22 c1 92 25 4b 18 3e 7c 38 f7 dd 77 1f 17 5c 70 41 bb c6 f3 4d ef e3 ee dd bb f3 e1 87 1f b6 3a fe e8 a3 8f 32 7d fa f4 8a 8e 8f 93 52 60 9a 26 f1 78 8c aa aa ad c3 bd 4b 3f cc 26 0d 33 9c 4e 59 5b db 25 f4 86 35 2d 4c d7 42 aa d0 de 2e e6 86 82 9a db ef b4 2c 1b db b1 51 5b c7 05 e1 00 00 20 00 49 44 41 54 84 19 a9 ed 38 28 29 20 ea af 0c db 47 3c 64 34 70 da b2 f5 12 6c 5b d1 df 33 ca 84 ef fb 6c b3 cd 36 1c 79 e4 91 1b 3d 57 53 53 c3 51 47 1d 55 96 d1 44 df 14 0b c0 dc b9 73 39 ee b8 e3 18 3c 78 30 00 8e e3 70 ee b9 e7 22 84 60 fe fc f9 ed 1a 8b 10 02 c3 30 d8 7d f7 dd d9 65 97 5d 5a 9d 5f b2 64 09 5d ba 74 e1 ca 2b af cc 0f e2 1d 3a 74 28 bd 7a f5 e2 b3 cf 3e 6b d7 58 72 f1 7c d3 73 93 63 fe fc f9 fc e5 2f 7f e1 f2 cb 2f 6f f7 Data Ascii: 9D"%K>\|8w\pAM:2}R`&xK?&3NY[%5-LB.,Q[ IDAT8() G<d4pl[3l6y=WSSQGUDs9<x0p"`0}e]Z_d]t+:t(z>kXr\|sc//o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50470	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1475	OUT	GET /assets/images/business/informed-delivery/id_mockups-3.png HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58320 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "16d66-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93542 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 97 08 06 00 00 00 ed a6 61 56 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 4c f7 fe c7 f1 d7 64 df 37 89 88 84 c4 be 13 04 b1 44 28 5a 5a 2d 57 ab 8b 56 a9 96 74 b9 6a 6b f1 bb ba d0 56 ab ca ad 2e 96 68 95 d2 ba 6d b5 9a a2 45 55 04 a5 76 41 4a 22 b5 84 08 91 45 f6 65 32 99 f9 fd 31 99 23 91 65 32 91 0d 9f e7 e3 91 87 e4 6c f3 3d 73 c6 bc cf 77 39 e7 a8 74 3a 1d 42 08 21 84 28 9f 59 5d 17 40 08 21 84 a8 ef 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 Data Ascii: PNGIHDRaVpHYs&? IDATxy\|Ld7D(ZZ-WVtjkV.hmEUvAJ"Ee21#e2l=sw9t:B!(Y]@!$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 68 e0 54 2b 5f b0 1e 1e 2e 65 b6 30 54 46 55 3e 0b d6 d6 96 2c 5f fe 0b 05 05 1a fe f8 e3 28 e3 c6 3d 80 93 93 3d df 7c f3 3b 6a b5 06 6b 6b 4b 86 0c a9 da a5 15 96 96 16 b4 6a 55 b9 d6 8d f2 8e 8b ad ad 35 1d 3b 9a 3e ca fc e3 3f 53 f9 00 00 20 00 49 44 41 54 56 95 fd 1c 89 bb 8b 84 a5 10 a2 5a 34 6c e8 c2 87 1f be c8 1b 6f 7c c9 e9 d3 17 99 35 eb e6 53 7d 9c 9d ed 79 e7 9d 09 25 9a b2 85 b8 93 54 5b 58 16 0f 48 c3 fd 40 85 10 f7 96 fe fd 3b b3 75 eb 42 76 ef 8e e4 ca 95 64 54 2a f0 f3 f3 22 28 a8 73 99 37 47 17 e2 4e 21 61 29 84 a8 56 f6 f6 36 3c f8 60 d9 b7 e3 13 e2 4e 55 23 61 59 5d 83 86 84 10 42 88 fa 40 c2 52 08 21 84 30 a2 da c2 52 9a 5e 85 10 42 dc ad e4 e1 6b 42 08 21 84 11 12 96 42 08 21 84 11 12 96 42 08 21 84 11 12 96 f7 98 75 eb d6 31 74 e8 Data Ascii: hT+_.e0TFU>,_(==\|;jkkKjU5;>?S IDATVZ4lo\|5S}y%T[XH@;uBvdT*"(s7GN!a)V6<`NU#aY]B@R!0R^BkB!B!B!u1t
2024-04-19 00:45:13 UTC	2	IN	Data Raw: 65 46 Data Ascii: eF
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 22 91 e0 f9 f3 e7 28 28 28 f8 cf cb 56 d4 e1 b7 df 7e 43 cb 96 2d a1 af af 0f 3d 3d 3d 34 6a d4 08 e1 e1 e1 78 f3 e6 4d 99 e5 29 b6 bb e5 cb 97 23 34 34 b4 bc 55 2e b1 4c 6d f8 2f db 71 79 f3 5f d9 f4 53 40 47 47 07 22 91 88 fd ca 93 4a e5 2c af 5f bf 8e b8 b8 38 b5 c7 de bc 79 83 33 67 ce 20 f9 cd 2b 40 00 00 20 00 49 44 41 54 35 35 15 00 70 e7 ce 1d b8 bb bb e3 c1 83 07 58 b8 70 21 0e 1e 3c 88 71 e3 c6 61 d5 aa 55 98 38 71 22 cb 97 94 94 84 33 67 ce a0 69 d3 a6 70 73 73 83 9b 9b 1b 1c 1d 1d 11 13 13 03 6f 6f 6f 2c 5f be 1c 00 50 54 54 84 5e bd 7a 61 c5 8a 15 18 36 6c 18 0e 1c 38 80 ff fd ef 7f c8 cf cf 47 e7 ce 9d 71 ea d4 29 8d 7a 17 16 16 e2 cc 99 33 10 8b c5 ac 0c c5 5f b3 66 cd 00 00 17 2f 5e c4 93 27 4f ca c9 5a 32 be fa ea 2b 4c 9d 3a b5 5c 65 6a Data Ascii: "(((V~C-===4jxM)#44U.Lm/qy_S@GG"J,_8y3g +@ IDAT55pXp!<qaU8q"3gipssooo,_PTT^za6l8Gq)z3_f/^'OZ2+L:\ej
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: f9 f2 e5 4b 34 6f de 1c a5 a5 a5 58 b1 62 c5 1b 0f d0 ff 35 38 bd d4 5f 04 02 01 82 82 82 30 6e dc 38 1c 3b 76 0c 66 66 66 88 8f 8f 87 9d 9d 1d 7e fe f9 e7 8f 2d de ff 2c dc 98 fb 6f 52 6f 9c a5 50 28 c4 c9 93 27 61 6c 6c 0c 91 48 f4 b1 c5 a9 33 2e 2e 2e 78 f4 e8 11 9a 34 69 52 6b be 5b b7 6e a1 71 e3 c6 6a 97 fb 5f d7 0b c7 db e1 e5 e5 85 cc cc 4c dc bc 79 13 c5 c5 82 a5 3e e9 00 00 20 00 49 44 41 54 c5 68 d5 aa 15 da b7 6f af 34 50 86 e3 ed e1 c6 dc 7f 93 7a e3 2c 35 34 34 e4 42 e7 ff 4b e8 ea ea aa b5 54 24 7b 1d 40 5d fe eb 7a e1 78 7b 1a 36 6c f8 5e 77 3a e1 60 c3 8d b9 ff 26 f5 ee d5 11 0e 0e 0e 0e 0e 8e ba c2 39 4b 0e 0e 0e 0e 0e 0e 15 70 ce 92 83 83 83 83 83 43 05 9c b3 e4 e0 e0 e0 e0 e0 50 01 e7 2c 39 38 38 38 38 38 54 c0 39 4b 0e 0e 0e 0e 0e 0e Data Ascii: K4oXb58_0n8;vfff~-,oRoP('allH3...x4iRk[nqj_Ly> IDATho4Pz,544BKT${@]zx{6l^w:`&9KpCP,988888T9K
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 2a 8a ee dd bb d3 ad 5b 37 b4 b4 b4 88 89 89 a1 76 ed da af d5 36 de 75 54 6f 62 3e 7a c4 88 11 ce c0 61 80 b1 63 c7 02 79 ae ce 67 ce 9c d1 e8 7a 6f 6f ef 12 f7 4d fd 19 1e 3e 7c 48 48 48 08 8f 1e 3d a2 5e bd 7a b8 ba ba 72 e3 c6 0d 76 ef de cd 47 1f 7d 44 62 62 22 5a 5a 5a b4 6e dd 5a 76 9d 10 82 7d fb f6 71 e1 c2 05 cc cc cc e8 db b7 6f b1 4e 21 17 2e 5c e0 d1 a3 47 74 ec d8 91 7b f7 ee 71 e2 c4 09 dc dc dc a4 35 12 c8 5b 4b b2 b0 b0 90 a0 22 78 18 00 00 20 00 49 44 41 54 1c 2f 9e 3d 7b c6 ee dd bb 49 48 48 c0 c0 c0 80 76 ed da c9 d6 d3 32 33 33 d9 b2 65 0b 09 09 09 d4 ac 59 13 0f 0f 0f 4e 9f 3e 8d b1 b1 31 ef bf ff 3e d1 d1 d1 a4 a6 a6 16 2b bb 81 81 01 ed db b7 2f b4 3d e1 d2 a5 4b 84 87 87 93 93 93 83 a3 a3 23 b5 6a d5 e2 d8 b1 63 b8 ba ba 16 b9 a5 Data Ascii: *[7v6uTob>zacygzooM>\|HHH=^zrvG}Dbb"ZZZnZv}qoN!.\Gt{q5[K"x IDAT/={IHHv233eYN>1>+/=K#jc
2024-04-19 00:45:13 UTC	3	IN	Data Raw: 50 66 19 Data Ascii: Pf
2024-04-19 00:45:13 UTC	11622	IN	Data Raw: 26 26 26 b8 7d fb 36 5c 5c 5c 30 73 e6 4c 84 87 87 c3 cf cf 8f 7b 9e dc b4 1d 7b f7 ee 8d a0 a0 20 88 c5 e2 16 db 41 43 43 03 81 81 81 30 36 36 e6 a6 a9 52 47 37 37 37 95 6f 45 ce 9c 39 13 b9 b9 b9 08 0f 0f 97 79 77 d6 c8 c8 08 37 6f de 44 d7 ae 5d f1 de 7b ef c1 cf cf 0f 07 0f 1e c4 ce 9d 3b b1 6c d9 32 2e dd b6 6d db 60 6f 6f 8f 01 03 06 a0 5f bf 7e c8 cd cd c5 e6 cd 9b e1 ef ef 0f 40 72 22 17 18 18 08 33 33 b3 16 cb 21 14 0a 11 18 18 28 73 05 da b1 63 47 85 cf 67 a5 ef 9b aa b2 be 0c 0d 0d 11 18 18 c8 9f a9 87 f2 00 00 20 00 49 44 41 54 05 f7 c6 db a6 b1 b1 31 02 03 03 b1 6b d7 2e ec df bf 1f be be be f8 cf 7f fe 83 7e fd fa e1 c2 85 0b dc f3 51 69 9b 2f 5d ba 54 61 3b ec db b7 0f ba ba ba 38 78 f0 20 37 cf c6 8d 1b 11 14 14 84 75 eb d6 a1 a1 a1 01 6a Data Ascii: &&&}6\\\0sL{{ ACC066RG777oE9yw7oD]{;l2.m`oo_~@r"33!(scGg IDAT1k.~Qi/]Ta;8x 7uj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50471	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	795	OUT	GET /t/trackingCode.js HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "32dd789522cc6923c80141fcf5d3a614" If-Modified-Since: Tue, 23 Mar 2021 09:15:19 GMT
2024-04-19 00:45:13 UTC	512	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:45:13 GMT Connection: close x-amz-id-2: 2JKttdXrRHuN0qVkvx9a0ncKNFPpQ0pITFMv0p8apdHKn+5Z+NgF2yzAnmajfWPS0grvtlwdCQQ= x-amz-request-id: XJHY1V252EVP7XT7 Last-Modified: Tue, 23 Mar 2021 09:15:19 GMT ETag: "32dd789522cc6923c80141fcf5d3a614" Cache-Control: public, max-age=300 x-amz-meta-mtime: 1383840033 x-amz-version-id: null CF-Cache-Status: HIT Age: 2845 Expires: Fri, 19 Apr 2024 00:50:13 GMT Server: cloudflare CF-RAY: 8768dee0bb58456b-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50472	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1476	OUT	GET /assets/images/business/informed-delivery/package-image.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/manage/informed-delivery.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:13 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58317 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "16c52-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53AB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93266 Connection: close
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 4c a0 03 00 04 00 00 00 01 00 00 01 c9 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c9 03 4c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*iL8Photoshop 3.08BIM8BIM%B~L"}!1AQa"q2#BR$3br
2024-04-19 00:45:13 UTC	1	IN	Data Raw: bf Data Ascii:
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 68 81 e3 6f d9 5b c5 5f 02 75 29 f7 cd e1 db e1 3c 51 b1 e7 ca 98 73 81 e9 9a f7 0f f8 3b 33 e0 20 f8 ab ff 00 04 db 87 e2 65 94 3e 65 df 82 b5 68 6e b7 01 92 21 9b 31 bf e1 92 0d 7f 35 9f f0 69 87 ed 13 ff 00 0a c3 f6 f9 9b e1 75 f4 fe 5d a7 8b f4 f9 20 0a c7 83 2c 7f 32 e3 df ad 7a 58 2f 79 b8 77 4f ef 5a fe 87 83 9a 2e 49 46 af f2 c9 3f 93 d1 fe 67 f4 25 ff 00 05 0b f0 d5 e7 c3 ef da 43 58 d3 55 4a c5 70 fe 6a 1f 50 d5 f1 3d ba dd 4f f3 ed 63 9e f8 35 fd 2f 7e da df b2 ff 00 84 be 26 fc 67 d2 3c 69 e2 42 16 06 88 2b 03 d1 b1 5e cf f0 f7 f6 5e f8 13 1e 8b 15 8c 3a 5d bc 98 50 09 da 09 3f a5 7f 20 67 be 14 62 b1 99 d6 22 7e d7 96 2e 57 5a 5f 7d 7c 8f 0d f8 65 8f ac e7 8b 8d 94 1b 76 bf fc 03 f9 62 d3 0e d7 01 87 39 e6 bb 3b 68 cb 10 2b f7 d7 f6 89 ff 00 Data Ascii: ho[_u)<Qs;3 e>ehn!15iu] ,2zX/ywOZ.IF?g%CXUJpjP=Oc5/~&g<iB+^^:]P? gb"~.WZ_}\|evb9;h+
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: fc 10 ab f6 5f b9 19 d5 bc 73 f1 0e ed bb 99 35 d5 20 fe 76 e7 f9 d7 ec e6 ab aa 69 da 1e 99 71 ac eb 13 2d b5 a5 ac 6d 2c d2 b9 c2 a2 28 cb 31 3d 80 1d 6b 9a d3 7e 21 f8 2b 59 93 4b 8f 46 d4 a2 ba fe db b7 37 56 2f 16 5e 39 e1 00 1d e8 ea 0a e3 04 63 9e 7b 57 83 8a e1 5c 0e 22 a3 af 56 8a 93 7b b3 f6 3e 18 fa 41 f1 9e 4b 81 a7 96 e5 59 8c e9 52 85 f9 63 1b 2b 5d b6 fa 5f 76 fa 9f 91 2b ff 00 04 14 fd 87 e4 ff 00 90 8d f7 8b 2f 47 7f b4 6a c1 b3 f5 c4 02 b4 2d bf e0 82 df f0 4e c8 5b 75 d6 85 a9 dd 1f fa 6d 7e c7 ff 00 41 51 5f b2 17 17 d6 56 88 24 ba 9a 38 95 8e 01 76 0a 09 eb 81 93 e8 2b e2 6f 82 3f b7 4f 81 be 34 7c 51 bd f8 61 6d a3 5e e9 72 c5 1b cb 6b 71 39 05 67 44 e7 0c a0 03 1b 95 20 ed cb 63 90 c4 11 cc 50 e0 2c b6 71 94 e1 86 8b 4b 7d 11 ed d4 Data Ascii: _s5 viq-m,(1=k~!+YKF7V/^9c{W\"V{>AKYRc+]_v+/Gj-N[um~AQ_V$8v+o?O4\|Qam^rkq9gD cP,qK}
2024-04-19 00:45:13 UTC	2	IN	Data Raw: 3b 8d Data Ascii: ;
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: 73 b7 19 f3 08 4e 6b 6f 67 a6 a7 14 f2 ff 00 23 d5 b4 ef 89 3a b5 99 05 65 23 d3 93 5e 8d a5 fc 7c f1 46 9c 4b 5b 5c b0 24 60 e0 9a f9 52 48 a7 09 b9 33 4d 8e 79 94 64 d6 d4 ea c9 68 99 e4 62 72 ca 72 dd 1f 76 68 ff 00 b5 4f 8a ac 2d b6 3d c9 3b 06 00 24 ff 00 8d 31 ff 00 6c 4f 12 d9 bb dc c9 29 6d 88 c1 79 3d 4f e3 5f 0a 4b 75 23 2e 50 9a e7 2f 24 99 91 90 f4 6e 39 af 4a 86 61 51 2b 5c f0 aa e4 14 9e bc a7 d2 90 fe d6 fe 2c bd 92 79 ae 6e 0e e9 09 e7 27 91 9e fc d7 38 7f 68 bd 7a fa f5 7c db 86 6d a7 8e 4f f8 d7 c8 ad 04 91 4f 24 63 bf 4a 7d 9d bc d1 ca 1b be 6b 9d d6 9c e3 cb 73 a5 65 b0 84 af ca 7e a9 e8 9f b4 4c f7 37 3a 4e 8e f2 6e 8d 70 cd 83 dc 7a d7 ec 67 c2 6f 8f d7 37 1e 16 4b 5d 2e e2 3f 3b 68 18 63 c7 4f 4a fe 53 b4 6d 6f 50 b4 d5 96 54 63 f2 Data Ascii: sNkog#:e#^\|FK[\$`RH3MydhbrrvhO-=;$1lO)my=O_Ku#.P/$n9JaQ+\,yn'8hz\|mOO$cJ}kse~L7:Nnpzgo7K].?;hcOJSmoPTc
2024-04-19 00:45:13 UTC	16383	IN	Data Raw: ec 68 a5 a2 80 01 c9 c7 4a fc c1 d2 ff 00 6b ff 00 0c e8 5e 26 f1 47 c6 1d 4b e1 29 d2 b4 8d 27 c4 12 f8 5f 5c f1 44 0f a7 b5 f4 72 5b 5c fd 94 4b 75 1c 6d f6 a6 b6 de 54 83 f3 6d 52 18 80 3a 7e 9e d7 e7 ef 8c 7f 61 6b 9f 18 78 83 c6 b6 7f f0 9c 5f 69 de 0e f1 f6 ab 0e ad ab e8 76 f6 b6 c4 cb 24 69 12 cb 1a dd 3a 34 d1 c7 33 44 19 f6 10 7e 66 00 f3 5e 9e 5b f5 7b b5 5f cb bf 7d 6d 6e b6 da fa 13 2b f4 2c 7c 54 ff 00 82 84 fc 17 f0 ae 97 e2 4d 37 e1 fd da eb 1e 22 d0 e2 ba 6b 7b 69 d2 48 2d 2f 66 b1 1b ae 6d e0 b9 da 56 49 62 5c 96 55 04 8c 1a bb 6b fb 77 7c 35 d1 52 7f f8 4e 59 a2 51 f6 97 8e 7b 78 df ec ea 20 b3 17 cb 0c 92 48 14 09 a4 87 25 31 f2 b9 07 07 83 50 c1 ff 00 04 f3 f8 31 65 e3 fb ff 00 18 e9 97 97 b6 ba 7e a7 71 71 79 73 a4 c6 21 10 3d c5 d4 Data Ascii: hJk^&GK)'_\Dr[\KumTmR:~akx_iv$i:43D~f^[{_}mn+,\|TM7"k{iH-/fmVIb\Ukw\|5RNYQ{x H%1P1e~qqys!=
2024-04-19 00:45:13 UTC	11348	IN	Data Raw: 52 dd 1a c2 71 ea 7e 59 7c 48 f0 db f8 2f e2 35 ce 98 46 d8 dd bc d8 fb 70 6b d1 bc 35 7a 1a 24 e7 9c 57 aa 7e d6 9e 0a 9a 6d 3a d3 c6 f6 51 fc d6 c7 64 a4 7f 74 f4 cd 7c d1 e1 5d 54 b0 8d 81 eb c1 af ad cb 6b 73 d3 4c f1 e5 27 0a ae 3d 3a 1f 57 68 77 24 aa a8 ea 6b dc bc 37 7a 2d c2 90 d9 27 b5 7c b3 a3 6a 1b 40 72 d8 af 62 f0 f6 a0 c2 11 3b 37 4e 95 ea d3 69 3d 0f 52 15 6e ae d9 f4 e8 f1 04 b2 db 0b 5b 47 fd e3 70 71 5a 7a 6e 94 ee 7c c9 c9 62 6b ce fc 1c 9e 69 17 32 9f bd 5e d3 69 71 6e 14 2b 57 a9 85 86 bc d2 2d e2 6c ad 13 c1 3e 35 e8 46 eb c2 97 67 a8 08 6b f9 ca f8 cf a6 0b 6d 5e e5 13 a0 73 8a fe 9a 3e 2b d9 34 fe 18 b9 91 3a 6c 38 c5 7f 39 9f 1e ec f6 f8 82 ed 36 e0 ee 6a ef c5 e9 5a 0c f9 0c fa 3c f8 49 f9 1f 1e 2f 42 b5 91 28 22 43 f5 ad a6 4d Data Ascii: Rq~Y\|H/5Fpk5z$W~m:Qdt\|]TksL'=:Whw$k7z-'\|j@rb;7Ni=Rn[GpqZzn\|bki2^iqn+W-l>5Fgkm^s>+4:l896jZ<I/B("CM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50476	3.161.136.111	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	663	OUT	GET /Universal-Federated-Analytics-Min.js?agency=USPS HTTP/1.1 Host: dap.digitalgov.gov Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "26433217e805a89cf41adac58221316e" If-Modified-Since: Thu, 18 Apr 2024 15:08:41 GMT
2024-04-19 00:45:13 UTC	579	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 15:16:28 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 18 Apr 2024 15:08:41 GMT ETag: "26433217e805a89cf41adac58221316e" x-amz-server-side-encryption: AES256 x-amz-version-id: 39DeP5oo.f2rQ6hItN1skmgkaQ0kloSX Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8f7f25a8ec7b36657c310241b9ad397e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Pbz2uXgkeZgfpqLjUbkX47PESdKNraRwL0dQhPLqz7dGp-vZgTw6jA== Age: 34126

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50473	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1216	OUT	GET /assets/images/business/informed-delivery/id_hero-mobile.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:14 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58320 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "11269-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53D8) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 70249 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 de a0 03 00 04 00 00 00 01 00 00 00 e1 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 00 e1 03 de 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-19 00:45:14 UTC	1	IN	Data Raw: 46 Data Ascii: F
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 02 b3 10 3e 7e 7d 31 5f d6 6b 34 a2 95 ee 7e 39 f5 2a 97 d5 1f 31 7e cb bf 1e 17 e1 9f c4 8d 03 c4 1e 1f b3 b9 8e ca 70 da 4e a4 57 cb 96 33 b0 ee 0f 1e 37 48 42 e7 24 e7 8a fd fa 4d 60 5c 5d 69 fa ce 9d 2f 1a aa 08 dd 91 f8 e4 64 31 62 3f 1c 7e 62 bf 32 2f 7f e0 96 9f 0f 60 bc 59 3c 21 e2 5d 46 d6 c2 d5 e4 91 21 20 18 61 dd fe b3 70 52 86 46 6f a8 1e c6 be ba 9f 4a b8 d0 7c 2d 06 8d 69 79 72 d0 59 c0 90 5a 24 6f b5 54 20 08 59 8e 4f cc 71 90 09 38 f5 35 fc e5 e3 07 86 12 ce b1 94 f3 0c ba 4a 33 b5 a5 7d 2e ba 3d 16 f6 6d 7a 5b b1 fa 6f 05 f1 3c 70 34 a5 87 c4 a6 e3 ba f2 f2 3b 1d 7a 3d 4b 54 bf b8 59 64 29 75 a3 4c 3a 6d 3f bb 3c fd d0 02 93 9f f7 4d 73 1e 28 44 99 ee ed 65 b8 56 8b 50 8f e4 2e ea e0 3a fc c1 49 c6 72 0e 72 3e 6c 7a d2 5b 78 53 59 b7 46 Data Ascii: >~}1_k4~9*1~pNW37HB$M`\]i/d1b?~b2/`Y<!]F! apRFoJ\|-iyrYZ$oT YOq85J3}.=mz[o<p4;z=KTYd)uL:m?<Ms(DeVP.:Irr>lz[xSYF
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 5f fd a7 0d b3 79 37 09 fe 96 a4 e0 f1 b5 c2 9c 86 f5 0c 07 6e f4 eb ab 8b 1d 4c 2d b5 d0 db 13 1f 94 90 77 02 dc 02 b8 1c 72 2b 8a bd 46 58 d2 29 1d 64 84 e5 92 61 f7 99 89 e3 9f fe bd 31 f5 69 8b c8 92 c4 65 9f 84 de ce 54 6c db f7 d5 57 b8 ef f5 ae 8a 75 9d ec cc ed a6 85 19 75 2d 57 42 d6 a2 b5 69 3c cf de 12 84 0d a8 40 1d 03 11 f3 7d 0e 6a 1f 10 9b 63 a5 1d 7f 4c 89 63 59 9c b9 55 ce 11 ba 32 fb 03 8c f3 c0 e6 b3 35 74 9f 50 89 ec 6e 01 28 f8 31 b1 fe 12 06 46 d2 3a 64 fe 55 8b e0 3f 12 a7 9d 73 a3 eb ff 00 ea 0e 62 98 6e 0c 59 1f 8d f8 fd 33 cf 35 96 26 0d ec f5 1f 3d 8f d2 bf f8 27 ef fc 14 f7 50 fd 9a 7c 49 6b f0 97 e2 e5 c3 dd 78 1e fe 5d b1 39 cc 8d a6 bc 84 7c d1 9c e4 c3 93 f3 47 8e 9c af 23 0d fd 45 dc fc 43 b1 d4 2d e3 ba f0 c4 a9 3d ac e8 Data Ascii: _y7nL-wr+FX)da1ieTlWuu-WBi<@}jcLcYU25tPn(1F:dU?sbnY35&='P\|Ikx]9\|G#EC-=
2024-04-19 00:45:14 UTC	2	IN	Data Raw: a1 07 Data Ascii:
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 52 b4 94 62 ba b7 64 7d 80 15 4f 2a 6a dc 25 5b 86 af ca 1f d9 5f fe 0a 61 67 fb 7d cf e2 54 fd 8e bc 38 92 58 f8 62 48 a0 ba d4 7c 4f 72 6c 41 79 d4 b4 66 3b 4b 74 b9 9d d0 85 3c b1 8f 91 8a f0 8f db 63 e2 f7 fc 16 7f f6 68 f0 7d ef c6 bf 87 b6 7f 0f fc 63 e1 ad 22 36 b9 d4 2c 74 eb 2b ff 00 b6 41 02 72 d2 14 9a e0 34 88 a3 96 31 9d c0 02 db 70 0d 7a 54 f2 6a ce af b1 9d a3 2e cd d8 f1 2b f1 46 1a 38 7f ad d2 52 9c 35 d6 2a eb 4d df 9a f4 b9 fb af 8d f2 60 54 ab 11 8c 64 64 93 c6 05 7e 39 ff 00 c1 2a 3f e0 ac de 0d ff 00 82 8d 78 7b 53 f0 de b7 a4 af 86 3c 79 e1 d8 92 6b fd 3a 39 0c 96 f7 10 39 da 2e 6d 59 be 7d 81 be 57 46 f9 90 91 c9 04 1a fd 5f f1 e8 d7 db c0 1a f4 7e 17 f9 75 36 d3 6e c5 99 1d 45 c7 90 fe 51 ff 00 be f1 5c 98 bc 0d 5a 15 5d 1a ca cd Data Ascii: Rbd}Oj%[_ag}T8XbH\|OrlAyf;Kt<ch}c"6,t+Ar41pzTj.+F8R5M`Tdd~9*?x{S<yk:99.mY}WF_~u6nEQ\Z]
2024-04-19 00:45:14 UTC	4714	IN	Data Raw: e4 7a 83 86 1f cd b7 56 90 ce bf 63 85 44 f1 b1 6d aa a7 0c ac 3b c6 dd 43 0f 4f c3 1d 87 33 87 43 b2 95 5e e8 f8 8b f6 80 fd 9b 7e 11 fc 6f d0 67 d0 3c 5d a0 db dd db 4c 98 78 d9 32 a5 88 c6 51 b1 f2 3f 7e b9 1f a5 7f 30 ff 00 b5 ff 00 fc 12 1b c7 3f 0a e7 b9 f1 67 c0 e6 7d 63 4b 52 59 ac 5b 99 a3 1e 88 fd 1f d8 1e 4f 62 4f 15 fd 96 5c 58 59 b5 b9 99 e5 79 14 e1 5a 5d a3 6e 47 f0 ce a3 ee 93 da 41 c6 7d 3b f2 1a a7 86 b4 cb a8 64 d3 ad 8a 99 18 10 b1 4a 01 6c 11 c8 ee 18 73 c1 fc eb e8 b8 77 8a f1 b9 6c ef 42 5e ef 54 f6 7f d7 96 a7 81 c4 5c 2d 81 cc a1 cb 88 8e bd 24 b7 5f 3f f3 fb 8f f3 70 d4 74 dd 43 47 be 97 4a d5 e0 92 da e6 06 29 24 52 a9 47 56 1d 41 53 c8 35 44 f4 e3 ad 7f 6b 5f b5 6f fc 13 53 e0 b7 ed 11 69 2d c5 d5 af f6 7e b0 ab b6 2b cb 65 0b Data Ascii: zVcDm;CO3C^~og<]Lx2Q?~0?g}cKRY[ObO\XYyZ]nGA};dJlswlB^T\-$_?ptCGJ)$RGVAS5Dk_oSi-~+e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50474	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1223	OUT	GET /assets/images/business/informed-delivery/busy-person-red-shirt.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:14 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58458 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "13ace-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/A40D) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 80590 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 71 a0 03 00 04 00 00 00 01 00 00 01 71 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 71 02 71 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*iqq8Photoshop 3.08BIM8BIM%B~qq"}!1AQa"q2#BR$3br
2024-04-19 00:45:14 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 1c 10 33 59 57 9f 33 b9 f9 f6 63 53 df 48 69 da 1b f5 a9 e3 1b 88 63 c5 55 2f f3 54 f1 10 0e 09 e4 75 ac 25 0b 6a 8f 39 33 42 32 14 e2 ba 2d 26 d6 5b a1 e5 c7 c9 66 c5 73 49 80 bc 9f c6 bd 2b c1 51 09 2f 11 00 cf cd 5c b8 a8 fe ed 95 42 ab 53 56 47 bb fc 38 f8 7f aa dc de db 4f b8 84 07 35 fa 09 e0 ff 00 04 cf 15 ba ef 71 90 2b c4 fe 1c 41 1d b5 bc 3f 21 e0 0e d5 f4 ee 93 ad a4 31 85 20 fe 55 f9 1d 5c 1d 05 ce e5 3d 59 f6 15 31 18 89 b8 b5 1d 8b 10 f8 26 e1 c9 0b 8a 65 e7 85 1e dd 7e 7c 71 df 15 dd f8 77 5a 82 fd dc 05 3c 0a 4f 13 de b4 36 86 48 90 f3 5f 1b 8c e1 6a 11 a6 eb fb 47 6f 53 db a3 c4 35 dc bd 8f 2e be 87 90 5d 69 2b 18 20 9c 01 5c e4 f6 a9 06 e2 64 c6 54 f4 ae 9a ea e6 79 d4 fc a6 bc bf c5 07 50 86 33 24 08 d8 19 ce 3d eb c3 a1 47 0b 4a a2 9f Data Ascii: 3YW3cSHicU/Tu%j93B2-&[fsI+Q/\BSVG8O5q+A?!1 U\=Y1&e~\|qwZ<O6H_jGoS5.]i+ \dTyP3$=GJ
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: c2 b5 cf ac ca f3 4c 3d d4 25 03 c7 ad af 60 ba 8f 7c d1 70 de d5 e4 5f 1a fc 07 2f 8c b4 94 d3 34 98 03 33 e3 26 bd db c2 b7 8f ad 7f ac b4 28 83 81 f2 e2 ad 6b 5a d4 7e 1c 9e 33 77 06 d5 66 0a b9 15 f9 37 11 66 79 9e 5c f9 e9 fb c7 ea b9 36 5f 85 c4 c7 55 ca 7c ed fb 29 fe ce be 23 f8 7f e3 b5 d7 ae 6d 46 d5 7d c0 81 8e d5 fb 01 0e 3e ce 88 f0 9c 92 33 c5 79 bf c3 6b fb 1b cd 3e 39 14 a9 66 19 af 6f b4 4b 79 40 04 f3 5e c6 55 e2 7e 75 0a 56 9d 1f 8b c8 f8 3c eb 87 30 6a a3 f6 6d b5 b5 ee 7d 39 a5 eb 3a 74 da 6c 6d b9 63 54 40 08 3d b0 2b f9 bc ff 00 82 bb 68 57 de 20 9f 52 f8 93 6b 6c 46 9f 6d e1 ff 00 12 d8 09 7d 4b 68 f7 8c b9 fa ed 35 fb 91 e6 5d 98 0c 0b 29 0a 7d 2b f2 f7 fe 0a c1 a6 c5 67 fb 28 6a 72 a0 e4 da 6b 63 ff 00 28 5a 8d 7e e9 c2 be 34 e3 Data Ascii: L=%`\|p_/43&(kZ~3wf7fy\6_U\|)#mF}>3yk>9foKy@^U~uV<0jm}9:tlmcT@=+hW RklFm}Kh5])}+g(jrkc(Z~4
2024-04-19 00:45:14 UTC	2	IN	Data Raw: 53 47 Data Ascii: SG
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 97 85 e3 ea 78 77 fb ea 2a 6b b3 3f ce c3 e1 97 ec bd f1 7b e0 05 f2 5c 5d e9 17 90 ac 27 96 11 b5 7d 87 a5 7e d4 5e 28 d1 64 4b 1b f1 3c 0c 9f 28 de 18 74 af ec ff 00 c7 1f 0a 7c 0f ac d9 c9 1d e6 9f 03 82 0f 54 5f f0 af c8 df da 1f f6 60 f8 68 f2 4b 71 06 97 08 6e 48 c2 0a ef ce 72 bc d6 84 ed 5e 51 97 a1 f5 f8 0e 33 cb 71 51 5e d7 0f 65 e4 cf c6 2d 5f f6 a4 bc be b2 58 ee ee 1d 83 75 ce 6b 88 f1 bf 8d 62 f1 67 c3 5f 10 3c 79 e3 40 f1 03 7f e5 16 f6 bd ff 00 c6 5f 09 bc 2b a5 5d 34 1f 61 40 aa 7d 2b c9 fe 27 69 ba 06 99 f0 ab c4 10 69 71 2c 72 7f 61 78 83 a7 a7 f6 2d ee 6b a7 83 a8 d7 59 9d 1e 7b 7c 48 e3 e3 3a f9 7c b2 da 9f 56 8b 4e c7 c5 bf f0 64 8f fc 9d bf c6 bf fb 15 ac 7f f4 b4 d7 fa 26 6a 1f eb e6 fa b5 7f 9d 9f fc 19 23 ff 00 27 6f f1 af fe c5 Data Ascii: xw*k?{\]'}~^(dK<(t\|T_`hKqnHr^Q3qQ^e-_Xukbg_<y@_+]4a@}+'iiq,rax-kY{\|H:\|VNd&j#'o
2024-04-19 00:45:14 UTC	15055	IN	Data Raw: 22 6b 25 53 12 f9 64 48 8e 5f 78 22 be 58 ff 00 87 11 7f c1 4f 47 fc d3 39 7f f0 26 df ff 00 8b a4 ff 00 87 10 7f c1 4e ff 00 e8 99 cb ff 00 81 36 ff 00 fc 5d 37 2c 37 fd 06 ae 9f 69 74 f9 ef ae bd fb 07 2c bf 94 fd 24 d4 fe 02 7e c5 e3 f6 90 d6 74 0b 1f 07 78 6d b4 01 0b c7 a4 c8 93 40 cb e5 9d 42 34 7b 83 08 d4 8b 5c 46 b6 dc 34 9b a3 78 d5 8b 88 db b7 f3 5b f1 87 45 d0 3c 37 f1 77 c5 5e 1d f0 a5 c5 b5 de 95 61 ab de db d9 cf 66 ed 25 bc 90 47 3b ac 6d 0b b7 cc d1 95 03 69 3c 91 8a fd 2d 1f f0 41 ff 00 f8 29 d0 e9 f0 ca 4f fc 09 b7 ff 00 e2 ea 41 ff 00 04 25 ff 00 82 a0 28 c2 fc 35 98 7f db d5 bf ff 00 17 5d 99 56 2f 07 87 6d cb 14 a5 a2 5a c9 7d fb b2 67 4e 6f ec 9f 91 14 57 eb c7 fc 38 9f fe 0a 83 ff 00 44 d6 6f fc 0a b7 ff 00 e2 e8 ff 00 87 13 ff 00 Data Ascii: "k%SdH_x"XOG9&N6]7,7it,$~txm@B4{\F4x[E<7w^af%G;mi<-A)OA%(5]V/mZ}gNoW8Do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50475	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1209	OUT	GET /assets/images/business/informed-delivery/id_hero.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487504.0.0.0; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; _ga=GA1.1.1989466777.1713487459; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1
2024-04-19 00:45:14 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58320 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:13 GMT Etag: "18f8f-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53CF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 102287 Connection: close
2024-04-19 00:45:14 UTC	15277	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 ce a0 03 00 04 00 00 00 01 00 00 01 9d 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 9d 03 ce 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: b5 a4 06 55 6f 36 22 ac 02 e3 27 9c 62 bf 5a ff 00 67 df f8 22 87 c0 1d 6f fe 0a 7d f1 57 e0 3f c5 78 af 2e 3e 15 78 3f 4b d3 f5 2d 2d e3 ba 9a 19 27 fe d9 f2 fe c5 1f 9e 8e 24 6d a4 ca b9 cf cc 63 3c 57 e2 7f fc 13 57 f6 b0 f0 0f ec 65 fb 49 bf c6 5f 89 36 17 da 8e 98 da 16 ad a5 f9 3a 72 c6 f3 79 b7 f6 af 04 6d 89 5e 35 da 19 b2 df 36 71 d0 1a fd 57 f0 47 fc 17 5b c1 1a 67 c3 4f 82 ba 17 8a f4 1d 55 fc 43 e1 1d 72 d6 7f 19 ea 36 f1 db 6e d5 34 9d 2b ed 9f d9 f0 40 4c 8a 5a 44 37 08 cc 24 d8 a0 87 c3 36 45 47 12 d3 cd 3e b1 3f a9 b7 ca e2 96 8f 67 ab 6d 79 d9 5b e6 87 4d c2 cb 98 f2 2f d8 ab fe 09 f5 fb 2b 7c 43 fd b9 be 3b e8 7f b4 80 b8 d3 7e 0d 7c 26 ba d4 2d 3c e6 bb 9a 0f 2e 56 d4 c5 8d 8c 6f 72 8c 24 25 57 3b b2 4e ee a6 99 f0 97 fe 09 83 f0 e3 4b Data Ascii: Uo6"'bZg"o}W?x.>x?K--'$mc<WWeI_6:rym^56qWG[gOUCr6n4+@LZD7$6EG>?gmy[M/+\|C;~\|&-<.Vor$%W;NK
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 13 fe d7 a6 7f 23 53 5c cd 75 6c db 5a 3f 35 0f 25 0f 3f 2f b7 a8 ad 63 53 a9 94 e9 34 ec 4d 73 7d 72 b0 2f 94 e4 02 77 a1 1d 41 ff 00 03 f9 53 e4 b7 b1 f1 3d b7 da 1f 6c 17 29 80 cc 30 01 3d 8b 8e d9 ec 47 5a a7 05 d5 9c 71 b3 43 93 11 39 31 e7 38 f7 53 d8 ff 00 93 53 c9 cc eb 77 6f 22 95 75 21 24 c6 dc fa a3 0e 99 f6 3c 7a 57 5c 65 df 53 92 48 f3 bd 63 4e d4 34 db b2 aa 86 39 13 92 07 de db dc 8e c4 7d 29 13 53 59 ee 62 9e d0 88 ae d7 00 31 3f 2b fb 1f 43 ef 5e 9d 06 a3 05 eb 8d 37 c4 31 86 1f f2 cd c0 f9 d7 e9 ff 00 eb ae 47 c4 7e 12 48 50 df 59 fc f0 93 fe b5 7a 0c ff 00 7b fc 6b 39 53 69 73 43 63 aa 15 a2 ec a6 60 5d d8 da 6b 17 12 5e da 27 d9 2f d7 99 02 81 83 eb b9 47 51 ee 2b 95 36 a6 3b 83 15 c2 08 66 6e 7c bf f9 66 f8 ee 8d fe 4d 6b 7d aa e3 4e Data Ascii: #S\ulZ?5%?/cS4Ms}r/wAS=l)0=GZqC918SSwo"u!$<zW\eSHcN49})SYb1?+C^71G~HPYz{k9SisCc`]k^'/GQ+6;fn\|fMk}N
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 81 77 a1 d9 df c6 6d e7 40 41 1c f1 5c 3e 97 f0 f7 e2 0d b6 b8 9f f0 af 6c 2e f5 26 66 e2 1b 58 9e 56 eb e8 80 fe b5 fd 0b 78 4f f6 53 f8 13 e1 36 49 93 46 5d 42 64 ff 00 96 97 cc d3 9c fa ed 38 8f ff 00 1d af 7b b3 b4 d3 b4 ab 71 67 a4 db 47 6b 0a f0 23 89 42 28 c7 b2 80 29 ac 55 b4 46 72 a5 7d cf c8 8f 85 5f b3 6f c7 ef 11 d8 47 71 e2 1d 25 74 2d c0 73 7b 22 ab 60 fa c6 9b dc 1f a8 15 f5 47 87 3f 63 0d 2e 36 17 1e 30 d7 26 b8 6c 73 1d aa 08 97 3f ef 3e f6 3f f7 c8 af b5 5a e0 b1 c5 34 cb c7 15 94 b1 32 61 1a 11 5b 9e 47 e1 9f 80 1f 07 fc 2a c2 4b 0d 16 1b 89 87 3e 6d d6 67 7c fa fc f9 51 f8 2d 7a dc 4b 0d b4 22 da d9 56 38 97 80 aa 02 a8 1e 80 0e 05 45 e7 67 e5 3c d3 1d f3 c0 ac 5c 9b dc d5 2b 16 5a 62 17 83 50 f9 ae 3a 71 9e d5 08 7c 8a 8c b3 02 09 ed Data Ascii: wm@A\>l.&fXVxOS6IF]Bd8{qgGk#B()UFr}_oGq%t-s{"`G?c.60&ls?>?Z42a[G*K>mg\|Q-zK"V8Eg<\+ZbP:q\|
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: ba f7 6d a8 ea 7f da 10 59 dc 5e a2 7d 82 39 e3 2a 8d 75 e4 ca 1e 4c 82 02 06 0a 32 05 7d bb fb 20 78 6f e3 a7 83 7f 67 6f 0f 78 63 f6 94 be 4d 4f c6 76 89 3a ea 17 51 c8 65 12 93 33 98 d8 b9 03 24 a1 5c e0 00 3a 01 c5 7d 22 50 28 e4 6e a6 26 77 12 6a a1 4a ce e2 9d 6e 6e 84 94 51 45 6c 64 21 38 19 a8 d9 81 18 14 f7 fb b5 0d 00 15 14 80 f5 15 21 38 19 a8 fc cc 8f f3 fe 14 11 27 7d 08 c1 cf 34 b4 0e 28 a0 a4 33 7a 9e 31 40 55 23 38 a7 d1 4e e6 2d dc 6e c5 f4 14 6c 5f 41 4e a2 8b b1 15 59 c0 7d 83 a8 35 8f a3 82 35 2b e0 7f e7 a7 f4 ad 47 ff 00 5a 7e a2 b3 74 af f9 0a 5f ff 00 d7 41 fc aa 2b af 71 9d 18 6f 88 ea ec 3f e3 f2 3f f7 85 76 b5 c5 58 7f c7 e4 7f ef 0a ed 6b c9 3d 03 f8 2d ff 00 83 e4 7f e4 48 fd 9b 7f eb fb c5 5f fa 2b 4a af e3 0b fe 09 8b ff 00 Data Ascii: mY^}9*uL2} xogoxcMOv:Qe3$\:}"P(n&wjJnnQEld!8!8'}4(3z1@U#8N-nl_ANY}55+GZ~t_A+qo??vXk=-H_+J
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: fd a0 7a 8a 5f ed 12 73 42 bf 72 79 59 dd a5 e2 0e 73 83 da af 47 a8 3a 81 86 af 3b 4d 40 e7 22 af 47 a8 01 d7 ad 36 da 1d 9d 8f 05 f8 ff 00 fb 15 fe cc 7f b4 9d bc b2 fc 4b f0 c5 bf f6 93 ae 17 53 b1 1f 65 bd 43 eb e7 46 06 ff 00 a4 81 87 b5 7e 06 7e d3 1f f0 46 4f 8c df 0e 04 be 21 f8 03 76 be 36 d2 54 31 fb 1c b8 83 51 8d 3a e0 2e 44 73 63 fd 92 ac 7f bb 5f d3 c2 ea 24 77 a9 8e a7 1e 3e 6a f9 dc d7 86 f0 98 b5 79 46 d2 ee b7 ff 00 27 f3 39 e7 86 84 fe 24 7f 9f 8e bd a7 78 93 c1 da ad cf 87 fc 59 a7 5c d8 5e db b6 c9 6d ae 90 c5 24 64 71 8d ae 03 0c 7d 31 e9 59 4d aa 08 81 72 c1 d4 8c 10 72 6b fb a6 f8 e7 fb 37 fc 07 fd a4 b4 6f ec af 8b fe 1e b6 d5 4a 8c 45 73 8f 2e ea 1f 78 e7 4c 38 c7 a1 24 7a 8a fe 7f ff 00 6a 7f f8 23 3f 8a bc 0b 05 ef 8d ff 00 67 Data Ascii: z_sBryYsG:;M@"G6KSeCF~~FO!v6T1Q:.Dsc_$w>jyF'9$xY\^m$dq}1YMrrk7oJEs.xL8$zj#?g
2024-04-19 00:45:14 UTC	5095	IN	Data Raw: d7 c3 c3 f8 38 78 af 39 39 49 fe 6a 3f f9 29 f5 bc 9f b4 0f c0 6f 0a f1 f0 db e1 16 96 ee bf 76 e3 5f ba 9f 51 7f af 97 94 8c 56 56 a7 fb 6e 7e d0 92 5b 35 87 84 6f 6c 3c 2b 6c 78 58 b4 4b 0b 7b 30 07 b3 aa 97 ff 00 c7 ab c8 7c 35 f0 67 e2 e7 8d 99 47 84 7c 33 a9 df 86 e8 d1 db 49 b3 fe fb 20 2f eb 5e c7 6f fb 17 fc 5c 82 11 71 e3 9b bd 17 c2 70 9e 4b 6a da 8c 31 30 1f f5 cd 0b b7 e9 5e 0e 2f 09 c3 f4 27 6c 54 a3 29 76 9c 9c df dd 27 27 f7 23 d7 c3 57 ce eb 46 f8 68 ca 31 ef 18 f2 2f be 29 2f bd 9f 2c f8 ef e2 bf c5 af 1b 49 8f 15 78 8f 51 d5 64 90 f3 f6 ab 99 65 03 f0 2d 81 f9 57 23 05 94 8a a1 b7 1d c7 ae 3b fe 95 f6 ca 7c 0f fd 97 bc 28 77 fc 41 f8 a8 9a 94 a3 ef 41 e1 eb 09 2e 49 f6 13 4a 55 3f 1c 56 84 7e 37 fd 87 fc 1a 31 e1 df 04 6b de 2c 9d 3a 49 Data Ascii: 8x99Ij?)ov_QVVn~[5ol<+lxXK{0\|5gG\|3I /^o\qpKj10^/'lT)v''#WFh1/)/,IxQde-W#;\|(wAA.IJU?V~71k,:I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50480	151.101.12.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-19 00:45:14 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Fri, 19 Apr 2024 00:45:14 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840086-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50481	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1285	OUT	GET /activityi;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	1169	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://3976941.fls.doubleclick.net/activityi;dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50482	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1296	OUT	GET /td/fls/rul/activityi;fledge=1;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:14 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-19 00:45:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50483	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	673	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487512337 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:14 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50484	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1249	OUT	GET /activity;register_conversion=1;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5015981385455534077"}],"aggregatable_trigger_data":[{"filters":[{"14":["6954238"]}],"key_piece":"0xa3d231e7de29f7ee","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x749b03ce3081cd2b","not_filters":{"14":["6954238"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["6954238"]}],"key_piece":"0x15a37a2992af39c1","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x8376969a5f6f3f49","not_filters":{"14":["6954238"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15355827889920288892","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5015981385455534077","filters":[{"14":["6954238"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5015981385455534077","filters":[{"14":["6954238"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5015981385455534077","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5015981385455534077","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:45:14 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50485	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	885	OUT	GET /rp.gif?ts=1713487512390&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:14 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50486	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	809	OUT	GET /cm/i?pid=cc41fce6-e245-447e-b170-1c36414f246a&u_scsid=dbd1ab89-f91f-4120-80ed-73d46f1243d5&u_sclid=0e9d247e-4d21-4142-973d-cfac02f175f2 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	454	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT content-type: text/html strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50488	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	805	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487512435&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:14 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1201762536496723 Date: Fri, 19 Apr 2024 00:45:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:14 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50489	151.101.0.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:13 UTC	1486	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487512436 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:14 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:45:14 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 2 referrer-policy: origin x-pinterest-rid: 8011265945149079 Date: Fri, 19 Apr 2024 00:45:14 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:14 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50491	104.16.40.28	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	858	OUT	GET /t/1.css?apiType=css&projectid=f3e4655b-fd06-4b8b-8a25-01c859692612 HTTP/1.1 Host: fast.fonts.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=lxJV2C0dGE82y7.aAvsmxAKzjziQvROX__wz48U8ZEM-1713487457-1.0.1.1-uXdqZ498.lN04mnDVSqsx3dQxnhYLJa1o6cUl8yDbD5GuPbNqCu6byxsxpE.MDLdqqEbj1i8SzfPp.VJHolzkg If-None-Match: "d41d8cd98f00b204e9800998ecf8427e" If-Modified-Since: Tue, 23 Mar 2021 12:59:23 GMT
2024-04-19 00:45:14 UTC	488	IN	HTTP/1.1 304 Not Modified Date: Fri, 19 Apr 2024 00:45:14 GMT Connection: close x-amz-id-2: PfNU+dGnSIhr1yH919k1lA4iPZTqa0Q1jjeht2rPRx6+GEqxTic8JxFSGbn8rFAyuqnh+hMoGAY= x-amz-request-id: 88G1J0FZX96MS4RM Last-Modified: Tue, 23 Mar 2021 12:59:23 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Cache-Control: public, max-age=0, s-maxage=604800 x-amz-meta-mtime: 1519217722 x-amz-version-id: null CF-Cache-Status: HIT Age: 99215 Server: cloudflare CF-RAY: 8768dee3ca141d80-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50494	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	608	OUT	GET /config/com/cc41fce6-e245-447e-b170-1c36414f246a.js?v=3.14.1-2404091850 HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.usps.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT access-control-allow-origin: https://www.usps.com content-type: application/javascript strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 175 x-envoy-upstream-service-time: 36 server: API Gateway alt-svc: clear access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:14 UTC	175	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 72 79 7b 77 69 6e 64 6f 77 2e 73 6e 61 70 74 72 2e 63 66 67 28 27 63 63 34 31 66 63 65 36 2d 65 32 34 35 2d 34 34 37 65 2d 62 31 37 30 2d 31 63 33 36 34 31 34 66 32 34 36 61 27 2c 7b 22 61 73 63 22 3a 5b 5d 2c 22 61 22 3a 5b 5d 2c 22 69 70 67 22 3a 22 34 30 22 2c 22 62 22 3a 5b 5d 2c 22 74 22 3a 22 22 2c 22 76 22 3a 22 33 2e 37 2e 35 2d 32 34 30 31 30 33 32 33 34 37 22 2c 22 65 63 22 3a 5b 5d 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 29 3b Data Ascii: !function(){"use strict";try{window.snaptr.cfg('cc41fce6-e245-447e-b170-1c36414f246a',{"asc":[],"a":[],"ipg":"40","b":[],"t":"","v":"3.7.5-2401032347","ec":[]})}catch(e){}}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50492	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1214	OUT	GET /assets/images/business/informed-delivery/id_mockups-1.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487512.0.0.0; _ga=GA1.2.1989466777.1713487459; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275
2024-04-19 00:45:14 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59039 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:14 GMT Etag: "d3c4-5e87ccdbf2c40" Last-Modified: Mon, 12 Sep 2022 15:46:49 GMT Server: ECAcc (agb/52F9) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 54212 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 95 08 06 00 00 00 a0 6e c0 5d 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 77 7c 4d f7 ff c0 f1 57 76 24 32 90 08 89 11 62 8f 48 ad 18 25 a9 d2 9a b5 5a ad bd a5 a5 4a 7d ad 16 2d 35 8a d2 52 e5 2b 55 a3 a8 5f 97 0a f5 15 44 88 bd 49 cc 50 91 04 31 13 89 0c d9 39 bf 3f ae 7b 9a 2b 21 c3 cd 20 ef e7 e3 71 1f ee 3d e3 f3 f9 9c 7b e3 bc cf 67 9c cf 31 50 14 05 21 84 10 42 3c 9b 61 51 17 40 08 21 84 28 ee 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 03 09 96 42 08 21 44 0e 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 03 09 96 42 08 21 44 0e 24 58 0a 21 84 10 39 90 60 29 84 10 42 e4 40 82 a5 10 42 08 91 Data Ascii: PNGIHDRn]pHYs&? IDATxw\|MWv$2bH%ZJ}-5R+U_DIP19?{+! q={g1P!B<aQ@!($X!9`)B@BB!D$X!9`)B@BB!D$X!9`)B@B
2024-04-19 00:45:14 UTC	1	IN	Data Raw: 6d Data Ascii: m
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: a2 76 ed da 38 3a 3a f2 d1 47 1f 15 48 39 0e 1c 38 40 99 32 65 d4 cf 4f 0f 1a 72 77 77 07 a0 4c 99 32 94 2a 55 0a 67 67 67 f5 b3 76 e2 e0 86 0d 1b f2 dd 77 df b1 74 e9 52 82 83 83 d9 b3 67 4f 81 cd 93 28 84 10 25 49 89 0f 9f 95 96 90 00 00 20 00 49 44 41 54 96 a5 4a 95 c2 c2 c2 82 71 e3 c6 a9 cb c6 8d 1b 47 c3 86 0d d5 cf 5b b7 6e c5 ca ca 8a 88 88 08 8e 1d 3b 46 9b 36 6d f4 5e 0e 67 67 e7 6c fb 2c b5 b4 7d 92 cf b3 63 c7 0e ba 75 eb c6 a2 45 8b e8 d9 b3 27 ed db b7 67 e2 c4 89 fa 2c a6 10 42 94 48 25 be 19 f6 ed b7 df 26 3a 3a 1a 80 4e 9d 3a e1 e8 e8 c8 3b ef bc 43 44 44 04 a0 e9 33 fc fc f3 cf f9 e1 87 1f 98 30 61 02 53 a6 4c 41 51 14 40 53 03 2d a8 c7 c1 e4 c7 91 23 47 28 5b b6 2c 1f 7f fc 31 6e 6e 6e f8 f9 f9 91 91 91 51 d4 c5 12 42 88 97 5e 89 0f 96 Data Ascii: v8::GH98@2eOrwwL2*UgggvwtRgO(%I IDATJqG[n;F6m^ggl,}cuE'g,BH%&::N:;CDD30aSLAQ@S-#G([,1nnnQB^
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: d4 d4 54 ec ec ec d0 d7 cf fd cf 35 25 25 85 47 8f 1e 61 6b 6b 4b b1 62 c5 f2 2d 93 46 a3 21 26 26 06 73 73 73 ad 32 e5 26 21 21 01 63 63 63 2a 56 ac 98 eb ba c4 c4 44 4a 96 2c 99 67 d9 00 92 92 92 d0 d5 d5 cd f3 58 65 cb 96 a5 4e 9d 3a ea fb 7a f5 ea 71 f9 f2 65 56 ad 5a 85 46 a3 c9 b3 ad b2 eb 58 bb 9d 5b 00 00 20 00 49 44 41 54 61 6a 6a 8a 89 89 c9 4b eb f1 a6 e2 e3 e3 51 14 e5 a5 c3 de 42 bc cb 64 18 56 e4 6a c5 8a 15 b4 6e dd 1a 27 27 27 5a b4 68 c1 8a 15 2b d4 75 7b f7 ee c5 c2 c2 82 c3 87 0f 6b ed 33 6f de 3c 2a 55 aa 44 46 46 06 cf 9e 3d 63 d4 a8 51 58 58 58 e0 e0 e0 80 b9 b9 39 3d 7a f4 20 25 25 05 80 a3 47 8f 62 61 61 41 64 64 64 ae c7 df b4 69 13 95 2a 55 c2 da da 1a 7b 7b 7b 4a 96 2c c9 f7 df 7f af b5 8d a2 28 8c 1c 39 12 4b 4b 4b ca 96 2d 8b Data Ascii: T5%%GakkKb-F!&&sss2&!!cccVDJ,gXeN:zqeVZFX[ IDATajjKQBdVjn'''Zh+u{k3o<UDFF=cQXXX9=z %%GbaaAdddi*U{{{J,(9KKK-
2024-04-19 00:45:14 UTC	5062	IN	Data Raw: 3b 04 51 46 2a 44 b2 0c 08 f0 e7 d8 b1 8b 5c b9 92 50 de a1 08 21 2a 88 2b 57 12 30 18 0c e5 1d 86 28 23 16 e5 1d c0 c3 e0 e6 e6 c8 ab af f6 61 d8 b0 d9 34 6c e8 87 ad ad 75 79 87 24 84 78 8c 65 66 e6 70 fa 74 0c 33 67 be 58 de a1 88 32 52 21 92 25 40 8f 1e 21 b4 6e 1d c4 d9 b3 31 64 65 e5 94 77 38 42 88 c7 98 8d 8d 35 f5 eb fb e1 ec 6c 5f de a1 88 32 52 61 92 25 80 b3 bf a2 0a 5a 00 00 13 2e 49 44 41 54 b3 3d 21 21 81 e5 1d 86 10 42 88 7f 99 0a 71 cf 52 08 21 84 b8 1f 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 08 0d 92 2c 85 10 42 3c 12 cc cd cd cb 3b 84 12 49 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 34 48 b2 14 42 08 21 Data Ascii: ;QFD\P!+W0(#a4luy$xefpt3gX2R!%@!n1dew8B5l_2Ra%Z.IDAT=!!BqR!,B,B,B,B,B,B,B,B<;IB!4HB!4HB!4HB!4HB!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50495	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 964 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	964	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 61 38 38 61 66 65 65 30 2d 39 64 30 61 2d 34 65 31 35 2d 38 38 31 38 2d 32 38 66 64 35 66 66 65 38 63 34 36 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"a88afee0-9d0a-4e15-8818-28fd5ffe8c46","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","bg":true,"s
2024-04-19 00:45:14 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50493	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1214	OUT	GET /assets/images/business/informed-delivery/id_mockups-2.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487512.0.0.0; _ga=GA1.2.1989466777.1713487459; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275
2024-04-19 00:45:14 UTC	1122	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 59033 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:14 GMT Etag: "bacd-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/53CB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 47821 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 97 08 06 00 00 00 ed a6 61 56 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 7d 74 1b d5 9d 3f fe b7 e4 c4 04 93 28 69 eb 40 8b d2 38 cb 53 2d 7a 38 18 6c 64 da 25 24 05 d1 d0 3d 9c c6 16 db f2 3d 0d a9 dc b2 89 a9 83 48 fa 00 f5 3a b0 a4 34 71 c5 69 17 9c 3a 36 71 d2 2e 11 26 f4 89 4a 71 e9 39 6d 1a d5 84 b8 14 2c 6c 6a 68 d2 71 b6 01 12 27 a2 d0 f8 07 44 26 5e 92 d8 9e df 1f d2 8c 67 46 a3 47 eb c9 f2 fb b5 eb 12 4b a3 d1 d5 48 9e 8f 3e f7 7e ee 1d 83 28 8a 20 22 22 a2 e8 8c b9 6e 00 11 11 51 be 63 b0 24 22 22 8a 83 c1 92 88 88 28 0e 06 4b 22 22 a2 38 18 2c 89 88 88 e2 60 b0 24 22 22 8a 83 c1 92 88 88 28 0e 06 4b 22 22 a2 38 18 2c 89 Data Ascii: PNGIHDRaVpHYs&? IDATx}t?(i@8S-z8ld%$==H:4qi:6q.&Jq9m,ljhq'D&^gFGKH>~( ""nQc$""(K""8,`$""(K""8,
2024-04-19 00:45:14 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 44 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 44 14 07 83 25 11 11 51 1c 0c 96 44 44 44 71 30 58 12 11 11 c5 c1 60 49 44 00 de e0 e3 00 00 20 00 49 44 41 54 44 14 07 83 25 11 11 65 c4 c4 c4 44 ae 9b 90 36 0c 96 44 44 44 71 30 58 12 11 51 46 18 0c 86 5c 37 21 6d 18 2c 89 88 28 23 b2 1d 2c 17 2e 5c 78 eb 93 4f 3e b9 20 13 fb 66 b0 24 22 a2 82 30 7b f6 ec ea b3 67 cf 1e fd c9 4f 7e 52 91 ee 7d 33 58 12 11 51 41 18 1f 1f c7 99 33 67 e6 9f 39 73 66 4f 5b 5b 5b 5a 33 4c 06 4b 22 22 2a 08 63 63 63 38 73 e6 0c ce 9c 39 53 76 e6 cc 99 9a 74 ee 7b 56 3a 77 46 44 44 94 2b e1 cc 52 fa 75 49 3a f7 cd 60 49 44 44 05 41 ca 2c 33 81 c1 92 88 88 0a c2 f8 f8 38 ce 9e 3d 9b Data Ascii: %QDDDq0X`IDD%QDDDq0X`IDD%QDDDq0X`ID IDATD%eD6DDDq0XQF\7!m,(#,.\xO> f$"0{gO~R}3XQA3g9sfO[[[Z3LK""*ccc8s9Svt{V:wFDD+RuI:`IDDA,38=
2024-04-19 00:45:14 UTC	15054	IN	Data Raw: 0e 39 84 fb ef bf 9f 44 22 c1 92 25 4b 18 3e 7c 38 f7 dd 77 1f 17 5c 70 41 bb c6 f3 4d ef e3 ee dd bb f3 e1 87 1f b6 3a fe e8 a3 8f 32 7d fa f4 8a 8e 8f 93 52 60 9a 26 f1 78 8c aa aa ad c3 bd 4b 3f cc 26 0d 33 9c 4e 59 5b db 25 f4 86 35 2d 4c d7 42 aa d0 de 2e e6 86 82 9a db ef b4 2c 1b db b1 51 5b c7 05 e1 00 00 20 00 49 44 41 54 84 19 a9 ed 38 28 29 20 ea af 0c db 47 3c 64 34 70 da b2 f5 12 6c 5b d1 df 33 ca 84 ef fb 6c b3 cd 36 1c 79 e4 91 1b 3d 57 53 53 c3 51 47 1d 55 96 d1 44 df 14 0b c0 dc b9 73 39 ee b8 e3 18 3c 78 30 00 8e e3 70 ee b9 e7 22 84 60 fe fc f9 ed 1a 8b 10 02 c3 30 d8 7d f7 dd d9 65 97 5d 5a 9d 5f b2 64 09 5d ba 74 e1 ca 2b af cc 0f e2 1d 3a 74 28 bd 7a f5 e2 b3 cf 3e 6b d7 58 72 f1 7c d3 73 93 63 fe fc f9 fc e5 2f 7f e1 f2 cb 2f 6f f7 Data Ascii: 9D"%K>\|8w\pAM:2}R`&xK?&3NY[%5-LB.,Q[ IDAT8() G<d4pl[3l6y=WSSQGUDs9<x0p"`0}e]Z_d]t+:t(z>kXr\|sc//o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50496	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1214	OUT	GET /assets/images/business/informed-delivery/id_mockups-3.png HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487512.0.0.0; _ga=GA1.2.1989466777.1713487459; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275
2024-04-19 00:45:14 UTC	1123	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58321 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/png Date: Fri, 19 Apr 2024 00:45:14 GMT Etag: "16d66-5e87ccdafea00" Last-Modified: Mon, 12 Sep 2022 15:46:48 GMT Server: ECAcc (agb/53BF) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93542 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 cb 00 00 02 97 08 06 00 00 00 ed a6 61 56 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd 79 7c 4c f7 fe c7 f1 d7 64 df 37 89 88 84 c4 be 13 04 b1 44 28 5a 5a 2d 57 ab 8b 56 a9 96 74 b9 6a 6b f1 bb ba d0 56 ab ca ad 2e 96 68 95 d2 ba 6d b5 9a a2 45 55 04 a5 76 41 4a 22 b5 84 08 91 45 f6 65 32 99 f9 fd 31 99 23 91 65 32 91 0d 9f e7 e3 91 87 e4 6c f3 3d 73 c6 bc cf 77 39 e7 a8 74 3a 1d 42 08 21 84 28 9f 59 5d 17 40 08 21 84 a8 ef 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 08 23 24 2c 85 10 42 Data Ascii: PNGIHDRaVpHYs&? IDATxy\|Ld7D(ZZ-WVtjkV.hmEUvAJ"Ee21#e2l=sw9t:B!(Y]@!$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B#$,B
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 68 e0 54 2b 5f b0 1e 1e 2e 65 b6 30 54 46 55 3e 0b d6 d6 96 2c 5f fe 0b 05 05 1a fe f8 e3 28 e3 c6 3d 80 93 93 3d df 7c f3 3b 6a b5 06 6b 6b 4b 86 0c a9 da a5 15 96 96 16 b4 6a 55 b9 d6 8d f2 8e 8b ad ad 35 1d 3b 9a 3e ca fc e3 3f 53 f9 00 00 20 00 49 44 41 54 56 95 fd 1c 89 bb 8b 84 a5 10 a2 5a 34 6c e8 c2 87 1f be c8 1b 6f 7c c9 e9 d3 17 99 35 eb e6 53 7d 9c 9d ed 79 e7 9d 09 25 9a b2 85 b8 93 54 5b 58 16 0f 48 c3 fd 40 85 10 f7 96 fe fd 3b b3 75 eb 42 76 ef 8e e4 ca 95 64 54 2a f0 f3 f3 22 28 a8 73 99 37 47 17 e2 4e 21 61 29 84 a8 56 f6 f6 36 3c f8 60 d9 b7 e3 13 e2 4e 55 23 61 59 5d 83 86 84 10 42 88 fa 40 c2 52 08 21 84 30 a2 da c2 52 9a 5e 85 10 42 dc ad e4 e1 6b 42 08 21 84 11 12 96 42 08 21 84 11 12 96 42 08 21 84 11 12 96 f7 98 75 eb d6 31 74 e8 Data Ascii: hT+_.e0TFU>,_(==\|;jkkKjU5;>?S IDATVZ4lo\|5S}y%T[XH@;uBvdT*"(s7GN!a)V6<`NU#aY]B@R!0R^BkB!B!B!u1t
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 65 46 22 91 e0 f9 f3 e7 28 28 28 f8 cf cb 56 d4 e1 b7 df 7e 43 cb 96 2d a1 af af 0f 3d 3d 3d 34 6a d4 08 e1 e1 e1 78 f3 e6 4d 99 e5 29 b6 bb e5 cb 97 23 34 34 b4 bc 55 2e b1 4c 6d f8 2f db 71 79 f3 5f d9 f4 53 40 47 47 07 22 91 88 fd ca 93 4a e5 2c af 5f bf 8e b8 b8 38 b5 c7 de bc 79 83 33 67 ce 20 f9 cd 2b 40 00 00 20 00 49 44 41 54 35 35 15 00 70 e7 ce 1d b8 bb bb e3 c1 83 07 58 b8 70 21 0e 1e 3c 88 71 e3 c6 61 d5 aa 55 98 38 71 22 cb 97 94 94 84 33 67 ce a0 69 d3 a6 70 73 73 83 9b 9b 1b 1c 1d 1d 11 13 13 03 6f 6f 6f 2c 5f be 1c 00 50 54 54 84 5e bd 7a 61 c5 8a 15 18 36 6c 18 0e 1c 38 80 ff fd ef 7f c8 cf cf 47 e7 ce 9d 71 ea d4 29 8d 7a 17 16 16 e2 cc 99 33 10 8b c5 ac 0c c5 5f b3 66 cd 00 00 17 2f 5e c4 93 27 4f ca c9 5a 32 be fa ea 2b 4c 9d 3a b5 5c Data Ascii: eF"(((V~C-===4jxM)#44U.Lm/qy_S@GG"J,_8y3g +@ IDAT55pXp!<qaU8q"3gipssooo,_PTT^za6l8Gq)z3_f/^'OZ2+L:\
2024-04-19 00:45:14 UTC	3	IN	Data Raw: 1b 67 f9 Data Ascii: g
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: f2 e5 4b 34 6f de 1c a5 a5 a5 58 b1 62 c5 1b 0f d0 ff 35 38 bd d4 5f 04 02 01 82 82 82 30 6e dc 38 1c 3b 76 0c 66 66 66 88 8f 8f 87 9d 9d 1d 7e fe f9 e7 8f 2d de ff 2c dc 98 fb 6f 52 6f 9c a5 50 28 c4 c9 93 27 61 6c 6c 0c 91 48 f4 b1 c5 a9 33 2e 2e 2e 78 f4 e8 11 9a 34 69 52 6b be 5b b7 6e a1 71 e3 c6 6a 97 fb 5f d7 0b c7 db e1 e5 e5 85 cc cc 4c dc bc 79 13 c5 c5 82 a5 3e e9 00 00 20 00 49 44 41 54 c5 68 d5 aa 15 da b7 6f af 34 50 86 e3 ed e1 c6 dc 7f 93 7a e3 2c 35 34 34 e4 42 e7 ff 4b e8 ea ea aa b5 54 24 7b 1d 40 5d fe eb 7a e1 78 7b 1a 36 6c f8 5e 77 3a e1 60 c3 8d b9 ff 26 f5 ee d5 11 0e 0e 0e 0e 0e 8e ba c2 39 4b 0e 0e 0e 0e 0e 0e 15 70 ce 92 83 83 83 83 83 43 05 9c b3 e4 e0 e0 e0 e0 e0 50 01 e7 2c 39 38 38 38 38 38 54 c0 39 4b 0e 0e 0e 0e 0e 0e 15 Data Ascii: K4oXb58_0n8;vfff~-,oRoP('allH3...x4iRk[nqj_Ly> IDATho4Pz,544BKT${@]zx{6l^w:`&9KpCP,988888T9K
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 8a ee dd bb d3 ad 5b 37 b4 b4 b4 88 89 89 a1 76 ed da af d5 36 de 75 54 6f 62 3e 7a c4 88 11 ce c0 61 80 b1 63 c7 02 79 ae ce 67 ce 9c d1 e8 7a 6f 6f ef 12 f7 4d fd 19 1e 3e 7c 48 48 48 08 8f 1e 3d a2 5e bd 7a b8 ba ba 72 e3 c6 0d 76 ef de cd 47 1f 7d 44 62 62 22 5a 5a 5a b4 6e dd 5a 76 9d 10 82 7d fb f6 71 e1 c2 05 cc cc cc e8 db b7 6f b1 4e 21 17 2e 5c e0 d1 a3 47 74 ec d8 91 7b f7 ee 71 e2 c4 09 dc dc dc a4 35 12 c8 5b 4b b2 b0 b0 90 a0 22 78 18 00 00 20 00 49 44 41 54 1c 2f 9e 3d 7b c6 ee dd bb 49 48 48 c0 c0 c0 80 76 ed da c9 d6 d3 32 33 33 d9 b2 65 0b 09 09 09 d4 ac 59 13 0f 0f 0f 4e 9f 3e 8d b1 b1 31 ef bf ff 3e d1 d1 d1 a4 a6 a6 16 2b bb 81 81 01 ed db b7 2f b4 3d e1 d2 a5 4b 84 87 87 93 93 93 83 a3 a3 23 b5 6a d5 e2 d8 b1 63 b8 ba ba 16 b9 a5 e2 Data Ascii: [7v6uTob>zacygzooM>\|HHH=^zrvG}Dbb"ZZZnZv}qoN!.\Gt{q5[K"x IDAT/={IHHv233eYN>1>+/=K#jc
2024-04-19 00:45:14 UTC	11624	IN	Data Raw: 66 19 26 26 26 b8 7d fb 36 5c 5c 5c 30 73 e6 4c 84 87 87 c3 cf cf 8f 7b 9e dc b4 1d 7b f7 ee 8d a0 a0 20 88 c5 e2 16 db 41 43 43 03 81 81 81 30 36 36 e6 a6 a9 52 47 37 37 37 95 6f 45 ce 9c 39 13 b9 b9 b9 08 0f 0f 97 79 77 d6 c8 c8 08 37 6f de 44 d7 ae 5d f1 de 7b ef c1 cf cf 0f 07 0f 1e c4 ce 9d 3b b1 6c d9 32 2e dd b6 6d db 60 6f 6f 8f 01 03 06 a0 5f bf 7e c8 cd cd c5 e6 cd 9b e1 ef ef 0f 40 72 22 17 18 18 08 33 33 b3 16 cb 21 14 0a 11 18 18 28 73 05 da b1 63 47 85 cf 67 a5 ef 9b aa b2 be 0c 0d 0d 11 18 18 c8 9f a9 87 f2 00 00 20 00 49 44 41 54 05 f7 c6 db a6 b1 b1 31 02 03 03 b1 6b d7 2e ec df bf 1f be be be f8 cf 7f fe 83 7e fd fa e1 c2 85 0b dc f3 51 69 9b 2f 5d ba 54 61 3b ec db b7 0f ba ba ba 38 78 f0 20 37 cf c6 8d 1b 11 14 14 84 75 eb d6 a1 a1 a1 Data Ascii: f&&&}6\\\0sL{{ ACC066RG777oE9yw7oD]{;l2.m`oo_~@r"33!(scGg IDAT1k.~Qi/]Ta;8x 7u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50498	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	869	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&rl=&if=false&ts=1713487512433&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487512378&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	466	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3405, tp=-1, tpl=-1, uplat=20, ullat=4 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:45:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50499	31.13.88.35	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	979	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&rl=&if=false&ts=1713487512433&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487512378&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:45:14 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:45:14 UTC	1565	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w
2024-04-19 00:45:14 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50504	142.251.15.156	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1430	OUT	GET /td/rul/978081151?random=1713487512834&cv=11&fst=1713487512834&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&hn=www.googleadservices.com&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:14 UTC	609	IN	Data Raw: 34 64 32 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 4d26<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 37 36 33 39 38 32 38 32 32 38 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 Data Ascii: estGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7639828228","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7639828228\u0026tag_eid=44805651","trustedBiddingSignals
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 37 36 33 39 38 32 38 32 32 38 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 Data Ascii: =2\u0026rp_id=1j7639828228","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 34 34 39 35 38 32 30 38 36 38 22 2c 22 36 36 33 38 38 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 Data Ascii: 4495820868","663889112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u002
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 74 72 69 62 75 74 65 73 22 3a 7b 22 6f 77 6e 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 34 38 31 35 32 39 37 35 31 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: tributes":{"owner":"https://td.doubleclick.net","name":"1j481529751","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j481529751\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https:
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 3d 31 6a 34 38 31 35 32 39 37 35 31 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d Data Ascii: =1j481529751","metadata":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 39 31 31 32 38 30 36 22 2c 6e 75 6c 6c 2c 22 31 39 36 36 33 38 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 Data Ascii: 9112806",null,"19663894254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 22 2c 22 6e 61 6d 65 22 3a 22 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 62 69 64 64 69 6e 67 4c 6f 67 69 63 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 6a 73 22 2c 22 64 61 69 6c 79 55 70 64 61 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 75 70 64 61 74 65 3f 69 67 5f 6e 61 6d 65 3d 31 6a 38 30 36 34 36 33 37 36 34 5c 75 30 30 32 36 74 61 67 5f 65 69 64 3d 34 34 38 30 35 36 35 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f Data Ascii: ttps://td.doubleclick.net","name":"1j806463764","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j806463764\u0026tag_eid=44805651","trustedBiddingSignalsUrl":"https://td.doubleclick.net/
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 74 61 22 3a 5b 22 31 34 36 32 30 35 34 33 39 38 31 39 22 2c 22 36 36 33 39 35 35 37 36 37 39 38 33 22 2c 6e 75 6c 6c 2c 22 31 39 36 37 31 37 39 31 30 30 38 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 7a 66 53 66 30 4d 64 59 57 63 6f 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 34 36 32 30 35 34 33 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 38 34 38 38 39 30 30 32 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 Data Ascii: ta":["146205439819","663955767983",null,"19671791008"],"adRenderId":"zfSf0MdYWco"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=146205439819\u0026cr_id=689384889002\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DA
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 39 34 32 35 34 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 5a 67 52 43 56 63 45 51 30 36 4d 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 67 64 61 3f 61 64 67 5f 69 64 3d 31 35 34 34 39 35 38 32 30 38 36 38 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 39 33 32 30 32 31 36 34 37 35 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 5c 75 30 30 32 36 72 64 73 3d 24 7b 52 45 4e 44 45 52 5f 44 41 54 41 7d 5c 75 30 30 32 36 73 65 61 74 3d 32 5c 75 30 30 32 36 72 70 5f 69 64 3d 31 6a 38 30 36 34 36 33 37 36 34 22 2c 22 6d 65 74 61 64 61 Data Ascii: 94254"],"adRenderId":"ZgRCVcEQ06M"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/gda?adg_id=154495820868\u0026cr_id=689320216475\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}\u0026rds=${RENDER_DATA}\u0026seat=2\u0026rp_id=1j806463764","metada

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50502	152.195.33.23	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1215	OUT	GET /assets/images/business/informed-delivery/package-image.jpg HTTP/1.1 Host: www.usps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1444775058.1713487457; mab_usps=88; tmab_usps=70; _gid=GA1.2.1668540185.1713487459; _dc_gtm_UA-80133954-3=1; _session_UA-80133954-3=true; _gat_GSA_ENOR0=1; _scid=951d19af-0d90-4528-ae27-058c2348f11f; _fbp=fb.1.1713487461472.1276862882; _pin_unauth=dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg; mdLogger=false; TLTSID=0d4133d8b04f165b950c00e0ed96a2ca; _ga_CSLL4ZEK4L=GS1.1.1713487459.1.1.1713487505.0.0.0; kampyleUserSession=1713487506934; kampyleUserSessionsCount=5; kampyleSessionPageCounter=1; _ga_3NXP3C8S9V=GS1.1.1713487458.1.1.1713487512.0.0.0; _ga=GA1.2.1989466777.1713487459; _rdt_uuid=1713487460173.5b69d1d9-230a-4498-8d04-03ffaad43bb8; _scid_r=951d19af-0d90-4528-ae27-058c2348f11f; _uetsid=f567b740fde511ee8eda81510419b0f7; _uetvid=f567ddc0fde511eeb6782dc4ff9f0275
2024-04-19 00:45:14 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.usps.com Age: 58318 Content-Security-Policy: default-src 'self' https:; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data:; media-src 'self' https:; object-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:14 GMT Etag: "16c52-5e87ccd916580" Last-Modified: Mon, 12 Sep 2022 15:46:46 GMT Server: ECAcc (agb/53AB) Strict-Transport-Security: max-age=31536000 ; includeSubDomains X-Cache: HIT X-Content-Type-Options: nosniff x-ec-custom-error: 1 X-Frame-Options: SAMEORIGIN x-ruleset-version: 3.1 Content-Length: 93266 Connection: close
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 03 4c a0 03 00 04 00 00 00 01 00 00 01 c9 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 c9 03 4c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*iL8Photoshop 3.08BIM8BIM%B~L"}!1AQa"q2#BR$3br
2024-04-19 00:45:14 UTC	1	IN	Data Raw: bf Data Ascii:
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 68 81 e3 6f d9 5b c5 5f 02 75 29 f7 cd e1 db e1 3c 51 b1 e7 ca 98 73 81 e9 9a f7 0f f8 3b 33 e0 20 f8 ab ff 00 04 db 87 e2 65 94 3e 65 df 82 b5 68 6e b7 01 92 21 9b 31 bf e1 92 0d 7f 35 9f f0 69 87 ed 13 ff 00 0a c3 f6 f9 9b e1 75 f4 fe 5d a7 8b f4 f9 20 0a c7 83 2c 7f 32 e3 df ad 7a 58 2f 79 b8 77 4f ef 5a fe 87 83 9a 2e 49 46 af f2 c9 3f 93 d1 fe 67 f4 25 ff 00 05 0b f0 d5 e7 c3 ef da 43 58 d3 55 4a c5 70 fe 6a 1f 50 d5 f1 3d ba dd 4f f3 ed 63 9e f8 35 fd 2f 7e da df b2 ff 00 84 be 26 fc 67 d2 3c 69 e2 42 16 06 88 2b 03 d1 b1 5e cf f0 f7 f6 5e f8 13 1e 8b 15 8c 3a 5d bc 98 50 09 da 09 3f a5 7f 20 67 be 14 62 b1 99 d6 22 7e d7 96 2e 57 5a 5f 7d 7c 8f 0d f8 65 8f ac e7 8b 8d 94 1b 76 bf fc 03 f9 62 d3 0e d7 01 87 39 e6 bb 3b 68 cb 10 2b f7 d7 f6 89 ff 00 Data Ascii: ho[_u)<Qs;3 e>ehn!15iu] ,2zX/ywOZ.IF?g%CXUJpjP=Oc5/~&g<iB+^^:]P? gb"~.WZ_}\|evb9;h+
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: fc 10 ab f6 5f b9 19 d5 bc 73 f1 0e ed bb 99 35 d5 20 fe 76 e7 f9 d7 ec e6 ab aa 69 da 1e 99 71 ac eb 13 2d b5 a5 ac 6d 2c d2 b9 c2 a2 28 cb 31 3d 80 1d 6b 9a d3 7e 21 f8 2b 59 93 4b 8f 46 d4 a2 ba fe db b7 37 56 2f 16 5e 39 e1 00 1d e8 ea 0a e3 04 63 9e 7b 57 83 8a e1 5c 0e 22 a3 af 56 8a 93 7b b3 f6 3e 18 fa 41 f1 9e 4b 81 a7 96 e5 59 8c e9 52 85 f9 63 1b 2b 5d b6 fa 5f 76 fa 9f 91 2b ff 00 04 14 fd 87 e4 ff 00 90 8d f7 8b 2f 47 7f b4 6a c1 b3 f5 c4 02 b4 2d bf e0 82 df f0 4e c8 5b 75 d6 85 a9 dd 1f fa 6d 7e c7 ff 00 41 51 5f b2 17 17 d6 56 88 24 ba 9a 38 95 8e 01 76 0a 09 eb 81 93 e8 2b e2 6f 82 3f b7 4f 81 be 34 7c 51 bd f8 61 6d a3 5e e9 72 c5 1b cb 6b 71 39 05 67 44 e7 0c a0 03 1b 95 20 ed cb 63 90 c4 11 cc 50 e0 2c b6 71 94 e1 86 8b 4b 7d 11 ed d4 Data Ascii: _s5 viq-m,(1=k~!+YKF7V/^9c{W\"V{>AKYRc+]_v+/Gj-N[um~AQ_V$8v+o?O4\|Qam^rkq9gD cP,qK}
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 3b 8d 73 b7 19 f3 08 4e 6b 6f 67 a6 a7 14 f2 ff 00 23 d5 b4 ef 89 3a b5 99 05 65 23 d3 93 5e 8d a5 fc 7c f1 46 9c 4b 5b 5c b0 24 60 e0 9a f9 52 48 a7 09 b9 33 4d 8e 79 94 64 d6 d4 ea c9 68 99 e4 62 72 ca 72 dd 1f 76 68 ff 00 b5 4f 8a ac 2d b6 3d c9 3b 06 00 24 ff 00 8d 31 ff 00 6c 4f 12 d9 bb dc c9 29 6d 88 c1 79 3d 4f e3 5f 0a 4b 75 23 2e 50 9a e7 2f 24 99 91 90 f4 6e 39 af 4a 86 61 51 2b 5c f0 aa e4 14 9e bc a7 d2 90 fe d6 fe 2c bd 92 79 ae 6e 0e e9 09 e7 27 91 9e fc d7 38 7f 68 bd 7a fa f5 7c db 86 6d a7 8e 4f f8 d7 c8 ad 04 91 4f 24 63 bf 4a 7d 9d bc d1 ca 1b be 6b 9d d6 9c e3 cb 73 a5 65 b0 84 af ca 7e a9 e8 9f b4 4c f7 37 3a 4e 8e f2 6e 8d 70 cd 83 dc 7a d7 ec 67 c2 6f 8f d7 37 1e 16 4b 5d 2e e2 3f 3b 68 18 63 c7 4f 4a fe 53 b4 6d 6f 50 b4 d5 96 54 Data Ascii: ;sNkog#:e#^\|FK[\$`RH3MydhbrrvhO-=;$1lO)my=O_Ku#.P/$n9JaQ+\,yn'8hz\|mOO$cJ}kse~L7:Nnpzgo7K].?;hcOJSmoPT
2024-04-19 00:45:14 UTC	16383	IN	Data Raw: 00 c1 ec 68 a5 a2 80 01 c9 c7 4a fc c1 d2 ff 00 6b ff 00 0c e8 5e 26 f1 47 c6 1d 4b e1 29 d2 b4 8d 27 c4 12 f8 5f 5c f1 44 0f a7 b5 f4 72 5b 5c fd 94 4b 75 1c 6d f6 a6 b6 de 54 83 f3 6d 52 18 80 3a 7e 9e d7 e7 ef 8c 7f 61 6b 9f 18 78 83 c6 b6 7f f0 9c 5f 69 de 0e f1 f6 ab 0e ad ab e8 76 f6 b6 c4 cb 24 69 12 cb 1a dd 3a 34 d1 c7 33 44 19 f6 10 7e 66 00 f3 5e 9e 5b f5 7b b5 5f cb bf 7d 6d 6e b6 da fa 13 2b f4 2c 7c 54 ff 00 82 84 fc 17 f0 ae 97 e2 4d 37 e1 fd da eb 1e 22 d0 e2 ba 6b 7b 69 d2 48 2d 2f 66 b1 1b ae 6d e0 b9 da 56 49 62 5c 96 55 04 8c 1a bb 6b fb 77 7c 35 d1 52 7f f8 4e 59 a2 51 f6 97 8e 7b 78 df ec ea 20 b3 17 cb 0c 92 48 14 09 a4 87 25 31 f2 b9 07 07 83 50 c1 ff 00 04 f3 f8 31 65 e3 fb ff 00 18 e9 97 97 b6 ba 7e a7 71 71 79 73 a4 c6 21 10 3d Data Ascii: hJk^&GK)'_\Dr[\KumTmR:~akx_iv$i:43D~f^[{_}mn+,\|TM7"k{iH-/fmVIb\Ukw\|5RNYQ{x H%1P1e~qqys!=
2024-04-19 00:45:14 UTC	11350	IN	Data Raw: 1d 4a 52 dd 1a c2 71 ea 7e 59 7c 48 f0 db f8 2f e2 35 ce 98 46 d8 dd bc d8 fb 70 6b d1 bc 35 7a 1a 24 e7 9c 57 aa 7e d6 9e 0a 9a 6d 3a d3 c6 f6 51 fc d6 c7 64 a4 7f 74 f4 cd 7c d1 e1 5d 54 b0 8d 81 eb c1 af ad cb 6b 73 d3 4c f1 e5 27 0a ae 3d 3a 1f 57 68 77 24 aa a8 ea 6b dc bc 37 7a 2d c2 90 d9 27 b5 7c b3 a3 6a 1b 40 72 d8 af 62 f0 f6 a0 c2 11 3b 37 4e 95 ea d3 69 3d 0f 52 15 6e ae d9 f4 e8 f1 04 b2 db 0b 5b 47 fd e3 70 71 5a 7a 6e 94 ee 7c c9 c9 62 6b ce fc 1c 9e 69 17 32 9f bd 5e d3 69 71 6e 14 2b 57 a9 85 86 bc d2 2d e2 6c ad 13 c1 3e 35 e8 46 eb c2 97 67 a8 08 6b f9 ca f8 cf a6 0b 6d 5e e5 13 a0 73 8a fe 9a 3e 2b d9 34 fe 18 b9 91 3a 6c 38 c5 7f 39 9f 1e ec f6 f8 82 ed 36 e0 ee 6a ef c5 e9 5a 0c f9 0c fa 3c f8 49 f9 1f 1e 2f 42 b5 91 28 22 43 f5 ad Data Ascii: JRq~Y\|H/5Fpk5z$W~m:Qdt\|]TksL'=:Whw$k7z-'\|j@rb;7Ni=Rn[GpqZzn\|bki2^iqn+W-l>5Fgkm^s>+4:l896jZ<I/B("C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50503	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 1197 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	1197	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 35 32 32 64 37 62 33 2d 31 31 39 38 2d 34 39 63 66 2d 39 63 62 62 2d 39 38 62 65 38 32 66 65 65 63 66 30 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 35 35 38 38 65 31 66 65 2d 63 61 32 31 2d 34 66 35 66 2d 39 37 61 30 2d 31 64 37 62 38 33 31 63 30 30 31 37 22 2c 22 73 73 22 3a 22 64 62 64 31 61 62 38 39 2d 66 39 31 66 2d 34 31 32 30 2d 38 30 65 64 2d 37 33 64 34 36 66 31 32 34 33 64 35 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 64 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"7522d7b3-1198-49cf-9cbb-98be82feecf0","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"5588e1fe-ca21-4f5f-97a0-1d7b831c0017","ss":"dbd1ab89-f91f-4120-80ed-73d46f1243d5","bg":true,"d
2024-04-19 00:45:14 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50506	172.217.215.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1319	OUT	GET /activityi;dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? HTTP/1.1 Host: 3976941.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Expires: Fri, 19 Apr 2024 00:45:14 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:14 UTC	592	IN	Data Raw: 31 34 38 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 2f 2f 61 64 73 65 72 76 2e 6d 6f 62 69 2f 61 64 73 6d 6f 76 69 6c 55 74 69 6c 2e 6a 73 3f 76 3d 31 Data Ascii: 1481<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script type='text/javascript' src='//adserv.mobi/adsmovilUtil.js?v=1
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 20 20 20 76 61 72 20 61 20 3d 20 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 20 2a 20 31 30 30 30 30 30 30 30 30 30 30 30 30 30 3b 0a 20 20 20 20 6e 65 77 20 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 78 73 70 3d 34 37 32 30 31 31 32 3b 6f 72 64 3d 27 2b 20 61 20 2b 27 3f 27 3b 0a 20 20 7d 29 28 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 6e 6f 73 63 72 69 70 74 3e 0a 20 20 3c 69 6d 67 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 61 63 74 69 76 69 74 79 3b 78 73 70 3d 34 37 32 30 31 31 32 3b 6f 72 64 3d 31 3f 27 20 77 69 64 74 68 3d 31 20 68 Data Ascii: var a = String(Math.random()) * 10000000000000; new Image().src = 'https://pubads.g.doubleclick.net/activity;xsp=4720112;ord='+ a +'?'; })();</script><noscript> <img src='https://pubads.g.doubleclick.net/activity;xsp=4720112;ord=1?' width=1 h
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 3d 72 39 36 33 63 6f 6c 26 63 74 3d 30 3a 63 79 70 72 77 69 73 26 66 6d 74 3d 33 22 2f 3e 3c 21 2d 2d 20 4b 61 72 67 6f 20 50 69 78 65 6c 20 43 6f 64 65 20 2d 2d 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 73 2c 74 2c 6e 2c 6f 2c 63 2c 64 29 7b 65 2e 6b 64 73 7c 7c 28 28 6f 3d 65 2e 6b 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6f 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6f 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 75 73 68 3d 6f 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 2c 6f 2e 71 75 65 75 65 3d 5b 5d 2c 28 63 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 Data Ascii: =r963col&ct=0:cyprwis&fmt=3"/>... Kargo Pixel Code --><script>!function(e,s,t,n,o,c,d){e.kds\|\|((o=e.kds=function(){o.callMethod?o.callMethod.apply(o,arguments):o.queue.push(arguments)}).push=o,o.loaded=!0,o.version="1.0",o.queue=[],(c=s.createElement("sc
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 69 74 79 69 3b 73 72 63 3d 38 39 30 35 32 30 39 3b 74 79 70 65 3d 69 6e 76 6d 65 64 69 61 3b 63 61 74 3d 75 73 70 73 2d 30 30 32 3b 64 63 5f 6c 61 74 3d 3b 64 63 5f 72 64 69 64 3d 3b 74 61 67 5f 66 6f 72 5f 63 68 69 6c 64 5f 64 69 72 65 63 74 65 64 5f 74 72 65 61 74 6d 65 6e 74 3d 3b 74 66 75 61 3d 3b 6e 70 61 3d 3b 6f 72 64 3d 31 3f 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 20 45 6e 64 20 6f 66 20 46 6c 6f 6f 64 6c 69 67 68 74 20 54 61 67 3a 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 72 65 6d 6f 76 65 20 2d 2d 3e 3c 21 2d 2d 20 43 6f 6e 76 Data Ascii: ityi;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1?" width="1" height="1" frameborder="0" style="display:none"></iframe></noscript>... End of Floodlight Tag: Please do not remove -->... Conv
2024-04-19 00:45:14 UTC	900	IN	Data Raw: 6e 64 69 6e 67 20 50 61 67 65 20 2d 2d 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 70 78 3f 69 64 3d 31 30 34 30 38 37 37 26 73 65 67 3d 31 34 39 37 30 38 30 35 26 74 3d 32 22 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 3e 3c 21 2d 2d 20 45 6e 64 20 6f 66 20 43 6f 6e 76 65 72 73 69 6f 6e 20 50 69 78 65 6c 20 2d 2d 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 2f 61 64 2e 69 70 72 65 64 69 63 74 69 76 65 2e 63 6f 6d 2f 64 2f 74 72 61 63 6b 2f 63 76 74 2f 70 69 78 65 6c 3f 61 63 63 74 5f 69 64 3d 31 37 30 33 37 26 63 61 63 68 65 5f 62 75 73 74 65 72 3d 5b 74 69 6d 65 73 74 61 6d 70 5d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 77 69 64 74 68 3d 22 31 22 20 68 Data Ascii: nding Page --><img src="https://secure.adnxs.com/px?id=1040877&seg=14970805&t=2" width="1" height="1">... End of Conversion Pixel --><img src="//ad.ipredictive.com/d/track/cvt/pixel?acct_id=17037&cache_buster=[timestamp]" style="display:none" width="1" h
2024-04-19 00:45:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50505	142.250.9.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1306	OUT	GET /pagead/viewthroughconversion/978081151/?random=1713487512834&cv=11&fst=1713487512834&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&hn=www.googleadservices.com&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&pscdl=noapi&auid=1444775058.1713487457&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:14 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:14 UTC	552	IN	Data Raw: 39 31 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 913(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-19 00:45:14 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-19 00:45:14 UTC	523	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 38 34 38 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 68 30 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 73 70 73 2e 63 6f 6d 25 32 46 6d 61 6e 61 67 65 25 32 46 69 6e 66 6f 72 6d 65 64 2d 64 65 6c 69 76 65 72 79 2e 68 74 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 49 6e 66 6f 72 6d 65 64 25 32 30 Data Ascii: st\x3d1713484800000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44h0za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm\x26frm\x3d0\x26tiba\x3dInformed%20
2024-04-19 00:45:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50507	104.244.42.197	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	990	OUT	GET /i/adsct?bci=3&eci=2&event_id=3f06b6a6-c579-4dee-a73f-471d8f908c10&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=3c7f72a7-ba5f-47cc-b00f-ce79730b3e32&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:45:14 UTC	393	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:13 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7e77686765920c52 strict-transport-security: max-age=0 x-response-time: 73 x-connection-hash: d15eb28dcefe7da7ae39ba7b9a71e98bc798dc6fffc51853634c6c3c86f45e7a connection: close
2024-04-19 00:45:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50508	104.244.42.3	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1011	OUT	GET /i/adsct?bci=3&eci=2&event_id=3f06b6a6-c579-4dee-a73f-471d8f908c10&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=3c7f72a7-ba5f-47cc-b00f-ce79730b3e32&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:45:14 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3d4b8b5a39a5cfd7 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 4b577722acfba5e46f23665418737deb66be44f098f4f0b555b95a3271884265 connection: close
2024-04-19 00:45:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50510	173.194.219.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 35 33 35 35 38 32 37 38 38 39 39 32 30 32 38 38 38 39 32 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"15355827889920288892"},"type":"trigger-no-matching-source"}]
2024-04-19 00:45:14 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:45:14 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50512	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 904 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	904	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 35 32 32 64 37 62 33 2d 31 31 39 38 2d 34 39 63 66 2d 39 63 62 62 2d 39 38 62 65 38 32 66 65 65 63 66 30 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 36 63 36 33 64 63 38 34 2d 35 36 31 37 2d 34 30 34 38 2d 39 66 30 33 2d 65 37 62 61 63 61 36 61 61 62 33 32 22 2c 22 73 73 22 3a 22 64 62 64 31 61 62 38 39 2d 66 39 31 66 2d 34 31 32 30 2d 38 30 65 64 2d 37 33 64 34 36 66 31 32 34 33 64 35 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"7522d7b3-1198-49cf-9cbb-98be82feecf0","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"6c63dc84-5617-4048-9f03-e7baca6aab32","ss":"dbd1ab89-f91f-4120-80ed-73d46f1243d5","df":true,"s
2024-04-19 00:45:14 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50513	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	441	OUT	GET /snoo.gif?q=CAAHAAABAAoACQAAAA8sjYvfAA==&s=758ZB25Erv8S36eTAg3XLKvz7xb4K5BBW3pi8UyQQy8=&ts=1713487512337 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	784	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:14 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50515	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1288	OUT	GET /v3/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&event=init&ad=%7B%22loc%22%3A%22https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm%22%2C%22ref%22%3A%22%22%2C%22if%22%3Afalse%2C%22sh%22%3A1024%2C%22sw%22%3A1280%2C%22mh%22%3A%226192ffb7%22%2C%22is_eu%22%3Atrue%2C%22architecture%22%3A%22x86%22%2C%22bitness%22%3A%2264%22%2C%22brands%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%2C%22uaFullVersion%22%3A%22117.0.5938.132%22%2C%22ecm_enabled%22%3Atrue%7D&cb=1713487512436 HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:15 UTC	594	IN	HTTP/1.1 200 OK Connection: close Content-Length: 35 cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT content-type: image/gif access-control-allow-origin: * set-cookie: ar_debug=1; Expires=Sat, 19 Apr 2025 00:45:15 GMT; Path=/; Domain=.pinterest.com; Secure; HTTPOnly; SameSite=None x-envoy-upstream-service-time: 1 referrer-policy: origin x-pinterest-rid: 7353467248958632 Date: Fri, 19 Apr 2024 00:45:15 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50520	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	637	OUT	GET /tr/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&rl=&if=false&ts=1713487512433&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487512378&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=104, rtx=0, c=10, mss=1277, tbw=3437, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 19 Apr 2024 00:45:14 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50519	31.13.65.36	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	674	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=533374513433337&ev=PageView&dl=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&rl=&if=false&ts=1713487512433&sw=1280&sh=1024&v=2.9.154&r=stable&ec=0&o=4126&fbp=fb.1.1713487461472.1276862882&ler=empty&cdl=API_unavailable&it=1713487512378&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-19 00:45:15 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-19 00:45:15 UTC	1598	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 77 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50516	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	962	OUT	GET /activity;register_conversion=1;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=1444775058.1713487457;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:15 UTC	2222	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5015981385455534077"}],"aggregatable_trigger_data":[{"filters":[{"14":["6954238"]}],"key_piece":"0xa3d231e7de29f7ee","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x749b03ce3081cd2b","not_filters":{"14":["6954238"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["6954238"]}],"key_piece":"0x15a37a2992af39c1","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x8376969a5f6f3f49","not_filters":{"14":["6954238"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15355827889920288892","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5015981385455534077","filters":[{"14":["6954238"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5015981385455534077","filters":[{"14":["6954238"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5015981385455534077","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5015981385455534077","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["3976941"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:45:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50521	151.101.64.84	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	607	OUT	GET /user/?tid=2621041933204&pd=%7B%22em%22%3A%2224aba99b2defbb47ee981b4200313f61f3ae31541d8717bdac1e463c838939b0%22%2C%22pin_unauth%22%3A%22dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg%22%7D&cb=1713487512435&dep=2%2CPAGE_LOAD HTTP/1.1 Host: ct.pinterest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1
2024-04-19 00:45:15 UTC	622	IN	HTTP/1.1 200 OK Connection: close Content-Length: 325 access-control-expose-headers: Epik,Pin-Unauth pin-unauth: dWlkPU5UZzRNamxqWmpndE1qVTVNUzAwWkdRNUxUaGlPRFV0TVRSaE1tUTFZVFk0TkRnMg cache-control: no-cache,no-store,must-revalidate,max-age=0 pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT access-control-allow-origin: * content-type: application/json; charset=utf-8 x-envoy-upstream-service-time: 3 referrer-policy: origin x-pinterest-rid: 1405131058027941 Date: Fri, 19 Apr 2024 00:45:15 GMT X-CDN: fastly alt-svc: h3=":443";ma=600 Pinterest-Version: 0fd3a7bfcf735a2bdf1240be9d2c00e05a32dcff
2024-04-19 00:45:15 UTC	325	IN	Data Raw: 7b 22 61 65 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 65 6d 46 6e 4c 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 50 68 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 47 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 44 62 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 4c 6f 63 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 61 65 6d 45 78 74 65 72 6e 61 6c 49 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 63 74 45 70 69 6b 49 66 72 61 6d 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 68 72 6f 6d 65 4e 65 77 55 73 65 72 41 67 65 6e 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 69 73 45 75 22 3a 74 72 75 65 2c 22 69 73 55 74 69 6c 69 7a 69 6e 67 41 64 76 65 72 74 69 73 65 72 31 70 45 6e 61 Data Ascii: {"aemEnabled":true,"aemFnLnEnabled":false,"aemPhEnabled":false,"aemGeEnabled":false,"aemDbEnabled":false,"aemLocEnabled":false,"aemExternalIdEnabled":false,"ctEpikIframeEnabled":true,"chromeNewUserAgentEnabled":true,"isEu":true,"isUtilizingAdvertiser1pEna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50514	151.101.1.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	653	OUT	GET /rp.gif?ts=1713487512390&id=t2_txtps67&event=PageVisit&m.itemCount=&m.value=&m.valueDecimal=&m.currency=&m.transactionId=&m.customEventName=&m.products=&m.conversionId=&uuid=5b69d1d9-230a-4498-8d04-03ffaad43bb8&aaid=&em=&external_id=&idfa=&integration=reddit&opt_out=0&sh=1280&sw=1024&v=rdt_c9439d84&dpm=&dpcc=&dprc= HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:14 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50522	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	603	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 966 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	966	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 37 35 38 35 36 37 61 31 2d 65 37 34 64 2d 34 38 38 61 2d 62 63 35 65 2d 34 65 30 36 35 31 32 65 31 66 65 63 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"758567a1-e74d-488a-bc5e-4e06512e1fec","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","bg":true,"s
2024-04-19 00:45:15 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:15 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50523	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	604	OUT	POST /p HTTP/1.1 Host: tr.snapchat.com Connection: keep-alive Content-Length: 6433 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:14 UTC	6433	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 35 32 32 64 37 62 33 2d 31 31 39 38 2d 34 39 63 66 2d 39 63 62 62 2d 39 38 62 65 38 32 66 65 65 63 66 30 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 31 35 36 31 37 62 64 2d 64 66 62 64 2d 34 66 34 65 2d 61 61 36 38 2d 36 39 65 34 33 37 38 36 37 33 66 64 22 2c 22 73 73 22 3a 22 64 62 64 31 61 62 38 39 2d 66 39 31 66 2d 34 31 32 30 2d 38 30 65 64 2d 37 33 64 34 36 66 31 32 34 33 64 35 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"7522d7b3-1198-49cf-9cbb-98be82feecf0","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d15617bd-dfbd-4f4e-aa68-69e4378673fd","ss":"dbd1ab89-f91f-4120-80ed-73d46f1243d5","df":true,"s
2024-04-19 00:45:15 UTC	520	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:15 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 1 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 access-control-allow-origin: https://www.usps.com access-control-allow-credentials: true Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50524	64.233.176.105	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:14 UTC	1121	OUT	GET /pagead/1p-user-list/978081151/?random=1713487512834&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqF5bSYE0ZnW01d9MzEOjzAtHWs7iqUaSP-PlS2gL_BsZffxXn&random=1316905067&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50528	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	1113	OUT	GET /ddm/fls/z/dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50531	104.244.42.131	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	779	OUT	GET /i/adsct?bci=3&eci=2&event_id=3f06b6a6-c579-4dee-a73f-471d8f908c10&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=3c7f72a7-ba5f-47cc-b00f-ce79730b3e32&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_kysU8WswHW5O90diZ2UKqQ=="
2024-04-19 00:45:15 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:14 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4ae6cbd0f3d0ac31 strict-transport-security: max-age=631138519 x-response-time: 76 x-connection-hash: 8afa984899c4fd4964692eed28c0ccf1f339d8d60da2cfb953f3812cd24cc501 connection: close
2024-04-19 00:45:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50532	104.244.42.133	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	758	OUT	GET /i/adsct?bci=3&eci=2&event_id=3f06b6a6-c579-4dee-a73f-471d8f908c10&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=3c7f72a7-ba5f-47cc-b00f-ce79730b3e32&tw_document_href=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nugcr&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=5834b77a-ca5d-4125-8d0f-64ba4e2966af
2024-04-19 00:45:15 UTC	392	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:15 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2778becc9bbec158 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 64bb759689a89096f36efd0e3da34a0425693b977c7f227a200cd65359fdff5c connection: close
2024-04-19 00:45:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50526	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	810	OUT	GET /px?id=1170912&seg=19465850&t=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?CFQw3PVX23nXm/!9LHrmzIe[
2024-04-19 00:45:15 UTC	1485	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 706a93b0-e2d1-4884-a13f-aaa772869b81 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?MYX%%y.r!0y=/d!!*7$%q2lG; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50530	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	870	OUT	GET /px?id=1040877&seg=14970805&t=2 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?CFQw3PVX23nXm/!9LHrmzIe[
2024-04-19 00:45:15 UTC	1632	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ad.doubleclick.net/ddm/activity/src=8905209;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? AN-X-Request-Uuid: 294387e2-73cf-4a56-83ba-4a15623caec0 Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?MYX%%y.r!0y=/d!!*7$%q2lG; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:15 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50534	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	905	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 35 32 32 64 37 62 33 2d 31 31 39 38 2d 34 39 63 66 2d 39 63 62 62 2d 39 38 62 65 38 32 66 65 65 63 66 30 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 31 34 38 62 34 36 37 63 2d 37 35 34 63 2d 34 37 36 66 2d 39 65 32 66 2d 66 34 65 34 61 65 61 30 37 30 31 30 22 2c 22 73 73 22 3a 22 64 62 64 31 61 62 38 39 2d 66 39 31 66 2d 34 31 32 30 2d 38 30 65 64 2d 37 33 64 34 36 66 31 32 34 33 64 35 22 2c 22 64 66 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"7522d7b3-1198-49cf-9cbb-98be82feecf0","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"148b467c-754c-476f-9e2f-f4e4aea07010","ss":"dbd1ab89-f91f-4120-80ed-73d46f1243d5","df":true,"s
2024-04-19 00:45:15 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:15 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 2 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50533	104.21.94.97	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	541	OUT	GET /adsmovilUtil.js?v=1 HTTP/1.1 Host: adserv.mobi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	1117	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: text/javascript Content-Length: 4480 Connection: close X-GUploader-UploadID: ABPtcPrMdGGRpv-nN1X6wW_mNBNWKqghbyqjk_WwZragwwLbMHr9zzLbRyNofWiz1AG8ywIDtJvMDnkA6A x-goog-generation: 1694184143480641 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4480 x-goog-hash: crc32c=GEjgxA== x-goog-hash: md5=mIi37OXQwA3UPIEzWsURqw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Expires: Fri, 19 Apr 2024 01:08:14 GMT Cache-Control: public, max-age=3600 Last-Modified: Fri, 08 Sep 2023 14:42:23 GMT ETag: "9888b7ece5d0c00dd43c81335ac511ab" Age: 2221 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M76%2BsY%2BO3Kztb0ehP%2BB%2B6%2FvO67SVLbQrWck0FvPAhcpxhIH7YCJsPuXZNnvksATaPeHKnldIX8hgNAb2cCrqBoa0mIDkDa7DyMwEQ3KCJXyX5tZumD1y007Eq5rsLQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768deeada3f6767-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 00:45:15 UTC	252	IN	Data Raw: 0d 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 61 64 73 6d 6f 76 69 6c 2c 20 24 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 43 6f 6f 6b 69 65 28 63 6e 61 6d 65 2c 20 63 76 61 6c 75 65 2c 20 65 78 64 61 79 73 2c 20 64 6f 6d 61 69 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 2e 73 65 74 54 69 6d 65 28 64 2e 67 65 74 54 69 6d 65 28 29 20 2b 20 28 65 78 64 61 79 73 2a 32 34 2a 36 30 2a 36 30 2a 31 30 30 30 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 78 70 69 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 2b 64 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 Data Ascii: (function(adsmovil, $, undefined) { function setCookie(cname, cvalue, exdays, domain) { var d = new Date(); d.setTime(d.getTime() + (exdays2460601000)); var expires = "expires="+d.toUTCString(
2024-04-19 00:45:15 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 64 6f 6d 61 69 6e 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6e 61 6d 65 20 2b 20 22 3d 22 20 2b 20 63 76 61 6c 75 65 20 2b 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 20 2b 20 22 3b 20 50 61 74 68 3d 2f 3b 20 22 20 2b 20 65 78 70 69 72 65 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 65 6c 73 65 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6e 61 6d 65 20 2b 20 22 3d 22 20 2b 20 63 76 61 6c 75 65 20 2b 20 22 3b 20 50 61 74 68 3d 2f 3b 20 22 20 2b 20 65 78 70 69 72 65 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 Data Ascii: ); if(domain){ document.cookie = cname + "=" + cvalue + ";domain=" + domain + "; Path=/; " + expires; }else{ document.cookie = cname + "=" + cvalue + "; Path=/; " + expires; }
2024-04-19 00:45:15 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 61 6e 63 68 6f 72 20 3d 20 61 6e 63 68 6f 72 2e 73 75 62 73 74 72 69 6e 67 28 61 6e 63 68 6f 72 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2b 31 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 61 20 3d 20 61 6e 63 68 6f 72 2e 73 70 6c 69 74 28 22 26 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 28 76 61 72 20 69 3d 30 3b 20 69 3c 64 61 74 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 74 65 6d 20 3d 20 64 61 74 61 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 5b 69 74 65 6d 5b 30 5d 5d 20 3d 20 69 74 65 6d 5b 31 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: anchor = anchor.substring(anchor.indexOf("#")+1); var data = anchor.split("&"); for(var i=0; i<data.length; i++) { var item = data[i].split("="); result[item[0]] = item[1];
2024-04-19 00:45:15 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 63 6c 69 63 6b 5f 69 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 63 6f 6e 76 65 72 73 69 6f 6e 5f 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 7b 63 6c 69 63 6b 5f 69 64 7d 22 2c 20 63 6c 69 63 6b 5f 69 64 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 20 3d 20 75 72 6c 2e 72 65 70 6c 61 63 65 28 22 7b 63 62 7d 22 2c 20 63 61 63 68 65 62 75 73 74 65 72 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 49 6d 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 49 6d 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c Data Ascii: if(click_id) { var url = conversion_url.replace("{click_id}", click_id); url = url.replace("{cb}", cachebuster); oImg=document.createElement("img"); oImg.setAttribute('src',
2024-04-19 00:45:15 UTC	121	IN	Data Raw: 20 20 20 20 20 20 20 20 72 65 64 69 72 65 63 74 28 72 65 64 69 72 65 63 74 5f 75 72 6c 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 0d 0a 0d 0a 20 20 20 20 7d 28 77 69 6e 64 6f 77 2e 61 64 73 6d 6f 76 69 6c 20 3d 20 77 69 6e 64 6f 77 2e 61 64 73 6d 6f 76 69 6c 20 7c 7c 20 7b 7d 20 29 29 3b Data Ascii: redirect(redirect_url) } }; }(window.adsmovil = window.adsmovil \|\| {} ));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50535	108.156.154.126	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	542	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Thu, 18 Apr 2024 17:17:13 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 80ee77b022771e780970eec64460c65e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 X-Amz-Cf-Id: xtshnD-TfTCoMOBsBcU4q7mHeBDMLe0xbulsq7lXTyLjHXLamnwZPw== Age: 26883
2024-04-19 00:45:15 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50529	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	630	OUT	GET /track/pxl/?adv=r963col&ct=0:cyprwis&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:45:15 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50525	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	640	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=informeddelivery HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Expires: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:45:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50536	52.45.111.53	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	645	OUT	GET /d/track/cvt/pixel?acct_id=17037&cache_buster=[timestamp] HTTP/1.1 Host: ad.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	350	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:15 GMT Set-Cookie: cu=4bf3b13c-19d2-473a-b603-36d9128b9b23\|1713487515399; Path=/; Domain=ipredictive.com; Expires=Sat, 19 Apr 2025 00:45:15 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 70d378db-ff30-490c-a09c-9d83ab226ce4 Content-Length: 631 Connection: Close
2024-04-19 00:45:15 UTC	631	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50537	64.233.177.104	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	889	OUT	GET /pagead/1p-user-list/978081151/?random=1713487512834&cv=11&fst=1713484800000&bg=ffffff&guid=ON&async=1&gtm=45be44h0za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm&frm=0&tiba=Informed%20Delivery%20-%20Mail%20%26%20Package%20Notifications%20%7C%20USPS&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqF5bSYE0ZnW01d9MzEOjzAtHWs7iqUaSP-PlS2gL_BsZffxXn&random=1316905067&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50540	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	866	OUT	GET /ddm/fls/z/dc_pre=CKS96rSGzYUDFZ1VCAQdxewIRA;src=3976941;type=fy18r0;cat=infor0;ord=5777177590498;npa=0;auiddc=;ps=1;pcor=1461584303;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;gtm=45fe44h0z878733333za201;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.usps.com%2Fmanage%2Finformed-delivery.htm HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:15 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50542	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	596	OUT	GET /assets/xyz.js HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:45:16 UTC	546	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RfffjA2EW5x8ise2cGoSl3N1AnCaqPIpGJZWyhvE0PbbDa2M2G7sM%2BIKPuWF%2BHDP8WdkGGg846DpEHhMhEpmrmUvUXO4bDEf0thHf9Lb3A1n0tSMc1E0O%2Bbe%2FMKyg%2F7F5Jk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768deee684d4523-ATL
2024-04-19 00:45:16 UTC	823	IN	Data Raw: 37 64 37 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 77 2c 5f 52 42 29 20 7b 0a 0a 20 20 76 61 72 20 64 20 3d 20 64 0a 20 20 20 20 2c 20 77 20 3d 20 77 0a 20 20 20 20 2c 20 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 77 2e 52 42 20 3d 20 5f 52 42 3b 0a 0a 20 20 52 42 2e 6c 6f 67 73 20 3d 20 52 42 2e 6c 6f 67 73 20 7c 7c 20 5b 5d 3b 0a 0a 20 20 52 42 2e 69 6e 69 74 45 72 72 6f 72 48 61 6e 64 6c 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 20 7b 0a 20 20 20 20 76 61 72 20 61 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 61 2e 61 73 79 6e 63 3d 21 30 3b 0a 20 20 20 20 66 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 Data Ascii: 7d7d(function(d,w,_RB) { var d = d , w = w , RB = _RB; w.RB = _RB; RB.logs = RB.logs \|\| []; RB.initErrorHandler = function(err) { var a = d.createElement("script"); a.type="text/javascript"; a.async=!0; f=d.getElement
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 70 45 72 72 6f 72 4f 62 6a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 29 20 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 65 79 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 6f 62 6a 5b 6b 65 79 5d 29 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0a 20 20 20 20 20 20 20 20 6f 62 6a 5b 6b 65 79 5d 20 3d 20 77 72 61 70 45 72 72 6f 72 28 6f 62 6a 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 0a 0a 20 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 3d 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 66 6e 29 7b 0a 20 20 20 20 76 61 72 20 79 20 3d 20 5b 5d 3b 20 76 61 72 Data Ascii: pErrorObj = function(obj) { Object.keys(obj).map(function(key) { if (typeof(obj[key]) === 'function') { obj[key] = wrapError(obj[key]); } }) } Array.prototype.map = Array.prototype.map \|\| function(fn){ var y = []; var
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 2c 20 77 65 20 77 61 6e 74 20 74 6f 20 69 67 6e 6f 72 65 20 74 68 69 73 20 6c 61 73 74 20 62 6c 6f 63 6b 0a 20 20 20 20 20 20 69 6d 61 78 20 2d 3d 20 34 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 78 20 3d 20 5b 5d 3b 0a 20 20 20 20 66 6f 72 20 28 69 20 3d 20 30 3b 20 69 20 3c 20 69 6d 61 78 3b 20 69 20 2b 3d 20 34 29 20 7b 0a 20 20 20 20 20 20 62 31 30 20 3d 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 29 20 3c 3c 20 31 38 29 20 7c 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 31 29 20 3c 3c 20 31 32 29 20 7c 0a 20 20 20 20 20 20 20 20 20 20 28 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 32 29 20 3c 3c 20 36 29 20 7c 20 67 65 74 62 79 74 65 36 34 28 73 2c 69 2b 33 29 3b 0a 20 20 20 20 20 20 78 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 Data Ascii: , we want to ignore this last block imax -= 4; } var x = []; for (i = 0; i < imax; i += 4) { b10 = (getbyte64(s,i) << 18) \| (getbyte64(s,i+1) << 12) \| (getbyte64(s,i+2) << 6) \| getbyte64(s,i+3); x.push(String.fromC
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 28 27 2e 27 29 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 69 74 65 72 61 74 65 20 74 68 72 6f 75 67 68 20 70 6f 74 65 6e 74 69 61 6c 20 64 6f 6d 61 69 6e 73 20 28 62 72 6f 61 64 65 73 74 20 66 69 72 73 74 29 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 76 65 6c 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 29 20 7b 0a 20 20 20 20 20 20 2f 2f 20 62 75 69 6c 64 20 74 65 73 74 20 63 6f 6f 6b 69 65 20 26 20 74 72 79 20 77 72 69 74 69 6e 67 20 69 74 20 74 6f 20 62 72 6f 77 73 65 72 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 22 2e 22 20 2b 20 6c 65 76 65 6c 73 5b 69 5d 3b 0a 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 64 6f 6d 61 69 6e 3d 22 20 2b 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 Data Ascii: ('.')); } // iterate through potential domains (broadest first) for (var i = 0; i < levels.length; ++i) { // build test cookie & try writing it to browser var domain = "." + levels[i]; var domainStr = "domain=" + domain;
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 20 20 20 20 7d 29 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 67 65 74 42 79 49 64 3a 20 66 75 6e 63 74 69 6f 6e 28 6c 73 74 2c 20 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6c 73 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 6c 65 6e 67 74 68 22 29 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 3d 30 3b 20 69 20 3c 20 6c 73 74 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6c 73 74 5b 69 5d 2e 69 64 20 3d 3d 20 69 64 29 20 72 65 74 75 72 6e 20 6c 73 74 5b 69 5d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2c 20 64 65 65 70 43 6f 70 79 3a 20 66 75 6e Data Ascii: }) } , getById: function(lst, id) { if (!lst.hasOwnProperty("length")) return false; for (var i=0; i < lst.length; i++) { if (lst[i].id == id) return lst[i] } return false } , deepCopy: fun
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 76 69 65 77 7c 70 75 72 63 68 61 73 65 7c 73 69 67 6e 75 70 7c 6c 6f 67 69 6e 22 2e 73 70 6c 69 74 28 22 7c 22 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 79 70 65 2c 69 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 70 70 69 6e 67 73 5b 74 79 70 65 5d 20 3d 20 70 72 6f 63 65 73 73 53 6f 75 72 63 65 28 73 6f 75 72 63 65 73 5b 69 2b 31 5d 29 0a 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 2c 20 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 62 61 73 65 2c 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 78 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 20 62 61 73 65 5b 6b 5d 20 3d 20 65 78 74 5b 6b 5d 20 7d 29 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2c 20 48 54 54 50 42 75 69 Data Ascii: view\|purchase\|signup\|login".split("\|").map(function(type,i) { mappings[type] = processSource(sources[i+1]) }) , extend = function(base,ext) { Object.keys(ext).map(function(k){ base[k] = ext[k] }) } , HTTPBui
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 28 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 36 20 7c 20 30 2c 20 76 20 3d 20 63 20 3d 3d 20 27 78 27 20 3f 20 72 20 3a 20 28 72 20 26 20 30 78 33 20 7c 20 30 78 38 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 52 42 2e 67 65 74 53 65 73 73 69 6f 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 29 20 72 65 74 75 72 6e 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 Data Ascii: function(c) { var r = Math.random() * 16 \| 0, v = c == 'x' ? r : (r & 0x3 \| 0x8); return v.toString(16); }); } RB.getSession = function() { try { if (!w.sessionStorage) return {}; var s
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 67 65 74 52 6f 6f 74 44 6f 6d 61 69 6e 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 6d 61 69 6e 2e 6c 65 6e 67 74 68 20 3e 20 31 29 20 64 6f 6d 61 69 6e 53 74 72 20 3d 20 22 3b 64 6f 6d 61 69 6e 3d 22 20 2b 20 20 64 6f 6d 61 69 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 53 74 72 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 70 61 74 68 3d 2f 22 20 2b 20 64 6f 6d 61 69 6e 53 74 72 3b 0a 20 20 20 20 20 20 20 Data Ascii: ; var domain = getRootDomain(window.location.href); var domainStr = ""; if (domain.length > 1) domainStr = ";domain=" + domain; document.cookie = cookieStr + expires + ";path=/" + domainStr;
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 3b 22 29 5b 30 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 6a 73 6f 6e 50 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 69 73 20 3c 73 63 72 69 70 74 3e 20 69 64 20 61 74 74 72 69 62 75 74 65 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 6d 75 6c 74 69 70 6c 65 20 6a 73 6f 6e 50 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 72 65 71 75 65 73 74 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 49 64 20 3d 20 27 5f 72 6f 63 6b 65 72 62 6f 78 5f 6a 73 6f 6e 50 5f 73 63 72 69 70 74 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 Data Ascii: ;")[0] } , jsonP: function() { // This <script> id attribute is needed to prevent multiple jsonP // requests var scriptId = '_rockerbox_jsonP_script'; if (document.getElementByI
2024-04-19 00:45:16 UTC	1369	IN	Data Raw: 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 62 29 20 67 65 74 55 49 44 2e 61 64 64 43 61 6c 6c 62 61 63 6b 28 63 62 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 65 74 55 49 44 2e 72 75 6e 43 61 6c 6c 62 61 63 6b 73 28 29 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 6a 73 6f 6e 50 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 2c 20 61 6c 6c 45 78 63 6c 75 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 63 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 55 49 44 2e 61 6c 6c 28 66 75 6e 63 74 69 6f 6e 28 75 69 64 29 20 7b 0a 20 Data Ascii: } , all: function(cb) { if (cb) getUID.addCallback(cb); if (getUID.runCallbacks()) return; getUID.jsonP(); } , allExclude: function(cb) { getUID.all(function(uid) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50539	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	383	OUT	GET /track/pxl/?adv=r963col&ct=0:cyprwis&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 00:45:15 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50543	142.251.15.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	797	OUT	GET /ddm/activity/src=8905209;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	824	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/activity/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50547	142.250.105.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	824	OUT	GET /activity;xsp=4720112;ord=8141934891179.658? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50548	142.250.105.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	824	OUT	GET /activity;xsp=4722620;ord=5358144498511.728? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50549	172.217.215.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	1020	OUT	GET /activityi;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108? HTTP/1.1 Host: 8905209.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	890	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://8905209.fls.doubleclick.net/activityi;dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50541	76.13.32.146	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	393	OUT	GET /spp.pl?a=10000&.yp=10049087&ec=informeddelivery HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:16 UTC	681	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:15 GMT Expires: Fri, 19 Apr 2024 00:45:15 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-04-19 00:45:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50550	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	608	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://tools.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://tools.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	910	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 34 62 34 65 39 63 64 2d 30 31 37 34 2d 34 38 66 32 2d 61 62 31 63 2d 34 36 33 34 32 66 31 64 62 36 36 33 22 2c 22 6c 73 22 3a 22 38 36 36 30 64 65 64 62 2d 36 61 66 31 2d 34 35 33 31 2d 62 31 31 33 2d 64 35 31 31 30 35 65 37 63 33 64 39 22 2c 22 72 22 3a 22 39 32 32 39 31 37 65 39 2d 31 30 64 31 2d 34 31 62 61 2d 39 38 35 32 2d 30 63 64 33 62 31 65 64 31 37 35 63 22 2c 22 73 73 22 3a 22 39 65 61 61 65 35 32 34 2d 66 63 35 37 2d 34 31 39 36 2d 61 61 30 61 2d 61 30 63 37 63 66 33 30 34 65 33 37 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a4b4e9cd-0174-48f2-ab1c-46342f1db663","ls":"8660dedb-6af1-4531-b113-d51105e7c3d9","r":"922917e9-10d1-41ba-9852-0cd3b1ed175c","ss":"9eaae524-fc57-4196-aa0a-a0c7cf304e37","bg":true,"s
2024-04-19 00:45:16 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50551	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 899 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	899	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 34 66 34 62 30 37 37 2d 61 31 37 37 2d 34 34 34 37 2d 38 37 36 61 2d 36 38 39 39 33 64 36 34 31 35 38 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 61 34 64 38 32 64 62 36 2d 37 63 34 30 2d 34 35 32 66 2d 39 36 39 33 2d 66 61 37 35 39 38 62 31 66 38 39 65 22 2c 22 73 73 22 3a 22 30 37 30 39 33 63 36 65 2d 34 66 38 63 2d 34 37 65 33 2d 39 30 61 39 2d 64 66 30 37 36 65 30 62 36 63 31 65 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"34f4b077-a177-4447-876a-68993d641583","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"a4d82db6-7c40-452f-9693-fa7598b1f89e","ss":"07093c6e-4f8c-47e3-90a9-df076e0b6c1e","bg":true,"s
2024-04-19 00:45:16 UTC	388	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: clear Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50552	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 896 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	896	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 33 66 34 66 34 30 62 33 2d 61 66 62 30 2d 34 65 61 39 2d 38 30 31 62 2d 65 35 65 31 30 32 31 39 64 33 34 33 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 64 33 33 65 35 32 61 33 2d 35 37 39 34 2d 34 31 66 33 2d 38 39 39 64 2d 33 32 34 65 39 37 33 32 32 37 31 64 22 2c 22 73 73 22 3a 22 39 63 39 38 38 61 35 39 2d 63 61 65 37 2d 34 31 30 61 2d 39 35 34 33 2d 31 33 31 38 61 37 62 36 37 35 62 61 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"3f4f40b3-afb0-4ea9-801b-e5e10219d343","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"d33e52a3-5794-41f3-899d-324e9732271d","ss":"9c988a59-cae7-410a-9543-1318a7b675ba","bg":true,"s
2024-04-19 00:45:16 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50554	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	913	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 61 37 38 65 33 30 32 62 2d 66 38 30 39 2d 34 37 64 35 2d 61 64 61 66 2d 37 34 30 30 66 61 63 39 66 63 36 63 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 30 61 30 33 31 63 31 65 2d 61 34 30 65 2d 34 37 31 39 2d 39 35 32 35 2d 39 61 66 64 63 34 66 38 35 35 37 63 22 2c 22 73 73 22 3a 22 36 31 33 65 36 63 35 31 2d 37 36 38 35 2d 34 35 62 38 2d 62 65 66 30 2d 35 62 33 31 39 35 37 66 32 66 38 36 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"a78e302b-f809-47d5-adaf-7400fac9fc6c","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"0a031c1e-a40e-4719-9525-9afdc4f8557c","ss":"613e6c51-7685-45b8-bef0-5b31957f2f86","bg":true,"s
2024-04-19 00:45:16 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50555	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 907 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	907	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 32 34 31 39 31 65 62 35 2d 62 39 37 33 2d 34 66 36 63 2d 39 32 33 31 2d 32 61 38 62 37 30 66 32 34 39 34 39 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 35 65 66 32 65 39 61 61 2d 32 63 63 30 2d 34 62 33 37 2d 38 30 38 66 2d 34 62 36 38 39 33 31 65 38 63 37 63 22 2c 22 73 73 22 3a 22 65 63 64 61 35 34 36 37 2d 33 35 65 33 2d 34 38 34 35 2d 62 64 64 66 2d 61 33 31 33 30 61 37 62 37 61 33 66 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"24191eb5-b973-4f6c-9231-2a8b70f24949","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"5ef2e9aa-2cc0-4b37-808f-4b68931e8c7c","ss":"ecda5467-35e3-4845-bddf-a3130a7b7a3f","bg":true,"s
2024-04-19 00:45:16 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50553	35.190.43.134	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	604	OUT	POST /p HTTP/1.1 Host: tr6.snapchat.com Connection: keep-alive Content-Length: 896 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.usps.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.usps.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:15 UTC	896	OUT	Data Raw: 7b 22 63 74 78 22 3a 7b 22 62 74 22 3a 22 31 64 35 33 63 33 38 37 22 2c 22 63 31 22 3a 22 39 35 31 64 31 39 61 66 2d 30 64 39 30 2d 34 35 32 38 2d 61 65 32 37 2d 30 35 38 63 32 33 34 38 66 31 31 66 22 2c 22 6c 63 22 3a 22 37 33 32 65 66 30 39 63 2d 66 62 37 34 2d 34 36 62 66 2d 39 37 30 38 2d 33 63 37 32 65 37 65 31 30 62 33 61 22 2c 22 6c 73 22 3a 22 30 65 39 64 32 34 37 65 2d 34 64 32 31 2d 34 31 34 32 2d 39 37 33 64 2d 63 66 61 63 30 32 66 31 37 35 66 32 22 2c 22 72 22 3a 22 32 33 35 66 61 61 30 64 2d 38 35 63 35 2d 34 35 64 63 2d 39 63 35 62 2d 37 37 33 62 62 30 30 33 31 30 65 33 22 2c 22 73 73 22 3a 22 36 33 36 37 32 37 35 65 2d 35 37 61 34 2d 34 31 63 61 2d 39 61 61 66 2d 32 39 38 32 34 36 36 64 61 39 33 30 22 2c 22 62 67 22 3a 74 72 75 65 2c 22 73 Data Ascii: {"ctx":{"bt":"1d53c387","c1":"951d19af-0d90-4528-ae27-058c2348f11f","lc":"732ef09c-fb74-46bf-9708-3c72e7e10b3a","ls":"0e9d247e-4d21-4142-973d-cfac02f175f2","r":"235faa0d-85c5-45dc-9c5b-773bb00310e3","ss":"6367275e-57a4-41ca-9aaf-2982466da930","bg":true,"s
2024-04-19 00:45:16 UTC	429	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 00:45:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload strict-transport-security: max-age=31536000; includeSubDomains Content-Length: 0 x-envoy-upstream-service-time: 0 server: API Gateway alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Via: 1.1 google, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50544	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:45:15 UTC	711	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 69 6e 69 74 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 32 36 34 64 34 31 33 64 2d 31 38 32 64 2d 34 38 39 61 2d 38 30 35 65 2d 63 34 62 65 32 38 62 63 37 35 34 64 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e 66 6c 73 2e 64 6f 75 62 6c 65 63 6c Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"init","params":{"view_id":"264d413d-182d-489a-805e-c4be28bc754d"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.fls.doublecl
2024-04-19 00:45:16 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:45:15 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:45:16 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:45:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50545	3.225.229.68	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	741	OUT	POST /api/v1?gdpr=0&gdpr_consent=&us_privacy=&gpp=&gpp_sid= HTTP/1.1 Host: kds-pixel.kargo.com Connection: keep-alive Content-Length: 723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://3976941.fls.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9
2024-04-19 00:45:15 UTC	723	OUT	Data Raw: 7b 22 70 61 72 74 6e 65 72 5f 69 64 22 3a 22 38 30 30 35 39 38 38 66 22 2c 22 63 6c 69 65 6e 74 5f 69 64 22 3a 22 36 31 65 30 63 38 35 36 2d 34 64 33 62 2d 34 31 61 31 2d 61 31 36 31 2d 31 32 64 62 61 31 37 38 64 31 39 33 22 2c 22 6b 69 6d 70 22 3a 6e 75 6c 6c 2c 22 65 76 65 6e 74 22 3a 22 49 6e 66 6f 72 6d 65 64 44 65 6c 69 76 65 72 79 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 76 69 65 77 5f 69 64 22 3a 22 32 36 34 64 34 31 33 64 2d 31 38 32 64 2d 34 38 39 61 2d 38 30 35 65 2d 63 34 62 65 32 38 62 63 37 35 34 64 22 7d 2c 22 63 6c 69 65 6e 74 5f 72 65 66 65 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 6d 65 74 61 22 3a 22 62 22 2c 22 70 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 33 39 37 36 39 34 31 2e Data Ascii: {"partner_id":"8005988f","client_id":"61e0c856-4d3b-41a1-a161-12dba178d193","kimp":null,"event":"InformedDelivery","params":{"view_id":"264d413d-182d-489a-805e-c4be28bc754d"},"client_referer":"https://www.usps.com/","meta":"b","page_url":"https://3976941.
2024-04-19 00:45:16 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 UTC Pragma: no-cache Set-Cookie: ktcid=3a0b7c26-cd0b-0e5e-39c4-04f6dc8200b9; Path=/; Domain=kargo.com; Expires=Sat, 19 Apr 2025 00:45:15 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 Date: Fri, 19 Apr 2024 00:45:16 GMT Content-Length: 43 Content-Type: image/gif Connection: close
2024-04-19 00:45:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50546	54.204.91.195	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:15 UTC	461	OUT	GET /d/track/cvt/pixel?acct_id=17037&cache_buster=[timestamp] HTTP/1.1 Host: ad.ipredictive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=4bf3b13c-19d2-473a-b603-36d9128b9b23\|1713487515399
2024-04-19 00:45:16 UTC	350	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Date: Fri, 19 Apr 2024 00:45:15 GMT Set-Cookie: cu=4bf3b13c-19d2-473a-b603-36d9128b9b23\|1713487515399; Path=/; Domain=ipredictive.com; Expires=Sat, 19 Apr 2025 00:45:15 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: ceb1c52f-44ed-4a58-b483-f364a2f8c6b6 Content-Length: 631 Connection: Close
2024-04-19 00:45:16 UTC	631	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50556	142.251.15.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	831	OUT	GET /ddm/activity/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	2414	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5590590176346289411"}],"aggregatable_trigger_data":[{"filters":[{"14":["7915533"]}],"key_piece":"0x305d21d1fc40fb84","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xae9b439596c00281","not_filters":{"14":["7915533"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["7915533"]}],"key_piece":"0x45f58ad463a511f1","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0x6ccab8e6d2eecde8","not_filters":{"14":["7915533"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"16936275518303089485","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5590590176346289411","filters":[{"14":["7915533"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"5590590176346289411","filters":[{"14":["7915533"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"5590590176346289411","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"5590590176346289411","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["8905209"]}} Content-Type: image/png Access-Control-Allow-Origin: * Location: https://adservice.google.com/ddm/fls/z/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:45:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50558	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	607	OUT	GET /integrations?source=usps HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:45:16 UTC	537	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:16 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xvaIX%2FaUdcK3J4PuL3IcOuCgn31DNwije3z1FNiwSusrgZNwLOkkDbaHhz4lDqyc%2Bz%2FOvYRFwX9xTfcf56afZSW6avDpBdZRDtz%2F0f7jaykXwLvC6Ehhcln9Vt4PFK3JPx0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768def1edd2b032-ATL
2024-04-19 00:45:16 UTC	48	IN	Data Raw: 32 61 0d 0a 52 42 2e 6a 73 6f 6e 50 49 6e 74 65 67 72 61 74 69 6f 6e 73 28 7b 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 5b 5d 7d 29 0a 0d 0a Data Ascii: 2aRB.jsonPIntegrations({"integrations":[]})
2024-04-19 00:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50557	172.67.71.65	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	1482	OUT	GET /rb?pageReferrer=https%3A%2F%2Fwww.usps.com%2F&url=https%3A%2F%2F3976941.fls.doubleclick.net%2Factivityi%3Bdc_pre%3DCKS96rSGzYUDFZ1VCAQdxewIRA%3Bsrc%3D3976941%3Btype%3Dfy18r0%3Bcat%3Dinfor0%3Bord%3D5777177590498%3Bnpa%3D0%3Bauiddc%3D1444775058.1713487457%3Bps%3D1%3Bpcor%3D1461584303%3Buaa%3Dx86%3Buab%3D64%3Buafvl%3DGoogle%252520Chrome%253B117.0.5938.132%257CNot%25253BA%25253DBrand%253B8.0.0.0%257CChromium%253B117.0.5938.132%3Buamb%3D0%3Buam%3D%3Buap%3DWindows%3Buapv%3D10.0.0%3Buaw%3D0%3Bpscdl%3Dnoapi%3Bgtm%3D45fe44h0z878733333za201%3Bgcd%3D13l3l3l3l1%3Bdma%3D0%3Bepver%3D2%3B~oref%3Dhttps%253A%252F%252Fwww.usps.com%252Fmanage%252Finformed-delivery.htm%3F&action=view&source=usps&rb_source=usps&script_version=xyz.js&sessionId=cf0595a1-91b1-42bf-87a5-c8a397e56f11&an_seg=18564794&type=imp&uid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36 HTTP/1.1 Host: getrockerbox.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=rbos-8107eeee-38f6-4572-a0ca-24ca4d623a36
2024-04-19 00:45:16 UTC	585	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 00:45:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Location: https://secure.adnxs.com/seg?add=18564794 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sq2dyZenxn0uNHyrDfBzQbA0ZmgKBmKN12lJch19Z7cPs2YTRVGWktw56wKvYtyOESzYeiNbif62ItsPVTwNwHd64V%2FC6IeCH%2BmEUocCwy5zjQOgyUDnfScp7Wp9Xe%2BnA8k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8768def109e6135b-ATL
2024-04-19 00:45:16 UTC	164	IN	Data Raw: 39 65 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: 9e<html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>
2024-04-19 00:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50559	172.217.215.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	1054	OUT	GET /activityi;dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108? HTTP/1.1 Host: 8905209.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Expires: Fri, 19 Apr 2024 00:45:16 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 00:45:16 UTC	592	IN	Data Raw: 37 36 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 49 48 41 33 37 57 47 7a 59 55 44 46 57 Data Ascii: 76c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CIHA37WGzYUDFW
2024-04-19 00:45:16 UTC	1255	IN	Data Raw: 58 32 6c 75 64 47 56 79 59 57 4e 30 61 57 39 75 58 33 52 35 63 47 55 36 49 45 4e 50 54 6c 5a 46 55 6c 4e 4a 54 30 34 4b 5a 47 56 69 64 57 64 66 61 32 56 35 4f 69 41 30 4d 7a 55 31 4d 54 67 79 4e 7a 59 78 4d 54 59 35 4f 44 45 31 4d 6a 59 35 43 6d 4e 30 59 31 39 6a 62 32 35 32 5a 58 4a 7a 61 57 39 75 58 32 4a 31 59 32 74 6c 64 44 6f 67 4e 77 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 45 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 7a 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4e 41 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 55 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 32 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4e 77 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 Data Ascii: X2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiA0MzU1MTgyNzYxMTY5ODE1MjY5CmN0Y19jb252ZXJzaW9uX2J1Y2tldDogNwphcmNoZXR5cGVfaWQ6IDEKYXJjaGV0eXBlX2lkOiAzCmFyY2hldHlwZV9pZDogNAphcmNoZXR5cGVfaWQ6IDUKYXJjaGV0eXBlX2lkOiA2CmFyY2hldHlwZV9pZDogNwphcmNoZXR5cGV
2024-04-19 00:45:16 UTC	60	IN	Data Raw: 20 61 74 74 72 69 62 75 74 69 6f 6e 53 72 63 20 77 69 64 74 68 3d 22 31 22 20 68 65 69 67 68 74 3d 22 31 22 20 61 6c 74 3d 22 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: attributionSrc width="1" height="1" alt=""></body></html>
2024-04-19 00:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50561	142.250.105.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	578	OUT	GET /activity;xsp=4720112;ord=8141934891179.658? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50560	142.250.105.154	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	578	OUT	GET /activity;xsp=4722620;ord=5358144498511.728? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:16 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50562	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	854	OUT	GET /ddm/fls/z/dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://8905209.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50563	68.67.160.186	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	856	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; receive-cookie-deprecation=1; uuid2=8275795313744788479; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNZMQx?MYX%%y.r!0y=/d!!7$%q2lG
2024-04-19 00:45:17 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:45:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: c375c1d0-a4f7-43b8-bc54-ce3148a6172d Set-Cookie: XANDR_PANID=m4JY-7Xjml8R1iFiw3xyDhVsg2-xUNhWjdrTlQ1d2-X7h1UQtNYQoPCEzWsFGggyQhn9DxeXl3KFgSXk9nMBc20M9dVhQyshNimD-qg4qLY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNWn2TYw7px+<Ll#>wL5L!!Db%wCu; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 675.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:45:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50565	142.251.15.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	2246	OUT	GET /ddm/activity/attribution_src_register;crd=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 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://8905209.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:17 UTC	2226	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13650208665847270237"}],"aggregatable_trigger_data":[{"filters":[{"14":["9054127"]}],"key_piece":"0x6949041d10735c4e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa65b949b9aaa9012","not_filters":{"14":["9054127"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9054127"]}],"key_piece":"0x6b92a5b863bd7058","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfde34a4905103703","not_filters":{"14":["9054127"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4355182761169815269","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13650208665847270237","filters":[{"14":["9054127"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13650208665847270237","filters":[{"14":["9054127"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13650208665847270237","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13650208665847270237","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["8905209"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:45:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50564	142.251.15.157	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	739	OUT	GET /ddm/fls/z/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50566	172.253.124.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 136 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:16 UTC	136	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 36 39 33 36 32 37 35 35 31 38 33 30 33 30 38 39 34 38 35 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"16936275518303089485"},"type":"trigger-no-matching-source"}]
2024-04-19 00:45:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:45:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50567	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	607	OUT	GET /ddm/fls/z/dc_pre=CIHA37WGzYUDFW9PCAQdvtMJwA;src=8905209;type=invmedia;cat=usps-002;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1678656878590.108 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50568	64.233.185.148	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	1945	OUT	GET /ddm/activity/attribution_src_register;crd=Zmxvb2RsaWdodF9jb25maWdfaWQ6IDg5MDUyMDkKYWR2ZXJ0aXNlcl9kb21haW46ICJodHRwczovL2RvdWJsZWNsaWNrLm5ldCIKeGZhX2F0dHJpYnV0aW9uX2ludGVyYWN0aW9uX3R5cGU6IENPTlZFUlNJT04KZGVidWdfa2V5OiA0MzU1MTgyNzYxMTY5ODE1MjY5CmN0Y19jb252ZXJzaW9uX2J1Y2tldDogNwphcmNoZXR5cGVfaWQ6IDEKYXJjaGV0eXBlX2lkOiAzCmFyY2hldHlwZV9pZDogNAphcmNoZXR5cGVfaWQ6IDUKYXJjaGV0eXBlX2lkOiA2CmFyY2hldHlwZV9pZDogNwphcmNoZXR5cGVfaWQ6IDgKYXJjaGV0eXBlX2lkOiA5CmFyY2hldHlwZV9pZDogMTAKYXJjaGV0eXBlX2lkOiAxMQphcmNoZXR5cGVfaWQ6IDEyCmFyY2hldHlwZV9pZDogMTMKYXJjaGV0eXBlX2lkOiAxNAphcmNoZXR5cGVfaWQ6IDE1CmFyY2hldHlwZV9pZDogMTYKYXJjaGV0eXBlX2lkOiAxNwphcmNoZXR5cGVfaWQ6IDE4CmFyY2hldHlwZV9pZDogMTkKYXJjaGV0eXBlX2lkOiAyMAphcmNoZXR5cGVfaWQ6IDIxCmNvbnZlcnNpb25fbWVhc3VyZW1lbnRfZGltZW5zaW9uc19kYXRhIHsKICBtZWFzdXJlbWVudF9kaW1lbnNpb246IENPTlZFUlNJT05fRElNRU5TSU9OX0ZMT09ETElHSFRfQUNUSVZJVFlfSUQKICBtZWFzdXJlbWVudF9kaW1lbnNpb25fdmFsdWUgewogICAgaW50NjRfdmFsdWU6IDkwNTQxMjcKICB9Cn0KY29udmVyc2lvbl9tZWFzdXJlbWVudF9kaW1lbnNpb25zX2RhdGEgewogIG1lYXN1cmVtZW50X2RpbWVuc2lvbjogQ09OVkVSU0lPTl9ESU1FTlNJT05fQ09OVkVSU0lPTl9EQVRFCiAgbWVhc3VyZW1lbnRfZGltZW5zaW9uX3ZhbHVlIHsKICAgIHN0cmluZ192YWx1ZTogIjIwMjQtMDQtMTkiCiAgfQp9CmJyb3dzZXJfYXR0cmlidXRpb25fYXBpX3JlcXVlc3RfcHJvY2Vzc2luZ19iaXRzOiA1NzA0MjUzNDQKdHJpZ2dlcl9kZWR1cGxpY2F0aW9uX2tleTogMTM2NTAyMDg2NjU4NDcyNzAyMzcKZ2FpYV9tb2RlOiBmYWxzZQphZ2dyZWdhdGlvbl9jb29yZGluYXRvcjogQUdHUkVHQVRJT05fQ09PUkRJTkFUT1JfQVdTCg HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUl93IduDFprYsE_uVroptfRHvrMfTmRnkrFv5NGnGU91v1d8bWGeNExakz3
2024-04-19 00:45:17 UTC	2226	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"13650208665847270237"}],"aggregatable_trigger_data":[{"filters":[{"14":["9054127"]}],"key_piece":"0x6949041d10735c4e","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0xa65b949b9aaa9012","not_filters":{"14":["9054127"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":[{"14":["9054127"]}],"key_piece":"0x6b92a5b863bd7058","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xfde34a4905103703","not_filters":{"14":["9054127"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4355182761169815269","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"13650208665847270237","filters":[{"14":["9054127"],"source_type":["event"]}],"priority":"10","trigger_data":"1"},{"deduplication_key":"13650208665847270237","filters":[{"14":["9054127"],"source_type":["navigation"]}],"priority":"10","trigger_data":"6"},{"deduplication_key":"13650208665847270237","filters":[{"source_type":["event"]}],"priority":"0","trigger_data":"0"},{"deduplication_key":"13650208665847270237","filters":[{"source_type":["navigation"]}],"priority":"0","trigger_data":"7"}],"filters":{"8":["8905209"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sun, 19-May-2024 00:45:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50569	64.233.176.155	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	589	OUT	GET /ddm/fls/z/src=8905209;dc_pre=CNaG27WGzYUDFRUUdgYdhdEN0Q;type=invmedia;cat=uspsh0;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;npa=;ord=1 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 00:45:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 00:45:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50570	68.67.179.153	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	609	OUT	GET /seg?add=18564794 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=8275795313744788479; receive-cookie-deprecation=1; XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNWn2TYw7px+<Ll#>wL5L!!Db%wCu
2024-04-19 00:45:17 UTC	1530	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 00:45:17 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 9f8b63ad-5d07-4563-b0ff-3634ba3f8b66 Set-Cookie: XANDR_PANID=OogX9OoWvkP2fEFGjvHJUHYJ4iTnbaE_xRoct_TYJNFRtZ73-EA1ls9yQ1_aHwALbHKjQdFTioymUQXo6udz4Kl1ZgzNHpx2StR6zdkG7lQ.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/8D>6NRF']wIg2E?kFGD(iNV0%DYbi'sD$25ADb6_:!:83e?zhrz; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=8275795313744788479; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 00:45:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 00:45:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50572	142.251.15.149	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 70 73 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 33 35 35 31 38 32 37 36 31 31 36 39 38 31 35 32 36 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://usps.com","trigger_debug_key":"4355182761169815269"},"type":"trigger-no-matching-source"}]
2024-04-19 00:45:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 00:45:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50571	15.197.193.217	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:17 UTC	769	OUT	GET /track/up?adv=v62w3xt&ref=https%3A%2F%2Fwww.usps.com%2F&upid=z2isjx0&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://3976941.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:17 UTC	136	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 00:45:17 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50575	151.101.193.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:23 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:23 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:23 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50576	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:23 UTC	397	OUT	OPTIONS /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Origin: https://alb.reddit.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:23 UTC	644	IN	HTTP/1.1 204 No Content Connection: close Server: Varnish Retry-After: 0 Access-Control-Allow-Origin: https://alb.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:23 GMT Via: 1.1 varnish Vary: Origin Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50577	151.101.129.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:23 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 2954 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:23 UTC	2954	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 35 36 34 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 35 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 73 70 73 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 32 39 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 Data Ascii: [{"age":15640,"body":{"elapsed_time":754,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.usps.com/","sampling_fraction":0.3,"server_ip":"151.101.129.140","status_code":200,"type":"ok"},"type":"network-error","url":"https
2024-04-19 00:45:23 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:23 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50578	151.101.193.140	443	2716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 00:45:23 UTC	341	OUT	POST /reports HTTP/1.1 Host: w3-reporting-nel.reddit.com Connection: keep-alive Content-Length: 3047 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 00:45:23 UTC	3047	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 37 33 32 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 34 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 33 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 35 31 2e 31 30 31 2e 31 2e 31 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6c 62 2e 72 65 64 64 69 74 2e 63 6f 6d 2f 72 70 2e 67 69 66 Data Ascii: [{"age":7320,"body":{"elapsed_time":449,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":0.3,"server_ip":"151.101.1.140","status_code":200,"type":"ok"},"type":"network-error","url":"https://alb.reddit.com/rp.gif
2024-04-19 00:45:23 UTC	681	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 content-type: text/plain; charset=utf-8 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 00:45:23 GMT Via: 1.1 varnish Strict-Transport-Security: max-age=31536000; includeSubdomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block server: snooserv Access-Control-Allow-Origin: https://www.reddit.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type,Origin,X-origination-host,X-origination-path Access-Control-Expose-Headers: * Access-Control-Max-Age: 86400 Vary: Origin

Target ID:	0
Start time:	02:43:56
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:44:00
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2476 --field-trial-handle=2432,i,14948990831735324925,17602649722396218757,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:44:03
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hgdffds.cyou/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hgdffds.cyou/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Chrome Cache Entry: 229

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Windows Analysis Report
https://hgdffds.cyou/