Edit tour

Windows Analysis Report
https://trezor-io-start-r---starting-auth.webflow.io/

Overview

General Information

Sample URL:	https://trezor-io-start-r---starting-auth.webflow.io/
Analysis ID:	1642396
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6076 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5980 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5988 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-io-start-r---starting-auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 12023sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0X-YouTube-Client-Name: 56X-YouTube-Ad-Signals: dt=1742345312088&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C719&vis=1&wgl=true&ca_type=imageX-Goog-Event-Time: 1742345315411X-YouTube-Client-Version: 1.20250312.01.00Content-Type: application/jsonX-YouTube-Page-Label: youtube.player.web_20250312_01_RC00X-YouTube-Page-CL: 736287689X-YouTube-Utc-Offset: -240X-YouTube-Device: cbr=Chrome&cbrver=134.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-Goog-Visitor-Id: CgtVN2lMUUlJTGFiSSjfqOi-BjIKCgJVUxIEGgAgUQ%3D%3DX-Goog-Request-Time: 1742345315411User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36X-YouTube-Time-Zone: America/New_YorkAccept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D

Source: chromecache_127.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_127.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_127.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_127.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_108.2.dr, chromecache_127.2.dr, chromecache_135.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_117.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_127.2.dr, chromecache_107.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_139.2.dr, chromecache_122.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_127.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_127.2.dr	String found in binary or memory: http://www.d-project.com/
Source: chromecache_127.2.dr	String found in binary or memory: http://www.denso-wave.com/qrcode/faqpatent-e.html
Source: chromecache_127.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_127.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_127.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_108.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_108.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_108.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_108.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_108.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_127.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_127.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_127.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_127.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_127.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_127.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_127.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_108.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_94.2.dr, chromecache_113.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_108.2.dr, chromecache_127.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_127.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_127.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-10
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-50
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-80
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.we
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/js/webflow.4e8135d87.js
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_110.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_127.2.dr	String found in binary or memory: https://clients2.google.com/gr/gr_sync.js
Source: chromecache_110.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375
Source: chromecache_106.2.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/static/youtube-placeholder.2b05e7d68d.svg
Source: chromecache_108.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_127.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_127.2.dr	String found in binary or memory: https://embeddedassistant-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssistant/YTAssi
Source: chromecache_127.2.dr	String found in binary or memory: https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista
Source: chromecache_127.2.dr	String found in binary or memory: https://embeddedassistant-frontend-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAs
Source: chromecache_127.2.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/Y
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto_old:300italic
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_145.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_w
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/youtubesans/v30/Qw38ZQNGEDjaO2m6tqIqX5E-AVS5_rSejo46_PCTRspJ0OosolrBEJL3
Source: chromecache_127.2.dr	String found in binary or memory: https://gamesnacks.com
Source: chromecache_127.2.dr	String found in binary or memory: https://garlo.com/enapa2%3Fgc_id%3D20599670093&label=video_click_to_advertiser_site&ctype=110
Source: chromecache_117.2.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_127.2.dr	String found in binary or memory: https://github.com/dmoscrop/fold-case
Source: chromecache_108.2.dr, chromecache_127.2.dr, chromecache_135.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_127.2.dr	String found in binary or memory: https://i.ytimg.com/an/
Source: chromecache_127.2.dr	String found in binary or memory: https://i.ytimg.com/sb/
Source: chromecache_127.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_127.2.dr	String found in binary or memory: https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg
Source: chromecache_108.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_127.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
Source: chromecache_127.2.dr	String found in binary or memory: https://mathiasbynens.be/
Source: chromecache_108.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_127.2.dr	String found in binary or memory: https://myaccount-autopush.corp.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://myaccount-dev.corp.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://myaccount-staging.corp.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://myaccount.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://oauth-redirect-sandbox.googleusercontent.com
Source: chromecache_127.2.dr	String found in binary or memory: https://oauth-redirect-test.googleusercontent.com
Source: chromecache_127.2.dr	String found in binary or memory: https://oauth-redirect.googleusercontent.com
Source: chromecache_127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/activeview_ext?id=
Source: chromecache_127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=dv&
Source: chromecache_127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=17
Source: chromecache_127.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_127.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_135.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_108.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_108.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_108.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_108.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_127.2.dr	String found in binary or memory: https://rr3---sn-n4v7sns7.googlevideo.com/videoplayback?expire=1697267654&source=youtube&requiressl=
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/atr?docid=
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/delayplay?cl=
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/playback?cl=
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/qoe?cl=
Source: chromecache_127.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/watchtime?cl=
Source: chromecache_127.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_127.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/doclist/images/icon_10_generic_list.png
Source: chromecache_127.2.dr	String found in binary or memory: https://studio.youtube.com/
Source: chromecache_127.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_108.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_108.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_108.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_108.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_108.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_127.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/9706180
Source: chromecache_127.2.dr	String found in binary or memory: https://support.google.com/youtube/bin/answer.py?answer=140536
Source: chromecache_127.2.dr	String found in binary or memory: https://tv.youtube.com
Source: chromecache_127.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_108.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_110.2.dr	String found in binary or memory: https://webflow.com
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/?v=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&hl=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C3OQpfbUyZYWKL_Ken8RMFbClwAyRha6dc6fw7oP7EbaQHx
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_108.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5KBDVVN
Source: chromecache_127.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TGBSZFB
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_138.2.dr, chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/google_guarantee_grey600_48dp.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/local_shipping_grey600_48dp.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/location_on_grey600_48dp.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/undo_grey600_48dp.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/annotations/youtube.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144_v2.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192_v2.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/icons/web/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/animated_like_icon/animated_like_icon_dark_v4.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/animated_like_icon/animated_like_icon_light_v4.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/custom_animated_like_icon/animated_like_valentines25_brok
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/custom_animated_like_icon/animated_like_valentines25_hear
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/youchat_animations/progress_indicator_comp_v1.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/youchat_animations/progress_indicator_solo_v1.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/downloads_empty_state.png
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif
Source: chromecache_127.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png
Source: chromecache_145.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png
Source: chromecache_108.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A
Source: chromecache_108.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/api/stats/ads?ver=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/api/timedtext?v=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_110.2.dr	String found in binary or memory: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0
Source: chromecache_108.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVx
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/howyoutubeworks/product-features/search/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/pagead/adview?ai=C
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/pagead/interaction/?ai=C
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/pcs/activeview?xai=
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/ptracking?ei=
Source: chromecache_108.2.dr	String found in binary or memory: https://www.youtube.com/s/
Source: chromecache_127.2.dr	String found in binary or memory: https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f
Source: chromecache_108.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_127.2.dr	String found in binary or memory: https://youtube.com
Source: chromecache_108.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_127.2.dr	String found in binary or memory: https://youtube.com/watch?v=
Source: chromecache_108.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_127.2.dr	String found in binary or memory: https://yt3.ggpht.com/
Source: chromecache_127.2.dr	String found in binary or memory: https://yt3.ggpht.com/ytc/
Source: chromecache_108.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.186.68:443 -> 192.168.2.4:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.46:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.99:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.118:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.47:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.198:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.129:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.182:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.161:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.78:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.110:443 -> 192.168.2.4:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.86:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.110:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.110:443 -> 192.168.2.4:49797 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2064_1932132873

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2064_1932132873

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@28/96@50/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-io-start-r---starting-auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5980 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5988 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2336 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5988 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2308,i,16671549898473421844,5079323927158175905,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5980 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: var bRb=XPb;_.R([_.E(_.RG.YtOpenPopupBehavior),_.V("design:type",Object)],bRb.prototype,"ytOpenPopupBehavior",void 0);bRb=_.R([_.Zq()],bRb);_.EH=[_.RG.YtOpenPopupBehavior,bRb.prototype];var cRb;var Bt=[_.gq,zyb,_.BE,_.hq,_.uo,_.Bzb,_.kq,_.zDb,_.vw,OTa];_.v("web_watch_get_updated_metadata_response_processing")&&Bt.push(_.PDb);_.v("web_continuation_response_processing")&&Bt.push(_.qt);var $6a=new _.HA("RESPONSE_RECEIVED_COMMANDS"),KTa=new _.HA("RESPONSE_RECEIVED_COMMANDS");var DTa="accountDisconnectionEndpoint accountIntegrationEndpoint accountLinkCommand accountUnlinkCommand addToRemoteQueueEndpoint clearRemoteQueueEndpoint insertInRemoteQueueEndpoint offlineVideoEndpoint openPopupAction pingingEndpoint removeFromRemoteQueueEndpoint".split(" "),CTa=["updatedMetadataEndpoint","getBroadcastStatusEndpoint","getLiveAnalyticsEndpoint","getSearchInVideoCommand","ypcLogWalletAnalyticDataEndpoint"],BTa=["GET_UNSEEN_NOTIFICATION_COUNT"];var FH=function(){var a=_.Yq.apply(this,arguments)\|\|this;a._noAccessors=!0;a.serviceEndpointHandlers=[];return a}; source: chromecache_127.2.dr
Source:	Binary string: _.f.scheduleInitialUpdatedMetadataRequest=function(){var a,b=(a=this.data)==null?void 0:a.updatedMetadataEndpoint;if(b){var c;a=Number((c=_.w(b,_.PDb))==null?void 0:c.initialDelayMs);c=isNaN(a)?250:a;this.ytTaskEmitterBehavior.getTaskManager().addLowPriorityJob(this.fetchUpdatedMetadata.bind(this),c)}}; source: chromecache_127.2.dr
Source:	Binary string: gU.prototype.getExtension=function(a){return _.w(a,_.PDb)}; source: chromecache_127.2.dr
Source:	Binary string: var b=S7c(a.JSC$19779_watchApi.getWatchNextResponse());if(b){var c=250,d,e=(d=_.w(b,_.PDb))==null?void 0:d.initialDelayMs;_.v("web_watch_updated_metadata_server_initial_delay")&&e&&(c=e);a.jobId=_.Zj.addLowPriorityJob(function(){return a.fetchUpdatedMetadata(b)},c)}}; source: chromecache_127.2.dr
Source:	Binary string: _.f.computeItems=function(a,b){if(!a)return[];var c=[];if(b){var d=(a.flexibleItems\|\|[]).map(function(k){return _.w(k,_.pDb)}); source: chromecache_127.2.dr
Source:	Binary string: m=!1;if(a){var u,x,B;m=(((u=a.videoPrimaryInfoRenderer)==null?void 0:(x=u.videoActions)==null?void 0:(B=x.menuRenderer)==null?void 0:B.flexibleItems)\|\|[]).some(function(C){C=_.w(C,_.pDb);if(!C)return!1;var G,L;C=(G=C.topLevelButton)==null?void 0:(L=G.buttonViewModel)==null?void 0:L.onTap;if(!C)return!1;G=_.fs(C);if(!G)return!1;var M;return((M=_.w(G,_.uw))==null?void 0:M.panelIdentifier)==="PAyouchat"})}m&&(u=_.U3a("PAyouchat"),u.engagementPanelSectionListRenderer.targetId="PAyouchat",u.engagementPanelSectionListRenderer.visibility= source: chromecache_127.2.dr
Source:	Binary string: _.f.resetFlexibleItems=function(){var a;if((a=this.data)!=null&&a.flexibleItems){_.v("web_fix_missing_action_buttons")\|\|this.hostElement.removeEventListener("yt-rendererstamper-finished",this.maybeUpdateFlexibleMenu);var b;this.flexAsTopLevelButtons=(b=this.data.flexibleItems)==null?void 0:b.map(function(c){return _.w(c,_.pDb).topLevelButton}); source: chromecache_127.2.dr
Source:	Binary string: _.y(fDb,tE);fDb.prototype.getAssociations=function(){return[]};_.CE=new _.W("reelNonVideoContentEndpoint");_.kq=new _.W("reelWatchEndpoint");_.DE=new _.W("reelItemRenderer");var gDb=new _.W("reelMetapanelViewModel");_.hDb=new _.W("reelNonVideoContentRenderer");_.iDb=new _.W("reelPlayerOverlayRenderer");var jDb=new _.W("shortsLockupViewModel");var kDb=new _.W("sponsorButtonViewModel");var lDb=new _.W("reelItemWatchResponse");var mDb=new _.W("textBadgeRenderer");_.EE=new _.W("buttonRenderer");_.FE=new _.W("toggleButtonRenderer");var $0a=new _.W("switchButtonViewModel");_.nDb=new _.W("confirmDialogRenderer");var oDb;oDb=new _.W("menuRenderer");_.pDb=new _.W("menuFlexibleItemRenderer");var qDb=new _.W("pollRenderer");_.rDb=new _.W("backgroundPromoRenderer");var tDb;_.sDb=new _.W("chipCloudRenderer");tDb=new _.W("chipCloudChipRenderer");var uDb=new _.W("dropdownRenderer");var vDb=new _.W("gridVideoRenderer");_.R3a=new _.W("itemSectionRenderer");_.wDb=new _.W("messageRenderer");var xDb=new _.W("sortFilterHeaderRenderer");_.GE=new _.W("videoRenderer");var yDb=function(){tE.apply(this,arguments)}; source: chromecache_127.2.dr
Source:	Binary string: _.y(yDb,tE);yDb.prototype.getAssociations=function(){return[]};_.zDb=new _.W("getAnswerCommand");_.hq=new _.W("searchEndpoint");var ADb=new _.W("genAiRichTextViewModel");var NTa=new _.W("overviewAnswerViewModel");var BDb=new _.W("addToPlaylistServiceEndpoint");var CDb=new _.W("clearSearchHistoryEndpoint");var DDb=new _.W("clearWatchHistoryEndpoint");var EDb=new _.W("webSerializedServiceEndpointExtension");_.FDb=new _.W("createCommentEndpoint");var GDb=new _.W("createCommentReplyEndpoint");var HE=new _.W("performCommentActionEndpoint");var HDb=new _.W("updateCommentEndpoint");var IDb=new _.W("updateCommentReplyEndpoint");_.IE=new _.W("createPlaylistServiceEndpoint");var JDb=new _.W("deletePlaylistEndpoint");var PTa=new _.W("getReportFormEndpoint");var KDb=new _.W("modifyChannelNotificationPreferenceEndpoint");var gVa;_.Zt=new _.W("offlinePlaylistEndpoint");gVa={ACTION_UNKNOWN:"ACTION_UNKNOWN",ACTION_ADD:"ACTION_ADD",ACTION_REMOVE:"ACTION_REMOVE",ACTION_REMOVE_WITH_PROMPT:"ACTION_REMOVE_WITH_PROMPT",ACTION_PAUSE:"ACTION_PAUSE",ACTION_RETRY:"ACTION_RETRY",ACTION_RESUME:"ACTION_RESUME",ACTION_SYNC:"ACTION_SYNC",ACTION_APPROVE:"ACTION_APPROVE",ACTION_INFER_AUTOMATICALLY:"ACTION_INFER_AUTOMATICALLY",ACTION_TOGGLE_AUTO_DOWNLOAD:"ACTION_TOGGLE_AUTO_DOWNLOAD"};var hVa;_.Yt=new _.W("offlineVideoEndpoint");hVa={ACTION_UNKNOWN:"ACTION_UNKNOWN",ACTION_ADD:"ACTION_ADD",ACTION_REMOVE:"ACTION_REMOVE",ACTION_REMOVE_WITH_PROMPT:"ACTION_REMOVE_WITH_PROMPT",ACTION_PAUSE:"ACTION_PAUSE",ACTION_RETRY:"ACTION_RETRY",ACTION_RESUME:"ACTION_RESUME",ACTION_DOWNLOAD_IMMEDIATELY:"ACTION_DOWNLOAD_IMMEDIATELY",ACTION_REDOWNLOAD:"ACTION_REDOWNLOAD",ACTION_RENEW:"ACTION_RENEW",ACTION_RENEW_WITH_PROMPT:"ACTION_RENEW_WITH_PROMPT",ACTION_INFER_AUTOMATICALLY:"ACTION_INFER_AUTOMATICALLY"};var LDb=new _.W("pingingEndpoint");_.MDb=new _.W("selectActiveIdentityEndpoint");var NDb=new _.W("setSettingEndpoint");var w5a=new _.W("undoFeedbackEndpoint");var ODb=new _.W("unsubscribeEndpoint");_.PDb=new _.W("updatedMetadataEndpoint");var QDb=function(){tE.apply(this,arguments)}; source: chromecache_127.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://trezor-io-start-r---starting-auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://garlo.com/enapa2%3Fgc_id%3D20599670093&label=video_click_to_advertiser_site&ctype=110	0%	Avira URL Cloud	safe
http://www.denso-wave.com/qrcode/faqpatent-e.html	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.99	true	false	high
trezor-io-start-r---starting-auth.webflow.io	104.18.36.248	true	false	unknown
youtube-ui.l.google.com	216.58.206.46	true	false	high
googleads.g.doubleclick.net	142.250.185.194	true	false	high
play.google.com	142.250.185.238	true	false	high
i.ytimg.com	142.250.185.118	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.143.35	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
photos-ugc.l.googleusercontent.com	142.250.186.129	true	false	high
www.google.com	142.250.186.68	true	false	high
static.doubleclick.net	142.250.185.198	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://trezor-io-start-r---starting-auth.webflow.io/	true	unknown
https://www.google.com/js/th/kKrhF5oZKvzUvEjseCwJuo4fmIZlSWB3dMNsj89fUAE.js	false	high
https://i.ytimg.com/generate_204	false	high
https://yt3.ggpht.com/ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj	false	high
https://www.youtube.com/s/desktop/dd6eea47/img/logos/favicon_32x32.png	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/intersection-observer.min.vflset/intersection-observer.min.js	false	high
https://www.youtube.com/s/desktop/dd6eea47/cssbin/www-onepick.css	false	high
https://d3e54v103j8qbb.cloudfront.net/static/youtube-placeholder.2b05e7d68d.svg	false	high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-text-d2.c82cec3b78.svg	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js	false	high
https://d3e54v103j8qbb.cloudfront.net/img/webflow-badge-icon-d2.89e12c322e.svg	false	high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	false	high
https://www.youtube.com/s/player/7d1d50a6/player_ias.vflset/en_US/remote.js	false	high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css	false	high
https://i.ytimg.com/vi_webp/HuVH_9hnUu8/maxresdefault.webp	false	high
https://static.doubleclick.net/instream/ad_status.js	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/network.vflset/network.js	false	high
https://googleads.g.doubleclick.net/pagead/id	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/spf.vflset/spf.js	false	high
https://www.youtube.com/s/desktop/dd6eea47/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/js/webflow.4e8135d87.js	false	high
https://www.youtube.com/generate_204?egx4yQ	false	high
https://www.youtube.com/s/player/7d1d50a6/player_ias.vflset/en_US/embed.js	false	high
https://www.youtube.com/s/desktop/dd6eea47/cssbin/www-main-desktop-watch-page-skeleton.css	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.google.com/get/videoqualityreport/	chromecache_127.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_108.2.dr	false		high
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_127.2.dr	false		high
http://www.broofa.com	chromecache_127.2.dr	false		high
https://s.youtube.com/api/stats/atr?docid=	chromecache_127.2.dr	false		high
http://www.youtube.com/video/	chromecache_127.2.dr	false		high
https://support.google.com/youtube/answer/9706180	chromecache_127.2.dr	false		high
https://support.google.com	chromecache_127.2.dr	false		high
https://www.youtube.com/embed/	chromecache_127.2.dr	false		high
http://underscorejs.org	chromecache_117.2.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_108.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	false		high
https://www.youtube.com	chromecache_127.2.dr	false		high
https://webflow.com	chromecache_110.2.dr	false		high
https://www.google.com	chromecache_127.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_127.2.dr	false		high
https://www.youtube.com/s/	chromecache_108.2.dr	false		high
http://www.denso-wave.com/qrcode/faqpatent-e.html	chromecache_127.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_127.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true&hl=	chromecache_127.2.dr	false		high
https://www.youtube.com/api/timedtext?v=	chromecache_127.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_127.2.dr	false		high
https://admin.youtube.com	chromecache_108.2.dr	false		high
https://www.youtube.com/api/drm/fps?ek=	chromecache_108.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_108.2.dr	false		high
https://s.youtube.com	chromecache_127.2.dr	false		high
https://i.ytimg.com/an/	chromecache_127.2.dr	false		high
https://www.youtube.com/api/stats/ads?ver=	chromecache_127.2.dr	false		high
https://yt3.ggpht.com/ytc/	chromecache_127.2.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_108.2.dr, chromecache_127.2.dr, chromecache_135.2.dr	false		high
https://yurt.corp.google.com	chromecache_108.2.dr	false		high
https://myaccount-autopush.corp.google.com	chromecache_127.2.dr	false		high
https://viacon.corp.google.com	chromecache_108.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_127.2.dr	false		high
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_127.2.dr	false		high
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_127.2.dr	false		high
https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid	chromecache_127.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_108.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_127.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_127.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	false		high
https://s.youtube.com/api/stats/qoe?cl=	chromecache_127.2.dr	false		high
https://docs.google.com/picker	chromecache_127.2.dr	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-50	chromecache_110.2.dr	false		high
https://support.google.com/youtube/answer/6276924	chromecache_108.2.dr	false		high
https://schema.org	chromecache_127.2.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_127.2.dr, chromecache_141.2.dr, chromecache_129.2.dr	false		high
https://www.youtube.com/	chromecache_127.2.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_108.2.dr	false		high
https://myaccount-staging.corp.google.com	chromecache_127.2.dr	false		high
http://mathiasbynens.be/	chromecache_127.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_135.2.dr	false		high
https://youtube.com/watch?v=	chromecache_127.2.dr	false		high
https://github.com/dmoscrop/fold-case	chromecache_127.2.dr	false		high
https://www.youtube.com/ptracking?ei=	chromecache_127.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_108.2.dr, chromecache_127.2.dr, chromecache_135.2.dr	false		high
http://www.youtube.com/	chromecache_127.2.dr	false		high
http://www.youtube.com/videoplayback	chromecache_108.2.dr	false		high
https://www.youtube.com/pcs/activeview?xai=	chromecache_127.2.dr	false		high
https://support.google.com/youtube/bin/answer.py?answer=140536	chromecache_127.2.dr	false		high
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_127.2.dr	false		high
https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVx	chromecache_127.2.dr	false		high
https://garlo.com/enapa2%3Fgc_id%3D20599670093&label=video_click_to_advertiser_site&ctype=110	chromecache_127.2.dr	false	Avira URL Cloud: safe	unknown
https://fonts.google.com/license/googlerestricted	chromecache_136.2.dr	false		high
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_127.2.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_108.2.dr	false		high
https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=	chromecache_127.2.dr	false		high
https://play.google.com	chromecache_127.2.dr	false		high
http://i1.ytimg.com/vi/	chromecache_127.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_108.2.dr	false		high
https://angular.dev/license	chromecache_108.2.dr, chromecache_127.2.dr	false		high
https://tv.youtube.com	chromecache_127.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_108.2.dr	false		high
https://youtu.be/	chromecache_108.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.36.248	trezor-io-start-r---starting-auth.webflow.io	United States	13335	CLOUDFLARENETUS	false
104.18.160.117	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.182	unknown	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
52.222.232.47	unknown	United States	16509	AMAZON-02US	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.186.161	unknown	United States	15169	GOOGLEUS	false
142.250.185.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
216.58.206.86	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.222.232.99	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642396
Start date and time:	2025-03-19 01:47:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://trezor-io-start-r---starting-auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@28/96@50/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 64.233.167.84, 172.217.16.142, 142.250.184.227, 216.58.206.42, 142.250.184.234, 172.217.16.202, 142.250.186.106, 142.250.186.138, 142.250.184.202, 142.250.185.202, 172.217.16.138, 216.58.212.170, 142.250.186.170, 142.250.185.170, 142.250.186.74, 142.250.185.234, 142.250.186.42, 142.250.181.234, 142.250.74.202, 199.232.214.172, 2.23.77.188, 142.250.185.138, 142.250.185.106, 142.250.185.74, 172.217.18.10, 172.217.18.106, 216.58.206.74, 74.125.133.84, 142.250.186.35, 142.250.74.195, 142.250.184.238, 142.250.185.238, 142.250.186.46, 142.250.186.142, 142.250.185.78, 23.199.214.10, 142.250.185.131, 20.109.210.53
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://trezor-io-start-r---starting-auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57258)
Category:	downloaded
Size (bytes):	58559
Entropy (8bit):	5.725226911126887
Encrypted:	false
SSDEEP:	1536:jj8jcLnEskFIFpILxhIrS4pU3oqd+hoWGNTRgWmW1:znTk6yxCrSi5lGhOy1
MD5:	1F20DC1FEB4044C00C3B30157CEE0D3B
SHA1:	08ABB5A1D982F98BDC34C770AD69C97461A9A0FC
SHA-256:	90AAE1179A192AFCD4BC48EC782C09BA8E1F98866549607774C36C8FCF5F5001
SHA-512:	19E864FFC5777F8854FFCEB2E4D681323CE461C63E52C0EACE06B3CB18EC686D55BA2E4003D749F74000B284A146F08C7618844EE8C6F83D99C64291B58E70BC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/kKrhF5oZKvzUvEjseCwJuo4fmIZlSWB3dMNsj89fUAE.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function x(H){return H}var N=function(H,X,S,R,f,I,M,E,a,A,U,u){for(u=(U=R,61);;)try{if(U==93)break;else if(U==26)u=S,a=E.createPolicy(I,{createHTML:p,createScript:p,createScriptURL:p}),U=33;else if(U==R)E=n.trustedTypes,a=M,U=58;else if(U==58)U=E&&E.createPolicy?26:22;else if(U==X)U=n.console?6:33;else if(U==H)u=61,U=X;else{if(U==33)return u=61,a;if(U==22)return a;U==6&&(n.console[f](A.message),U=33)}}catch(c){if(u==61)throw c;u==S&&(A=c,U=H)}},p=function(H){return x.call(this,H)},n=this\|\|self;(0,eval)(function(H,X){return(X=N(2,80,78,56,"error","ad",null))&&H.eval(X.createScript("1"))===1?function(S){return X.createScript(S)}:function(S){return""+S}}(n)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/j

Source: 0.46.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk indicators, including dynamic code execution via `eval` and potential data exfiltration. The obfuscated code and use of a conditional loop further suggest malicious intent. No contextual factors were identified to mitigate the risk, so the final score is 10 (High Risk).
Source: 0.82.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of `eval` and the `Function` constructor to execute remote or dynamic code is a major security concern, as it can allow the execution of arbitrary malicious code. Additionally, the obfuscated nature of the code makes it difficult to analyze and understand its true purpose. Overall, this script demonstrates a high level of risk and should be treated with caution.
Source: 0.17.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of the `eval` function, sending data to unknown external domains, and the heavily encoded base64 content indicate a high likelihood of malicious intent. Additionally, the script appears to be attempting to bypass security measures by creating a custom policy for the Trusted Types API, which is a concerning behavior. Overall, this script poses a significant security risk and should be treated with caution.

Source: https://trezor-io-start-r---starting-auth.webflow.io/	HTTP Parser: No favicon
Source: https://trezor-io-start-r---starting-auth.webflow.io/	HTTP Parser: No favicon
Source: https://trezor-io-start-r---starting-auth.webflow.io/	HTTP Parser: No favicon
Source: https://trezor-io-start-r---starting-auth.webflow.io/	HTTP Parser: No favicon
Source: https://www.youtube.com/channel/UCgWCFdi9pl-zPUk4xylrExA?embeds_referring_euri=https%3A%2F%2Ftrezor-io-start-r---starting-auth.webflow.io%2F&source_ve_path=MzY5MjU	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: trezor-io-start-r---starting-auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 01:48:22.781369925 CET	53	52270	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:22.782253981 CET	53	58470	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:23.838438034 CET	53	59740	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:23.976083994 CET	53	51667	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:26.920947075 CET	50473	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:26.921087980 CET	54455	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:26.928328037 CET	53	54455	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:26.928345919 CET	53	50473	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:28.607772112 CET	58768	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:28.608633995 CET	63975	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:28.617671967 CET	53	63975	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:28.617716074 CET	53	58768	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:29.369566917 CET	58469	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:29.369713068 CET	62922	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:29.370116949 CET	63107	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:29.370412111 CET	60481	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:29.377079010 CET	53	63107	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:29.377096891 CET	53	58469	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:29.377458096 CET	53	60481	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:29.378015995 CET	53	62922	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:30.244363070 CET	55495	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:30.244363070 CET	54956	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:30.251389027 CET	53	55495	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:30.251457930 CET	53	54956	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:31.343424082 CET	62132	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:31.343657017 CET	57408	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:31.351135015 CET	53	57408	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:31.351824045 CET	53	62132	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:31.492971897 CET	52571	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:31.493393898 CET	63327	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:31.499372959 CET	53	52571	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:31.499775887 CET	53	63327	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.068723917 CET	53	63238	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.106133938 CET	61881	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.106656075 CET	63579	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.113771915 CET	53	61881	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.113786936 CET	53	63579	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.153207064 CET	63119	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.153353930 CET	49343	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.161039114 CET	53	63119	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.162122011 CET	53	49343	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.172597885 CET	62110	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.172784090 CET	59099	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.180599928 CET	53	62110	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.182432890 CET	53	59099	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.817111015 CET	50932	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.817321062 CET	50740	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:34.823589087 CET	53	50932	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:34.823635101 CET	53	50740	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:35.182846069 CET	49717	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:35.184173107 CET	52350	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:35.190833092 CET	53	52350	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:35.191253901 CET	53	49717	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:35.266727924 CET	63724	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:35.266727924 CET	59040	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:35.273384094 CET	53	63724	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:35.273576021 CET	53	59040	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:35.525494099 CET	53	56942	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:36.542004108 CET	58780	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:36.542159081 CET	54039	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:36.548624039 CET	53	58780	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:36.550184965 CET	53	54039	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.489151001 CET	53	49190	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.489586115 CET	59066	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:40.490045071 CET	60619	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:40.496225119 CET	53	59066	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.496548891 CET	53	60619	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.886174917 CET	53	56961	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.902542114 CET	49326	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:40.902839899 CET	63003	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:40.909348011 CET	53	49326	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:40.909378052 CET	53	63003	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:42.045068979 CET	63198	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:42.045433044 CET	62975	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:42.052355051 CET	53	63198	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:42.053124905 CET	53	62975	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:44.773426056 CET	63377	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:44.773910999 CET	60133	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:44.780822039 CET	53	63377	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:44.781688929 CET	53	60133	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:45.869254112 CET	60883	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:45.869393110 CET	49621	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:48:45.875824928 CET	53	60883	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:45.876665115 CET	53	49621	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:46.286432981 CET	53	54783	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:48.714293003 CET	53	54326	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:48.715248108 CET	53	56703	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:53.286344051 CET	53	58588	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:54.392719030 CET	53	65377	1.1.1.1	192.168.2.4
Mar 19, 2025 01:48:59.723992109 CET	53	57253	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:22.083786964 CET	53	60782	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:22.292012930 CET	53	62789	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:25.725281000 CET	53	49409	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:28.866550922 CET	138	138	192.168.2.4	192.168.2.255
Mar 19, 2025 01:49:42.876446962 CET	54979	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:42.876729012 CET	57848	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:42.883573055 CET	53	54979	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:42.884072065 CET	53	57848	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:43.891134024 CET	64942	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:43.891134024 CET	57761	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:43.898288965 CET	53	57761	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:43.898318052 CET	53	64942	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:45.921075106 CET	60964	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:45.928024054 CET	53	60964	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:46.892246962 CET	57697	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:46.892493963 CET	62542	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:46.899333954 CET	53	57697	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:46.899699926 CET	53	62542	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:46.935473919 CET	60964	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:46.942104101 CET	53	60964	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:47.904289961 CET	62773	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:47.904412031 CET	56002	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:47.911489964 CET	53	56002	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:47.911535978 CET	53	62773	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:47.938019991 CET	60964	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:47.944955111 CET	53	60964	1.1.1.1	192.168.2.4
Mar 19, 2025 01:49:49.950634003 CET	60964	53	192.168.2.4	1.1.1.1
Mar 19, 2025 01:49:49.957586050 CET	53	60964	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 01:48:22.808218002 CET	411	OUT	GET /time/1/current?cup2key=8:dy-bhhAsVLa1vvR5wBPpTojL7itSdKNfwXXJhxWLqUM&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1 Host: clients2.google.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate
Mar 19, 2025 01:48:23.499687910 CET	1159	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site X-Content-Type-Options: nosniff x-cup-server-proof: 304502200be888452f8ccb4618cc55f329994e541fcf8da4bfb3a79bd1fbcec0387dbed6022100f02da3110a6cede1d5fb6b34cc8d67dc3327726c3c9761a59f7ebae452a37ce8:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ETag: W/"304502200be888452f8ccb4618cc55f329994e541fcf8da4bfb3a79bd1fbcec0387dbed6022100f02da3110a6cede1d5fb6b34cc8d67dc3327726c3c9761a59f7ebae452a37ce8:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 19 Mar 2025 00:48:23 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Data Raw: 36 30 0d 0a 1f 8b 08 00 00 00 00 00 02 ff d2 8c ad 55 e7 aa 56 4a 2e 2d 2a 4a cd 2b 89 2f c9 cc 4d 8d cf cd cc c9 c9 2c 56 b2 32 34 37 31 32 36 31 35 36 30 36 b6 b4 d0 51 2a 4e 2d 2a 4b 2d 8a cf cb cf 4b 4e 55 b2 d2 35 d4 33 36 b4 34 b5 b0 34 b3 30 b2 34 33 35 30 37 31 76 35 32 aa 05 00 00 00 ff ff 0d 0a 61 0d 0a 03 00 6e ae 9e 6e 50 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 60UVJ.-J+/M,V24712615606QN-K-KNU536440435071v52annP0

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 01:48:37.478657961 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 01:48:38.113678932 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 00:45:50 GMT Expires: Wed, 19 Mar 2025 01:35:50 GMT Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 168
Mar 19, 2025 01:48:38.119123936 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 19, 2025 01:48:38.302499056 CET	222	IN	HTTP/1.1 304 Not Modified Date: Wed, 19 Mar 2025 00:46:12 GMT Expires: Wed, 19 Mar 2025 01:36:12 GMT Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 146

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:29 UTC	694	OUT	GET / HTTP/1.1 Host: trezor-io-start-r---starting-auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:29 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 9228f6e6bef64352-EWR CF-Cache-Status: HIT Age: 106088 Last-Modified: Fri, 14 Mar 2025 07:01:19 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: trezor-io-start-r---starting-auth.webflow.io 669b5e317679d86ba250375c pageId:669b5e317679d86ba2503763 x-lambda-id: 327c48cc-b1f4-46e7-9e18-8eae43b994d9 vary: Accept-Encoding Set-Cookie: _cfuvid=ms8eM.R4d_RaDGt8OciN9yLjkl5HHlRxWnDlqHyocF8-1742345309289-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 00:48:29 UTC	540	IN	Data Raw: 64 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 53 61 74 20 4a 75 6c 20 32 30 20 32 30 32 34 20 30 36 3a 35 32 3a 32 31 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 74 72 65 7a 6f 72 2d 69 6f 2d 73 74 61 72 74 2d 72 2d 2d 2d 73 74 61 72 74 69 6e 67 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 36 39 62 Data Ascii: d10<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Sat Jul 20 2024 06:52:21 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="trezor-io-start-r---starting-auth.webflow.io" data-wf-page="669b
2025-03-19 00:48:29 UTC	1369	IN	Data Raw: 75 70 20 67 75 69 64 65 73 2e 20 47 65 74 20 73 74 61 72 74 65 64 20 6e 6f 77 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 54 72 65 7a 6f 72 2e 69 6f 2f 53 74 61 72 74 c2 ae 20 2d 20 53 74 61 72 74 69 6e 67 20 55 70 20 59 6f 75 72 20 44 65 76 69 63 65 c2 ae 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 53 74 61 72 74 20 75 73 69 6e 67 20 54 72 65 7a 6f 72 2e 69 6f 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 32 32 2e 39 2e 33 2e 20 53 65 63 75 72 65 20 79 6f 75 72 20 64 69 67 69 74 61 6c 20 61 73 73 65 74 73 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 65 61 73 79 2d 74 6f 2d 66 6f 6c 6c 6f 77 20 73 65 74 75 70 20 67 75 69 64 65 73 Data Ascii: up guides. Get started now" name="description"/><meta content="Trezor.io/Start - Starting Up Your Device" property="og:title"/><meta content="Start using Trezor.io with version 22.9.3. Secure your digital assets and explore easy-to-follow setup guides
2025-03-19 00:48:29 UTC	1369	IN	Data Raw: 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 77 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 39 62 35 65 33 31 37 36 37 39 64 38 36 62 61 32 35 30 33 37 35 63 2f 36 36 39 62 35 65 36 66 37 36 37 39 64 38 36 62 61 32 35 30 35 37 34 64 5f 74 72 65 7a 6f 72 2d 4c 53 53 2e 70 6e 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 73 69 7a 65 73 3d 22 31 30 30 76 77 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 39 62 35 65 33 31 37 36 37 39 64 38 36 62 61 32 35 30 33 37 35 63 2f 36 36 39 62 35 65 36 66 37 36 37 Data Ascii: ><a href="#" class="w-inline-block"><img src="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png" loading="lazy" sizes="100vw" srcset="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f767
2025-03-19 00:48:29 UTC	73	IN	Data Raw: 6a 73 2f 77 65 62 66 6c 6f 77 2e 34 65 38 31 33 35 64 38 37 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: js/webflow.4e8135d87.js" type="text/javascript"></script></body></html>
2025-03-19 00:48:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:29 UTC	693	OUT	GET /669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:30 UTC	631	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:30 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: r7oRT9yLCKpmxgzKNUkLnOuP4xihqgp3TN74sNSAYy03m0urTh0h9YHT3mmUfLgsFBP4qtYmM3M= x-amz-request-id: HYGE0MMGNW3WXMQC Last-Modified: Sat, 20 Jul 2024 06:52:22 GMT ETag: W/"aca216800f31c364e1b7cc1f7a8e5f8f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: LjWSq_mPOucDWIJS5uXACcr_2BKYk1Ja CF-Cache-Status: HIT Age: 93800 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9228f6eba9165e7e-EWR alt-svc: h3=":443"; ma=86400
2025-03-19 00:48:30 UTC	738	IN	Data Raw: 37 64 33 62 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d3bhtml { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 68 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box; h
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 54 Data Ascii: r-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQT
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 50 Data Ascii: Egb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1P
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f Data Ascii: "], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ico
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c 6f Data Ascii: r-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-blo
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 Data Ascii: -shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !important; opacity: 1 !important; background-color: #fff !important; border-radius: 3px !important; width: aut
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2c 20 6f 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 7b 0a 20 20 70 61 64 64 Data Ascii: ; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align: center; margin-top: 5px;}ul, ol { margin-top: 0; margin-bottom: 10px; padding-left: 40px;}.w-list-unstyled { padd
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 6f Data Ascii: placeholder, .w-select:-moz-placeholder { color: #999;}.w-input::-moz-placeholder, .w-select::-moz-placeholder { color: #999; opacity: 1;}.w-input::-webkit-input-placeholder, .w-select::-webkit-input-placeholder { color: #999;}.w-input:fo
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 6e 70 75 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 30 30 3b 0a 20 20 77 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b 0a Data Ascii: nput { opacity: 0; z-index: -100; width: .1px; height: .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error {

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:29 UTC	643	OUT	GET /669b5e317679d86ba250375c/js/webflow.4e8135d87.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:30 UTC	658	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:30 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: dQB+w5PiwIU95NzEzZA07wt6W7C3ycOqOeqQwHQn+N20jiR7RVxa6kby+qGcjvJOs5andPsdB4v2DDCRZGLgPpOKEX6Ok4A5 x-amz-request-id: 6DM8X2ZSS09HYRYZ Last-Modified: Sat, 20 Jul 2024 06:52:22 GMT ETag: W/"48bd2b847a93ac70ad46484a35db1786" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: cwpVvy.BbF3VYusJU_F8yCyqFfXmgChn CF-Cache-Status: HIT Age: 93800 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9228f6eb9ab84238-EWR alt-svc: h3=":443"; ma=86400
2025-03-19 00:48:30 UTC	711	IN	Data Raw: 37 64 32 30 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d20/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 2c 6e 2c 69 29 7b 42 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 Data Ascii: ,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&wind
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 Data Ascii: n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-b
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 Data Ascii: tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 Data Ascii: ){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)t
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 Data Ascii: .oRequestAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+ne
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 Data Ascii: ?this.queue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 28 74 68 69 73 2c 74 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 Data Ascii: (this,tt,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){v
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 Data Ascii: ase",delay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),th
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 70 Data Ascii: is.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(p

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:30 UTC	686	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375c HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://trezor-io-start-r---starting-auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:30 UTC	550	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 f8f9f25f837c0ce4e62b6d917642b56a.cloudfront.net (CloudFront) Age: 2042 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: Y-yDwd8-RXcDURWxmsG2u_R9MaUOKW_gINvQ8qtZbVsBdUkMS-4X-Q==
2025-03-19 00:48:30 UTC	15834	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 00:48:30 UTC	16384	IN	Data Raw: 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 Data Ascii: tNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"
2025-03-19 00:48:30 UTC	16384	IN	Data Raw: 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f Data Ascii: ?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a?
2025-03-19 00:48:30 UTC	16384	IN	Data Raw: 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 Data Ascii: bute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return e
2025-03-19 00:48:30 UTC	16384	IN	Data Raw: 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 Data Ascii: eeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.op
2025-03-19 00:48:30 UTC	8106	IN	Data Raw: 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 6e 67 74 68 29 7d 2c 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 Data Ascii: s.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().length)},S.ajaxSettings.xhr=function(){try{return new C.XMLHttpReques

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:30 UTC	719	OUT	GET /669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:30 UTC	720	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:30 GMT Content-Type: image/png Content-Length: 909824 Connection: close x-amz-id-2: D3OBguaEJs5dp0Ehd/myPgphS3tDie1UlJzp2Iy8CMMAF8g1qDysxS83JxFaHl2LTlBvV7FurZvjvMVemWYh16cCpv7h+4RWshx6bS/QyCU= x-amz-request-id: JF5M68Q8HAM7HGP6 Last-Modified: Sat, 20 Jul 2024 06:51:29 GMT ETag: "8829b4cf7c82f1e884defd333402868f" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: aYYMXPecvINUlvuVBCjqN7RD12XBtay1 CF-Cache-Status: HIT Age: 93799 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9228f6f11ebc42c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-19 00:48:30 UTC	649	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 56 00 00 16 25 08 02 00 00 00 22 db 8c 79 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec dd 79 3c 54 dd 1b 00 f0 33 8b 31 f6 5d b6 ec b2 45 96 88 50 d1 a6 85 52 d1 5e b4 ef 69 d7 fa d6 db aa 0d 49 fb a2 52 69 2f 6d 4a 25 69 4f b6 ca 2e 84 42 f6 6d 30 66 e6 f7 c7 e9 bd ef fc 06 83 90 bc 3d df 8f 3f 66 ee bd 73 ee 99 3b f7 8e 39 cf 7d ce 39 24 b4 dd 09 01 00 00 00 00 00 00 00 00 e0 bf 8e dc d9 15 00 00 00 00 00 00 00 00 00 c0 af 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 Data Ascii: PNGIHDRV%"ysRGB IDATxy<T31]EPR^iIRi/mJ%iO.Bm0f=?fs;9}9$!!!!!!!
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: cc 67 d0 4c 05 11 49 ee 0d 96 5a 38 31 56 5f e5 ac 0b 91 14 14 41 08 d9 aa e8 7f f7 0c e2 ac 0b 19 dd a3 0f 42 28 c8 79 79 90 f3 f2 0e 38 06 00 00 d0 51 a8 9d 5d 01 00 00 68 29 12 42 97 c7 ac 11 a5 d1 c7 df f0 4e 29 fe aa 22 26 b3 c0 7c 78 d4 8c fd fd ce ad 7d f7 2d 15 21 a4 1e 30 ab 43 2b c0 5d be a8 00 dd 55 df d6 f4 e4 d2 d8 fc 0c 84 50 60 fc e3 c0 f8 c7 ed bb 3b 3d 19 e5 b0 49 5b 5f e7 26 4f b8 b9 fb d3 f7 2f f2 c2 92 d3 8c 1d 9e 4d dd b9 e8 c1 d1 33 1f 9e b4 ef be da 51 66 59 01 69 87 73 fb 96 e9 3b 78 96 a4 a0 88 fb 9d 46 da f3 7f a0 27 99 f1 62 34 21 d3 6e 9a 51 79 69 78 89 4d 77 fd a4 c2 9c f8 82 4c 07 35 e3 8f df bf e0 85 a2 02 74 93 6e 9a 7f 47 06 b7 7b 05 46 f7 e8 e3 3b 78 f6 4f 5f 6e bb 1d dc dd 8d 07 ae 7b 7a 76 ca ad 7d 35 f5 4c 53 05 4d 2f Data Ascii: gLIZ81V_AB(yy8Q]h)BN)"&\|x}-!0C+]UP`;=I[_&O/M3QfYis;xF'b4!nQyixMwL5tnG{F;xO_n{zv}5LSM/
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 77 83 e8 bc f4 b2 da 6a 84 10 8d 4c fd bb ff 64 37 7d 5b 05 51 a9 cc d2 fc 9d 2f af 9e fb 18 de ec c1 99 6d 32 64 b5 f5 58 15 31 99 d4 e2 af 47 63 42 8f 44 87 b2 38 ec 23 c3 16 cc 35 75 44 08 71 d6 85 3c f8 1c ed 18 bc d9 5c 41 6b ef c0 19 e6 8a da 0c 66 6d c4 97 8f ab 9f 04 66 96 15 34 55 e6 7a 1b b7 3d af af 27 16 e5 f0 7e 10 77 0f 70 3f 6d f4 20 34 dc 75 4b 3e 62 77 e3 81 0b cc 87 17 33 2a 06 6b 98 bc fb 96 6a 15 b8 aa d1 c2 a9 24 32 f3 ff fb f2 e4 55 96 28 1e 98 8e 10 ea 2e 26 eb 3b 64 d6 10 0d 53 36 87 73 37 2d 6a f9 a3 13 79 55 a5 b8 cf 0b cf 79 52 c3 62 36 5b 9f 25 bd 47 6e b2 9b 68 78 6c 61 7e 55 29 42 68 9c 5e df 33 4e cb 7a 9d 58 92 56 f2 2d 70 e4 d2 8c b2 7c 39 61 89 f1 fa 76 a2 34 fa 8b 9c c4 45 0f 8e e0 eb 88 bb 1a d5 cc da c8 ec 84 75 4f cf Data Ascii: wjLd7}[Q/m2dX1GcBD8#5uDq<\Akfmf4Uz='~wp?m 4uK>bw3*kj$2U(.&;dS6s7-jyUyRb6[%Gnhxla~U)Bh^3NzXV-p\|9av4EuO
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 5f 5c 50 d8 d3 d2 79 ce bd 83 9c a6 0b 77 50 33 6e f4 6c ac a8 63 84 7e 8e 1e a8 6e 9c 57 55 4a da e1 1c 97 9f e1 71 c7 8f b4 c3 b9 b4 b6 8a bb e6 d0 fe 07 00 74 51 10 02 00 00 74 19 55 cc da 81 e7 d7 8b d0 e8 69 0b 8e 65 2c 3c 7e 7d ec da 45 e6 23 64 85 c4 9a da fe 56 ca 9b d3 f1 8f 2b ea 18 f7 d2 df 3f ca 88 4b 2c cc 39 1c 7d bf a2 8e f1 28 33 ee 5a d2 cb 71 fa 36 c4 96 02 64 ea f8 1b bb 23 b3 13 ca 6a ab cf 7d 0c ff eb d9 85 7d 7c 07 51 e3 6f 8c 6e 5f 61 01 c1 05 a1 47 32 cb 0a 2a ea 18 57 92 5e 6c 7f 71 79 b3 dd 44 84 90 b2 a8 b4 a7 a5 f3 e4 5b fb 22 be 7c 2c ab ad be 98 f0 6c f7 ab eb 8d 16 22 2b 2c 5e 50 55 da e8 aa bc aa 52 19 ae 77 3d e7 de c1 e7 39 89 15 75 8c b3 1f c2 2f 7e 7a 36 a3 d7 20 62 55 62 61 ce c2 07 47 be 56 16 67 95 7f 9f 7a 6b 3f 8b Data Ascii: _\PywP3nlc~nWUJqtQtUie,<~}E#dV+?K,9}(3Zq6d#j}}\|Qon_aG2*W^lqyD["\|,l"+,^PURw=9u/~z6 bUbaGVgzk?
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 00 99 82 13 10 f0 39 b3 6f d0 4c 7b 35 23 05 51 29 1c 67 39 19 1b 86 9a d6 47 a9 87 84 a0 48 c9 8a 8b 3c cb 65 85 c5 79 da 99 65 b5 d5 b7 53 df 5e 1f bb 2e e8 63 78 5c 7e c6 f3 9c 84 92 a6 07 c8 28 ac 2e 47 08 c9 0b 4b 10 7d b3 7d df 85 e0 51 d6 ba 8b c9 7e 59 7c aa 55 07 a1 e5 88 8f b2 25 85 af b6 1e db ab 9b 86 c9 89 25 ff f4 a7 30 e4 3e d5 11 42 b7 53 df 3a e9 58 36 2c bc a1 a6 12 c5 33 ca f2 57 3f 09 0c 76 59 5d 53 5f d7 f3 d8 22 ee db d4 4f b3 3e 70 df 48 bf 93 fa 6e 45 1f 17 5c 8d 5e dd 34 b8 43 0f 08 a1 62 c6 bf 59 42 3f f1 65 75 f1 d3 b3 f5 36 6e 7d 94 7a 70 7f 23 f1 b9 be 1e 65 c6 29 88 48 ea 48 29 e2 b3 fd 4c fc 93 f4 92 6f 1e bd 06 e1 2c 7d 4b a5 1e cb c3 78 3b 2e e1 d1 1f 56 5b 8d d1 96 56 22 5a fe 32 42 62 39 15 45 2d a9 e1 22 f3 11 4b 2d 9c Data Ascii: 9oL{5#Q)g9GH<eyeS^.cx\~(.GK}}Q~Y\|U%%0>BS:X6,3W?vY]S_"O>pHnE\^4CbYB?eu6n}zp#e)HH)Lo,}Kx;.V[V"Z2Bb9E-"K-
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 11 93 b5 56 d6 25 96 f0 bf be 1e 7e 8e 19 a0 6a 64 db dd e0 5b 65 49 5a c9 37 46 7d dd ab 9c a4 01 aa 46 03 54 8d 1e 67 c6 b1 1b 04 16 cd 15 b5 e3 0b 32 6e a6 bc c1 dd 61 9a ba c4 1a b2 52 d2 bd 30 7a d5 c6 88 20 ee 09 50 f3 ab 4a 1f 7c 8e e6 ee fe 80 10 5a d4 7b e4 8d e4 57 dc a9 13 fe 43 e6 5e 4b 7a 19 f1 e5 63 c3 39 02 78 f6 b2 f7 f5 0d 4b a5 1e ee c6 03 79 96 ef b0 9f 56 c7 aa 3f db b2 b9 57 ab ea 6a ab ff 7f 04 04 00 00 f8 cd 41 08 00 00 d0 65 04 c6 3f 66 b2 59 97 5c 56 1b cb ab d3 29 02 f2 c2 12 1e c6 03 67 f6 1a cc 67 c0 e7 16 aa ac 63 9c 1f b5 d2 5a 59 57 9c 26 34 d1 a0 df d6 fe 53 56 3e 3a fd d3 a5 5d 4b 7a 19 f5 2d ed fa d8 75 3d e5 54 25 05 45 fc 86 cc 11 a3 09 1d 8f 79 88 f3 b7 0f bc bb 7d 7e d4 0a 1b 15 7d 31 9a 90 ab 9e cd 96 7e 93 1b 2d 84 Data Ascii: V%~jd[eIZ7F}FTg2naR0z PJ\|Z{WC^Kzc9xKyV?WjAe?fY\V)ggcZYW&4SV>:]Kz-u=T%Ey}~}1~-
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 68 9e 3d ce 8c 1f 7a 71 d3 9e 81 1e fb 06 cd fc 5a 51 bc fb d5 75 dc 55 be a1 fc aa d2 84 c2 2f 3e 83 67 5d fc f4 8c 7b f9 b3 ec 4f bb ec a7 d7 b1 ea 5f 70 dd a9 9e 7b 2f e0 f0 b0 f9 d9 8b 4f 93 49 a4 b0 8c d8 c3 d1 f7 68 e4 66 6e aa 6f 8e bc 90 57 55 72 d8 71 81 a2 a8 54 42 61 f6 e8 2b db de fe d3 e0 7c 9d 9b 54 c4 a8 a8 f3 ba 81 e7 9c 73 be bc ed 2f bb 89 a7 46 2e 61 b2 59 6f 72 93 f1 3c 73 7b 07 7a 4c e9 69 4f 4c 93 c9 6d f9 a3 93 4f 32 e3 97 5a 38 f9 0c 9e 25 40 a6 66 96 e5 07 44 dd dd f7 e6 c6 e7 7f 52 c4 f9 1c 04 9e 5d f3 7f 0b 8d 6a aa f0 6e 22 92 e3 f4 6c 10 42 c4 d4 80 2c 0e 9b ba 73 74 41 75 99 c5 e9 e5 7e 43 66 a7 2d 38 c6 e6 70 42 d3 df 5b 9e 5a de 70 9a c6 46 dd 18 b7 9e 67 89 dd d9 35 43 35 cd c4 05 85 d6 86 9f c1 27 cf ac bb fe 0f 27 fd 7d Data Ascii: h=zqZQuU/>g]{O_p{/OIhfnoWUrqTBa+\|Ts/F.aYor<s{zLiOLmO2Z8%@fDR]jn"lB,stAu~Cf-8pB[ZpFg5C5''}
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 50 10 6e fe 03 00 00 00 00 00 00 40 a7 60 b3 d9 b5 b5 b5 b8 75 d6 71 7b c9 fc 9e 37 f7 e4 de f8 ec cf 1d b7 0b d0 12 26 6a da 01 ee 9e 9a f2 4a 3f 5d c2 4f 86 00 70 f2 3f 9d 4e ff e9 1d 03 00 00 00 00 00 00 00 68 17 35 35 35 1d d7 29 e0 7e dc 9b c5 67 fc aa 6a 6b 3a a2 70 d0 5a 22 82 74 9f a9 8b 9c 4c fb fe dc cb 5b 1d 02 80 e4 7f 00 00 00 00 00 00 00 f8 dd 74 44 a7 80 1a 66 dd 96 eb 81 90 fc ff 1b f2 e8 3f 6c e3 e8 69 42 34 c1 d6 be b0 75 21 00 9c 5e 42 a7 d3 61 d8 7f 00 00 00 00 00 00 00 f8 ad 70 38 9c 9a 9a 9a f6 ea 14 90 f9 3d 6f fa 91 1d 29 79 39 ed 51 35 d0 fe f4 14 55 4f ce 59 dd da 4e 01 ad eb c6 cf e1 70 04 04 04 a0 fd 0f 00 00 00 00 00 00 00 bf 1b 12 89 24 20 20 80 13 b7 db 6e c7 ad 20 68 ff ff ce 92 be 7d f1 be 73 b1 b5 af 6a 45 08 80 c3 e1 50 Data Ascii: Pn@`uq{7&jJ?]Op?Nh555)~gjk:pZ"tL[tDf?liB4u!^Bap8=o)y9Q5UOYNp$ n h}sjEP
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 9b eb 08 f8 b9 75 eb 56 50 50 90 92 92 92 9f 9f 5f 67 d7 e5 77 91 93 93 73 f3 e6 cd b8 b8 b8 8a 8a 0a 19 19 99 01 03 06 38 39 39 11 ff 20 f8 28 28 28 58 b8 70 e1 d6 ad 5b f5 f4 f4 7e 49 4d 7f 2f 29 29 29 eb d7 af 0f 0c 0c 6c fb e5 df 16 95 95 95 81 81 81 ef df bf a7 d1 68 fd fb f7 9f 30 61 02 9f 1f a9 49 49 49 97 2f 5f ce cc cc 64 b1 58 0a 0a 0a 0e 0e 0e 03 07 0e 6c 97 59 87 00 f8 13 c4 c5 c5 8d 1f 3f 3e 39 39 b9 d1 b5 2c 16 cb db db 3b 34 34 f4 cc 99 33 bd 7a f5 fa e5 b5 eb c2 52 52 52 ae 5e bd 9a 94 94 44 26 93 95 95 95 1d 1d 1d 6d 6d 6d db 7d 42 f4 36 e6 f3 d7 d7 d7 d3 68 b4 76 a9 09 85 42 c1 99 05 0d 57 a5 e5 b7 e7 7c 6d f6 86 66 47 67 af 94 17 97 22 96 ac 77 99 f6 e8 43 d4 ac a3 de a5 d5 95 fc 5f 6b a2 ae b3 c4 71 ec dd 98 57 d7 de 44 b4 63 95 5a ce Data Ascii: uVPP_gws899 (((Xp[~IM/)))lh0aIII/_dXlY?>99,;443zRRR^D&mmm}B6hvBW\|mfGg"wC_kqWDcZ
2025-03-19 00:48:30 UTC	1369	IN	Data Raw: 07 e7 e7 e7 37 5c f5 fd fb 77 47 47 c7 3b 77 ee e0 dc 87 a6 94 96 96 3a 39 39 c5 c4 c4 98 98 98 b4 4b 95 00 90 95 95 a5 d1 68 f9 f9 f9 5a 5a 5a 07 0f 1e 64 b1 58 69 69 69 79 79 79 a3 46 8d 9a 32 65 ca a3 47 8f 6e dd ba 55 58 58 28 2f 2f 3f 6e dc 38 3b 3b 3b e2 85 31 31 31 41 41 41 5f bf 7e 95 97 97 9f 34 69 12 b1 3c 3c 3c fc ee dd bb 7b f7 ee 25 96 ec dc b9 53 4b 4b cb cd cd 0d 77 db 09 0e 0e 8e 88 88 a8 ab ab eb d1 a3 c7 b4 69 d3 d4 d4 d4 8e 1d 3b 16 16 16 86 67 fd e8 d5 ab d7 86 0d 1b 3e 7f fe 7c f6 ec d9 f4 f4 74 1a 8d 66 68 68 38 65 ca 94 46 7f e2 87 85 85 55 57 57 8f 1a 35 aa d1 b7 76 eb d6 2d 51 51 d1 81 03 07 b6 f7 31 eb 34 4f 9e 3c b1 b4 b4 a4 d3 e9 fd fa f5 db b1 63 87 87 87 87 90 90 10 4e 68 f7 f4 f4 5c bf 7e fd 99 33 67 b2 b3 b3 c5 c5 c5 87 0d Data Ascii: 7\wGG;w:99KhZZZdXiiiyyyF2eGnUXX(//?n8;;;111AAA_~4i<<<{%SKKwi;g>\|tfhh8eFUWW5v-QQ14O<cNh\~3g

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:30 UTC	1063	OUT	GET /embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:31 UTC	2394	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 19 Mar 2025 00:48:31 GMT Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=ywTztRAUD2U; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; Domain=youtube.com; Expires=Mon, 15-Sep-2025 00:48:31 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=U7iLQIILabI; Domain=.youtube.com; Expires=Mon, 15-Sep-2025 00:48:31 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D; Domain=.youtube.com; Expires=Mon, 15-Sep-2025 00:48:31 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 37 66 31 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 31 71 38 35 42 67 72 2d 52 47 5f 58 67 4e 6c 36 31 53 74 62 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 7f1e<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="x1q85Bgr-RG_XgNl61Stbw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 Data Ascii: 1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 20 6c 65 66 74 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 69 6d 67 2f 6d 65 68 37 2e 70 6e 67 29 20 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 Data Ascii: left: 0; right: 0; bottom: 0; padding: 25px; font-size: 13px; background: url(/img/meh7.png) 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 74 28 65 6c 2c 30 29 7d 29 3b 65 6c 73 65 20 73 6c 74 28 65 6c 2c 31 36 29 7d 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 31 71 38 35 42 67 72 2d 52 47 5f 58 67 4e 6c 36 31 53 74 62 77 22 3e 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b Data Ascii: ationFrame(function(){slt(el,0)});else slt(el,16)}})(window,document);</script><script nonce="x1q85Bgr-RG_XgNl61Stbw">var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 74 6f 72 65 5f 66 72 6f 6d 5f 64 65 70 65 6e 64 65 6e 63 79 5f 69 6e 6a 65 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 69 72 73 74 5f 70 61 72 74 79 5f 61 75 74 68 5f 76 32 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 6c 6f 77 5f 6c 6f 67 67 69 6e 67 5f 70 34 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 61 64 67 65 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 75 74 74 6f 6e 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 6d 69 78 65 64 5f 64 69 72 65 63 74 69 6f 6e 5f 66 6f 72 6d 61 74 74 Data Ascii: ed_chat_messages":true,"enable_entity_store_from_dependency_injection":true,"enable_first_party_auth_v2":true,"enable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_fully_reactive_button_shape":true,"enable_mixed_direction_formatt
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 65 6d 62 65 64 73 5f 76 69 64 65 6f 5f 64 65 74 61 69 6c 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 6b 65 74 6f 5f 62 61 74 63 68 5f 70 6c 61 79 65 72 5f 70 72 69 6d 61 72 Data Ascii: sclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enable_embeds_video_details":true,"mweb_enable_keto_batch_player_primar
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 65 6c 5f 74 69 6d 65 6f 75 74 5f 63 61 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 76 69 73 69 74 65 64 5f 63 68 61 6e 6e 65 6c 5f 63 6f 6c 6f 72 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 73 69 65 5f 6f 6d 69 74 5f 61 70 69 5f 6b 65 79 22 3a 74 72 75 65 2c 22 77 65 62 5f 70 72 65 66 65 74 63 68 5f 70 72 65 6c 6f 61 64 5f 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 77 65 62 5f 72 65 73 69 7a 61 62 6c 65 5f 61 64 76 65 72 74 69 73 65 72 5f 62 61 6e 6e 65 72 5f 6f 6e 5f 6d 61 73 74 68 65 61 64 5f 73 61 66 61 72 69 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 73 68 6f 72 74 73 5f 70 69 76 6f 74 5f 62 75 74 74 Data Ascii: el_timeout_cap":true,"web_masthead_visited_channel_color_fix":true,"web_one_platform_error_handling":true,"web_onesie_omit_api_key":true,"web_prefetch_preload_video":true,"web_resizable_advertiser_banner_on_masthead_safari_fix":true,"web_shorts_pivot_butt
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 66 65 61 74 75 72 65 73 5f 5f 22 2c 22 47 41 50 49 5f 48 4f 53 54 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 47 41 50 49 5f 4c 4f 43 41 4c 45 22 3a 22 65 6e 5f 55 53 22 2c 22 47 4c 22 3a 22 55 53 22 2c 22 48 4c 22 3a 22 65 6e 22 2c 22 48 54 4d 4c 5f 44 49 52 22 3a 22 6c 74 72 22 2c 22 48 54 4d 4c 5f 4c 41 4e 47 22 3a 22 65 6e 22 2c 22 49 4e 4e 45 52 54 55 42 45 5f 41 50 49 5f 4b 45 59 22 3a 22 41 49 7a 61 53 79 41 4f 5f 46 4a 32 53 6c 71 55 38 51 34 53 54 45 48 4c 47 43 69 6c 77 5f 59 39 5f 31 31 71 63 57 38 22 2c 22 49 4e 4e 45 52 54 55 42 45 5f 41 50 49 5f 56 45 52 53 49 4f 4e 22 3a 22 76 31 22 2c 22 49 4e 4e 45 52 54 55 42 45 5f 43 4c 49 45 4e 54 5f 4e 41 4d 45 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f Data Ascii: features__","GAPI_HOST":"https://apis.google.com","GAPI_LOCALE":"en_US","GL":"US","HL":"en","HTML_DIR":"ltr","HTML_LANG":"en","INNERTUBE_API_KEY":"AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8","INNERTUBE_API_VERSION":"v1","INNERTUBE_CLIENT_NAME":"WEB_EMBEDDED_
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 49 4c 44 5f 4c 41 42 45 4c 22 3a 22 79 6f 75 74 75 62 65 2e 70 6c 61 79 65 72 2e 77 65 62 5f 32 30 32 35 30 33 31 32 5f 30 31 5f 52 43 30 30 22 2c 22 50 41 47 45 5f 43 4c 22 3a 37 33 36 32 38 37 36 38 39 2c 22 53 45 52 56 45 52 5f 4e 41 4d 45 22 3a 22 57 65 62 46 45 22 2c 22 56 49 53 49 54 4f 52 5f 44 41 54 41 22 3a 22 43 67 74 56 4e 32 6c 4d 55 55 6c 4a 54 47 46 69 53 53 6a 66 71 4f 69 2d 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 55 51 25 33 44 25 33 44 22 2c 22 57 45 42 5f 50 4c 41 59 45 52 5f 43 4f 4e 54 45 58 54 5f 43 4f 4e 46 49 47 53 22 3a 7b 22 57 45 42 5f 50 4c 41 59 45 52 5f 43 4f 4e 54 45 58 54 5f 43 4f 4e 46 49 47 5f 49 44 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 3a 7b 22 72 6f 6f 74 45 6c 65 6d 65 6e 74 49 64 22 3a 22 6d 6f 76 Data Ascii: ILD_LABEL":"youtube.player.web_20250312_01_RC00","PAGE_CL":736287689,"SERVER_NAME":"WebFE","VISITOR_DATA":"CgtVN2lMUUlJTGFiSSjfqOi-BjIKCgJVUxIEGgAgUQ%3D%3D","WEB_PLAYER_CONTEXT_CONFIGS":{"WEB_PLAYER_CONTEXT_CONFIG_ID_EMBEDDED_PLAYER":{"rootElementId":"mov
2025-03-19 00:48:31 UTC	2394	IN	Data Raw: 5f 66 69 78 5f 6f 6e 5f 77 65 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6c 65 61 6e 5f 75 70 5f 6d 61 6e 75 61 6c 5f 61 74 74 72 69 62 75 74 69 6f 6e 5f 68 65 61 64 65 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6c 65 61 72 5f 75 73 65 72 5f 70 61 72 74 69 74 69 6f 6e 65 64 5f 6c 73 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6f 62 61 6c 74 5f 68 35 76 63 63 5f 68 5f 74 5f 74 5f 70 33 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6f 62 61 6c 74 5f 68 35 76 63 63 5f 6d 65 64 69 61 5f 64 6f 74 5f 61 73 79 6e 63 5f 72 65 6c 65 61 73 65 5f 6d 65 64 69 61 5f 63 6f 64 65 63 5f 62 72 69 64 67 65 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6f 62 61 6c 74 5f 68 35 76 63 63 5f 6d 65 64 69 61 5f 64 6f 74 5f 61 75 64 69 6f 5f 77 72 69 74 65 5f Data Ascii: _fix_on_web\u003dtrue\u0026clean_up_manual_attribution_header\u003dtrue\u0026clear_user_partitioned_ls\u003dtrue\u0026cobalt_h5vcc_h_t_t_p3\u003d0\u0026cobalt_h5vcc_media_dot_async_release_media_codec_bridge\u003d0\u0026cobalt_h5vcc_media_dot_audio_write_

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:31 UTC	681	OUT	GET /static/youtube-placeholder.2b05e7d68d.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cdn.prod.website-files.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:31 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1284 Connection: close Last-Modified: Fri, 28 Sep 2018 22:50:23 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 18 Mar 2025 02:17:49 GMT Cache-Control: max-age=84600, must-revalidate Etag: "2b05e7d68db45fbb529749f58a6ec233" Via: 1.1 934706f40ffde6f857deae8d024c1192.cloudfront.net (CloudFront) Age: 81043 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: j06UA5AAMVpAD-tPeEfG_BFMOtH5TGWHBh11oc9_62Z6EFB9vCbFjw==
2025-03-19 00:48:31 UTC	1284	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 31 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 30 20 33 31 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="560px" height="315px" viewBox="0 0 560 315" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:31 UTC	698	OUT	GET /img/webflow-badge-icon-d2.89e12c322e.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:31 UTC	577	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 421 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:04 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:28:20 GMT Cache-Control: max-age=84600, must-revalidate Etag: "89e12c322e66c81213861fc9acb8b003" Via: 1.1 bb3ac1595bb014e3b09608a0358d33da.cloudfront.net (CloudFront) Age: 1212 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: UPHe0YmRv24yV1umvp5sol7uBHlEP11YQ4Jh9eO7gG5lAJmc5I41Xg==
2025-03-19 00:48:31 UTC	421	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 2e 36 35 20 30 4c 31 37 2e 34 36 35 34 20 31 36 48 39 2e 37 37 37 37 38 4c 31 33 2e 32 30 33 20 39 2e 33 36 38 39 32 48 31 33 2e 30 34 39 33 43 31 30 2e 32 32 33 35 20 31 33 2e 30 33 37 32 20 36 2e 30 30 37 33 38 20 31 35 2e 34 35 32 20 30 20 31 36 56 39 2e 34 36 30 36 38 43 30 20 39 2e 34 36 30 36 38 20 33 2e 38 34 33 Data Ascii: <svg width="26" height="16" viewBox="0 0 26 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.65 0L17.4654 16H9.77778L13.203 9.36892H13.0493C10.2235 13.0372 6.00738 15.452 0 16V9.46068C0 9.46068 3.843

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:31 UTC	698	OUT	GET /img/webflow-badge-text-d2.c82cec3b78.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:31 UTC	579	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9912 Connection: close Last-Modified: Thu, 21 Sep 2023 16:04:31 GMT X-Amz-Server-Side-Encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 18 Mar 2025 05:30:05 GMT Cache-Control: max-age=84600, must-revalidate Etag: "c82cec3b78a2b2d267bbfe3c7e838068" Via: 1.1 94328d2509009edc0657f5c786a93e42.cloudfront.net (CloudFront) Age: 69507 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: FFImhll9EgYAB8qoEli6woTx0SOiyTsToVhmD8m3q3NlcO_1FiM5aA==
2025-03-19 00:48:31 UTC	9912	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 31 38 22 20 68 65 69 67 68 74 3d 22 31 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 38 20 31 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 2e 35 32 35 30 32 34 20 30 2e 38 39 36 34 38 34 48 33 2e 30 35 34 33 32 4c 36 2e 30 30 37 37 36 20 38 2e 32 36 36 32 32 4c 38 2e 38 39 39 30 35 20 30 2e 38 39 36 34 38 34 48 31 31 2e 33 35 33 31 56 31 31 48 39 2e 34 37 33 32 37 56 33 2e 37 39 39 34 39 4c 36 2e 36 36 33 37 20 31 31 48 35 2e 31 38 37 31 33 4c 32 2e 33 38 34 34 20 33 2e 39 32 30 37 37 56 31 31 48 30 2e 35 32 35 30 32 34 56 30 2e 38 39 36 34 38 34 5a 22 20 66 69 6c 6c 3d Data Ascii: <svg width="118" height="12" viewBox="0 0 118 12" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0.525024 0.896484H3.05432L6.00776 8.26622L8.89905 0.896484H11.3531V11H9.47327V3.79949L6.6637 11H5.18713L2.3844 3.92077V11H0.525024V0.896484Z" fill=

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:31 UTC	918	OUT	GET /s/player/7d1d50a6/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:32 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 425104 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Mar 2025 23:12:55 GMT Expires: Wed, 18 Mar 2026 23:12:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 05:05:38 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 5737 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:32 UTC	710	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d Data Ascii: -ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-m
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e Data Ascii: tainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 72 61 6e 64 69 6e 67 2d 73 68 6f 77 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 72 69 67 68 74 3a 63 61 6c 63 28 32 32 70 78 20 2b 20 76 61 72 28 2d 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 61 67 65 2d 77 69 64 74 68 29 29 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 Data Ascii: ext){top:89px}.ytp-player-content.ytp-iv-player-content,.ytp-player-content.ytp-timely-actions-content{left:12px;right:12px}.ytp-branding-shown .ytp-player-content.ytp-timely-actions-content{right:calc(22px + var(--branding-image-width))}.ytp-big-mode .yt
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 2d 65 6e 61 62 6c 65 20 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 35 31 70 78 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 33 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 34 33 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 Data Ascii: -enable .ytp-timely-actions-overlay{display:none}.ytp-ad-overlay-open .ytp-player-content{bottom:151px}.ytp-small-mode.ytp-ad-overlay-open .ytp-player-content{bottom:139px}.ytp-embed.ytp-ad-overlay-open .ytp-player-content{bottom:143px}.ytp-big-mode.ytp-a
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 35 38 7d 2e 79 74 70 2d 73 68 6f 72 74 73 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 Data Ascii: x;-webkit-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;left:12px;right:12px;top:0;z-index:58}.ytp-shorts-mode .ytp-chrome-top{-webkit-box-orient:vertical;-webkit-box-direction:normal;-web
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 75 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d Data Ascii: ,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1);overflow:hidden}.ytp-chrome-controls .ytp-button.ytp-mute-button{padding:6px}.ytp-chrome-controls .ytp-button.ytp-next-button{padding:0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 2c 38 30 2c 38 30 2c 2e 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6c 75 6d 69 6e 6f 73 69 74 79 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 2d 77 69 74 68 2d 64 69 66 66 65 72 65 6e 63 65 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 38 30 2c 38 30 Data Ascii: ,80,80,.6);background-blend-mode:luminosity;-webkit-backdrop-filter:blur(16px);backdrop-filter:blur(16px)}.ytp-delhi-modern-with-difference.ytp-delhi-modern .ytp-chrome-controls .ytp-next-button:not(ytp-miniplayer-button-container>*){background:rgba(80,80
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 73 74 61 74 69 63 2d 6f 76 65 72 6c 61 79 2d 61 64 64 69 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 72 67 62 61 28 34 30 2c 34 30 2c 34 30 2c 2e 36 29 29 3b 68 65 69 67 68 74 Data Ascii: olute;top:5px;bottom:0;left:-12px}.ytp-delhi-modern .ytp-prev-button:not(ytp-miniplayer-button-container>*){-webkit-backdrop-filter:blur(16px);backdrop-filter:blur(16px);background:var(--yt-spec-static-overlay-additive-background,rgba(40,40,40,.6));height
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: n:not([aria-disabled=true]):not([disabled]):hover,.ytp-chrome-controls .ytp-button[aria-expanded=true],.ytp-chrome-controls .ytp-button[aria-pressed=true],.ytp-replay-button:hover{opacity:1;-webkit-transition:opacity .1s cubic-bezier(0,0,.2,1);transition:

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:32 UTC	922	OUT	GET /s/player/7d1d50a6/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:32 UTC	675	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 33644 Date: Wed, 19 Mar 2025 00:48:32 GMT Expires: Thu, 19 Mar 2026 00:48:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 05:05:38 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:32 UTC	715	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 39 5a 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 78 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 78 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 78 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 4c 4f 28 78 29 7d 2c 63 53 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 54 3a 22 73 76 67 22 2c 0a 43 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 4c 3a 5b 7b 54 3a 22 70 61 74 68 22 Data Ascii: (function(g){var window=this;'use strict';var p9Z=function(x){x.mutedAutoplay=!1;x.endSeconds=NaN;x.limitedPlaybackDurationInSeconds=NaN;g.LO(x)},cSw=function(){return{T:"svg",C:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},L:[{T:"path"
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 20 2e 37 31 2c 2e 38 38 20 31 2e 32 31 2c 31 2e 31 38 20 2e 35 2c 2e 33 20 31 2e 30 38 2c 2e 34 30 20 31 2e 36 38 2c 2e 34 30 20 31 2e 31 2c 30 20 31 2e 39 39 2c 2d 30 2e 34 39 20 32 2e 34 39 2c 2d 31 2e 35 39 20 2e 35 2c 2d 31 2e 31 20 2e 38 31 2c 2d 32 2e 37 30 20 2e 38 31 2c 2d 34 2e 39 30 20 6c 20 30 2c 2d 32 2e 34 30 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 31 2c 2d 32 2e 39 30 20 2d 30 2e 33 31 2c 2d 33 2e 39 30 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 35 2c 2d 31 2e 35 39 20 2d 31 2c 2d 32 2e 30 39 20 2d 30 2e 35 2c 2d 30 2e 34 20 2d 31 2e 31 30 2c 2d 30 2e 35 39 20 2d 31 2e 39 30 2c 2d 30 2e 35 39 20 2d 30 2e 35 39 2c 30 20 2d 31 2e 31 38 2c 2e 31 39 20 2d 31 2e 36 38 2c 2e 34 39 20 2d 30 2e 34 39 2c 2e 33 20 2d 31 2e 30 31 2c 2e 38 30 20 2d Data Ascii: .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3 -1.01,.80 -
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 32 2c 2d 32 2e 38 37 20 2d 30 2e 34 39 2c 2d 33 2e 38 37 20 2d 30 2e 33 2c 2d 30 2e 38 39 20 2d 30 2e 38 2c 2d 31 2e 36 32 20 2d 31 2e 34 39 2c 2d 32 2e 31 32 20 2d 30 2e 37 2c 2d 30 2e 35 20 2d 31 2e 35 38 2c 2d 30 2e 36 38 20 2d 32 2e 36 38 2c 2d 30 2e 36 38 20 7a 20 6d 20 31 32 2e 31 38 2c 2e 30 39 20 30 2c 31 31 2e 39 30 20 63 20 2d 30 2e 31 2c 2e 33 20 2d 30 2e 32 39 2c 2e 34 38 20 2d 30 2e 35 39 2c 2e 36 38 20 2d 30 2e 32 2c 2e 32 20 2d 30 2e 35 31 2c 2e 33 31 20 2d 30 2e 38 31 2c 2e 33 31 20 2d 30 2e 33 2c 30 20 2d 30 2e 35 38 2c 2d 30 2e 31 30 20 2d 30 2e 36 38 2c 2d 30 2e 34 30 20 2d 30 2e 31 2c 2d 30 2e 33 20 2d 30 2e 31 38 2c 2d 30 2e 37 30 20 2d 30 2e 31 38 2c 2d 31 2e 34 30 20 6c 20 30 2c 2d 31 30 2e 39 39 20 2d 33 2e 34 30 2c 30 20 30 2c 31 Data Ascii: 2,-2.87 -0.49,-3.87 -0.3,-0.89 -0.8,-1.62 -1.49,-2.12 -0.7,-0.5 -1.58,-0.68 -2.68,-0.68 z m 12.18,.09 0,11.90 c -0.1,.3 -0.29,.48 -0.59,.68 -0.2,.2 -0.51,.31 -0.81,.31 -0.3,0 -0.58,-0.10 -0.68,-0.40 -0.1,-0.3 -0.18,-0.70 -0.18,-1.40 l 0,-10.99 -3.40,0 0,1
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 39 20 6c 20 30 2c 2d 38 2e 35 20 63 20 2e 31 2c 2d 30 2e 34 20 2e 32 39 2c 2d 30 2e 37 20 2e 35 39 2c 2d 31 20 2e 33 2c 2d 30 2e 33 20 2e 36 30 2c 2d 30 2e 34 30 20 2e 39 30 2c 2d 30 2e 34 30 20 7a 22 7d 7d 5d 7d 7d 2c 0a 4d 6d 24 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 54 3a 22 73 76 67 22 2c 0a 43 3a 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 33 20 35 31 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 4c 3a 5b 7b 54 3a 22 70 61 74 68 22 2c 43 3a 7b 64 3a 22 4d 35 38 2e 33 37 20 34 31 2e 33 39 48 36 32 2e 37 39 56 32 37 2e 32 33 43 36 32 2e 37 39 20 32 33 2e 30 33 20 36 32 2e 36 39 20 31 38 2e 36 39 20 36 32 2e 34 33 20 31 33 2e 35 39 48 36 32 2e 39 33 4c Data Ascii: 9 l 0,-8.5 c .1,-0.4 .29,-0.7 .59,-1 .3,-0.3 .60,-0.40 .90,-0.40 z"}}]}},Mm$=function(){return{T:"svg",C:{fill:"none",height:"100%",viewBox:"0 0 143 51",width:"100%"},L:[{T:"path",C:{d:"M58.37 41.39H62.79V27.23C62.79 23.03 62.69 18.69 62.43 13.59H62.93L
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 31 32 32 2e 35 20 38 2e 36 35 43 31 32 30 2e 38 34 20 38 2e 36 35 20 31 31 39 2e 39 34 20 39 2e 32 37 20 31 31 39 2e 39 34 20 31 31 2e 35 39 43 31 31 39 2e 39 34 20 31 33 2e 39 39 20 31 32 30 2e 38 32 20 31 34 2e 35 39 20 31 32 32 2e 35 20 31 34 2e 35 39 5a 4d 31 32 30 2e 32 20 34 31 2e 33 39 48 31 32 35 56 31 37 2e 37 33 48 31 32 30 2e 32 56 34 31 2e 33 39 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 54 3a 22 70 61 74 68 22 2c 43 3a 7b 64 3a 22 4d 31 33 34 2e 39 35 20 34 31 2e 37 39 43 31 33 37 2e 33 31 20 34 31 2e 37 39 20 31 33 38 2e 36 33 20 34 31 2e 34 39 20 31 33 39 2e 37 31 20 34 30 2e 34 37 43 31 34 31 2e 33 31 20 33 39 2e 30 31 20 31 34 31 2e 39 37 20 33 36 2e 36 33 20 31 34 31 2e 38 35 20 33 33 2e 31 31 4c 31 33 37 2e 34 31 20 33 32 Data Ascii: 122.5 8.65C120.84 8.65 119.94 9.27 119.94 11.59C119.94 13.99 120.82 14.59 122.5 14.59ZM120.2 41.39H125V17.73H120.2V41.39Z",fill:"white"}},{T:"path",C:{d:"M134.95 41.79C137.31 41.79 138.63 41.49 139.71 40.47C141.31 39.01 141.97 36.63 141.85 33.11L137.41 32
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 37 43 31 38 2e 34 33 20 31 33 2e 37 30 20 32 31 2e 36 34 20 31 32 2e 33 37 20 32 34 2e 39 39 20 31 32 2e 33 36 5a 4d 32 34 2e 39 39 20 31 30 2e 34 33 43 32 32 2e 31 31 20 31 30 2e 34 33 20 31 39 2e 32 39 20 31 31 2e 32 38 20 31 36 2e 38 39 20 31 32 2e 38 38 43 31 34 2e 35 30 20 31 34 2e 34 38 20 31 32 2e 36 33 20 31 36 2e 37 36 20 31 31 2e 35 33 20 31 39 2e 34 32 43 31 30 2e 34 32 20 32 32 2e 30 39 20 31 30 2e 31 33 20 32 35 2e 30 32 20 31 30 2e 37 30 20 32 37 2e 38 35 43 31 31 2e 32 36 20 33 30 2e 36 37 20 31 32 2e 36 35 20 33 33 2e 32 37 20 31 34 2e 36 39 20 33 35 2e 33 31 43 31 36 2e 37 33 20 33 37 2e 33 35 20 31 39 2e 33 32 20 33 38 2e 37 33 20 32 32 2e 31 35 20 33 39 2e 33 30 43 32 34 2e 39 38 20 33 39 2e 38 36 20 32 37 2e 39 31 20 33 39 2e 35 37 20 Data Ascii: 7C18.43 13.70 21.64 12.37 24.99 12.36ZM24.99 10.43C22.11 10.43 19.29 11.28 16.89 12.88C14.50 14.48 12.63 16.76 11.53 19.42C10.42 22.09 10.13 25.02 10.70 27.85C11.26 30.67 12.65 33.27 14.69 35.31C16.73 37.35 19.32 38.73 22.15 39.30C24.98 39.86 27.91 39.57
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 67 67 65 73 74 69 6f 6e 73 3d 6e 65 77 20 67 2e 54 28 7b 54 3a 22 64 69 76 22 2c 5a 3a 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 73 22 7d 29 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 2e 70 6d 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 3b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 70 6d 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0a 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 51 77 2c 74 68 69 73 29 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 55 29 3b 66 6f 72 28 76 61 72 20 6b 3d 7b 47 50 3a 30 7d 3b 6b 2e 47 50 3c 31 36 3b 6b 3d 7b 47 Data Ascii: ggestions=new g.T({T:"div",Z:"ytp-suggestions"});g.P(this,this.suggestions);this.suggestions.pm(this.element);g.P(this,this.previous);this.previous.pm(this.element);this.previous.listen("click",this.Qw,this);g.P(this,this.U);for(var k={GP:0};k.GP<16;k={G
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 65 62 5f 70 6c 61 79 65 72 5f 6c 6f 67 5f 63 6c 69 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 29 66 6f 72 28 76 61 72 20 6b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 2d 78 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2f 28 78 2e 4a 2b 78 2e 56 29 29 2c 55 3d 4d 61 74 68 2e 6d 69 6e 28 6b 2b 78 2e 63 6f 6c 75 6d 6e 73 2c 78 2e 73 75 67 67 65 73 74 69 6f 6e 44 61 74 61 2e 6c 65 6e 67 74 68 29 2d 31 3b 6b 3c 3d 55 3b 6b 2b 2b 29 78 2e 61 70 69 2e 6c 6f 67 56 69 73 69 62 69 6c 69 74 79 28 78 2e 53 5b 6b 5d 2e 65 6c 65 6d 65 6e 74 2c 75 29 7d 2c 59 37 74 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 78 2e 6e 65 78 74 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 62 6f 74 74 6f 6d 3d 0a 78 Data Ascii: eb_player_log_click_before_generating_ve_conversion_params"))for(var k=Math.floor(-x.scrollPosition/(x.J+x.V)),U=Math.min(k+x.columns,x.suggestionData.length)-1;k<=U;k++)x.api.logVisibility(x.S[k].element,u)},Y7t=function(x){x.next.element.style.bottom=x
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 63 74 29 26 26 78 2e 61 70 69 2e 73 65 74 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 28 55 2e 65 6c 65 6d 65 6e 74 2c 6b 29 29 7d 66 6f 72 28 3b 75 3c 78 2e 53 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 78 2e 53 5b 75 5d 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 59 37 74 28 78 29 7d 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 67 2e 4a 48 2e 63 61 6c 6c 28 74 68 69 73 2c 78 29 3b 0a 76 61 72 20 75 3d 74 68 69 73 3b 74 68 69 73 2e 53 3d 6e 75 6c 6c 3b 76 61 72 20 6b 3d 78 2e 58 28 29 2c 55 3d 7b 74 61 72 67 65 74 3a 6b 2e 55 7d 2c 6d 3d 5b 22 79 74 70 2d 73 6d 61 6c 6c 2d 72 65 64 69 72 65 63 74 22 5d 3b 6b 2e 4a 3f 6d 2e 70 75 73 68 28 22 6e 6f 2d 6c 69 6e 6b 22 29 3a 28 6b 3d 67 2e 6d 44 28 6b 29 2c 55 2e 68 72 Data Ascii: ct)&&x.api.setTrackingParams(U.element,k))}for(;u<x.S.length;u++)x.S[u].element.style.display="none";Y7t(x)},St=function(x){g.JH.call(this,x);var u=this;this.S=null;var k=x.X(),U={target:k.U},m=["ytp-small-redirect"];k.J?m.push("no-link"):(k=g.mD(k),U.hr
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 67 68 74 2d 55 29 3b 6b 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 28 75 2e 68 65 69 67 68 74 2d 28 78 2e 53 3f 78 2e 53 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 30 29 29 2f 32 2d 55 2f 32 2b 22 70 78 22 7d 2c 4f 38 39 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 75 29 7b 76 61 72 20 6b 3d 78 2e 61 70 69 2e 58 28 29 2c 55 3b 0a 75 2e 72 65 61 73 6f 6e 26 26 28 7a 62 73 28 75 2e 72 65 61 73 6f 6e 29 3f 55 3d 67 2e 45 4e 28 75 2e 72 65 61 73 6f 6e 29 3a 55 3d 67 2e 50 46 28 67 2e 74 65 28 75 2e 72 65 61 73 6f 6e 29 29 2c 78 2e 73 46 28 55 2c 22 63 6f 6e 74 65 6e 74 22 29 29 3b 76 61 72 20 6d 3b 75 2e 73 75 62 72 65 61 73 6f 6e 26 26 28 7a 62 73 28 75 2e 73 75 62 72 65 61 73 6f 6e 29 3f 6d 3d 67 2e 45 4e 28 75 2e 73 75 62 72 65 61 Data Ascii: ght-U);k.style.paddingTop=(u.height-(x.S?x.S.element.clientHeight:0))/2-U/2+"px"},O89=function(x,u){var k=x.api.X(),U;u.reason&&(zbs(u.reason)?U=g.EN(u.reason):U=g.PF(g.te(u.reason)),x.sF(U,"content"));var m;u.subreason&&(zbs(u.subreason)?m=g.EN(u.subrea

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:32 UTC	933	OUT	GET /s/embeds/869e0b39/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:32 UTC	788	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 343962 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Mar 2025 18:20:12 GMT Expires: Wed, 18 Mar 2026 18:20:12 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 17 Mar 2025 11:11:39 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 23300 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:32 UTC	602	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 64 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 64 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 Data Ascii: =a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 63 2c 65 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 63 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 63 29 3b 0a 65 3d 6b 61 28 65 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 63 2c 65 2c 64 29 7c 7c 65 7d 7d 28 29 2c 6d 61 3b 0a 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e Data Ascii: ct.setPrototypeOf(c,e.prototype);return c}}return function(c,d,e){e===void 0&&(e=c);e=ka(e.prototype\|\|Object.prototype);return Function.prototype.apply.call(c,e,d)\|\|e}}(),ma;if(typeof Object.setPrototypeOf=="function")ma=Object.setPrototypeOf;else{var n
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 75 61 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 29 7b 74 68 69 73 2e 44 3d 21 31 3b 74 68 69 73 2e 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 6f 3d 74 68 69 73 2e 4d 3d 30 3b 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 29 7b 69 66 28 61 2e 44 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 44 3d 21 30 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn a};u("Object.assign",function(a){return a\|\|ua});function va(){this.D=!1;this.u=null;this.i=void 0;this.h=1;this.o=this.M=0;this.P=this.j=null}function wa(a){if(a.D)throw new TypeError("Generator is already running");a.D=!0}va.prototype.G=function(
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 69 6f 6e 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 47 29 3a 28 61 2e 68 2e 47 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 47 29 3a 28 78 61 28 61 2e 68 2c 62 29 2c 62 3d 46 Data Ascii: ion;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function Ga(a){this.next=function(b){wa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.G):(a.h.G(b),b=Fa(a));return b};this.throw=function(b){wa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.G):(xa(a.h,b),b=F
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 29 7b 66 6f 72 28 3b 74 68 69 73 2e 68 26 26 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 68 3b 74 68 69 73 2e 68 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: ){for(;this.h&&this.h.length;){var g=this.h;this.h=[];for(var h=0;h<g.length;++h){var k=g[h];g[h]=null;try{k()}catch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.i=function(){function g(l){return functi
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 61 62 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f Data Ascii: teEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.ab;return k(g)};b.prototype.D=function(){if(this.h!=null){for(var g=0;g<this.h.length;++g)f.i(this.h[g]);this.h=null}};var f=new c;b.prototype.Z=functio
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 22 29 7d 29 3b 0a 75 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 68 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 79 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e Data Ascii: Symbol.dispose")});u("WeakMap",function(a){function b(k){this.h=(h+=Math.random()+1).toString();if(k){k=y(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="fun
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 74 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 Data Ascii: )};l=null}return{done:!0,value:void 0}})}function d(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ta(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key
2025-03-19 00:48:32 UTC	1390	IN	Data Raw: 68 2e 65 6e 74 72 79 2e 70 72 65 76 69 6f 75 73 2c 68 2e 65 6e 74 72 79 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 Data Ascii: h.entry.previous,h.entry.head=null,this.size--,!0):!1};e.prototype.clear=function(){this[0]={};this[1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:32 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQjk5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:32 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-sV7PFOawNWSyPyq43hBHjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 00:48:32 UTC	87	IN	Data Raw: 33 36 31 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 66 6c 20 64 72 61 66 74 20 6d 6f 63 6b 20 64 72 61 66 74 22 2c 22 73 65 72 75 6d 20 73 79 6e 74 68 65 73 69 7a 65 72 22 2c 22 6e 65 77 20 76 6f 6c 63 61 6e 69 63 20 76 65 6e 74 20 69 6e 20 79 65 6c 6c 6f 77 73 Data Ascii: 361)]}'["",["nfl draft mock draft","serum synthesizer","new volcanic vent in yellows
2025-03-19 00:48:32 UTC	785	IN	Data Raw: 74 6f 6e 65 22 2c 22 72 6f 61 74 61 6e 20 68 6f 6e 64 75 72 61 73 20 70 6c 61 6e 65 20 63 72 61 73 68 22 2c 22 66 72 65 65 20 73 74 65 61 6d 20 67 61 6d 65 73 22 2c 22 66 72 6f 6e 74 69 65 72 20 61 69 72 6c 69 6e 65 73 20 66 72 65 65 20 63 68 65 63 6b 65 64 20 62 61 67 73 22 2c 22 6e 61 74 69 6f 6e 61 6c 20 68 75 72 72 69 63 61 6e 65 20 63 65 6e 74 65 72 22 2c 22 6b 61 72 65 6e 20 72 65 61 64 20 73 65 63 6f 6e 64 20 74 72 69 61 6c 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b 34 53 46 51 Data Ascii: tone","roatan honduras plane crash","free steam games","frontier airlines free checked bags","national hurricane center","karen read second trial"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQ
2025-03-19 00:48:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://trezor-io-start-r---starting-auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
https://trezor-io-start-r---starting-auth.webflow.io/

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:34 UTC	734	OUT	GET /vi_webp/HuVH_9hnUu8/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:34 UTC	634	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 40260 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 00:23:08 GMT Expires: Wed, 19 Mar 2025 02:23:08 GMT Cache-Control: public, max-age=7200 Age: 1526 ETag: "1668082410" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:34 UTC	756	IN	Data Raw: 52 49 46 46 3c 9d 00 00 57 45 42 50 56 50 38 20 30 9d 00 00 10 11 04 9d 01 2a 00 05 d0 02 3e 6d 32 96 49 24 22 ac b1 22 51 99 f2 20 0d 89 67 6e d8 ca 69 f4 f6 0e cb 16 cd 81 ca 21 cb 97 1f ad 83 0f 03 fe c9 cb 3b 9c ff 81 f0 57 6d 8f f4 7e a5 7f d1 b5 41 3c ca b3 6e a2 bf fe 1f 34 de 7b ff 11 ec 8d a2 9f 9f dd 21 bd 89 db dc 1e 7a bd 31 e6 c3 d3 af eb 7f 61 2f d6 bf 10 0f 84 1f b5 ff a6 fe e7 7f 60 7f ef 7f 86 f7 41 ff bb fe e7 db df ed a7 b0 07 f4 9f f3 7e b5 7f f2 fd 9f 7f bc 7f e3 f6 1b fd cb f5 72 ff bf fb 6b ff ff e5 47 fa d7 fd 2f dc 9f 81 4f da 5f ff fd 9d 3d 25 fe 1f fb 23 f9 19 f0 5f e4 5f cd ff a4 fc cf fe ef ff 77 da 1e c8 5e e2 7e 54 69 a7 fc f3 f2 1f ea ff c7 7e eb fc 4a ff 2f ff 2f e4 67 a6 7c 04 7f 2d fe 7f fe eb fb ff ee 27 e7 07 38 48 07 Data Ascii: RIFF<WEBPVP8 0*>m2I$""Q gni!;Wm~A<n4{!z1a/`A~rkG/O_=%#__w^~Ti~J//g\|-'8H
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: d3 77 c8 18 e9 c0 0b e1 f6 22 2d bd 6e b2 dc ad a5 5e bd 1f 9a 8b 0b c2 3c 01 37 50 34 7b aa 1f cd d6 ef 6b 2b 74 67 37 2c 3d 7c 92 d2 c6 76 5e b4 4f b4 a9 ea 9e f8 4b 53 3e 6d 5d a4 59 73 17 35 65 f0 c8 2a 0b 7f 7a 94 03 bd c4 9e c4 3c fd bb 28 02 29 4f 17 de b6 c6 54 2e 39 4e 05 3c 80 51 51 d9 80 a7 77 99 82 bb b9 9d 7c cd b3 62 48 e5 24 4d 0c c1 2c f5 e9 a9 81 c4 06 fd 14 3c 15 a6 e1 fa cc 4c 20 3a de 68 a0 47 04 63 a8 27 f9 03 08 0b 5e 96 76 b2 a9 dc 53 54 8b 40 bd 0a d2 2d eb 51 57 0c 33 e1 8e 55 b3 86 20 9f 01 7c 08 72 5e 7a 3f eb ca 60 5d a2 f5 fc c9 58 90 2a e4 d6 68 9f 86 ff ba 12 89 45 86 32 9f 1a 79 da b6 13 57 7f 25 b5 13 06 de 45 9d c6 5c 89 2b 8b d5 d6 fd 66 3a a1 3b d5 58 a3 8f c8 99 51 f1 e1 09 c8 d1 03 c7 e7 c9 ab bb ff 9e 9b 26 94 ba e3 Data Ascii: w"-n^<7P4{k+tg7,=\|v^OKS>m]Ys5ez<()OT.9N<QQw\|bH$M,<L :hGc'^vST@-QW3U \|r^z?`]XhE2yW%E\+f:;XQ&
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 08 6c 7c 5a cb ed 2d 7f c2 0b 2d 18 b7 19 fb 09 bb 05 80 cc b7 1e c3 35 63 ac 00 a9 75 3f e5 ef 75 d9 fa e8 38 fb 5c 7f 33 3d 73 07 d5 36 8f df ad ce 79 38 18 eb ae 5f ab a6 f4 c2 76 ed 30 b5 50 d8 ef b9 ba 96 d6 1b dc 7e 3d 0b 0c 0c 3a c9 2c 28 43 54 83 23 7a 57 91 8d 87 35 b9 7a 3c 45 47 2b ff 47 38 1b 2b cf bb c0 26 59 cb 85 df 9b 95 af 35 fd 1d 91 f8 31 7c 8a 92 df ed be 50 4f 2f 94 3d ed 40 5f 62 37 5b e0 bf 90 96 10 9f 4c cf 1f 33 ef 6f c6 b8 84 3e 20 91 30 76 66 d4 0b 93 73 ad 98 39 41 2b 35 62 e6 aa cd a8 3d 57 22 ee 13 ce 73 fd d0 77 05 2a 3b e5 82 00 94 a6 4d bd 78 b5 11 2c d9 22 73 e8 80 d8 51 54 a1 a1 4b 4a 66 b5 b6 a8 e2 24 d7 a3 c5 70 57 d8 c3 74 8e 5b 95 77 eb 3d e4 74 ed 58 d7 b3 70 15 f2 b9 04 11 c4 63 3b 0b 3a 8d 85 c5 7a f0 18 ec 29 32 Data Ascii: l\|Z--5cu?u8\3=s6y8_v0P~=:,(CT#zW5z<EG+G8+&Y51\|PO/=@_b7[L3o> 0vfs9A+5b=W"sw*;Mx,"sQTKJf$pWt[w=tXpc;:z)2
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 23 ef db 1a f6 72 b9 1c 97 2d c5 5e b1 80 8d a7 9d 2c ab a1 24 e1 2f 08 b3 23 b5 19 4b c5 a3 8a 55 ff 3a 63 c1 a3 85 39 d0 4b af 42 0b 1b b4 9d e3 60 d9 08 30 4b 72 ee 5e e1 2d ec 4e 78 f9 aa 44 2b 30 38 de 96 55 10 5b 0f b9 08 1f 9f 43 5e 5f d1 a3 b4 bf 23 6b d1 00 da 64 3e d8 70 51 4a 3d 38 1e ee fc 4f 76 7b ce 85 1c 80 13 d1 0b e9 59 04 f9 c1 1a 72 e7 a5 13 c5 6a f6 4e a2 99 7b 9f 4e 10 ec 7d 58 32 0e 75 86 d5 88 0d a3 7b 18 31 f1 bc 57 7c 8d c1 d4 47 03 b7 55 57 22 48 28 0c ca f4 5d 0f 90 dd d9 86 7a 4c 40 2a 14 b1 da ac ae 9c f4 fd ba 14 b4 ce 45 d6 e3 49 f0 4b 78 c6 1a 69 3f 7e e7 da 9e fa 80 2f a3 47 e9 67 97 2b ac eb 63 c3 74 0f 37 e2 db 4d 4d 51 e5 09 30 cb 38 72 c2 d4 b7 5f 8c 8e 31 07 7a e7 0b a8 98 64 89 7a db 47 05 2d c1 29 40 61 57 f0 45 2a Data Ascii: #r-^,$/#KU:c9KB`0Kr^-NxD+08U[C^_#kd>pQJ=8Ov{YrjN{N}X2u{1W\|GUW"H(]zL@EIKxi?~/Gg+ct7MMQ08r_1zdzG-)@aWE
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: cd df 5a fc 37 54 70 7b bb c8 12 29 22 eb d5 3c 35 1c 26 a4 fc 4b 07 10 aa 98 08 ed f2 27 b4 73 9e 3c 1a a9 b5 74 da 56 74 84 a5 95 3f 30 b3 e1 b4 3d 83 16 84 0b c2 1c fb b4 e4 c7 f8 16 6c 46 65 01 0f 66 73 e0 5c b4 b9 2b 2a 10 f2 82 ab 0b 7a ae dd b2 1d c3 89 92 b6 89 cb 4e 7f ba 6b 66 f8 37 f2 e2 4c a0 94 9b 42 70 cb d5 f8 b9 f9 77 0c 3e 21 6f cc 59 61 18 f2 75 8b e6 cf 7d 29 fe a1 39 94 ef fa cb 18 27 da 99 56 ce 41 57 fd 83 66 dd 3e ee 78 36 b4 14 59 04 47 e8 d8 d0 97 92 48 1f 39 c1 79 ef ba 90 d1 dc ab 23 77 73 7c 74 c3 a5 02 76 e3 15 d9 47 f5 80 12 eb 93 ec cf 08 74 6f b6 61 4e b2 8e 18 44 b7 74 16 4f 36 29 bf d2 c6 71 e8 d6 3c 38 bd 6d f6 5b d9 31 8e a9 e2 1f cb b2 44 1e 11 ed 88 31 31 81 80 41 b3 22 78 5e 09 00 80 a2 27 a8 92 b5 db ab ca 58 9e 28 Data Ascii: Z7Tp{)"<5&K's<tVt?0=lFefs\+*zNkf7LBpw>!oYau})9'VAWf>x6YGH9y#ws\|tvGtoaNDtO6)q<8m[1D11A"x^'X(
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 6a 5a 1a 93 2f bc 99 11 2d e8 6b eb dd 87 3a 85 d1 5c ff d1 40 30 b5 35 eb e6 65 d2 eb a8 8e d0 c6 69 4f 99 9e 93 33 6e 0d c6 80 9d 57 73 16 0f 74 28 86 9b a4 25 9b b2 ff c3 98 f1 27 22 a2 07 18 45 ed 23 c4 3d a3 fe 52 5f c9 e2 83 88 7a 08 72 fc 1c 50 aa 25 d2 45 30 49 eb a4 92 cc b5 83 ab 10 e1 f4 e0 53 d1 9f f2 e0 b6 d7 2d 0f 3d ec db 80 19 7c 19 80 98 fb 06 ee ed 42 55 ca c0 1c ea cb bb 73 e4 25 59 97 d5 7d 48 86 1a 0c 06 5d 91 e0 34 68 19 fe 9c c9 bb 72 3a 0c 35 cb 12 f5 94 53 ed 12 b1 32 69 96 4f db 4f 5b 9e 64 cd ef d8 f2 92 7e b4 c8 a9 25 90 1c 5d b6 09 e4 41 6f ab 29 7f c8 86 0f bf 31 5d 9c 99 5b bf 8a ec 70 47 14 2d 37 1b 01 51 72 70 e9 97 71 ca b0 3e 9f ec f2 f7 c9 69 9f 84 1e 8a 68 55 87 ef 31 6b 1d 1b e2 f6 dc 29 72 e4 c6 be c0 c8 0b 4a d7 18 Data Ascii: jZ/-k:\@05eiO3nWst(%'"E#=R_zrP%E0IS-=\|BUs%Y}H]4hr:5S2iOO[d~%]Ao)1][pG-7Qrpq>ihU1k)rJ
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 55 78 09 48 d0 2f 5a 8a 69 f6 ed 0b f0 2f 4a 1d 19 de 29 a4 c7 c8 db 1e c7 c1 36 cc b0 41 f4 37 e3 3b 06 73 3b 29 23 58 a5 01 dd 0c 30 19 63 f6 69 0f 94 a9 3c a1 56 fd 8f c0 f3 83 55 19 24 42 b1 bb d7 ae df 74 b9 af 3d a6 c0 04 2d 29 a1 96 ea 10 2e 49 3f e5 f0 a5 b7 50 5e a2 fa b7 49 51 6a 85 16 f9 0a 5a d7 12 43 84 68 37 65 c6 70 70 1a 9b 31 74 dc d7 e5 7c 1e bb d2 12 a9 a1 30 0b 46 32 e2 b7 93 f5 d1 b0 49 d7 77 cd 63 fc 7b 25 a8 56 a1 e6 3c e0 e6 95 ef 24 15 86 56 a0 89 be 41 fe 47 9a 51 89 6e 26 d1 10 a3 6c 5e 02 a3 9e 0d fe 65 85 16 54 f2 40 71 e6 d5 ba fa 23 28 8c f8 4d a4 ca 23 3a a4 55 4c c1 1c 61 2b 8c b8 c3 72 44 05 10 d3 e8 44 af 7b 86 a5 f6 ff 58 d0 3b ae 73 c8 c2 f2 0a f6 ec 41 df cd e5 09 85 d9 be 45 fe f6 e4 ce df 23 c8 32 81 5a 37 65 f1 62 Data Ascii: UxH/Zi/J)6A7;s;)#X0ci<VU$Bt=-).I?P^IQjZCh7epp1t\|0F2Iwc{%V<$VAGQn&l^eT@q#(M#:ULa+rDD{X;sAE#2Z7eb
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: b6 5c 5c 35 ec ab 1b a0 c5 b0 e2 33 85 91 4a a5 b9 e0 d3 53 37 ef db 48 bf d7 ed 23 c0 36 e6 c2 41 2f df 09 88 79 c8 b1 1e a3 11 c7 82 a8 00 fd ac b5 a8 aa ec fc a8 f8 0d 4c a9 00 fc 4b e0 79 f3 7e 2c c8 cb 2d 9e 9f 8b 3c ba e6 71 16 44 7d a5 2d d9 43 36 45 00 10 65 77 98 bc ae 4f 84 da f2 c2 c9 fe aa b1 6f 05 ed 3f 90 11 06 eb b0 6e 61 55 9b 9a 47 ac bf a9 13 dd 2b df 83 70 1e 80 ad 9f 52 a0 fe 38 af d5 81 99 af eb a8 90 a7 6a 7f 87 3d 89 79 05 b1 c5 a5 73 71 d0 a6 5b 78 0d 0c 9c 8b aa d2 94 a6 e9 88 89 a6 b0 46 98 e1 b9 6b 7f 98 24 9e b4 e5 14 8a 95 ec 19 26 0c 52 55 80 0c 3f f0 32 e7 03 4b 59 27 8c 03 71 06 b1 9f 63 a6 fd 85 16 9f 68 9d 04 ff ba ef a4 b1 85 28 e1 e6 83 a0 6d 4b 81 2b fb f5 9f 13 cb d7 0b b5 ad bd 7b e9 2c 45 b7 e5 47 ab 38 1f 2b db 0e Data Ascii: \\53JS7H#6A/yLKy~,-<qD}-C6EewOo?naUG+pR8j=ysq[xFk$&RU?2KY'qch(mK+{,EG8+
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 7b 59 4d d7 90 19 49 4c b9 54 70 7d 8b d8 98 b5 ac bf 75 9d 72 48 c2 30 4c f0 e7 c0 d8 ec f9 ab 93 47 d7 23 c9 5a ae c1 64 ad 7c 51 ee 94 e3 f4 a9 0a 89 dc c6 ac 02 55 b0 34 e2 62 b1 3f 6f 6e c5 2d 87 fe 7b 36 cd b6 2a 80 b6 ab 0b 11 21 07 5d e8 ab 8f fd 16 8a dd 37 2b 85 89 7e e3 95 75 6d 65 5b c9 b9 92 c1 df cb 6c 85 0a 79 0a 8e 79 ad 95 e7 d7 af c3 71 16 64 32 00 94 26 f8 a2 14 a2 42 4e 7e 77 25 2c 39 15 68 d7 3e 28 68 cc 99 e9 54 12 7d c0 29 8f 37 0d ba 40 37 69 94 9e 7e 37 bd c5 50 6d f4 86 db 02 60 76 d2 cc 5f 86 bb 9e 84 31 cb 8e 32 e1 60 37 1c c4 df b2 e0 42 ec 20 c2 66 be 11 53 3d 79 00 fa 60 4d ea 3d 3c e9 07 4e b3 a8 bf ca 1c 5e c3 8e 3e ce c1 e2 63 08 22 74 92 a7 70 33 bb 31 41 ab fc 63 8a df a0 71 fa 3f d7 09 26 4c a4 c4 f2 9a 5f 12 45 e1 51 Data Ascii: {YMILTp}urH0LG#Zd\|QU4b?on-{6*!]7+~ume[lyyqd2&BN~w%,9h>(hT})7@7i~7Pm`v_12`7B fS=y`M=<N^>c"tp31Acq?&L_EQ
2025-03-19 00:48:34 UTC	1390	IN	Data Raw: 37 51 ee dc 37 af 5a a0 72 e8 35 95 3a 1d 3a 06 60 6e f5 ae 8b 8f 10 0f c7 7f 9e 2e e6 c0 09 f6 b4 ba c4 51 9c 32 b6 a9 51 4d c7 04 f7 e6 37 d2 94 93 df b2 cb d2 50 71 0c 75 c8 54 a7 71 20 6b 41 d4 77 b0 0d 02 e3 17 7e 12 55 d1 d5 61 41 4b 6b d9 1d 6d e3 fc f3 1b 4f fa 76 63 5a 70 d4 44 d3 15 d1 f1 50 89 66 5f ad fa 0c 25 eb 4a f1 66 e7 b1 df 0f 84 d8 a2 4e d8 65 57 08 d1 60 01 31 49 31 7e eb 70 5c b4 a6 1a 86 99 22 fd 99 dd 78 0d d9 00 82 60 df bc 5f 71 88 5f 13 2a 13 04 c0 e4 c1 72 e2 09 96 c9 b1 cb 02 61 6f 27 1d cc 9d ce d3 b6 f2 08 95 27 9d a2 4d e4 3a b6 9f 75 cf d5 6c 70 9a e4 bb 00 1a 53 ed 1f 9d c2 04 36 59 b3 bf cf 67 33 9f 46 67 ff 4f 91 0c bf 79 49 f3 16 af b4 3d 54 e5 ef c6 7b c9 8a 0d 2a 58 a2 13 c9 ef a5 b4 9f 1d 8e 0f 03 3c 71 a1 8b 8e f0 Data Ascii: 7Q7Zr5::`n.Q2QM7PquTq kAw~UaAKkmOvcZpDPf_%JfNeW`1I1~p\"x`_q_rao''M:ulpS6Yg3FgOyI=T{X<q

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:34 UTC	690	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:35 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Wed, 19 Mar 2025 00:48:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:34 UTC	668	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:35 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 00:42:25 GMT Expires: Wed, 19 Mar 2025 00:57:25 GMT Cache-Control: public, max-age=900 Age: 370 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:35 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:34 UTC	778	OUT	GET /ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:35 UTC	576	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1276 X-XSS-Protection: 0 Date: Tue, 18 Mar 2025 23:21:23 GMT Expires: Wed, 19 Mar 2025 23:21:23 GMT Cache-Control: public, max-age=86400, no-transform Age: 5232 ETag: "v8" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:35 UTC	814	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 ff db 00 84 00 03 02 02 09 06 0a 08 0b 08 0b 07 0b 0a 07 08 08 08 08 10 08 09 08 07 0e 08 0a 08 0a 08 08 08 08 0b 08 0b 0e 08 10 0a 08 08 06 08 08 08 0a 10 08 08 08 15 0a 09 08 08 17 18 16 08 18 09 08 15 08 01 03 04 04 05 05 05 08 05 05 05 08 06 05 05 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 14 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 09 08 07 06 05 ff c4 00 34 10 00 02 02 01 02 04 Data Ascii: JFIFExifII1PicasaDD4
2025-03-19 00:48:35 UTC	462	IN	Data Raw: 79 9e 49 24 92 9b 33 b4 8c d2 33 93 34 db 96 76 24 93 fa 93 9a 1d ff 00 01 80 c0 60 43 df 37 3f cc d3 ff 00 2b a3 ff 00 27 c9 45 a0 f0 e7 f0 54 3e 4a af d2 4c a3 d1 60 49 df 3a ff 00 c6 70 ff 00 ca 6a 1f 56 a6 4a 36 df 97 b7 e5 6e 1f f9 23 f5 a6 ca 34 3e 03 01 80 c0 87 fe 6d eb bf 13 4c 3e 3a 65 01 fe a6 c9 45 23 e5 4b 9e 1d 03 89 60 a7 5a bd a1 0d d8 e0 86 13 5e f0 15 65 76 8d 0a 1f 47 72 52 c6 e2 26 70 2b 4b 29 54 d8 b0 8f 7d b2 8d 03 c6 7c 73 53 48 85 ec 6a 16 2b 56 82 3d ba e4 b5 2c 75 d1 4b 1d 95 7a dc a8 ea 66 21 54 03 bb 31 00 6f b8 c0 8b 9e 65 fc d2 e9 7c 69 73 4e 3a 43 4f 2c 5a 6c 16 63 79 24 85 eb ac cd 61 e1 75 f4 92 4e 99 3a 50 46 43 19 61 8b b9 1b 75 77 39 28 a7 1e 5e df 95 b8 7f e4 8f d6 9b 28 d0 f8 0c 06 03 03 88 73 0b c9 a6 87 c6 60 9d 4a Data Ascii: yI$334v$`C7?+'ET>JL`I:pjVJ6n#4>mL>:eE#K`Z^evGrR&p+K)T}\|sSHj+V=,uKzf!T1oe\|isN:CO,Zlcy$auN:PFCauw9(^(s`J

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:35 UTC	691	OUT	GET /js/th/kKrhF5oZKvzUvEjseCwJuo4fmIZlSWB3dMNsj89fUAE.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:36 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 58559 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Mar 2025 10:24:25 GMT Expires: Wed, 18 Mar 2026 10:24:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 10 Mar 2025 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 51851 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 00:48:36 UTC	579	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 6c 73 65 7b 69 66 28 55 3d 3d 33 33 29 72 65 74 75 72 6e 20 75 3d 36 31 2c 61 3b 69 66 28 55 3d 3d 32 32 29 72 65 74 75 72 6e 20 61 3b 55 3d 3d 36 26 26 28 6e 2e 63 6f 6e 73 6f 6c 65 5b 66 5d 28 41 2e 6d 65 73 73 61 67 65 29 2c 55 3d 33 33 29 7d 7d 63 61 74 63 68 28 63 29 7b 69 66 28 75 3d 3d 36 31 29 74 68 72 6f 77 20 63 3b 75 3d 3d 53 26 26 28 41 3d 63 2c 55 3d 48 29 7d 7d 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 48 29 7b 72 65 74 75 72 6e 20 78 2e 63 61 6c 6c 28 74 68 69 73 2c 48 29 7d 2c 6e 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 48 2c 58 29 7b 72 65 74 75 72 6e 28 58 3d 4e 28 32 2c 38 30 2c 37 38 2c 35 36 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 48 2e 65 76 61 6c 28 58 2e 63 72 65 Data Ascii: lse{if(U==33)return u=61,a;if(U==22)return a;U==6&&(n.console[f](A.message),U=33)}}catch(c){if(u==61)throw c;u==S&&(A=c,U=H)}},p=function(H){return x.call(this,H)},n=this\|\|self;(0,eval)(function(H,X){return(X=N(2,80,78,56,"error","ad",null))&&H.eval(X.cre
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 29 4d 3d 58 3f 37 38 3a 33 33 3b 65 6c 73 65 7b 69 66 28 4d 3d 3d 33 39 29 72 65 74 75 72 6e 20 4e 3d 70 28 49 29 2c 78 26 26 78 28 4e 29 2c 4e 3b 4d 3d 3d 37 3f 28 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 58 28 66 75 6e 63 74 69 6f 6e 28 79 29 7b 53 42 28 66 75 6e 63 74 69 6f 6e 28 29 7b 78 28 79 29 7d 29 7d 2c 49 29 7d 2c 4d 3d 35 38 29 3a 4d 3d 3d 33 33 3f 28 43 3d 75 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 28 29 2c 53 42 28 6b 29 7d 2c 4d 3d 33 31 29 3a 4d 3d 3d 35 38 26 26 28 4d 3d 66 3f 38 33 3a 33 39 29 7d 7d 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 45 26 26 45 28 78 29 7d 7d 2c 61 3d 38 39 3b 65 6c 73 65 20 69 66 28 61 3d 3d 38 30 29 61 3d 31 30 3b 65 6c 73 65 20 69 66 28 61 3d 3d 31 39 29 7b 69 66 28 55 2e 76 2e 6c 65 6e 67 74 68 29 7b Data Ascii: )M=X?78:33;else{if(M==39)return N=p(I),x&&x(N),N;M==7?(k=function(){X(function(y){SB(function(){x(y)})},I)},M=58):M==33?(C=u,u=function(){C(),SB(k)},M=31):M==58&&(M=f?83:39)}},pe:function(x){E&&E(x)}},a=89;else if(a==80)a=10;else if(a==19){if(U.v.length){
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 20 69 66 28 75 3d 3d 39 29 41 3d 53 2c 75 3d 31 38 3b 65 6c 73 65 20 69 66 28 75 3d 3d 39 34 29 46 28 48 2c 30 2c 38 2c 6e 75 6c 6c 2c 45 2c 63 2c 70 2c 52 5b 41 5d 29 2c 75 3d 33 35 3b 65 6c 73 65 20 69 66 28 75 3d 3d 34 34 29 75 3d 38 32 3b 65 6c 73 65 20 69 66 28 75 3d 3d 37 39 29 70 3d 4b 28 70 2c 33 33 29 2c 48 26 26 48 5b 49 73 5d 3f 48 2e 49 2e 61 64 64 28 53 74 72 69 6e 67 28 52 29 2c 70 2c 74 72 75 65 2c 4d 48 28 34 2c 33 33 2c 58 2c 63 29 3f 21 21 63 2e 63 61 70 74 75 72 65 3a 21 21 63 2c 45 29 3a 24 4a 28 6e 75 6c 6c 2c 31 37 2c 66 61 6c 73 65 2c 63 2c 74 72 75 65 2c 45 2c 52 2c 70 2c 48 29 2c 75 3d 32 34 3b 65 6c 73 65 7b 69 66 28 75 3d 3d 31 39 29 72 65 74 75 72 6e 20 6e 3b 75 3d 3d 33 35 3f 28 41 2b 2b 2c 75 3d 35 36 29 3a 75 3d 3d 38 32 3f Data Ascii: if(u==9)A=S,u=18;else if(u==94)F(H,0,8,null,E,c,p,R[A]),u=35;else if(u==44)u=82;else if(u==79)p=K(p,33),H&&H[Is]?H.I.add(String(R),p,true,MH(4,33,X,c)?!!c.capture:!!c,E):$J(null,17,false,c,true,E,R,p,H),u=24;else{if(u==19)return n;u==35?(A++,u=56):u==82?
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 2c 28 48 26 37 36 29 3d 3d 48 26 26 28 53 2e 54 3f 75 3d 69 71 28 53 2e 41 2c 53 29 3a 28 55 3d 4a 59 28 74 72 75 65 2c 38 2c 53 29 2c 55 26 31 32 38 26 26 28 55 5e 3d 31 32 38 2c 58 3d 4a 59 28 74 72 75 65 2c 32 2c 53 29 2c 55 3d 28 45 3d 55 3c 3c 32 2c 2d 32 2a 7e 58 2b 33 2a 28 45 26 7e 58 29 2b 28 7e 45 5e 58 29 2b 28 7e 45 7c 58 29 29 29 2c 75 3d 55 29 29 2c 48 29 26 33 38 29 3d 3d 48 29 7b 70 3d 4f 28 37 34 2c 58 29 3b 7b 45 3d 30 3b 77 68 69 6c 65 28 55 3e 30 29 45 3d 28 63 3d 45 3c 3c 53 2c 52 3d 50 30 28 38 2c 58 2c 74 72 75 65 29 2c 28 63 7c 30 29 2d 31 2d 28 63 7c 7e 52 29 29 2c 55 2d 2d 7d 59 28 70 2c 58 2c 45 29 7d 72 65 74 75 72 6e 20 48 2b 39 3e 3e 28 28 48 5e 34 34 29 3e 3e 28 48 2b 36 26 31 35 7c 7c 28 53 2e 54 3f 75 3d 69 71 28 53 2e 41 Data Ascii: ,(H&76)==H&&(S.T?u=iq(S.A,S):(U=JY(true,8,S),U&128&&(U^=128,X=JY(true,2,S),U=(E=U<<2,-2~X+3(E&~X)+(~E^X)+(~E\|X))),u=U)),H)&38)==H){p=O(74,X);{E=0;while(U>0)E=(c=E<<S,R=P0(8,X,true),(c\|0)-1-(c\|~R)),U--}Y(p,X,E)}return H+9>>((H^44)>>(H+6&15\|\|(S.T?u=iq(S.A
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 74 50 72 65 76 65 6e 74 65 64 3d 74 68 69 73 2e 48 55 3d 66 61 6c 73 65 2c 63 3d 39 33 29 3a 63 3d 3d 36 37 3f 28 74 68 69 73 2e 63 55 3d 74 68 69 73 2e 63 55 2c 74 68 69 73 2e 58 3d 74 68 69 73 2e 58 2c 63 3d 33 31 29 3a 63 3d 3d 32 30 26 26 28 63 3d 28 48 2b 36 5e 32 36 29 3e 3d 48 26 26 48 2d 35 3c 3c 31 3c 48 3f 38 31 3a 38 33 29 7d 7d 7d 7d 2c 41 59 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 53 2c 55 2c 58 2c 45 2c 63 2c 70 2c 52 2c 41 2c 6e 2c 75 2c 61 29 7b 66 6f 72 28 75 3d 34 30 3b 75 21 3d 35 35 3b 29 69 66 28 75 3d 3d 32 35 29 70 3d 6e 3d 30 2c 75 3d 35 39 3b 65 6c 73 65 7b 69 66 28 75 3d 3d 38 33 29 72 65 74 75 72 6e 20 61 3b 75 3d 3d 35 31 3f 28 6e 2b 3d 55 2e 63 68 61 72 43 6f 64 65 41 74 28 70 29 2c 6e 2b 3d 6e 3c 3c 31 30 2c 6e 3d 28 52 3d 6e 3e Data Ascii: tPrevented=this.HU=false,c=93):c==67?(this.cU=this.cU,this.X=this.X,c=31):c==20&&(c=(H+6^26)>=H&&H-5<<1<H?81:83)}}}},AY=function(H,S,U,X,E,c,p,R,A,n,u,a){for(u=40;u!=55;)if(u==25)p=n=0,u=59;else{if(u==83)return a;u==51?(n+=U.charCodeAt(p),n+=n<<10,n=(R=n>
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 6e 28 66 29 7b 72 65 74 75 72 6e 20 55 2e 63 61 6c 6c 28 78 2e 73 72 63 2c 78 2e 6c 69 73 74 65 6e 65 72 2c 66 29 7d 2c 55 3d 43 43 2c 75 3d 78 2c 61 3d 38 34 29 3a 61 3d 3d 31 3f 61 3d 53 3c 3c 31 26 33 3f 38 34 3a 34 30 3a 61 3d 3d 34 38 3f 61 3d 45 3e 37 3f 38 32 3a 32 31 3a 61 3d 3d 35 35 26 26 28 45 3d 30 2c 63 3d 5b 5d 2c 6e 3d 30 2c 61 3d 31 37 29 7d 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 53 2c 55 2c 58 2c 45 2c 63 2c 70 2c 52 2c 41 29 7b 69 66 28 28 28 28 48 2b 37 5e 32 35 29 3c 28 28 48 2b 35 26 34 32 29 3c 48 26 26 28 48 2d 36 5e 32 37 29 3e 3d 48 26 26 28 58 3d 50 30 28 38 2c 55 2c 74 72 75 65 29 2c 2d 32 2a 7e 28 58 26 53 29 2b 7e 58 2b 28 58 5e 53 29 2b 28 58 7c 2d 31 32 39 29 26 26 28 58 3d 2d 7e 28 58 26 31 32 37 29 2b 28 58 26 2d 31 Data Ascii: n(f){return U.call(x.src,x.listener,f)},U=CC,u=x,a=84):a==1?a=S<<1&3?84:40:a==48?a=E>7?82:21:a==55&&(E=0,c=[],n=0,a=17)}},b=function(H,S,U,X,E,c,p,R,A){if((((H+7^25)<((H+5&42)<H&&(H-6^27)>=H&&(X=P0(8,U,true),-2*~(X&S)+~X+(X^S)+(X\|-129)&&(X=-~(X&127)+(X&-1
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 2c 48 2c 37 2c 53 2c 55 2c 58 2c 45 2c 63 2c 70 2c 52 29 7d 2c 70 41 3d 66 75 6e 63 74 69 6f 6e 28 48 2c 53 2c 55 2c 58 2c 45 2c 63 2c 70 2c 52 2c 41 2c 6e 2c 75 2c 61 29 7b 66 6f 72 28 75 3d 38 36 3b 75 21 3d 38 37 3b 29 69 66 28 75 3d 3d 36 34 29 70 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 41 2c 63 29 2c 75 3d 38 31 3b 65 6c 73 65 20 69 66 28 75 3d 3d 34 37 29 75 3d 78 65 3f 31 34 3a 39 36 3b 65 6c 73 65 20 69 66 28 75 3d 3d 35 31 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 26 26 28 63 3d 63 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 41 3d 22 61 72 69 61 2d 22 2b 45 2c 75 3d 36 31 3b 65 6c 73 65 20 69 66 28 75 3d 3d 38 36 29 75 3d 39 35 3b 65 6c 73 65 20 69 66 28 75 3d 3d 34 39 29 7b 61 3a 7b 66 6f 72 28 41 3d 5b 55 3d 3d 74 79 70 65 6f 66 20 67 6c 6f Data Ascii: ,H,7,S,U,X,E,c,p,R)},pA=function(H,S,U,X,E,c,p,R,A,n,u,a){for(u=86;u!=87;)if(u==64)p.setAttribute(A,c),u=81;else if(u==47)u=xe?14:96;else if(u==51)Array.isArray(c)&&(c=c.join(" ")),A="aria-"+E,u=61;else if(u==86)u=95;else if(u==49){a:{for(A=[U==typeof glo
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 6c 73 65 20 69 66 28 78 3d 3d 37 35 29 52 3d 45 3f 74 79 70 65 6f 66 20 45 2e 67 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 45 2e 67 65 28 29 3a 6e 65 77 20 45 3a 6e 75 6c 6c 2c 78 3d 38 36 3b 65 6c 73 65 20 69 66 28 78 3d 3d 33 34 29 78 3d 28 52 3d 55 29 3f 38 36 3a 34 31 3b 65 6c 73 65 20 69 66 28 78 3d 3d 32 34 29 63 3d 4b 28 41 2c 34 39 29 2c 78 3d 35 32 3b 65 6c 73 65 20 69 66 28 78 3d 3d 38 38 29 78 3d 28 53 2d 36 7c 37 35 29 3e 3d 53 26 26 28 53 2d 37 7c 38 29 3c 53 3f 30 3a 31 33 3b 65 6c 73 65 20 69 66 28 78 3d 3d 37 37 29 78 3d 36 32 3b 65 6c 73 65 20 69 66 28 78 3d 3d 35 32 29 78 3d 28 45 3d 41 45 5b 63 5d 29 3f 38 39 3a 33 39 3b 65 6c 73 65 20 69 66 28 78 3d 3d 34 39 29 78 3d 28 53 2d 34 7c 37 37 29 3e 3d 53 26 26 28 53 2b 37 5e 31 30 29 3c Data Ascii: lse if(x==75)R=E?typeof E.ge==="function"?E.ge():new E:null,x=86;else if(x==34)x=(R=U)?86:41;else if(x==24)c=K(A,49),x=52;else if(x==88)x=(S-6\|75)>=S&&(S-7\|8)<S?0:13;else if(x==77)x=62;else if(x==52)x=(E=AE[c])?89:39;else if(x==49)x=(S-4\|77)>=S&&(S+7^10)<
2025-03-19 00:48:36 UTC	1390	IN	Data Raw: 3a 6e 29 2c 55 29 2c 61 3d 32 33 29 3a 61 3d 3d 36 3f 61 3d 28 55 2e 63 6c 61 73 73 4c 69 73 74 3f 55 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 4b 28 31 2c 31 32 2c 6e 2c 52 73 28 36 2c 55 2c 22 73 74 72 69 6e 67 22 29 29 29 3f 32 33 3a 37 36 3a 61 3d 3d 31 33 26 26 28 61 3d 55 2e 63 6c 61 73 73 4c 69 73 74 3f 39 37 3a 36 29 7d 29 2c 41 3d 36 36 3b 65 6c 73 65 20 69 66 28 41 3d 3d 36 29 52 3d 55 26 26 55 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 55 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 55 29 3a 6e 75 6c 6c 2c 41 3d 36 39 3b 65 6c 73 65 20 69 66 28 41 3d 3d 33 31 29 70 3d 22 22 2c 58 3d 30 2c 41 3d 34 37 3b 65 6c 73 65 7b 69 66 28 41 3d 3d 36 31 29 72 65 74 75 72 6e 20 52 3b 41 3d 3d 39 30 3f 41 3d 63 Data Ascii: :n),U),a=23):a==6?a=(U.classList?U.classList.contains(n):K(1,12,n,Rs(6,U,"string")))?23:76:a==13&&(a=U.classList?97:6)}),A=66;else if(A==6)R=U&&U.parentNode?U.parentNode.removeChild(U):null,A=69;else if(A==31)p="",X=0,A=47;else{if(A==61)return R;A==90?A=c

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:35 UTC	699	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:36 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Wed, 19 Mar 2025 00:48:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 00:48:36 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 34 48 53 2d 32 53 38 35 73 48 5a 6f 78 55 31 48 61 37 62 6b 47 43 4e 32 4d 42 62 35 76 72 72 76 32 54 32 39 6b 49 63 52 63 44 65 37 54 4a 71 52 48 4f 42 4d 65 6b 6a 48 77 30 35 5f 4f 7a 75 52 51 41 36 64 45 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKp4HS-2S85sHZoxU1Ha7bkGCN2MBb5vrrv2T29kIcRcDe7TJqRHOBMekjHw05_OzuRQA6dE","type":4}
2025-03-19 00:48:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:36 UTC	1706	OUT	POST /youtubei/v1/log_event?alt=json HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 12023 sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 X-YouTube-Client-Name: 56 X-YouTube-Ad-Signals: dt=1742345312088&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C719&vis=1&wgl=true&ca_type=image X-Goog-Event-Time: 1742345315411 X-YouTube-Client-Version: 1.20250312.01.00 Content-Type: application/json X-YouTube-Page-Label: youtube.player.web_20250312_01_RC00 X-YouTube-Page-CL: 736287689 X-YouTube-Utc-Offset: -240 X-YouTube-Device: cbr=Chrome&cbrver=134.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-Goog-Visitor-Id: CgtVN2lMUUlJTGFiSSjfqOi-BjIKCgJVUxIEGgAgUQ%3D%3D X-Goog-Request-Time: 1742345315411 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-YouTube-Time-Zone: America/New_York Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:36 UTC	12023	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 35 30 33 31 32 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 2d 6f 36 4c 34 47 45 4c 76 5a 7a 68 77 51 36 2d 6a 2d 45 68 44 6b 35 5f 38 53 45 4d 6e 34 5f 78 49 51 2d 4f 6a 4f 48 42 44 54 34 61 38 46 45 4e 66 70 7a 68 77 51 68 4c 33 4f 48 42 43 33 36 76 34 53 45 49 69 48 73 41 55 51 69 62 44 4f 48 42 44 38 73 73 34 63 45 50 44 69 7a 68 77 51 6b 39 6e 4f 48 42 43 64 30 4c 41 46 45 4a 54 2d 73 41 55 51 76 4f 5f 4f 48 42 43 5a 6d 4c 45 46 45 4d Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20250312.01.00","configInfo":{"appInstallData":"CN-o6L4GELvZzhwQ6-j-EhDk5_8SEMn4_xIQ-OjOHBDT4a8FENfpzhwQhL3OHBC36v4SEIiHsAUQibDOHBD8ss4cEPDizhwQk9nOHBCd0LAFEJT-sAUQvO_OHBCZmLEFEM
2025-03-19 00:48:37 UTC	408	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Wed, 19 Mar 2025 00:48:37 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 00:48:37 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2025-03-19 00:48:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:37 UTC	951	OUT	GET /generate_204?egx4yQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:37 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Wed, 19 Mar 2025 00:48:37 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:39 UTC	1705	OUT	POST /youtubei/v1/log_event?alt=json HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1669 sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 X-YouTube-Client-Name: 56 X-YouTube-Ad-Signals: dt=1742345312088&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C719&vis=1&wgl=true&ca_type=image X-Goog-Event-Time: 1742345317770 X-YouTube-Client-Version: 1.20250312.01.00 Content-Type: application/json X-YouTube-Page-Label: youtube.player.web_20250312_01_RC00 X-YouTube-Page-CL: 736287689 X-YouTube-Utc-Offset: -240 X-YouTube-Device: cbr=Chrome&cbrver=134.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-Goog-Visitor-Id: CgtVN2lMUUlJTGFiSSjfqOi-BjIKCgJVUxIEGgAgUQ%3D%3D X-Goog-Request-Time: 1742345317770 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-YouTube-Time-Zone: America/New_York Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJKhywEInP7MAQiFoM0BCOTkzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=ywTztRAUD2U; __Secure-ROLLOUT_TOKEN=CJ6-9ZbH8-uZngEQtobhivaUjAMYtobhivaUjAM%3D; VISITOR_INFO1_LIVE=U7iLQIILabI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgUQ%3D%3D
2025-03-19 00:48:39 UTC	1669	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 35 30 33 31 32 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 2d 6f 36 4c 34 47 45 4c 76 5a 7a 68 77 51 36 2d 6a 2d 45 68 44 6b 35 5f 38 53 45 4d 6e 34 5f 78 49 51 2d 4f 6a 4f 48 42 44 54 34 61 38 46 45 4e 66 70 7a 68 77 51 68 4c 33 4f 48 42 43 33 36 76 34 53 45 49 69 48 73 41 55 51 69 62 44 4f 48 42 44 38 73 73 34 63 45 50 44 69 7a 68 77 51 6b 39 6e 4f 48 42 43 64 30 4c 41 46 45 4a 54 2d 73 41 55 51 76 4f 5f 4f 48 42 43 5a 6d 4c 45 46 45 4d Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20250312.01.00","configInfo":{"appInstallData":"CN-o6L4GELvZzhwQ6-j-EhDk5_8SEMn4_xIQ-OjOHBDT4a8FENfpzhwQhL3OHBC36v4SEIiHsAUQibDOHBD8ss4cEPDizhwQk9nOHBCd0LAFEJT-sAUQvO_OHBCZmLEFEM
2025-03-19 00:48:39 UTC	408	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Wed, 19 Mar 2025 00:48:39 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 00:48:39 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2025-03-19 00:48:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 00:48:39 UTC	670	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 00:48:39 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 00:48:39 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 23927 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9228f727597f425f-EWR alt-svc: h3=":443"; ma=86400
2025-03-19 00:48:39 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 00:48:39 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9