Edit tour

Windows Analysis Report
https://trezor-io-start-r---starting-auth.webflow.io/

Overview

General Information

Sample URL:	https://trezor-io-start-r---starting-auth.webflow.io/
Analysis ID:	1642817
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious Javascript

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5640 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5720 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-io-start-r---starting-auth.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://trezor-io-start-r---starting-auth.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.54.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk indicators, including dynamic code execution through the use of `eval` and the `Function` constructor. It also exhibits obfuscated code, which is a common technique used in malicious scripts. The overall behavior and structure of the script suggest it is highly suspicious and likely malicious in nature.
Source: 0.85.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of `eval` and the construction of dynamic function calls pose a significant security risk, as they can allow the execution of arbitrary code. Additionally, the script appears to be collecting and sending data to an unknown destination, which could lead to data leaks or other malicious activities. Overall, this script exhibits a high level of risk and should be treated with caution.

AI detected suspicious URL

Source: https://trezor-io-start-r---starting-auth.webflow.io

Joe Sandbox AI: The URL 'https://trezor-io-start-r---starting-auth.webflow.io' appears to be attempting to mimic the legitimate Trezor website 'https://trezor.io'. The use of 'trezor-io' in the subdomain is a strong indicator of an attempt to associate with the Trezor brand. The addition of '-start-r---starting-auth' is likely intended to confuse users into thinking this is a legitimate Trezor authentication page. The use of 'webflow.io' as the domain extension is not inherently suspicious, as Webflow is a legitimate platform for hosting websites, but in this context, it could be used to lend an air of legitimacy to the URL. The structural similarity and the use of Trezor's name in the subdomain suggest a high likelihood of typosquatting, as it could easily confuse users into believing they are interacting with the official Trezor site.

Source: https://trezor-io-start-r---starting-auth.webflow.io/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.7:59639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.7:59640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.7:59641 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59642 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59643 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.7:59644 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.7:59647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.46:443 -> 192.168.2.7:59648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.7:59650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.7:59652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.166:443 -> 192.168.2.7:59663 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.7:59662 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.7:59666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.129:443 -> 192.168.2.7:59668 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.246:443 -> 192.168.2.7:59669 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.65:443 -> 192.168.2.7:59671 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.78:443 -> 192.168.2.7:59675 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.78:443 -> 192.168.2.7:59674 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.7:59683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.7:59686 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 5MB later: 56MB

Source: global traffic

TCP traffic: 192.168.2.7:59637 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: trezor-io-start-r---starting-auth.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669b5e317679d86ba250375c/js/webflow.4e8135d87.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375c HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://trezor-io-start-r---starting-auth.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/youtube-placeholder.2b05e7d68d.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://cdn.prod.website-files.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/youtube-placeholder.2b05e7d68d.svg HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/7d1d50a6/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7d1d50a6/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7d1d50a6/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/7d1d50a6/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIhODOAQii5M4BCK/kzgEI6eTOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/HuVH_9hnUu8/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/7d1d50a6/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/th/_t1GFu6ymA48_djLKSLwGyGpFUFJ2k6dr6Vox9QB4jk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/HuVH_9hnUu8/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?p0bFag HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://trezor-io-start-r---starting-auth.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /time/1/current?cup2key=8:MCghUUi46UXLyuLE4BuzewdqrNR5r2h8iYPae5ogZZE&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1Host: clients2.google.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate

Source: chromecache_83.1.dr	String found in binary or memory: " property="twitter:title"/><meta content="Start using Trezor.io with version 22.9.3. Secure your digital assets and explore easy-to-follow setup guides. Get started now" property="twitter:description"/><meta property="og:type" content="website"/><meta content="summary_large_image" name="twitter:card"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o\|\|o.DocumentTouch&&c instanceof DocumentTouch)&&(n.className+=t+"touch")}(window,document);</script><link href="https://cdn.prod.website-files.com/img/favicon.ico" rel="shortcut icon" type="image/x-icon"/><link href="https://cdn.prod.website-files.com/img/webclip.png" rel="apple-touch-icon"/></head><body><a href="#" class="w-inline-block"><img src="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png" loading="lazy" sizes="100vw" srcset="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-500.png 500w, https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-800.png 800w, https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-1080.png 1080w, https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png 1366w" alt="" class="image"/><div style="padding-top:56.17021276595745%" class="w-embed-youtubevideo"><iframe src="https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0" frameBorder="0" style="position:absolute;left:0;top:0;width:100%;height:100%;pointer-events:auto" allow="autoplay; encrypted-media" allowfullscreen="" title="How to set up a Trezor hardware wallet equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: (g.cL(k,"redirector.googlevideo.com"),U=k.toString()):k.S.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.cL(k,"www.youtube.com"),U=k.toString()):(k=k0t(U),mE(k)&&(U=k));k=new g.zC(U);k.set("cmo=pf","1");m&&k.set("cmo=td","a1.googlevideo.com");return k}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: g.AU=function(x){x=NU(x.lK);return x==="www.youtube-nocookie.com"?"www.youtube.com":x}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: g.b.getVideoUrl=function(x,u,k,U,m,F,f){u={list:u};k&&(m?u.time_continue=k:u.t=k);k=f?"music.youtube.com":g.AU(this);m=k==="www.youtube.com";!F&&U&&m?F="https://youtu.be/"+x:g.IB(this)?(F="https://"+k+"/fire",u.v=x):(F&&m?(F=this.protocol+"://"+k+"/shorts/"+x,U&&(u.feature="share")):(F=this.protocol+"://"+k+"/watch",u.v=x),oI&&(x=NOI())&&(u.ebc=x));return g.AS(F,u)}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: g.mD=function(x){var u=g.AU(x);FN5.includes(u)&&(u="www.youtube.com");return x.protocol+"://"+u}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(u==null\|\|!u.deviceIsAudioOnly);this.iC=hi(this.iC,x.ismb);this.CL?(c=x.vss_host\|\|"s.youtube.com",c==="s.youtube.com"&&(c=NU(this.lK)\|\|"www.youtube.com")):c="video.google.com";this.hK=c;dz(this,x,!0);this.gm=new Fm;g.P(this,this.gm);p=u?u.innertubeApiKey:Xt("",x.innertube_api_key);R=u?u.innertubeApiVersion:Xt("",x.innertube_api_version);c=u?u.innertubeContextClientVersion:Xt("",x.innertube_context_client_version);p=g.xc("INNERTUBE_API_KEY")\|\|p;R=g.xc("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: r0.prototype.WI=function(){return this.s_.l()};var BOQ=(new Date).getTime();var gSY="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),kvG=/\bocr\b/;var m44=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var MOD=0,cRx=0,yR$=0;var wAD=Object.assign({},{attributes:{},handleError:function(x){throw x;}},{T5X:!0, equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: this.x$.Ok&&(x.authuser=this.x$.Ok);this.x$.pageId&&(x.pageid=this.x$.pageId);isNaN(this.cryptoPeriodIndex)\|\|(x.cpi=this.cryptoPeriodIndex.toString());var m=(m=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.lZ()))?m[1]:"";m==="ATV"&&(x.cdt=m);this.N=x;this.N.session_id=U;this.U=!0;this.V.flavor==="widevine"&&(this.N.hdr="1");this.V.flavor==="playready"&&(u=Number(u8(u.experiments,"playready_first_play_expiration")),!isNaN(u)&&u>=0&&(this.N.mfpe=""+u),this.U=!1);u="";g.Nk(this.V)?PQ(this.V)?(U=k.V)&&(u="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: u.customBaseYoutubeUrl:x.BASE_YT_URL)\|\|"")\|\|Uf(this.AO)\|\|this.protocol+"://www.youtube.com/";f=u?u.eventLabel:x.el;U="detailpage";f==="adunit"?U=this.K?"embedded":"detailpage":f==="embedded"\|\|this.D?U=Vr(U,f,LtY):f&&(U="embedded");this.ut=U;lvY();f=null;U=u?u.playerStyle:x.ps;F=g.DG(D_Y,U);!U\|\|F&&!this.D\|\|(f=U);this.playerStyle=f;this.j=g.DG(D_Y,this.playerStyle);this.houseBrandUserStatus=u==null?void 0:u.houseBrandUserStatus;this.RS=this.j&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard"; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: u=this.api.X();x=this.api.getVideoData();var k="";u.J\|\|(u=g.AU(u),u.indexOf("www.")===0&&(u=u.substring(4)),k=g.mw(x)?"Watch on YouTube Music":u==="youtube.com"?"Watch on YouTube":g.tK("Watch on $WEBSITE",{WEBSITE:u}));this.updateValue("title",k)}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: var zO={};var I0B={hV:[{F4:/Unable to load player module/,weight:20},{F4:/Failed to fetch/,weight:500},{F4:/XHR API fetch failed/,weight:10},{F4:/JSON parsing failed after XHR fetch/,weight:10},{F4:/Retrying OnePlatform request/,weight:10},{F4:/CSN Missing or undefined during playback association/,weight:100},{F4:/Non-recoverable error. Do not retry./,weight:0},{F4:/Internal Error. Retry with an exponential backoff./,weight:0},{F4:/API disabled by application./,weight:0}],w5:[{callback:pDt,weight:500}]};var lw4=/[&\?]action_proxy=1/,iUR=/[&\?]token=([\w-])/,nf5=/[&\?]video_id=([\w-])/,$G$=/[&\?]index=([\d-])/,rzY=/[&\?]m_pos_ms=([\d-])/,ZUQ=/[&\?]vvt=([\w-]*)/,yzx="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),jDI="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),EfY={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: x))):this.api.X().G("enable_adb_handling_in_sabr")&&k==="BROWSER_OR_EXTENSION_ERROR"&&!U.j?(U=U.hostLanguage,x="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",U&&(x=g.AS(x,{hl:U})),this.sF(dj(this,"BROWSER_OR_EXTENSION_ERROR",x))):this.sF(g.PF(x.errorMessage)):this.sF(dj(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(x=U.hostLanguage,k="//support.google.com/youtube/?p=player_error1",x&&(k=g.AS(k, equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: x.details.rc!=="429"?x.errorCode==="ump.spsrejectfailure"&&(m="HTML5_SPS_UMP_STATUS_REJECTED"):(m="TOO_MANY_REQUESTS",F="6");this.v$.jj(x.errorCode,x.severity,m,n$(x.details),F)}else this.v$.publish("nonfatalerror",x),U=/^pp/.test(this.videoData.clientPlaybackNonce),this.fN(x.errorCode,x.details),U&&x.errorCode==="manifest.net.connect"&&(x="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.j4)(),lg(x,"manifest",function(f){u.j=!0;u.A5("pathprobe",f)},function(f){u.fN(f.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: x_b=function(x,u){if(!x.S["0"]){var k=new L$("0","fakesb",{video:new vr(0,0,0,void 0,void 0,"auto")});x.S["0"]=u?new Ty(new g.zC("http://www.youtube.com/videoplayback"),k,"fake"):new Vh(new g.zC("http://www.youtube.com/videoplayback"),k,new nJ(0,0),new nJ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_81.1.dr	String found in binary or memory: y0.prototype.logTrace=function(x){this.encoder.reset();this.encoder.add(1);this.encoder.add(x.resources.length);for(var u=g.w(x.resources),k=u.next();!k.done;k=u.next()){k=k.value.replace("https://www.youtube.com/s/","");this.encoder.add(k.length);for(var U=0;U<k.length;U++)this.encoder.add(k.charCodeAt(U))}this.encoder.add(x.frames.length);u=g.w(x.frames);for(k=u.next();!k.done;k=u.next()){k=k.value;this.encoder.add(k.name.length);for(U=0;U<k.name.length;U++)this.encoder.add(k.name.charCodeAt(U)); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: trezor-io-start-r---starting-auth.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /log?hasfast=true&authuser=0&format=json HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 1099sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_81.1.dr, chromecache_99.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_85.1.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_87.1.dr, chromecache_95.1.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_81.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_81.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_81.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_81.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_81.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_81.1.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_81.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-10
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-50
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-80
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.we
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/669b5e317679d86ba250375c/js/webflow.4e8135d87.js
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/favicon.ico
Source: chromecache_83.1.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_83.1.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375
Source: chromecache_80.1.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/static/youtube-placeholder.2b05e7d68d.svg
Source: chromecache_81.1.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_85.1.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_81.1.dr, chromecache_99.1.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_81.1.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_81.1.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_81.1.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_99.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_81.1.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_81.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_81.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_81.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_81.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_81.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_81.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_81.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_81.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_81.1.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_83.1.dr	String found in binary or memory: https://webflow.com
Source: chromecache_81.1.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_94.1.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_81.1.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_81.1.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_83.1.dr	String found in binary or memory: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0
Source: chromecache_81.1.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_81.1.dr	String found in binary or memory: https://www.youtube.com/s/
Source: chromecache_81.1.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_81.1.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_81.1.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_81.1.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 59647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59668
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59671
Source: unknown	Network traffic detected: HTTP traffic on port 59682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59672
Source: unknown	Network traffic detected: HTTP traffic on port 59679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59648 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59679
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59642
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59685
Source: unknown	Network traffic detected: HTTP traffic on port 59662 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59644
Source: unknown	Network traffic detected: HTTP traffic on port 59683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59681
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59683
Source: unknown	Network traffic detected: HTTP traffic on port 59666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59668 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59649
Source: unknown	Network traffic detected: HTTP traffic on port 59702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59655 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59648
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59647
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59653
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59652
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59655
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59654
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59651
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59650
Source: unknown	Network traffic detected: HTTP traffic on port 59642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 59654 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59663
Source: unknown	Network traffic detected: HTTP traffic on port 59685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59666
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59665
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59660
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59662
Source: unknown	Network traffic detected: HTTP traffic on port 59643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59681 -> 443

Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.7:59639 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.7:59640 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.7:59641 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59642 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59643 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.7:59644 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.144:443 -> 192.168.2.7:59647 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.46:443 -> 192.168.2.7:59648 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.222.232.39:443 -> 192.168.2.7:59650 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.86:443 -> 192.168.2.7:59652 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.7:59660 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.166:443 -> 192.168.2.7:59663 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.98:443 -> 192.168.2.7:59662 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.228:443 -> 192.168.2.7:59666 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.129:443 -> 192.168.2.7:59668 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.246:443 -> 192.168.2.7:59669 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.65:443 -> 192.168.2.7:59671 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.78:443 -> 192.168.2.7:59675 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.78:443 -> 192.168.2.7:59674 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.162:443 -> 192.168.2.7:59683 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.7:59686 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5308_453538106

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5308_453538106

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@26/50@47/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-io-start-r---starting-auth.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5640 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5720 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5640 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5720 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://trezor-io-start-r---starting-auth.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label	Link
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375c	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	52.222.232.144	true	false	high
trezor-io-start-r---starting-auth.webflow.io	104.18.36.248	true	true	unknown
youtube-ui.l.google.com	142.250.186.46	true	false	high
googleads.g.doubleclick.net	142.250.185.98	true	false	high
play.google.com	216.58.206.78	true	false	high
i.ytimg.com	142.250.186.86	true	false	high
beacons-handoff.gcp.gvt2.com	142.251.143.67	true	false	high
cdn.prod.website-files.com	104.18.160.117	true	false	high
photos-ugc.l.googleusercontent.com	142.250.186.129	true	false	high
gce-beacons.gcp.gvt2.com	35.199.128.3	true	false	high
www.google.com	142.250.184.228	true	false	high
static.doubleclick.net	142.250.186.166	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://trezor-io-start-r---starting-auth.webflow.io/	true		unknown
https://www.youtube.com/s/player/7d1d50a6/player_ias.vflset/en_US/embed.js	false		high
https://yt3.ggpht.com/ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj	false		high
https://trezor-io-start-r---starting-auth.webflow.io/#	true		unknown
https://cdn.prod.website-files.com/img/favicon.ico	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375c	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?p0bFag	false		high
https://d3e54v103j8qbb.cloudfront.net/static/youtube-placeholder.2b05e7d68d.svg	false		high
https://www.youtube.com/s/player/7d1d50a6/www-embed-player.vflset/www-embed-player.js	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.youtube.com/s/player/7d1d50a6/player_ias.vflset/en_US/remote.js	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css	false		high
https://i.ytimg.com/vi_webp/HuVH_9hnUu8/maxresdefault.webp	false		high
https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0	false		high
https://static.doubleclick.net/instream/ad_status.js	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png	false		high
https://googleads.g.doubleclick.net/pagead/id	false		high
https://www.youtube.com/s/player/7d1d50a6/player_ias.vflset/en_US/base.js	false		high
https://play.google.com/log?hasfast=true&authuser=0&format=json	false		high
https://www.youtube.com/youtubei/v1/log_event?alt=json	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/js/webflow.4e8135d87.js	false		high
https://www.google.com/js/th/_t1GFu6ymA48_djLKSLwGyGpFUFJ2k6dr6Vox9QB4jk.js	false		high
https://www.youtube.com/s/player/7d1d50a6/www-player.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_81.1.dr	false		high
http://underscorejs.org	chromecache_85.1.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_81.1.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_81.1.dr	false		high
https://angular.dev/license	chromecache_81.1.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_81.1.dr	false		high
https://webflow.com	chromecache_83.1.dr	false		high
https://youtu.be/	chromecache_81.1.dr	false		high
https://www.youtube.com/s/	chromecache_81.1.dr	false		high
https://admin.youtube.com	chromecache_81.1.dr	false		high
https://www.youtube.com/api/drm/fps?ek=	chromecache_81.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_81.1.dr	false		high
https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i	chromecache_81.1.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_81.1.dr, chromecache_99.1.dr	false		high
https://github.com/bkwld/tram	chromecache_85.1.dr	false		high
https://yurt.corp.google.com	chromecache_81.1.dr	false		high
https://viacon.corp.google.com	chromecache_81.1.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware	chromecache_81.1.dr	false		high
https://redux.js.org/api/store#subscribelistener	chromecache_81.1.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_81.1.dr	false		high
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_81.1.dr	false		high
https://music.youtube.com	chromecache_81.1.dr	false		high
http://www.bohemiancoding.com/sketch	chromecache_87.1.dr, chromecache_95.1.dr	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-50	chromecache_83.1.dr	false		high
https://docs.google.com/get_video_info	chromecache_81.1.dr	false		high
https://support.google.com/youtube/answer/6276924	chromecache_81.1.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_83.1.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_81.1.dr	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-10	chromecache_83.1.dr	false		high
https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0	chromecache_83.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_99.1.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_81.1.dr, chromecache_99.1.dr	false		high
http://www.youtube.com/videoplayback	chromecache_81.1.dr	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.we	chromecache_83.1.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375	chromecache_83.1.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/drm/2012/10/10	chromecache_81.1.dr	false		high
https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS-p-80	chromecache_83.1.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_81.1.dr	false		high
https://support.google.com/youtube/?p=noaudio	chromecache_81.1.dr	false		high
https://i.ytimg.com/vi/	chromecache_81.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	trezor-io-start-r---starting-auth.webflow.io	United States	13335	CLOUDFLARENETUS	true
142.250.186.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
52.222.232.144	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
52.222.232.39	unknown	United States	16509	AMAZON-02US	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
142.250.186.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.181.246	unknown	United States	15169	GOOGLEUS	false
142.250.186.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.86	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1642817
Start date and time:	2025-03-19 11:28:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://trezor-io-start-r---starting-auth.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@26/50@47/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 173.194.76.84, 216.58.212.142, 74.125.11.10, 142.250.184.195, 142.250.185.170, 216.58.206.42, 142.250.185.234, 142.250.185.74, 142.250.186.138, 142.250.185.202, 142.250.181.234, 142.250.185.106, 172.217.23.106, 142.250.186.42, 142.250.74.202, 142.250.186.74, 216.58.212.138, 142.250.185.138, 172.217.16.202, 142.250.186.106, 216.58.212.170, 142.250.184.202, 172.217.18.10, 142.250.186.170, 142.250.184.234, 216.58.206.74, 142.250.186.131, 199.232.214.172, 172.217.133.233, 172.217.18.3, 142.250.186.142, 52.149.20.212, 23.199.214.10
Excluded domains from analysis (whitelisted): r4---sn-4g5edndr.gvt1.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, jnn-pa.googleapis.com, r5---sn-4g5lznls.gvt1.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, r4.sn-4g5edndr.gvt1.com, clients.l.google.com, www.gstatic.com, c.pki.goog, r5.sn-4g5lznls.gvt1.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://trezor-io-start-r---starting-auth.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	425104
Entropy (8bit):	5.186782075298884
Encrypted:	false
SSDEEP:	1536:hIda0a+vpMGTtI2gVwMMg7UCBYgILvPptpP8p7M6oy2+MOn4yGOx5juDEnXrDJck:V0a+vm2gOMMg7UCBYfYoy9ufXCEyGoMm
MD5:	27D62564D86980214F83DBE7A16F6F74
SHA1:	B96DD0E4C949CB12D7BB933D63A972130AFA717A
SHA-256:	CEB0BCC10436D0AE1E939F7E0A39214E47956490953850D2941F3965DA5D99F5
SHA-512:	7B9E8B42CE8DD1D23BB35C08A33B9EA2198FFE7C33ABE3678682D3EBB697C680D39851815824EE791A7C488717CAC01A6107B7FDD13FAB92E927D2F983C5836A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/7d1d50a6/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 11:29:42.259573936 CET	53	62468	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:42.270306110 CET	53	61118	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:42.572072983 CET	53	55812	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:46.624877930 CET	53	53229	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:46.869131088 CET	61920	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:46.869293928 CET	63259	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:46.875889063 CET	53	61920	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:46.875917912 CET	53	63259	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.011470079 CET	64642	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.011650085 CET	63297	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.023466110 CET	53	64642	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.025423050 CET	53	63297	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.185839891 CET	61057	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.186119080 CET	54760	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.186552048 CET	60500	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.186750889 CET	57026	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.195732117 CET	53	61057	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.196156025 CET	53	54760	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.196906090 CET	53	60500	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.198384047 CET	53	57026	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.339600086 CET	51167	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.339803934 CET	51684	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.346586943 CET	53	51167	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.346612930 CET	53	51684	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.444394112 CET	54257	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.444672108 CET	56732	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.451136112 CET	53	54257	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.451513052 CET	53	56732	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.555232048 CET	56858	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.555551052 CET	54072	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.562266111 CET	53	56858	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.562421083 CET	53	54072	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.908005953 CET	55864	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.908180952 CET	61993	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:48.915769100 CET	53	55864	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:48.916353941 CET	53	61993	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:49.967076063 CET	50407	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:49.967191935 CET	55683	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:49.973351002 CET	59695	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:49.973484039 CET	51569	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:49.973613977 CET	53	55683	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:49.973855019 CET	53	50407	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:49.979954004 CET	53	51569	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:49.980182886 CET	53	59695	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:49.989413023 CET	53	63570	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.001954079 CET	53192	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.002099991 CET	56354	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.008661032 CET	53	56354	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.008915901 CET	53	53192	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.225660086 CET	51503	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.225809097 CET	58816	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.232825994 CET	53	58816	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.232844114 CET	53	51503	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.310305119 CET	58388	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.310446978 CET	51713	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.317174911 CET	53	51713	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.317488909 CET	53	58388	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.318085909 CET	53	63785	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.325315952 CET	61099	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.325454950 CET	64334	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:50.332272053 CET	53	64334	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:50.332623005 CET	53	61099	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:51.104495049 CET	57174	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:51.104679108 CET	52061	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:51.111129045 CET	53	57174	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:51.111407042 CET	53	52061	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:51.128838062 CET	53	60785	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:55.083954096 CET	56474	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:55.084264994 CET	58595	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:55.090873957 CET	53	56474	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:55.091298103 CET	53	58595	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:55.952076912 CET	63785	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:55.952202082 CET	53022	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:29:55.959940910 CET	53	63785	1.1.1.1	192.168.2.7
Mar 19, 2025 11:29:55.959978104 CET	53	53022	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:42.352397919 CET	53	56486	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:44.799896002 CET	53	55858	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:50.891119003 CET	58146	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:50.891288996 CET	58116	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:50.891722918 CET	50789	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:50.891854048 CET	60373	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:50.898073912 CET	53	58146	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:50.898107052 CET	53	58116	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:50.898621082 CET	53	60373	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:50.898633003 CET	53	50789	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:51.914992094 CET	56950	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:51.915519953 CET	61812	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:51.915709972 CET	58346	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:51.915828943 CET	50869	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:51.921847105 CET	53	56950	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:51.922373056 CET	53	50869	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:51.922667980 CET	53	58346	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:51.923254967 CET	53	61812	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:53.953746080 CET	60873	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:53.961128950 CET	53	60873	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:54.946208000 CET	60873	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:54.953263044 CET	53	60873	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:55.946403027 CET	60873	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:55.953311920 CET	53	60873	1.1.1.1	192.168.2.7
Mar 19, 2025 11:30:57.961371899 CET	60873	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:30:57.970247984 CET	53	60873	1.1.1.1	192.168.2.7
Mar 19, 2025 11:31:01.963821888 CET	60873	53	192.168.2.7	1.1.1.1
Mar 19, 2025 11:31:01.971081972 CET	53	60873	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
Mar 19, 2025 11:29:42.342087984 CET	411	OUT	GET /time/1/current?cup2key=8:MCghUUi46UXLyuLE4BuzewdqrNR5r2h8iYPae5ogZZE&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1 Host: clients2.google.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate
Mar 19, 2025 11:29:42.365636110 CET	1155	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site X-Content-Type-Options: nosniff x-cup-server-proof: 304402203ca66e71dc45e170219de807cb62a5e66dbd189978aacc8201727ffbe96b23a40220432ab60cd1878cced226e6be98bd6f1eb59470451ad0c849c4ceeac59c726e6f:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ETag: W/"304402203ca66e71dc45e170219de807cb62a5e66dbd189978aacc8201727ffbe96b23a40220432ab60cd1878cced226e6be98bd6f1eb59470451ad0c849c4ceeac59c726e6f:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 19 Mar 2025 10:29:42 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Data Raw: 36 30 0d 0a 1f 8b 08 00 00 00 00 00 02 ff d2 8c ad 55 e7 aa 56 4a 2e 2d 2a 4a cd 2b 89 2f c9 cc 4d 8d cf cd cc c9 c9 2c 56 b2 32 34 37 31 32 b6 30 30 b4 30 32 36 35 d3 51 2a 4e 2d 2a 4b 2d 8a cf cb cf 4b 4e 05 4a ea 99 1b 19 19 59 1a 9b 58 98 19 98 1b 9b 5a 98 19 b9 ea 1a 9a 5b d4 02 00 00 00 ff ff 0d 0a 61 0d 0a 03 00 59 a3 24 31 51 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 60UVJ.-J+/M,V24712000265QN-K-KNJYXZ[aY$1Q0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	694	OUT	GET / HTTP/1.1 Host: trezor-io-start-r---starting-auth.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 922c4a6fa9f7363c-FRA CF-Cache-Status: HIT Age: 141163 Last-Modified: Fri, 14 Mar 2025 07:01:19 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: trezor-io-start-r---starting-auth.webflow.io 669b5e317679d86ba250375c pageId:669b5e317679d86ba2503763 x-lambda-id: 327c48cc-b1f4-46e7-9e18-8eae43b994d9 vary: Accept-Encoding Set-Cookie: _cfuvid=x5REPNqKgCs8ouRGmG5ZkUeGrLbOLTj3.OsMMPx6U1I-1742380188151-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:48 UTC	540	IN	Data Raw: 64 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 53 61 74 20 4a 75 6c 20 32 30 20 32 30 32 34 20 30 36 3a 35 32 3a 32 31 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 74 72 65 7a 6f 72 2d 69 6f 2d 73 74 61 72 74 2d 72 2d 2d 2d 73 74 61 72 74 69 6e 67 2d 61 75 74 68 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 36 39 62 Data Ascii: d10<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Sat Jul 20 2024 06:52:21 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="trezor-io-start-r---starting-auth.webflow.io" data-wf-page="669b
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 75 70 20 67 75 69 64 65 73 2e 20 47 65 74 20 73 74 61 72 74 65 64 20 6e 6f 77 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 54 72 65 7a 6f 72 2e 69 6f 2f 53 74 61 72 74 c2 ae 20 2d 20 53 74 61 72 74 69 6e 67 20 55 70 20 59 6f 75 72 20 44 65 76 69 63 65 c2 ae 22 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 53 74 61 72 74 20 75 73 69 6e 67 20 54 72 65 7a 6f 72 2e 69 6f 20 77 69 74 68 20 76 65 72 73 69 6f 6e 20 32 32 2e 39 2e 33 2e 20 53 65 63 75 72 65 20 79 6f 75 72 20 64 69 67 69 74 61 6c 20 61 73 73 65 74 73 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 65 61 73 79 2d 74 6f 2d 66 6f 6c 6c 6f 77 20 73 65 74 75 70 20 67 75 69 64 65 73 Data Ascii: up guides. Get started now" name="description"/><meta content="Trezor.io/Start - Starting Up Your Device" property="og:title"/><meta content="Start using Trezor.io with version 22.9.3. Secure your digital assets and explore easy-to-follow setup guides
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 3e 3c 61 20 68 72 65 66 3d 22 23 22 20 63 6c 61 73 73 3d 22 77 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 39 62 35 65 33 31 37 36 37 39 64 38 36 62 61 32 35 30 33 37 35 63 2f 36 36 39 62 35 65 36 66 37 36 37 39 64 38 36 62 61 32 35 30 35 37 34 64 5f 74 72 65 7a 6f 72 2d 4c 53 53 2e 70 6e 67 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 73 69 7a 65 73 3d 22 31 30 30 76 77 22 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 36 39 62 35 65 33 31 37 36 37 39 64 38 36 62 61 32 35 30 33 37 35 63 2f 36 36 39 62 35 65 36 66 37 36 37 Data Ascii: ><a href="#" class="w-inline-block"><img src="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png" loading="lazy" sizes="100vw" srcset="https://cdn.prod.website-files.com/669b5e317679d86ba250375c/669b5e6f767
2025-03-19 10:29:48 UTC	73	IN	Data Raw: 6a 73 2f 77 65 62 66 6c 6f 77 2e 34 65 38 31 33 35 64 38 37 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: js/webflow.4e8135d87.js" type="text/javascript"></script></body></html>
2025-03-19 10:29:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	693	OUT	GET /669b5e317679d86ba250375c/css/trezor-io-start-r---starting-auth.webflow.ec67a8185.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	632	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:48 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: r7oRT9yLCKpmxgzKNUkLnOuP4xihqgp3TN74sNSAYy03m0urTh0h9YHT3mmUfLgsFBP4qtYmM3M= x-amz-request-id: HYGE0MMGNW3WXMQC Last-Modified: Sat, 20 Jul 2024 06:52:22 GMT ETag: W/"aca216800f31c364e1b7cc1f7a8e5f8f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: LjWSq_mPOucDWIJS5uXACcr_2BKYk1Ja CF-Cache-Status: HIT Age: 139760 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4a70ce1635f0-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:48 UTC	737	IN	Data Raw: 37 64 33 38 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d38html { -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 20 38 30 25 3b 0a 7d 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 Data Ascii: 80%;}sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}hr { box-sizing: content-box;
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 41 41 45 41 41 41 41 4c 41 49 41 41 41 77 41 77 54 31 4d 76 4d 67 38 53 42 69 55 41 41 41 43 38 41 41 41 41 59 47 4e 74 59 58 44 70 50 2b 61 34 41 41 41 42 48 41 41 41 41 46 78 6e 59 58 4e 77 41 41 41 41 45 41 41 41 41 58 67 41 41 41 41 49 5a 32 78 35 5a 6d 68 53 32 58 45 41 41 41 47 41 41 41 41 44 48 47 68 6c 59 57 51 Data Ascii: er-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8;base64,AAEAAAALAIAAAwAwT1MvMg8SBiUAAAC8AAAAYGNtYXDpP+a4AAABHAAAAFxnYXNwAAAAEAAAAXgAAAAIZ2x5ZmhS2XEAAAGAAAADHGhlYWQ
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 52 59 58 48 67 45 58 46 68 55 55 42 77 34 42 42 77 59 48 49 78 55 68 49 69 63 75 41 53 63 6d 4e 54 51 33 50 67 45 33 4e 6a 4d 78 4f 41 45 78 4e 44 63 2b 41 54 63 32 4d 7a 49 58 48 67 45 58 46 68 63 56 41 54 4d 4a 41 54 4d 56 4d 7a 55 45 6a 44 38 33 4e 6c 41 58 46 78 59 58 54 6a 55 31 50 51 4c 38 6b 7a 30 31 4e 6b 38 58 46 78 63 58 54 7a 59 31 Data Ascii: iEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAARYXHgEXFhUUBw4BBwYHIxUhIicuAScmNTQ3PgE3NjMxOAExNDc+ATc2MzIXHgEXFhcVATMJATMVMzUEjD83NlAXFxYXTjU1PQL8kz01Nk8XFxcXTzY1
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 67 72 61 79 73 63 61 6c 65 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 Data Ascii: -"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; font-style: normal; font-weight: normal; line-height: 1; font-family: webflow-ic
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 6d 6c 5b 64 61 74 61 2d 77 2d 64 79 6e 70 61 67 65 5d 20 5b 64 61 74 61 2d 77 2d 63 6c 6f 61 6b 5d 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 2d 63 6f 64 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 75 6e 73 65 74 3b 0a 7d 0a 0a 70 72 65 2e 77 2d 63 6f 64 65 2d 62 6c Data Ascii: er-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}html[data-w-dynpage] [data-w-cloak] { color: #0000 !important;}.w-code-block { margin: unset;}pre.w-code-bl
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 23 30 30 30 30 30 30 31 61 2c 20 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 61 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 Data Ascii: x-shadow: 0 0 0 1px #0000001a, 0 1px 3px #0000001a; visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !important; opacity: 1 !important; background-color: #fff !important; border-radius: 3px !important; width: au
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 7d 0a 0a 66 69 67 63 61 70 74 69 6f 6e 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 7d 0a 0a 75 6c 2c 20 6f 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 34 30 70 78 3b 0a 7d 0a 0a 2e 77 2d 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 20 7b 0a 20 20 70 61 64 Data Ascii: x; padding: 10px 20px; font-size: 18px; line-height: 22px;}figure { margin: 0 0 10px;}figcaption { text-align: center; margin-top: 5px;}ul, ol { margin-top: 0; margin-bottom: 10px; padding-left: 40px;}.w-list-unstyled { pad
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 66 Data Ascii: -placeholder, .w-select:-moz-placeholder { color: #999;}.w-input::-moz-placeholder, .w-select::-moz-placeholder { color: #999; opacity: 1;}.w-input::-webkit-input-placeholder, .w-select::-webkit-input-placeholder { color: #999;}.w-input:f
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 69 6e 70 75 74 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 30 30 3b 0a 20 20 77 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 64 65 66 61 75 6c 74 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 75 70 6c 6f 61 64 69 6e 67 2c 20 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 73 75 63 63 65 73 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 65 72 72 6f 72 20 7b Data Ascii: input { opacity: 0; z-index: -100; width: .1px; height: .1px; position: absolute; overflow: hidden;}.w-file-upload-default, .w-file-upload-uploading, .w-file-upload-success { color: #333; display: inline-block;}.w-file-upload-error {

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	643	OUT	GET /669b5e317679d86ba250375c/js/webflow.4e8135d87.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	659	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:48 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: dQB+w5PiwIU95NzEzZA07wt6W7C3ycOqOeqQwHQn+N20jiR7RVxa6kby+qGcjvJOs5andPsdB4v2DDCRZGLgPpOKEX6Ok4A5 x-amz-request-id: 6DM8X2ZSS09HYRYZ Last-Modified: Sat, 20 Jul 2024 06:52:22 GMT ETag: W/"48bd2b847a93ac70ad46484a35db1786" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, immutable x-amz-version-id: cwpVvy.BbF3VYusJU_F8yCyqFfXmgChn CF-Cache-Status: HIT Age: 139760 Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4a710ecc9742-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:48 UTC	710	IN	Data Raw: 37 64 31 64 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d1d/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 74 2c 6e 2c 69 29 7b 42 28 22 55 6e 69 74 73 20 64 6f 20 6e 6f 74 20 6d 61 74 63 68 20 5b 22 2b 74 2b 22 5d 3a 20 22 2b 6e 2b 22 2c 20 22 2b 69 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e Data Ascii: t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function I(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&win
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 74 2f 72 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d Data Ascii: ,n,i,r){return it/r+n}],"ease-in-quad":["cubic-bezier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)*(t-2)+n}],"ease-in-out-quad":["cubic-
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 29 2a 74 2a 74 2a 74 2a 74 2b 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 37 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 Data Ascii: )tttt+2)+n}],"ease-in-sine":["cubic-bezier(0.470, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-ou
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 69 2a 28 28 74 3d 74 2f 72 2d 31 29 2a 74 2a 28 28 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a Data Ascii: s){return s===void 0&&(s=1.70158),i((t=t/r-1)t((s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 48 2e 6f 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 7c 7c 48 2e 6d 73 52 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 48 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 48 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 48 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e Data Ascii: H.oRequestAnimationFrame\|\|H.msRequestAnimationFrame;return t&&h.bind?t.bind(H):function(n){H.setTimeout(n,16)}}(),ct=y.now=function(){var t=H.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+n
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 65 3f 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 7d 29 3a 28 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 71 74 28 7b 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f Data Ascii: e?this.queue.push({options:w}):(this.timer=new qt({duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() o
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 2c 74 74 2c 73 74 29 7d 59 26 26 6e 74 26 26 59 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 77 29 7b 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b Data Ascii: l(this,tt,st)}Y&&nt&&Y.call(this,nt)}function j(w){w.stop()}function At(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 65 61 73 65 22 2c 64 65 6c 61 79 3a 30 7d 3b 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 2c 78 2c 4b 29 7b 74 68 69 73 2e 24 65 6c 3d 6f 2c 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 70 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 49 28 70 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 70 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 49 28 70 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 Data Ascii: ease",delay:0};t.init=function(o,p,x,K){this.$el=o,this.el=o[0];var c=p[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=I(p[1],this.duration,s.duration),this.ease=i(p[2],this.ease,s.ease),this.delay=I(p[3],this.delay,s.delay),t
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 68 69 73 2e 61 63 74 69 76 65 7c 7c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 29 26 26 28 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 6e 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 70 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 Data Ascii: his.active\|\|this.nextStyle)&&(this.active=!1,this.nextStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,p){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	686	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=669b5e317679d86ba250375c HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://trezor-io-start-r---starting-auth.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	551	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 00:14:30 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 d9bcd0a29e17b9290f8c9f1617335954.cloudfront.net (CloudFront) Age: 36920 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: gbxI9_iRc7H8X1iQvgiQCxScw41m15FIggfpYM0sO7Fl8SH3f3a4aQ==
2025-03-19 10:29:48 UTC	15833	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-19 10:29:48 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 Data Ascii: ntNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&
2025-03-19 10:29:48 UTC	16384	IN	Data Raw: 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 6d 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 Data Ascii: l?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,m(r)\|\|(a=!0),l&&(a
2025-03-19 10:29:48 UTC	16384	IN	Data Raw: 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 79 65 28 76 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: ibute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&(n&&ie(r)&&ye(ve(r,"script")),r.parentNode.removeChild(r));return
2025-03-19 10:29:48 UTC	16384	IN	Data Raw: 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 72 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 72 74 2e 76 61 6c 75 65 2c 79 2e 6f Data Ascii: peeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.createElement("option")),rt.type="checkbox",y.checkOn=""!==rt.value,y.o

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	681	OUT	GET /static/youtube-placeholder.2b05e7d68d.svg HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://cdn.prod.website-files.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	541	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1284 Connection: close Last-Modified: Fri, 28 Sep 2018 22:50:23 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 01:48:27 GMT Cache-Control: max-age=84600, must-revalidate Etag: "2b05e7d68db45fbb529749f58a6ec233" Via: 1.1 f2c65205154aaf89a2c7bbc8fe8fdaba.cloudfront.net (CloudFront) Age: 31282 Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 99Kj4Lj_yE42RfeyqGjPe863QrA3cSjOGnkiAIbqhDpeyhEdLzlAsQ==
2025-03-19 10:29:48 UTC	1284	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 35 36 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 31 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 30 20 33 31 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 31 2e 32 20 28 35 37 35 31 39 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="560px" height="315px" viewBox="0 0 560 315" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 51.2 (57519) - http://www.bohemiancoding

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	719	OUT	GET /669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	721	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:48 GMT Content-Type: image/png Content-Length: 909824 Connection: close x-amz-id-2: D3OBguaEJs5dp0Ehd/myPgphS3tDie1UlJzp2Iy8CMMAF8g1qDysxS83JxFaHl2LTlBvV7FurZvjvMVemWYh16cCpv7h+4RWshx6bS/QyCU= x-amz-request-id: JF5M68Q8HAM7HGP6 Last-Modified: Sat, 20 Jul 2024 06:51:29 GMT ETag: "8829b4cf7c82f1e884defd333402868f" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: aYYMXPecvINUlvuVBCjqN7RD12XBtay1 CF-Cache-Status: HIT Age: 135387 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4a71bad98f2d-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:48 UTC	648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 56 00 00 16 25 08 02 00 00 00 22 db 8c 79 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec dd 79 3c 54 dd 1b 00 f0 33 8b 31 f6 5d b6 ec b2 45 96 88 50 d1 a6 85 52 d1 5e b4 ef 69 d7 fa d6 db aa 0d 49 fb a2 52 69 2f 6d 4a 25 69 4f b6 ca 2e 84 42 f6 6d 30 66 e6 f7 c7 e9 bd ef fc 06 83 90 bc 3d df 8f 3f 66 ee bd 73 ee 99 3b f7 8e 39 cf 7d ce 39 24 b4 dd 09 01 00 00 00 00 00 00 00 00 e0 bf 8e dc d9 15 00 00 00 00 00 00 00 00 00 c0 af 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 Data Ascii: PNGIHDRV%"ysRGB IDATxy<T31]EPR^iIRi/mJ%iO.Bm0f=?fs;9}9$!!!!!!!
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 70 cc 67 d0 4c 05 11 49 ee 0d 96 5a 38 31 56 5f e5 ac 0b 91 14 14 41 08 d9 aa e8 7f f7 0c e2 ac 0b 19 dd a3 0f 42 28 c8 79 79 90 f3 f2 0e 38 06 00 00 d0 51 a8 9d 5d 01 00 00 68 29 12 42 97 c7 ac 11 a5 d1 c7 df f0 4e 29 fe aa 22 26 b3 c0 7c 78 d4 8c fd fd ce ad 7d f7 2d 15 21 a4 1e 30 ab 43 2b c0 5d be a8 00 dd 55 df d6 f4 e4 d2 d8 fc 0c 84 50 60 fc e3 c0 f8 c7 ed bb 3b 3d 19 e5 b0 49 5b 5f e7 26 4f b8 b9 fb d3 f7 2f f2 c2 92 d3 8c 1d 9e 4d dd b9 e8 c1 d1 33 1f 9e b4 ef be da 51 66 59 01 69 87 73 fb 96 e9 3b 78 96 a4 a0 88 fb 9d 46 da f3 7f a0 27 99 f1 62 34 21 d3 6e 9a 51 79 69 78 89 4d 77 fd a4 c2 9c f8 82 4c 07 35 e3 8f df bf e0 85 a2 02 74 93 6e 9a 7f 47 06 b7 7b 05 46 f7 e8 e3 3b 78 f6 4f 5f 6e bb 1d dc dd 8d 07 ae 7b 7a 76 ca ad 7d 35 f5 4c 53 05 4d Data Ascii: pgLIZ81V_AB(yy8Q]h)BN)"&\|x}-!0C+]UP`;=I[_&O/M3QfYis;xF'b4!nQyixMwL5tnG{F;xO_n{zv}5LSM
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 5d 77 83 e8 bc f4 b2 da 6a 84 10 8d 4c fd bb ff 64 37 7d 5b 05 51 a9 cc d2 fc 9d 2f af 9e fb 18 de ec c1 99 6d 32 64 b5 f5 58 15 31 99 d4 e2 af 47 63 42 8f 44 87 b2 38 ec 23 c3 16 cc 35 75 44 08 71 d6 85 3c f8 1c ed 18 bc d9 5c 41 6b ef c0 19 e6 8a da 0c 66 6d c4 97 8f ab 9f 04 66 96 15 34 55 e6 7a 1b b7 3d af af 27 16 e5 f0 7e 10 77 0f 70 3f 6d f4 20 34 dc 75 4b 3e 62 77 e3 81 0b cc 87 17 33 2a 06 6b 98 bc fb 96 6a 15 b8 aa d1 c2 a9 24 32 f3 ff fb f2 e4 55 96 28 1e 98 8e 10 ea 2e 26 eb 3b 64 d6 10 0d 53 36 87 73 37 2d 6a f9 a3 13 79 55 a5 b8 cf 0b cf 79 52 c3 62 36 5b 9f 25 bd 47 6e b2 9b 68 78 6c 61 7e 55 29 42 68 9c 5e df 33 4e cb 7a 9d 58 92 56 f2 2d 70 e4 d2 8c b2 7c 39 61 89 f1 fa 76 a2 34 fa 8b 9c c4 45 0f 8e e0 eb 88 bb 1a d5 cc da c8 ec 84 75 4f Data Ascii: ]wjLd7}[Q/m2dX1GcBD8#5uDq<\Akfmf4Uz='~wp?m 4uK>bw3*kj$2U(.&;dS6s7-jyUyRb6[%Gnhxla~U)Bh^3NzXV-p\|9av4EuO
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: d7 5f 5c 50 d8 d3 d2 79 ce bd 83 9c a6 0b 77 50 33 6e f4 6c ac a8 63 84 7e 8e 1e a8 6e 9c 57 55 4a da e1 1c 97 9f e1 71 c7 8f b4 c3 b9 b4 b6 8a bb e6 d0 fe 07 00 74 51 10 02 00 00 74 19 55 cc da 81 e7 d7 8b d0 e8 69 0b 8e 65 2c 3c 7e 7d ec da 45 e6 23 64 85 c4 9a da fe 56 ca 9b d3 f1 8f 2b ea 18 f7 d2 df 3f ca 88 4b 2c cc 39 1c 7d bf a2 8e f1 28 33 ee 5a d2 cb 71 fa 36 c4 96 02 64 ea f8 1b bb 23 b3 13 ca 6a ab cf 7d 0c ff eb d9 85 7d 7c 07 51 e3 6f 8c 6e 5f 61 01 c1 05 a1 47 32 cb 0a 2a ea 18 57 92 5e 6c 7f 71 79 b3 dd 44 84 90 b2 a8 b4 a7 a5 f3 e4 5b fb 22 be 7c 2c ab ad be 98 f0 6c f7 ab eb 8d 16 22 2b 2c 5e 50 55 da e8 aa bc aa 52 19 ae 77 3d e7 de c1 e7 39 89 15 75 8c b3 1f c2 2f 7e 7a 36 a3 d7 20 62 55 62 61 ce c2 07 47 be 56 16 67 95 7f 9f 7a 6b 3f Data Ascii: _\PywP3nlc~nWUJqtQtUie,<~}E#dV+?K,9}(3Zq6d#j}}\|Qon_aG2*W^lqyD["\|,l"+,^PURw=9u/~z6 bUbaGVgzk?
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: b6 00 99 82 13 10 f0 39 b3 6f d0 4c 7b 35 23 05 51 29 1c 67 39 19 1b 86 9a d6 47 a9 87 84 a0 48 c9 8a 8b 3c cb 65 85 c5 79 da 99 65 b5 d5 b7 53 df 5e 1f bb 2e e8 63 78 5c 7e c6 f3 9c 84 92 a6 07 c8 28 ac 2e 47 08 c9 0b 4b 10 7d b3 7d df 85 e0 51 d6 ba 8b c9 7e 59 7c aa 55 07 a1 e5 88 8f b2 25 85 af b6 1e db ab 9b 86 c9 89 25 ff f4 a7 30 e4 3e d5 11 42 b7 53 df 3a e9 58 36 2c bc a1 a6 12 c5 33 ca f2 57 3f 09 0c 76 59 5d 53 5f d7 f3 d8 22 ee db d4 4f b3 3e 70 df 48 bf 93 fa 6e 45 1f 17 5c 8d 5e dd 34 b8 43 0f 08 a1 62 c6 bf 59 42 3f f1 65 75 f1 d3 b3 f5 36 6e 7d 94 7a 70 7f 23 f1 b9 be 1e 65 c6 29 88 48 ea 48 29 e2 b3 fd 4c fc 93 f4 92 6f 1e bd 06 e1 2c 7d 4b a5 1e cb c3 78 3b 2e e1 d1 1f 56 5b 8d d1 96 56 22 5a fe 32 42 62 39 15 45 2d a9 e1 22 f3 11 4b 2d Data Ascii: 9oL{5#Q)g9GH<eyeS^.cx\~(.GK}}Q~Y\|U%%0>BS:X6,3W?vY]S_"O>pHnE\^4CbYB?eu6n}zp#e)HH)Lo,}Kx;.V[V"Z2Bb9E-"K-
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 57 11 93 b5 56 d6 25 96 f0 bf be 1e 7e 8e 19 a0 6a 64 db dd e0 5b 65 49 5a c9 37 46 7d dd ab 9c a4 01 aa 46 03 54 8d 1e 67 c6 b1 1b 04 16 cd 15 b5 e3 0b 32 6e a6 bc c1 dd 61 9a ba c4 1a b2 52 d2 bd 30 7a d5 c6 88 20 ee 09 50 f3 ab 4a 1f 7c 8e e6 ee fe 80 10 5a d4 7b e4 8d e4 57 dc a9 13 fe 43 e6 5e 4b 7a 19 f1 e5 63 c3 39 02 78 f6 b2 f7 f5 0d 4b a5 1e ee c6 03 79 96 ef b0 9f 56 c7 aa 3f db b2 b9 57 ab ea 6a ab ff 7f 04 04 00 00 f8 cd 41 08 00 00 d0 65 04 c6 3f 66 b2 59 97 5c 56 1b cb ab d3 29 02 f2 c2 12 1e c6 03 67 f6 1a cc 67 c0 e7 16 aa ac 63 9c 1f b5 d2 5a 59 57 9c 26 34 d1 a0 df d6 fe 53 56 3e 3a fd d3 a5 5d 4b 7a 19 f5 2d ed fa d8 75 3d e5 54 25 05 45 fc 86 cc 11 a3 09 1d 8f 79 88 f3 b7 0f bc bb 7d 7e d4 0a 1b 15 7d 31 9a 90 ab 9e cd 96 7e 93 1b 2d Data Ascii: WV%~jd[eIZ7F}FTg2naR0z PJ\|Z{WC^Kzc9xKyV?WjAe?fY\V)ggcZYW&4SV>:]Kz-u=T%Ey}~}1~-
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 9b 68 9e 3d ce 8c 1f 7a 71 d3 9e 81 1e fb 06 cd fc 5a 51 bc fb d5 75 dc 55 be a1 fc aa d2 84 c2 2f 3e 83 67 5d fc f4 8c 7b f9 b3 ec 4f bb ec a7 d7 b1 ea 5f 70 dd a9 9e 7b 2f e0 f0 b0 f9 d9 8b 4f 93 49 a4 b0 8c d8 c3 d1 f7 68 e4 66 6e aa 6f 8e bc 90 57 55 72 d8 71 81 a2 a8 54 42 61 f6 e8 2b db de fe d3 e0 7c 9d 9b 54 c4 a8 a8 f3 ba 81 e7 9c 73 be bc ed 2f bb 89 a7 46 2e 61 b2 59 6f 72 93 f1 3c 73 7b 07 7a 4c e9 69 4f 4c 93 c9 6d f9 a3 93 4f 32 e3 97 5a 38 f9 0c 9e 25 40 a6 66 96 e5 07 44 dd dd f7 e6 c6 e7 7f 52 c4 f9 1c 04 9e 5d f3 7f 0b 8d 6a aa f0 6e 22 92 e3 f4 6c 10 42 c4 d4 80 2c 0e 9b ba 73 74 41 75 99 c5 e9 e5 7e 43 66 a7 2d 38 c6 e6 70 42 d3 df 5b 9e 5a de 70 9a c6 46 dd 18 b7 9e 67 89 dd d9 35 43 35 cd c4 05 85 d6 86 9f c1 27 cf ac bb fe 0f 27 fd Data Ascii: h=zqZQuU/>g]{O_p{/OIhfnoWUrqTBa+\|Ts/F.aYor<s{zLiOLmO2Z8%@fDR]jn"lB,stAu~Cf-8pB[ZpFg5C5''
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 50 50 10 6e fe 03 00 00 00 00 00 00 40 a7 60 b3 d9 b5 b5 b5 b8 75 d6 71 7b c9 fc 9e 37 f7 e4 de f8 ec cf 1d b7 0b d0 12 26 6a da 01 ee 9e 9a f2 4a 3f 5d c2 4f 86 00 70 f2 3f 9d 4e ff e9 1d 03 00 00 00 00 00 00 00 68 17 35 35 35 1d d7 29 e0 7e dc 9b c5 67 fc aa 6a 6b 3a a2 70 d0 5a 22 82 74 9f a9 8b 9c 4c fb fe dc cb 5b 1d 02 80 e4 7f 00 00 00 00 00 00 00 f8 dd 74 44 a7 80 1a 66 dd 96 eb 81 90 fc ff 1b f2 e8 3f 6c e3 e8 69 42 34 c1 d6 be b0 75 21 00 9c 5e 42 a7 d3 61 d8 7f 00 00 00 00 00 00 00 f8 ad 70 38 9c 9a 9a 9a f6 ea 14 90 f9 3d 6f fa 91 1d 29 79 39 ed 51 35 d0 fe f4 14 55 4f ce 59 dd da 4e 01 ad eb c6 cf e1 70 04 04 04 a0 fd 0f 00 00 00 00 00 00 00 bf 1b 12 89 24 20 20 80 13 b7 db 6e c7 ad 20 68 ff ff ce 92 be 7d f1 be 73 b1 b5 af 6a 45 08 80 c3 e1 Data Ascii: PPn@`uq{7&jJ?]Op?Nh555)~gjk:pZ"tL[tDf?liB4u!^Bap8=o)y9Q5UOYNp$ n h}sjE
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 48 9b eb 08 f8 b9 75 eb 56 50 50 90 92 92 92 9f 9f 5f 67 d7 e5 77 91 93 93 73 f3 e6 cd b8 b8 b8 8a 8a 0a 19 19 99 01 03 06 38 39 39 11 ff 20 f8 28 28 28 58 b8 70 e1 d6 ad 5b f5 f4 f4 7e 49 4d 7f 2f 29 29 29 eb d7 af 0f 0c 0c 6c fb e5 df 16 95 95 95 81 81 81 ef df bf a7 d1 68 fd fb f7 9f 30 61 02 9f 1f a9 49 49 49 97 2f 5f ce cc cc 64 b1 58 0a 0a 0a 0e 0e 0e 03 07 0e 6c 97 59 87 00 f8 13 c4 c5 c5 8d 1f 3f 3e 39 39 b9 d1 b5 2c 16 cb db db 3b 34 34 f4 cc 99 33 bd 7a f5 fa e5 b5 eb c2 52 52 52 ae 5e bd 9a 94 94 44 26 93 95 95 95 1d 1d 1d 6d 6d 6d db 7d 42 f4 36 e6 f3 d7 d7 d7 d3 68 b4 76 a9 09 85 42 c1 99 05 0d 57 a5 e5 b7 e7 7c 6d f6 86 66 47 67 af 94 17 97 22 96 ac 77 99 f6 e8 43 d4 ac a3 de a5 d5 95 fc 5f 6b a2 ae b3 c4 71 ec dd 98 57 d7 de 44 b4 63 95 5a Data Ascii: HuVPP_gws899 (((Xp[~IM/)))lh0aIII/_dXlY?>99,;443zRRR^D&mmm}B6hvBW\|mfGg"wC_kqWDcZ
2025-03-19 10:29:48 UTC	1369	IN	Data Raw: 83 07 e7 e7 e7 37 5c f5 fd fb 77 47 47 c7 3b 77 ee e0 dc 87 a6 94 96 96 3a 39 39 c5 c4 c4 98 98 98 b4 4b 95 00 90 95 95 a5 d1 68 f9 f9 f9 5a 5a 5a 07 0f 1e 64 b1 58 69 69 69 79 79 79 a3 46 8d 9a 32 65 ca a3 47 8f 6e dd ba 55 58 58 28 2f 2f 3f 6e dc 38 3b 3b 3b e2 85 31 31 31 41 41 41 5f bf 7e 95 97 97 9f 34 69 12 b1 3c 3c 3c fc ee dd bb 7b f7 ee 25 96 ec dc b9 53 4b 4b cb cd cd 0d 77 db 09 0e 0e 8e 88 88 a8 ab ab eb d1 a3 c7 b4 69 d3 d4 d4 d4 8e 1d 3b 16 16 16 86 67 fd e8 d5 ab d7 86 0d 1b 3e 7f fe 7c f6 ec d9 f4 f4 74 1a 8d 66 68 68 38 65 ca 94 46 7f e2 87 85 85 55 57 57 8f 1a 35 aa d1 b7 76 eb d6 2d 51 51 d1 81 03 07 b6 f7 31 eb 34 4f 9e 3c b1 b4 b4 a4 d3 e9 fd fa f5 db b1 63 87 87 87 87 90 90 10 4e 68 f7 f4 f4 5c bf 7e fd 99 33 67 b2 b3 b3 c5 c5 c5 87 Data Ascii: 7\wGG;w:99KhZZZdXiiiyyyF2eGnUXX(//?n8;;;111AAA_~4i<<<{%SKKwi;g>\|tfhh8eFUWW5v-QQ14O<cNh\~3g

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	1043	OUT	GET /embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:48 UTC	2394	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 19 Mar 2025 10:29:48 GMT Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=9JFvDSoXclE; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; Domain=youtube.com; Expires=Mon, 15-Sep-2025 10:29:48 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=RMAZuSkEvkI; Domain=.youtube.com; Expires=Mon, 15-Sep-2025 10:29:48 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D; Domain=.youtube.com; Expires=Mon, 15-Sep-2025 10:29:48 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 37 66 31 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 46 38 39 48 78 66 55 64 4f 51 58 55 38 53 31 4e 53 74 6b 50 6d 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 7f10<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="F89HxfUdOQXU8S1NStkPmw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 Data Ascii: 1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 20 6c 65 66 74 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 69 6d 67 2f 6d 65 68 37 2e 70 6e 67 29 20 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 Data Ascii: left: 0; right: 0; bottom: 0; padding: 25px; font-size: 13px; background: url(/img/meh7.png) 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 74 28 65 6c 2c 30 29 7d 29 3b 65 6c 73 65 20 73 6c 74 28 65 6c 2c 31 36 29 7d 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 46 38 39 48 78 66 55 64 4f 51 58 55 38 53 31 4e 53 74 6b 50 6d 77 22 3e 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b Data Ascii: ationFrame(function(){slt(el,0)});else slt(el,16)}})(window,document);</script><script nonce="F89HxfUdOQXU8S1NStkPmw">var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 61 69 5f 73 64 66 5f 68 35 5f 70 72 65 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 74 6f 72 65 5f 66 72 6f 6d 5f 64 65 70 65 6e 64 65 6e 63 79 5f 69 6e 6a 65 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 6c 6f 77 5f 6c 6f 67 67 69 6e 67 5f 70 34 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 61 64 67 65 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 75 74 74 6f 6e 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 6d 69 78 65 64 5f Data Ascii: :true,"enable_dai_sdf_h5_preroll":true,"enable_docked_chat_messages":true,"enable_entity_store_from_dependency_injection":true,"enable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_fully_reactive_button_shape":true,"enable_mixed_
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 75 65 2c 22 6d 61 69 6e 5f 77 65 62 5f 72 65 64 69 72 65 63 74 5f 69 6e 74 65 67 72 61 74 69 6f 6e 5f 72 69 6f 74 22 3a 74 72 75 65 2c 22 6d 64 78 5f 65 6e 61 62 6c 65 5f 70 72 69 76 61 63 79 5f 64 69 73 63 6c 6f 73 75 72 65 5f 75 69 22 3a 74 72 75 65 2c 22 6d 64 78 5f 6c 6f 61 64 5f 63 61 73 74 5f 61 70 69 5f 62 6f 6f 74 73 74 72 61 70 5f 73 63 72 69 70 74 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 65 76 65 6e 74 73 5f 74 6f 5f 74 73 22 3a 74 72 75 65 2c 22 6d 69 67 72 61 74 65 5f 72 65 6d 61 69 6e 69 6e 67 5f 77 65 62 5f 61 64 5f 62 61 64 67 65 73 5f 74 6f 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 64 65 70 72 65 63 61 74 65 5f 73 6b 69 70 5f 76 65 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 Data Ascii: ue,"main_web_redirect_integration_riot":true,"mdx_enable_privacy_disclosure_ui":true,"mdx_load_cast_api_bootstrap_script":true,"migrate_events_to_ts":true,"migrate_remaining_web_ad_badges_to_innertube":true,"mweb_deprecate_skip_ve_logging":true,"mweb_enab
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 65 72 72 6f 72 5f 32 30 34 22 3a 74 72 75 65 2c 22 77 65 62 5f 67 63 66 5f 68 61 73 68 65 73 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 77 65 62 5f 67 65 6c 5f 74 69 6d 65 6f 75 74 5f 63 61 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 76 69 73 69 74 65 64 5f 63 68 61 6e 6e 65 6c 5f 63 6f 6c 6f 72 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 73 69 65 5f 6f 6d 69 74 5f 61 70 69 5f 6b 65 79 22 3a 74 72 75 65 2c 22 77 65 62 5f 70 72 65 66 65 74 63 68 5f 70 72 65 6c 6f 61 64 5f 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 77 65 62 5f 72 65 73 69 7a 61 62 6c 65 5f 61 64 Data Ascii: ,"web_enable_error_204":true,"web_gcf_hashes_innertube":true,"web_gel_timeout_cap":true,"web_masthead_visited_channel_color_fix":true,"web_one_platform_error_handling":true,"web_onesie_omit_api_key":true,"web_prefetch_preload_video":true,"web_resizable_ad
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 68 43 51 2e 4f 2f 64 5c 75 30 30 33 64 31 2f 72 73 5c 75 30 30 33 64 41 48 70 4f 6f 6f 38 4e 50 32 79 32 39 31 69 69 50 44 6d 66 41 4e 30 47 56 33 64 76 43 75 71 6c 59 41 2f 6d 5c 75 30 30 33 64 5f 5f 66 65 61 74 75 72 65 73 5f 5f 22 2c 22 47 41 50 49 5f 48 4f 53 54 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 47 41 50 49 5f 4c 4f 43 41 4c 45 22 3a 22 65 6e 5f 55 53 22 2c 22 47 4c 22 3a 22 44 45 22 2c 22 48 4c 22 3a 22 65 6e 22 2c 22 48 54 4d 4c 5f 44 49 52 22 3a 22 6c 74 72 22 2c 22 48 54 4d 4c 5f 4c 41 4e 47 22 3a 22 65 6e 22 2c 22 49 4e 4e 45 52 54 55 42 45 5f 41 50 49 5f 4b 45 59 22 3a 22 41 49 7a 61 53 79 41 4f 5f 46 4a 32 53 6c 71 55 38 51 34 53 54 45 48 4c 47 43 69 6c 77 5f 59 39 5f 31 31 71 63 57 38 22 2c Data Ascii: hCQ.O/d\u003d1/rs\u003dAHpOoo8NP2y291iiPDmfAN0GV3dvCuqlYA/m\u003d__features__","GAPI_HOST":"https://apis.google.com","GAPI_LOCALE":"en_US","GL":"DE","HL":"en","HTML_DIR":"ltr","HTML_LANG":"en","INNERTUBE_API_KEY":"AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8",
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 4b 49 4e 47 5f 50 41 52 41 4d 53 22 3a 7b 22 63 6c 69 65 6e 74 2e 6e 61 6d 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 22 4c 4f 47 47 45 44 5f 49 4e 22 3a 66 61 6c 73 65 2c 22 50 41 47 45 5f 42 55 49 4c 44 5f 4c 41 42 45 4c 22 3a 22 79 6f 75 74 75 62 65 2e 70 6c 61 79 65 72 2e 77 65 62 5f 32 30 32 35 30 33 31 32 5f 30 31 5f 52 43 30 30 22 2c 22 50 41 47 45 5f 43 4c 22 3a 37 33 36 32 38 37 36 38 39 2c 22 53 45 52 56 45 52 5f 4e 41 4d 45 22 3a 22 57 65 62 46 45 22 2c 22 56 49 53 49 54 4f 52 5f 44 41 54 41 22 3a 22 43 67 74 53 54 55 46 61 64 56 4e 72 52 58 5a 72 53 53 69 63 75 65 71 2d 42 6a 49 4b 43 67 4a 45 52 52 49 45 45 67 41 67 46 51 25 33 44 25 33 44 22 2c 22 57 45 42 5f 50 4c 41 59 45 52 5f 43 4f 4e 54 45 58 54 5f 43 Data Ascii: KING_PARAMS":{"client.name":"WEB_EMBEDDED_PLAYER"},"LOGGED_IN":false,"PAGE_BUILD_LABEL":"youtube.player.web_20250312_01_RC00","PAGE_CL":736287689,"SERVER_NAME":"WebFE","VISITOR_DATA":"CgtSTUFadVNrRXZrSSicueq-BjIKCgJERRIEEgAgFQ%3D%3D","WEB_PLAYER_CONTEXT_C
2025-03-19 10:29:48 UTC	2394	IN	Data Raw: 66 6f 72 5f 73 70 73 5c 75 30 30 33 64 5b 5d 5c 75 30 30 32 36 62 6f 74 67 75 61 72 64 5f 61 73 79 6e 63 5f 73 6e 61 70 73 68 6f 74 5f 74 69 6d 65 6f 75 74 5f 6d 73 5c 75 30 30 33 64 33 30 30 30 5c 75 30 30 32 36 63 61 70 74 69 6f 6e 73 5f 75 72 6c 5f 61 64 64 5f 65 69 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 68 65 63 6b 5f 6e 61 76 69 67 61 74 6f 72 5f 61 63 63 75 72 61 63 79 5f 74 69 6d 65 6f 75 74 5f 6d 73 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6c 65 61 6e 5f 70 6c 61 79 65 72 5f 73 74 79 6c 65 5f 66 69 78 5f 6f 6e 5f 77 65 62 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6c 65 61 6e 5f 75 70 5f 6d 61 6e 75 61 6c 5f 61 74 74 72 69 62 75 74 69 6f 6e 5f 68 65 61 64 65 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6c 65 61 72 5f Data Ascii: for_sps\u003d[]\u0026botguard_async_snapshot_timeout_ms\u003d3000\u0026captions_url_add_ei\u003dtrue\u0026check_navigator_accuracy_timeout_ms\u003d0\u0026clean_player_style_fix_on_web\u003dtrue\u0026clean_up_manual_attribution_header\u003dtrue\u0026clear_

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	898	OUT	GET /s/player/7d1d50a6/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
2025-03-19 10:29:48 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 425104 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 09:43:10 GMT Expires: Thu, 19 Mar 2026 09:43:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 05:05:38 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 2798 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:48 UTC	698	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e Data Ascii: deo-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparen
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d Data Ascii: d-error .html5-video-container{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-m
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 72 61 6e 64 69 6e 67 2d 73 68 6f 77 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 72 69 67 68 74 3a 63 61 6c 63 28 32 32 70 78 20 2b 20 76 61 72 28 2d 2d 62 72 61 6e Data Ascii: ng) .ytp-player-content:not(.ytp-upnext){top:89px}.ytp-player-content.ytp-iv-player-content,.ytp-player-content.ytp-timely-actions-content{left:12px;right:12px}.ytp-branding-shown .ytp-player-content.ytp-timely-actions-content{right:calc(22px + var(--bran
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 79 3a 2e 33 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 2e 33 33 73 7d 2e 79 74 70 2d 66 69 6e 65 2d 73 63 72 75 62 62 69 6e 67 2d 65 6e 61 62 6c 65 20 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 35 31 70 78 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 33 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 Data Ascii: y:.33s;transition-delay:.33s}.ytp-fine-scrubbing-enable .ytp-timely-actions-overlay{display:none}.ytp-ad-overlay-open .ytp-player-content{bottom:151px}.ytp-small-mode.ytp-ad-overlay-open .ytp-player-content{bottom:139px}.ytp-embed.ytp-ad-overlay-open .ytp
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 6f 6d 65 2d 74 6f 70 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 35 38 7d 2e 79 74 70 2d 73 68 6f 72 74 73 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 2d Data Ascii: ome-top{display:-webkit-flex;display:-webkit-box;display:flex;-webkit-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;left:12px;right:12px;top:0;z-index:58}.ytp-shorts-mode .ytp-chrome-top{-
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 69 64 74 68 3a 34 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 75 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 Data Ascii: idth:48px;padding:0 2px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1);overflow:hidden}.ytp-chrome-controls .ytp-button.ytp-mute-button{padding:6px}.ytp-chrome-controls .ytp-button.ytp-next-button{paddi
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 38 30 2c 38 30 2c 38 30 2c 2e 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6c 75 6d 69 6e 6f 73 69 74 79 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 2d 77 69 74 68 2d 64 69 66 66 65 72 65 6e 63 65 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f Data Ascii: -controls .ytp-next-button:not(ytp-miniplayer-button-container>*){background:rgba(80,80,80,.6);background-blend-mode:luminosity;-webkit-backdrop-filter:blur(16px);backdrop-filter:blur(16px)}.ytp-delhi-modern-with-difference.ytp-delhi-modern .ytp-chrome-co
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a Data Ascii: y-button:not(.ytp-play-button-playlist)::before{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:-12px}.ytp-delhi-modern .ytp-prev-button:not(ytp-miniplayer-button-container>*){-webkit-backdrop-filter:blur(16px);backdrop-filter:
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 6f 6e 2d 70 6c 61 79 6c 69 73 74 29 3a 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 32 34 70 78 3b 6c 65 66 74 3a 2d 32 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 Data Ascii: on-playlist)::before{width:24px;left:-24px}.ytp-chrome-top .ytp-button:hover,.ytp-chrome-controls .ytp-button:not([aria-disabled=true]):not([disabled]):hover,.ytp-chrome-controls .ytp-button[aria-expanded=true],.ytp-chrome-controls .ytp-button[aria-presse

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	902	OUT	GET /s/player/7d1d50a6/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
2025-03-19 10:29:48 UTC	685	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 33644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 10:23:48 GMT Expires: Thu, 19 Mar 2026 10:23:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 05:05:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 360 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:48 UTC	693	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 39 5a 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 78 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 78 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 78 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 4c 4f 28 78 29 7d 2c 63 53 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 54 3a 22 73 76 67 22 2c 0a 43 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 4c 3a 5b 7b 54 3a 22 70 61 74 68 22 Data Ascii: (function(g){var window=this;'use strict';var p9Z=function(x){x.mutedAutoplay=!1;x.endSeconds=NaN;x.limitedPlaybackDurationInSeconds=NaN;g.LO(x)},cSw=function(){return{T:"svg",C:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},L:[{T:"path"
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 33 31 2c 2d 31 2e 33 37 20 2e 30 39 2c 30 20 63 20 2e 33 2c 2e 35 20 2e 37 31 2c 2e 38 38 20 31 2e 32 31 2c 31 2e 31 38 20 2e 35 2c 2e 33 20 31 2e 30 38 2c 2e 34 30 20 31 2e 36 38 2c 2e 34 30 20 31 2e 31 2c 30 20 31 2e 39 39 2c 2d 30 2e 34 39 20 32 2e 34 39 2c 2d 31 2e 35 39 20 2e 35 2c 2d 31 2e 31 20 2e 38 31 2c 2d 32 2e 37 30 20 2e 38 31 2c 2d 34 2e 39 30 20 6c 20 30 2c 2d 32 2e 34 30 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 31 2c 2d 32 2e 39 30 20 2d 30 2e 33 31 2c 2d 33 2e 39 30 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 35 2c 2d 31 2e 35 39 20 2d 31 2c 2d 32 2e 30 39 20 2d 30 2e 35 2c 2d 30 2e 34 20 2d 31 2e 31 30 2c 2d 30 2e 35 39 20 2d 31 2e 39 30 2c 2d 30 2e 35 39 20 2d 30 2e 35 39 2c 30 20 2d 31 2e 31 38 2c 2e 31 39 20 2d 31 2e 36 38 2c 2e 34 Data Ascii: 31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.4
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 30 20 2e 34 39 2c 2d 33 2e 39 30 20 6c 20 30 2c 2d 32 2e 32 31 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 32 2c 2d 32 2e 38 37 20 2d 30 2e 34 39 2c 2d 33 2e 38 37 20 2d 30 2e 33 2c 2d 30 2e 38 39 20 2d 30 2e 38 2c 2d 31 2e 36 32 20 2d 31 2e 34 39 2c 2d 32 2e 31 32 20 2d 30 2e 37 2c 2d 30 2e 35 20 2d 31 2e 35 38 2c 2d 30 2e 36 38 20 2d 32 2e 36 38 2c 2d 30 2e 36 38 20 7a 20 6d 20 31 32 2e 31 38 2c 2e 30 39 20 30 2c 31 31 2e 39 30 20 63 20 2d 30 2e 31 2c 2e 33 20 2d 30 2e 32 39 2c 2e 34 38 20 2d 30 2e 35 39 2c 2e 36 38 20 2d 30 2e 32 2c 2e 32 20 2d 30 2e 35 31 2c 2e 33 31 20 2d 30 2e 38 31 2c 2e 33 31 20 2d 30 2e 33 2c 30 20 2d 30 2e 35 38 2c 2d 30 2e 31 30 20 2d 30 2e 36 38 2c 2d 30 2e 34 30 20 2d 30 2e 31 2c 2d 30 2e 33 20 2d 30 2e 31 38 2c 2d 30 2e 37 30 20 Data Ascii: 0 .49,-3.90 l 0,-2.21 c 0,-1.6 -0.2,-2.87 -0.49,-3.87 -0.3,-0.89 -0.8,-1.62 -1.49,-2.12 -0.7,-0.5 -1.58,-0.68 -2.68,-0.68 z m 12.18,.09 0,11.90 c -0.1,.3 -0.29,.48 -0.59,.68 -0.2,.2 -0.51,.31 -0.81,.31 -0.3,0 -0.58,-0.10 -0.68,-0.40 -0.1,-0.3 -0.18,-0.70
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 38 20 2d 30 2e 38 31 2c 2d 30 2e 31 38 20 2d 30 2e 32 2c 2d 30 2e 31 20 2d 30 2e 33 39 2c 2d 30 2e 32 39 20 2d 30 2e 35 39 2c 2d 30 2e 35 39 20 6c 20 30 2c 2d 38 2e 35 20 63 20 2e 31 2c 2d 30 2e 34 20 2e 32 39 2c 2d 30 2e 37 20 2e 35 39 2c 2d 31 20 2e 33 2c 2d 30 2e 33 20 2e 36 30 2c 2d 30 2e 34 30 20 2e 39 30 2c 2d 30 2e 34 30 20 7a 22 7d 7d 5d 7d 7d 2c 0a 4d 6d 24 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 54 3a 22 73 76 67 22 2c 0a 43 3a 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 33 20 35 31 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 4c 3a 5b 7b 54 3a 22 70 61 74 68 22 2c 43 3a 7b 64 3a 22 4d 35 38 2e 33 37 20 34 31 2e 33 39 48 36 32 2e 37 39 56 32 37 Data Ascii: 8 -0.81,-0.18 -0.2,-0.1 -0.39,-0.29 -0.59,-0.59 l 0,-8.5 c .1,-0.4 .29,-0.7 .59,-1 .3,-0.3 .60,-0.40 .90,-0.40 z"}}]}},Mm$=function(){return{T:"svg",C:{fill:"none",height:"100%",viewBox:"0 0 143 51",width:"100%"},L:[{T:"path",C:{d:"M58.37 41.39H62.79V27
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 32 20 31 34 2e 35 39 20 31 32 35 2e 30 34 20 31 33 2e 39 39 20 31 32 35 2e 30 34 20 31 31 2e 35 39 43 31 32 35 2e 30 34 20 39 2e 33 33 20 31 32 34 2e 31 36 20 38 2e 36 35 20 31 32 32 2e 35 20 38 2e 36 35 43 31 32 30 2e 38 34 20 38 2e 36 35 20 31 31 39 2e 39 34 20 39 2e 32 37 20 31 31 39 2e 39 34 20 31 31 2e 35 39 43 31 31 39 2e 39 34 20 31 33 2e 39 39 20 31 32 30 2e 38 32 20 31 34 2e 35 39 20 31 32 32 2e 35 20 31 34 2e 35 39 5a 4d 31 32 30 2e 32 20 34 31 2e 33 39 48 31 32 35 56 31 37 2e 37 33 48 31 32 30 2e 32 56 34 31 2e 33 39 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 54 3a 22 70 61 74 68 22 2c 43 3a 7b 64 3a 22 4d 31 33 34 2e 39 35 20 34 31 2e 37 39 43 31 33 37 2e 33 31 20 34 31 2e 37 39 20 31 33 38 2e 36 33 20 34 31 2e 34 39 20 31 33 39 Data Ascii: 2 14.59 125.04 13.99 125.04 11.59C125.04 9.33 124.16 8.65 122.5 8.65C120.84 8.65 119.94 9.27 119.94 11.59C119.94 13.99 120.82 14.59 122.5 14.59ZM120.2 41.39H125V17.73H120.2V41.39Z",fill:"white"}},{T:"path",C:{d:"M134.95 41.79C137.31 41.79 138.63 41.49 139
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 30 32 43 31 33 2e 31 31 20 32 39 2e 39 34 20 31 32 2e 33 37 20 32 37 2e 35 30 20 31 32 2e 33 37 20 32 35 43 31 32 2e 33 37 20 32 31 2e 36 35 20 31 33 2e 37 30 20 31 38 2e 34 34 20 31 36 2e 30 37 20 31 36 2e 30 37 43 31 38 2e 34 33 20 31 33 2e 37 30 20 32 31 2e 36 34 20 31 32 2e 33 37 20 32 34 2e 39 39 20 31 32 2e 33 36 5a 4d 32 34 2e 39 39 20 31 30 2e 34 33 43 32 32 2e 31 31 20 31 30 2e 34 33 20 31 39 2e 32 39 20 31 31 2e 32 38 20 31 36 2e 38 39 20 31 32 2e 38 38 43 31 34 2e 35 30 20 31 34 2e 34 38 20 31 32 2e 36 33 20 31 36 2e 37 36 20 31 31 2e 35 33 20 31 39 2e 34 32 43 31 30 2e 34 32 20 32 32 2e 30 39 20 31 30 2e 31 33 20 32 35 2e 30 32 20 31 30 2e 37 30 20 32 37 2e 38 35 43 31 31 2e 32 36 20 33 30 2e 36 37 20 31 32 2e 36 35 20 33 33 2e 32 37 20 31 34 Data Ascii: 02C13.11 29.94 12.37 27.50 12.37 25C12.37 21.65 13.70 18.44 16.07 16.07C18.43 13.70 21.64 12.37 24.99 12.36ZM24.99 10.43C22.11 10.43 19.29 11.28 16.89 12.88C14.50 14.48 12.63 16.76 11.53 19.42C10.42 22.09 10.13 25.02 10.70 27.85C11.26 30.67 12.65 33.27 14
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 6f 75 6e 64 2d 63 6f 72 6e 65 72 73 22 29 3b 74 68 69 73 2e 42 3d 78 2e 4b 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 74 69 74 6c 65 29 3b 74 68 69 73 2e 74 69 74 6c 65 2e 70 6d 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 3d 6e 65 77 20 67 2e 54 28 7b 54 3a 22 64 69 76 22 2c 5a 3a 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 73 22 7d 29 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 2e 70 6d 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 67 2e 50 28 74 68 69 73 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 3b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 70 6d 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0a 74 68 69 73 2e 70 72 Data Ascii: ound-corners");this.B=x.K;g.P(this,this.title);this.title.pm(this.element);this.suggestions=new g.T({T:"div",Z:"ytp-suggestions"});g.P(this,this.suggestions);this.suggestions.pm(this.element);g.P(this,this.previous);this.previous.pm(this.element);this.pr
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 6d 28 29 2e 67 65 74 50 6c 61 79 65 72 53 69 7a 65 28 29 29 3b 74 68 69 73 2e 6f 6e 56 69 64 65 6f 44 61 74 61 43 68 61 6e 67 65 28 29 3b 74 68 69 73 2e 73 68 6f 77 28 29 7d 2c 79 53 53 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 75 29 7b 69 66 28 78 2e 61 70 69 2e 58 28 29 2e 47 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 6c 6f 67 5f 63 6c 69 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 29 66 6f 72 28 76 61 72 20 6b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 2d 78 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2f 28 78 2e 4a 2b 78 2e 56 29 29 2c 55 3d 4d 61 74 68 2e 6d 69 6e 28 6b 2b 78 2e 63 6f 6c 75 6d 6e 73 2c 78 2e 73 75 67 67 65 73 74 69 6f 6e 44 61 74 61 2e 6c 65 6e 67 74 68 29 2d 31 3b Data Ascii: m().getPlayerSize());this.onVideoDataChange();this.show()},ySS=function(x,u){if(x.api.X().G("web_player_log_click_before_generating_ve_conversion_params"))for(var k=Math.floor(-x.scrollPosition/(x.J+x.V)),U=Math.min(k+x.columns,x.suggestionData.length)-1;
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 26 26 28 78 2e 61 70 69 2e 63 72 65 61 74 65 53 65 72 76 65 72 56 65 28 55 2e 65 6c 65 6d 65 6e 74 2c 55 29 2c 28 6b 3d 28 6b 3d 6b 2e 73 65 73 73 69 6f 6e 44 61 74 61 29 26 26 6b 2e 69 74 63 74 29 26 26 78 2e 61 70 69 2e 73 65 74 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 28 55 2e 65 6c 65 6d 65 6e 74 2c 6b 29 29 7d 66 6f 72 28 3b 75 3c 78 2e 53 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 78 2e 53 5b 75 5d 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 59 37 74 28 78 29 7d 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 67 2e 4a 48 2e 63 61 6c 6c 28 74 68 69 73 2c 78 29 3b 0a 76 61 72 20 75 3d Data Ascii: ck_before_generating_ve_conversion_params")&&(x.api.createServerVe(U.element,U),(k=(k=k.sessionData)&&k.itct)&&x.api.setTrackingParams(U.element,k))}for(;u<x.S.length;u++)x.S[u].element.style.display="none";Y7t(x)},St=function(x){g.JH.call(this,x);var u=
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 28 22 79 74 70 2d 65 72 72 6f 72 2d 63 6f 6e 74 65 6e 74 22 29 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 22 30 70 78 22 3b 0a 76 61 72 20 6b 3d 78 2e 6b 24 28 22 79 74 70 2d 65 72 72 6f 72 2d 63 6f 6e 74 65 6e 74 22 29 2c 55 3d 6b 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3b 78 2e 53 26 26 78 2e 53 2e 72 65 73 69 7a 65 28 75 2c 75 2e 68 65 69 67 68 74 2d 55 29 3b 6b 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 28 75 2e 68 65 69 67 68 74 2d 28 78 2e 53 3f 78 2e 53 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 30 29 29 2f 32 2d 55 2f 32 2b 22 70 78 22 7d 2c 4f 38 39 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 75 29 7b 76 61 72 20 6b 3d 78 2e 61 70 69 2e 58 28 29 2c 55 3b 0a 75 2e 72 65 61 73 6f 6e 26 26 28 7a 62 73 28 75 2e 72 Data Ascii: ("ytp-error-content").style.paddingTop="0px";var k=x.k$("ytp-error-content"),U=k.clientHeight;x.S&&x.S.resize(u,u.height-U);k.style.paddingTop=(u.height-(x.S?x.S.element.clientHeight:0))/2-U/2+"px"},O89=function(x,u){var k=x.api.X(),U;u.reason&&(zbs(u.r

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	913	OUT	GET /s/player/7d1d50a6/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
2025-03-19 10:29:48 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 344055 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 10:16:10 GMT Expires: Thu, 19 Mar 2026 10:16:10 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 05:05:38 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 818 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:48 UTC	692	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 64 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 64 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b Data Ascii: ength-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 28 65 3d 63 29 3b 0a 65 3d 6b 61 28 65 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 63 2c 65 2c 64 29 7c 7c 65 7d 7d 28 29 2c 6d 61 3b 0a 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d Data Ascii: (e=c);e=ka(e.prototype\|\|Object.prototype);return Function.prototype.apply.call(c,e,d)\|\|e}}(),ma;if(typeof Object.setPrototypeOf=="function")ma=Object.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}m
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 29 7b 74 68 69 73 2e 44 3d 21 31 3b 74 68 69 73 2e 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 6f 3d 74 68 69 73 2e 4d 3d 30 3b 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 29 7b 69 66 28 61 2e 44 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 44 3d 21 30 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 78 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 4d 7c 7c 61 2e Data Ascii: ){this.D=!1;this.u=null;this.i=void 0;this.h=1;this.o=this.M=0;this.P=this.j=null}function wa(a){if(a.D)throw new TypeError("Generator is already running");a.D=!0}va.prototype.G=function(a){this.i=a};function xa(a,b){a.j={exception:b,xd:!0};a.h=a.M\|\|a.
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 2c 64 6f 6e 65 3a 21 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 47 29 3a 28 61 2e 68 2e 47 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 47 29 3a 28 78 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 Data Ascii: ,done:!0}}function Ga(a){this.next=function(b){wa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.G):(a.h.G(b),b=Fa(a));return b};this.throw=function(b){wa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.G):(xa(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 68 3b 74 68 69 73 2e 68 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b Data Ascii: h;this.h=[];for(var h=0;h<g.length;++h){var k=g[h];g[h]=null;try{k()}catch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.i=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 61 62 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 69 28 29 3b 67 2e 69 63 28 68 2e 72 65 73 Data Ascii: ustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.ab;return k(g)};b.prototype.D=function(){if(this.h!=null){for(var g=0;g<this.h.length;++g)f.i(this.h[g]);this.h=null}};var f=new c;b.prototype.Z=function(g){var h=this.i();g.ic(h.res
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 3b 0a 75 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 68 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 79 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: ;u("WeakMap",function(a){function b(k){this.h=(h+=Math.random()+1).toString();if(k){k=y(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 74 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 Data Ascii: ull}return{done:!0,value:void 0}})}function d(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ta(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)retur
2025-03-19 10:29:48 UTC	1378	IN	Data Raw: 76 69 6f 75 73 3d 68 2e 65 6e 74 72 79 2e 70 72 65 76 69 6f 75 73 2c 68 2e 65 6e 74 72 79 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 Data Ascii: vious=h.entry.previous,h.entry.head=null,this.size--,!0):!1};e.prototype.clear=function(){this[0]={};this[1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:48 UTC	454	OUT	GET /669b5e317679d86ba250375c/669b5e6f7679d86ba250574d_trezor-LSS.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:49 UTC	721	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:49 GMT Content-Type: image/png Content-Length: 909824 Connection: close x-amz-id-2: D3OBguaEJs5dp0Ehd/myPgphS3tDie1UlJzp2Iy8CMMAF8g1qDysxS83JxFaHl2LTlBvV7FurZvjvMVemWYh16cCpv7h+4RWshx6bS/QyCU= x-amz-request-id: JF5M68Q8HAM7HGP6 Last-Modified: Sat, 20 Jul 2024 06:51:29 GMT ETag: "8829b4cf7c82f1e884defd333402868f" x-amz-storage-class: INTELLIGENT_TIERING x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: aYYMXPecvINUlvuVBCjqN7RD12XBtay1 CF-Cache-Status: HIT Age: 135388 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4a753ff6d2ce-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:49 UTC	648	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 56 00 00 16 25 08 02 00 00 00 22 db 8c 79 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec dd 79 3c 54 dd 1b 00 f0 33 8b 31 f6 5d b6 ec b2 45 96 88 50 d1 a6 85 52 d1 5e b4 ef 69 d7 fa d6 db aa 0d 49 fb a2 52 69 2f 6d 4a 25 69 4f b6 ca 2e 84 42 f6 6d 30 66 e6 f7 c7 e9 bd ef fc 06 83 90 bc 3d df 8f 3f 66 ee bd 73 ee 99 3b f7 8e 39 cf 7d ce 39 24 b4 dd 09 01 00 00 00 00 00 00 00 00 e0 bf 8e dc d9 15 00 00 00 00 00 00 00 00 00 c0 af 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 00 00 00 00 00 e0 8f 00 21 00 00 00 00 Data Ascii: PNGIHDRV%"ysRGB IDATxy<T31]EPR^iIRi/mJ%iO.Bm0f=?fs;9}9$!!!!!!!
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 70 cc 67 d0 4c 05 11 49 ee 0d 96 5a 38 31 56 5f e5 ac 0b 91 14 14 41 08 d9 aa e8 7f f7 0c e2 ac 0b 19 dd a3 0f 42 28 c8 79 79 90 f3 f2 0e 38 06 00 00 d0 51 a8 9d 5d 01 00 00 68 29 12 42 97 c7 ac 11 a5 d1 c7 df f0 4e 29 fe aa 22 26 b3 c0 7c 78 d4 8c fd fd ce ad 7d f7 2d 15 21 a4 1e 30 ab 43 2b c0 5d be a8 00 dd 55 df d6 f4 e4 d2 d8 fc 0c 84 50 60 fc e3 c0 f8 c7 ed bb 3b 3d 19 e5 b0 49 5b 5f e7 26 4f b8 b9 fb d3 f7 2f f2 c2 92 d3 8c 1d 9e 4d dd b9 e8 c1 d1 33 1f 9e b4 ef be da 51 66 59 01 69 87 73 fb 96 e9 3b 78 96 a4 a0 88 fb 9d 46 da f3 7f a0 27 99 f1 62 34 21 d3 6e 9a 51 79 69 78 89 4d 77 fd a4 c2 9c f8 82 4c 07 35 e3 8f df bf e0 85 a2 02 74 93 6e 9a 7f 47 06 b7 7b 05 46 f7 e8 e3 3b 78 f6 4f 5f 6e bb 1d dc dd 8d 07 ae 7b 7a 76 ca ad 7d 35 f5 4c 53 05 4d Data Ascii: pgLIZ81V_AB(yy8Q]h)BN)"&\|x}-!0C+]UP`;=I[_&O/M3QfYis;xF'b4!nQyixMwL5tnG{F;xO_n{zv}5LSM
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 5d 77 83 e8 bc f4 b2 da 6a 84 10 8d 4c fd bb ff 64 37 7d 5b 05 51 a9 cc d2 fc 9d 2f af 9e fb 18 de ec c1 99 6d 32 64 b5 f5 58 15 31 99 d4 e2 af 47 63 42 8f 44 87 b2 38 ec 23 c3 16 cc 35 75 44 08 71 d6 85 3c f8 1c ed 18 bc d9 5c 41 6b ef c0 19 e6 8a da 0c 66 6d c4 97 8f ab 9f 04 66 96 15 34 55 e6 7a 1b b7 3d af af 27 16 e5 f0 7e 10 77 0f 70 3f 6d f4 20 34 dc 75 4b 3e 62 77 e3 81 0b cc 87 17 33 2a 06 6b 98 bc fb 96 6a 15 b8 aa d1 c2 a9 24 32 f3 ff fb f2 e4 55 96 28 1e 98 8e 10 ea 2e 26 eb 3b 64 d6 10 0d 53 36 87 73 37 2d 6a f9 a3 13 79 55 a5 b8 cf 0b cf 79 52 c3 62 36 5b 9f 25 bd 47 6e b2 9b 68 78 6c 61 7e 55 29 42 68 9c 5e df 33 4e cb 7a 9d 58 92 56 f2 2d 70 e4 d2 8c b2 7c 39 61 89 f1 fa 76 a2 34 fa 8b 9c c4 45 0f 8e e0 eb 88 bb 1a d5 cc da c8 ec 84 75 4f Data Ascii: ]wjLd7}[Q/m2dX1GcBD8#5uDq<\Akfmf4Uz='~wp?m 4uK>bw3*kj$2U(.&;dS6s7-jyUyRb6[%Gnhxla~U)Bh^3NzXV-p\|9av4EuO
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: d7 5f 5c 50 d8 d3 d2 79 ce bd 83 9c a6 0b 77 50 33 6e f4 6c ac a8 63 84 7e 8e 1e a8 6e 9c 57 55 4a da e1 1c 97 9f e1 71 c7 8f b4 c3 b9 b4 b6 8a bb e6 d0 fe 07 00 74 51 10 02 00 00 74 19 55 cc da 81 e7 d7 8b d0 e8 69 0b 8e 65 2c 3c 7e 7d ec da 45 e6 23 64 85 c4 9a da fe 56 ca 9b d3 f1 8f 2b ea 18 f7 d2 df 3f ca 88 4b 2c cc 39 1c 7d bf a2 8e f1 28 33 ee 5a d2 cb 71 fa 36 c4 96 02 64 ea f8 1b bb 23 b3 13 ca 6a ab cf 7d 0c ff eb d9 85 7d 7c 07 51 e3 6f 8c 6e 5f 61 01 c1 05 a1 47 32 cb 0a 2a ea 18 57 92 5e 6c 7f 71 79 b3 dd 44 84 90 b2 a8 b4 a7 a5 f3 e4 5b fb 22 be 7c 2c ab ad be 98 f0 6c f7 ab eb 8d 16 22 2b 2c 5e 50 55 da e8 aa bc aa 52 19 ae 77 3d e7 de c1 e7 39 89 15 75 8c b3 1f c2 2f 7e 7a 36 a3 d7 20 62 55 62 61 ce c2 07 47 be 56 16 67 95 7f 9f 7a 6b 3f Data Ascii: _\PywP3nlc~nWUJqtQtUie,<~}E#dV+?K,9}(3Zq6d#j}}\|Qon_aG2*W^lqyD["\|,l"+,^PURw=9u/~z6 bUbaGVgzk?
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: b6 00 99 82 13 10 f0 39 b3 6f d0 4c 7b 35 23 05 51 29 1c 67 39 19 1b 86 9a d6 47 a9 87 84 a0 48 c9 8a 8b 3c cb 65 85 c5 79 da 99 65 b5 d5 b7 53 df 5e 1f bb 2e e8 63 78 5c 7e c6 f3 9c 84 92 a6 07 c8 28 ac 2e 47 08 c9 0b 4b 10 7d b3 7d df 85 e0 51 d6 ba 8b c9 7e 59 7c aa 55 07 a1 e5 88 8f b2 25 85 af b6 1e db ab 9b 86 c9 89 25 ff f4 a7 30 e4 3e d5 11 42 b7 53 df 3a e9 58 36 2c bc a1 a6 12 c5 33 ca f2 57 3f 09 0c 76 59 5d 53 5f d7 f3 d8 22 ee db d4 4f b3 3e 70 df 48 bf 93 fa 6e 45 1f 17 5c 8d 5e dd 34 b8 43 0f 08 a1 62 c6 bf 59 42 3f f1 65 75 f1 d3 b3 f5 36 6e 7d 94 7a 70 7f 23 f1 b9 be 1e 65 c6 29 88 48 ea 48 29 e2 b3 fd 4c fc 93 f4 92 6f 1e bd 06 e1 2c 7d 4b a5 1e cb c3 78 3b 2e e1 d1 1f 56 5b 8d d1 96 56 22 5a fe 32 42 62 39 15 45 2d a9 e1 22 f3 11 4b 2d Data Ascii: 9oL{5#Q)g9GH<eyeS^.cx\~(.GK}}Q~Y\|U%%0>BS:X6,3W?vY]S_"O>pHnE\^4CbYB?eu6n}zp#e)HH)Lo,}Kx;.V[V"Z2Bb9E-"K-
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 57 11 93 b5 56 d6 25 96 f0 bf be 1e 7e 8e 19 a0 6a 64 db dd e0 5b 65 49 5a c9 37 46 7d dd ab 9c a4 01 aa 46 03 54 8d 1e 67 c6 b1 1b 04 16 cd 15 b5 e3 0b 32 6e a6 bc c1 dd 61 9a ba c4 1a b2 52 d2 bd 30 7a d5 c6 88 20 ee 09 50 f3 ab 4a 1f 7c 8e e6 ee fe 80 10 5a d4 7b e4 8d e4 57 dc a9 13 fe 43 e6 5e 4b 7a 19 f1 e5 63 c3 39 02 78 f6 b2 f7 f5 0d 4b a5 1e ee c6 03 79 96 ef b0 9f 56 c7 aa 3f db b2 b9 57 ab ea 6a ab ff 7f 04 04 00 00 f8 cd 41 08 00 00 d0 65 04 c6 3f 66 b2 59 97 5c 56 1b cb ab d3 29 02 f2 c2 12 1e c6 03 67 f6 1a cc 67 c0 e7 16 aa ac 63 9c 1f b5 d2 5a 59 57 9c 26 34 d1 a0 df d6 fe 53 56 3e 3a fd d3 a5 5d 4b 7a 19 f5 2d ed fa d8 75 3d e5 54 25 05 45 fc 86 cc 11 a3 09 1d 8f 79 88 f3 b7 0f bc bb 7d 7e d4 0a 1b 15 7d 31 9a 90 ab 9e cd 96 7e 93 1b 2d Data Ascii: WV%~jd[eIZ7F}FTg2naR0z PJ\|Z{WC^Kzc9xKyV?WjAe?fY\V)ggcZYW&4SV>:]Kz-u=T%Ey}~}1~-
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 9b 68 9e 3d ce 8c 1f 7a 71 d3 9e 81 1e fb 06 cd fc 5a 51 bc fb d5 75 dc 55 be a1 fc aa d2 84 c2 2f 3e 83 67 5d fc f4 8c 7b f9 b3 ec 4f bb ec a7 d7 b1 ea 5f 70 dd a9 9e 7b 2f e0 f0 b0 f9 d9 8b 4f 93 49 a4 b0 8c d8 c3 d1 f7 68 e4 66 6e aa 6f 8e bc 90 57 55 72 d8 71 81 a2 a8 54 42 61 f6 e8 2b db de fe d3 e0 7c 9d 9b 54 c4 a8 a8 f3 ba 81 e7 9c 73 be bc ed 2f bb 89 a7 46 2e 61 b2 59 6f 72 93 f1 3c 73 7b 07 7a 4c e9 69 4f 4c 93 c9 6d f9 a3 93 4f 32 e3 97 5a 38 f9 0c 9e 25 40 a6 66 96 e5 07 44 dd dd f7 e6 c6 e7 7f 52 c4 f9 1c 04 9e 5d f3 7f 0b 8d 6a aa f0 6e 22 92 e3 f4 6c 10 42 c4 d4 80 2c 0e 9b ba 73 74 41 75 99 c5 e9 e5 7e 43 66 a7 2d 38 c6 e6 70 42 d3 df 5b 9e 5a de 70 9a c6 46 dd 18 b7 9e 67 89 dd d9 35 43 35 cd c4 05 85 d6 86 9f c1 27 cf ac bb fe 0f 27 fd Data Ascii: h=zqZQuU/>g]{O_p{/OIhfnoWUrqTBa+\|Ts/F.aYor<s{zLiOLmO2Z8%@fDR]jn"lB,stAu~Cf-8pB[ZpFg5C5''
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 50 50 10 6e fe 03 00 00 00 00 00 00 40 a7 60 b3 d9 b5 b5 b5 b8 75 d6 71 7b c9 fc 9e 37 f7 e4 de f8 ec cf 1d b7 0b d0 12 26 6a da 01 ee 9e 9a f2 4a 3f 5d c2 4f 86 00 70 f2 3f 9d 4e ff e9 1d 03 00 00 00 00 00 00 00 68 17 35 35 35 1d d7 29 e0 7e dc 9b c5 67 fc aa 6a 6b 3a a2 70 d0 5a 22 82 74 9f a9 8b 9c 4c fb fe dc cb 5b 1d 02 80 e4 7f 00 00 00 00 00 00 00 f8 dd 74 44 a7 80 1a 66 dd 96 eb 81 90 fc ff 1b f2 e8 3f 6c e3 e8 69 42 34 c1 d6 be b0 75 21 00 9c 5e 42 a7 d3 61 d8 7f 00 00 00 00 00 00 00 f8 ad 70 38 9c 9a 9a 9a f6 ea 14 90 f9 3d 6f fa 91 1d 29 79 39 ed 51 35 d0 fe f4 14 55 4f ce 59 dd da 4e 01 ad eb c6 cf e1 70 04 04 04 a0 fd 0f 00 00 00 00 00 00 00 bf 1b 12 89 24 20 20 80 13 b7 db 6e c7 ad 20 68 ff ff ce 92 be 7d f1 be 73 b1 b5 af 6a 45 08 80 c3 e1 Data Ascii: PPn@`uq{7&jJ?]Op?Nh555)~gjk:pZ"tL[tDf?liB4u!^Bap8=o)y9Q5UOYNp$ n h}sjE
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 48 9b eb 08 f8 b9 75 eb 56 50 50 90 92 92 92 9f 9f 5f 67 d7 e5 77 91 93 93 73 f3 e6 cd b8 b8 b8 8a 8a 0a 19 19 99 01 03 06 38 39 39 11 ff 20 f8 28 28 28 58 b8 70 e1 d6 ad 5b f5 f4 f4 7e 49 4d 7f 2f 29 29 29 eb d7 af 0f 0c 0c 6c fb e5 df 16 95 95 95 81 81 81 ef df bf a7 d1 68 fd fb f7 9f 30 61 02 9f 1f a9 49 49 49 97 2f 5f ce cc cc 64 b1 58 0a 0a 0a 0e 0e 0e 03 07 0e 6c 97 59 87 00 f8 13 c4 c5 c5 8d 1f 3f 3e 39 39 b9 d1 b5 2c 16 cb db db 3b 34 34 f4 cc 99 33 bd 7a f5 fa e5 b5 eb c2 52 52 52 ae 5e bd 9a 94 94 44 26 93 95 95 95 1d 1d 1d 6d 6d 6d db 7d 42 f4 36 e6 f3 d7 d7 d7 d3 68 b4 76 a9 09 85 42 c1 99 05 0d 57 a5 e5 b7 e7 7c 6d f6 86 66 47 67 af 94 17 97 22 96 ac 77 99 f6 e8 43 d4 ac a3 de a5 d5 95 fc 5f 6b a2 ae b3 c4 71 ec dd 98 57 d7 de 44 b4 63 95 5a Data Ascii: HuVPP_gws899 (((Xp[~IM/)))lh0aIII/_dXlY?>99,;443zRRR^D&mmm}B6hvBW\|mfGg"wC_kqWDcZ
2025-03-19 10:29:49 UTC	1369	IN	Data Raw: 83 07 e7 e7 e7 37 5c f5 fd fb 77 47 47 c7 3b 77 ee e0 dc 87 a6 94 96 96 3a 39 39 c5 c4 c4 98 98 98 b4 4b 95 00 90 95 95 a5 d1 68 f9 f9 f9 5a 5a 5a 07 0f 1e 64 b1 58 69 69 69 79 79 79 a3 46 8d 9a 32 65 ca a3 47 8f 6e dd ba 55 58 58 28 2f 2f 3f 6e dc 38 3b 3b 3b e2 85 31 31 31 41 41 41 5f bf 7e 95 97 97 9f 34 69 12 b1 3c 3c 3c fc ee dd bb 7b f7 ee 25 96 ec dc b9 53 4b 4b cb cd cd 0d 77 db 09 0e 0e 8e 88 88 a8 ab ab eb d1 a3 c7 b4 69 d3 d4 d4 d4 8e 1d 3b 16 16 16 86 67 fd e8 d5 ab d7 86 0d 1b 3e 7f fe 7c f6 ec d9 f4 f4 74 1a 8d 66 68 68 38 65 ca 94 46 7f e2 87 85 85 55 57 57 8f 1a 35 aa d1 b7 76 eb d6 2d 51 51 d1 81 03 07 b6 f7 31 eb 34 4f 9e 3c b1 b4 b4 a4 d3 e9 fd fa f5 db b1 63 87 87 87 87 90 90 10 4e 68 f7 f4 f4 5c bf 7e fd 99 33 67 b2 b3 b3 c5 c5 c5 87 Data Ascii: 7\wGG;w:99KhZZZdXiiiyyyF2eGnUXX(//?n8;;;111AAA_~4i<<<{%SKKwi;g>\|tfhh8eFUWW5v-QQ14O<cNh\~3g

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:49 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIhODOAQii5M4BCK/kzgEI6eTOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:49 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:49 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-n6XclqkIHvWaavqx3hfYsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:49 UTC	75	IN	Data Raw: 33 33 36 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 64 65 6c 32 20 70 6c 61 79 6f 66 66 73 22 2c 22 67 75 74 65 20 7a 65 69 74 65 6e 20 73 63 68 6c 65 63 68 74 65 20 7a 65 69 74 65 6e 22 2c 22 73 68 65 6c 6c 79 20 34 20 67 65 6e Data Ascii: 336)]}'["",["del2 playoffs","gute zeiten schlechte zeiten","shelly 4 gen
2025-03-19 10:29:49 UTC	754	IN	Data Raw: 65 72 61 74 69 6f 6e 22 2c 22 75 6e 69 71 6c 6f 20 6d c3 bc 6e 63 68 65 6e 22 2c 22 69 74 61 6c 69 65 6e 20 66 75 73 73 62 61 6c 6c 22 2c 22 6d 61 6c 74 65 73 65 72 20 68 69 6c 66 73 64 69 65 6e 73 74 20 66 72 65 69 62 75 72 67 22 2c 22 72 69 70 70 6c 65 20 78 72 70 22 2c 22 67 6f 6f 67 6c 65 20 70 69 78 65 6c 20 39 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 69 41 49 6b 6b 34 53 47 77 6f 58 56 48 4a 6c 62 6d 52 7a 49 47 4a 6c 61 53 42 54 64 57 4e 6f 59 57 35 6d 63 6d 46 6e 5a 57 34 6f 43 67 5c 75 Data Ascii: eration","uniqlo mnchen","italien fussball","malteser hilfsdienst freiburg","ripple xrp","google pixel 9a"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"CiAIkk4SGwoXVHJlbmRzIGJlaSBTdWNoYW5mcmFnZW4oCg\u
2025-03-19 10:29:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	714	OUT	GET /vi_webp/HuVH_9hnUu8/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	631	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 40260 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 10:29:50 GMT Expires: Wed, 19 Mar 2025 12:29:50 GMT Cache-Control: public, max-age=7200 ETag: "1668082410" Content-Type: image/webp Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:50 UTC	747	IN	Data Raw: 52 49 46 46 3c 9d 00 00 57 45 42 50 56 50 38 20 30 9d 00 00 10 11 04 9d 01 2a 00 05 d0 02 3e 6d 32 96 49 24 22 ac b1 22 51 99 f2 20 0d 89 67 6e d8 ca 69 f4 f6 0e cb 16 cd 81 ca 21 cb 97 1f ad 83 0f 03 fe c9 cb 3b 9c ff 81 f0 57 6d 8f f4 7e a5 7f d1 b5 41 3c ca b3 6e a2 bf fe 1f 34 de 7b ff 11 ec 8d a2 9f 9f dd 21 bd 89 db dc 1e 7a bd 31 e6 c3 d3 af eb 7f 61 2f d6 bf 10 0f 84 1f b5 ff a6 fe e7 7f 60 7f ef 7f 86 f7 41 ff bb fe e7 db df ed a7 b0 07 f4 9f f3 7e b5 7f f2 fd 9f 7f bc 7f e3 f6 1b fd cb f5 72 ff bf fb 6b ff ff e5 47 fa d7 fd 2f dc 9f 81 4f da 5f ff fd 9d 3d 25 fe 1f fb 23 f9 19 f0 5f e4 5f cd ff a4 fc cf fe ef ff 77 da 1e c8 5e e2 7e 54 69 a7 fc f3 f2 1f ea ff c7 7e eb fc 4a ff 2f ff 2f e4 67 a6 7c 04 7f 2d fe 7f fe eb fb ff ee 27 e7 07 38 48 07 Data Ascii: RIFF<WEBPVP8 0*>m2I$""Q gni!;Wm~A<n4{!z1a/`A~rkG/O_=%#__w^~Ti~J//g\|-'8H
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 8b 74 ca 5b ef 4f fd aa df d3 77 c8 18 e9 c0 0b e1 f6 22 2d bd 6e b2 dc ad a5 5e bd 1f 9a 8b 0b c2 3c 01 37 50 34 7b aa 1f cd d6 ef 6b 2b 74 67 37 2c 3d 7c 92 d2 c6 76 5e b4 4f b4 a9 ea 9e f8 4b 53 3e 6d 5d a4 59 73 17 35 65 f0 c8 2a 0b 7f 7a 94 03 bd c4 9e c4 3c fd bb 28 02 29 4f 17 de b6 c6 54 2e 39 4e 05 3c 80 51 51 d9 80 a7 77 99 82 bb b9 9d 7c cd b3 62 48 e5 24 4d 0c c1 2c f5 e9 a9 81 c4 06 fd 14 3c 15 a6 e1 fa cc 4c 20 3a de 68 a0 47 04 63 a8 27 f9 03 08 0b 5e 96 76 b2 a9 dc 53 54 8b 40 bd 0a d2 2d eb 51 57 0c 33 e1 8e 55 b3 86 20 9f 01 7c 08 72 5e 7a 3f eb ca 60 5d a2 f5 fc c9 58 90 2a e4 d6 68 9f 86 ff ba 12 89 45 86 32 9f 1a 79 da b6 13 57 7f 25 b5 13 06 de 45 9d c6 5c 89 2b 8b d5 d6 fd 66 3a a1 3b d5 58 a3 8f c8 99 51 f1 e1 09 c8 d1 03 c7 e7 c9 Data Ascii: t[Ow"-n^<7P4{k+tg7,=\|v^OKS>m]Ys5ez<()OT.9N<QQw\|bH$M,<L :hGc'^vST@-QW3U \|r^z?`]XhE2yW%E\+f:;XQ
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: cd 70 ae ea ea 29 58 3e 0f 3f 38 7f b5 63 8f f4 f7 3e 77 01 38 08 6c 7c 5a cb ed 2d 7f c2 0b 2d 18 b7 19 fb 09 bb 05 80 cc b7 1e c3 35 63 ac 00 a9 75 3f e5 ef 75 d9 fa e8 38 fb 5c 7f 33 3d 73 07 d5 36 8f df ad ce 79 38 18 eb ae 5f ab a6 f4 c2 76 ed 30 b5 50 d8 ef b9 ba 96 d6 1b dc 7e 3d 0b 0c 0c 3a c9 2c 28 43 54 83 23 7a 57 91 8d 87 35 b9 7a 3c 45 47 2b ff 47 38 1b 2b cf bb c0 26 59 cb 85 df 9b 95 af 35 fd 1d 91 f8 31 7c 8a 92 df ed be 50 4f 2f 94 3d ed 40 5f 62 37 5b e0 bf 90 96 10 9f 4c cf 1f 33 ef 6f c6 b8 84 3e 20 91 30 76 66 d4 0b 93 73 ad 98 39 41 2b 35 62 e6 aa cd a8 3d 57 22 ee 13 ce 73 fd d0 77 05 2a 3b e5 82 00 94 a6 4d bd 78 b5 11 2c d9 22 73 e8 80 d8 51 54 a1 a1 4b 4a 66 b5 b6 a8 e2 24 d7 a3 c5 70 57 d8 c3 74 8e 5b 95 77 eb 3d e4 74 ed 58 d7 Data Ascii: p)X>?8c>w8l\|Z--5cu?u8\3=s6y8_v0P~=:,(CT#zW5z<EG+G8+&Y51\|PO/=@_b7[L3o> 0vfs9A+5b=W"sw*;Mx,"sQTKJf$pWt[w=tX
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: fb af 64 74 25 a5 5b 0f 01 19 5c 1c 5a 2c 10 d6 e6 b4 81 25 a8 ef 0e bc 5c c1 2c e9 ab a7 77 01 66 23 ef db 1a f6 72 b9 1c 97 2d c5 5e b1 80 8d a7 9d 2c ab a1 24 e1 2f 08 b3 23 b5 19 4b c5 a3 8a 55 ff 3a 63 c1 a3 85 39 d0 4b af 42 0b 1b b4 9d e3 60 d9 08 30 4b 72 ee 5e e1 2d ec 4e 78 f9 aa 44 2b 30 38 de 96 55 10 5b 0f b9 08 1f 9f 43 5e 5f d1 a3 b4 bf 23 6b d1 00 da 64 3e d8 70 51 4a 3d 38 1e ee fc 4f 76 7b ce 85 1c 80 13 d1 0b e9 59 04 f9 c1 1a 72 e7 a5 13 c5 6a f6 4e a2 99 7b 9f 4e 10 ec 7d 58 32 0e 75 86 d5 88 0d a3 7b 18 31 f1 bc 57 7c 8d c1 d4 47 03 b7 55 57 22 48 28 0c ca f4 5d 0f 90 dd d9 86 7a 4c 40 2a 14 b1 da ac ae 9c f4 fd ba 14 b4 ce 45 d6 e3 49 f0 4b 78 c6 1a 69 3f 7e e7 da 9e fa 80 2f a3 47 e9 67 97 2b ac eb 63 c3 74 0f 37 e2 db 4d 4d 51 e5 Data Ascii: dt%[\Z,%\,wf#r-^,$/#KU:c9KB`0Kr^-NxD+08U[C^_#kd>pQJ=8Ov{YrjN{N}X2u{1W\|GUW"H(]zL@*EIKxi?~/Gg+ct7MMQ
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 75 aa 19 92 36 2f 31 4a cb 86 94 2e 70 42 83 50 65 67 c1 0b 0b 34 37 08 f3 35 b4 4f ef 3a 5e d7 1f 43 e6 61 b0 f4 e5 23 bf e0 a3 37 64 cd df 5a fc 37 54 70 7b bb c8 12 29 22 eb d5 3c 35 1c 26 a4 fc 4b 07 10 aa 98 08 ed f2 27 b4 73 9e 3c 1a a9 b5 74 da 56 74 84 a5 95 3f 30 b3 e1 b4 3d 83 16 84 0b c2 1c fb b4 e4 c7 f8 16 6c 46 65 01 0f 66 73 e0 5c b4 b9 2b 2a 10 f2 82 ab 0b 7a ae dd b2 1d c3 89 92 b6 89 cb 4e 7f ba 6b 66 f8 37 f2 e2 4c a0 94 9b 42 70 cb d5 f8 b9 f9 77 0c 3e 21 6f cc 59 61 18 f2 75 8b e6 cf 7d 29 fe a1 39 94 ef fa cb 18 27 da 99 56 ce 41 57 fd 83 66 dd 3e ee 78 36 b4 14 59 04 47 e8 d8 d0 97 92 48 1f 39 c1 79 ef ba 90 d1 dc ab 23 77 73 7c 74 c3 a5 02 76 e3 15 d9 47 f5 80 12 eb 93 ec cf 08 74 6f b6 61 4e b2 8e 18 44 b7 74 16 4f 36 29 bf d2 c6 Data Ascii: u6/1J.pBPeg475O:^Ca#7dZ7Tp{)"<5&K's<tVt?0=lFefs\+*zNkf7LBpw>!oYau})9'VAWf>x6YGH9y#ws\|tvGtoaNDtO6)
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: bf 73 e1 46 8c aa 3a 1b e2 86 9c 09 bf 05 da cd b5 cd e7 45 c2 ce ce e0 0a 54 bf bd e2 19 e8 73 6b cb dd 09 4d de 56 95 4d 0d 54 43 aa 48 c5 bd ce 38 20 9b a8 48 3f 57 f2 6a 5a 1a 93 2f bc 99 11 2d e8 6b eb dd 87 3a 85 d1 5c ff d1 40 30 b5 35 eb e6 65 d2 eb a8 8e d0 c6 69 4f 99 9e 93 33 6e 0d c6 80 9d 57 73 16 0f 74 28 86 9b a4 25 9b b2 ff c3 98 f1 27 22 a2 07 18 45 ed 23 c4 3d a3 fe 52 5f c9 e2 83 88 7a 08 72 fc 1c 50 aa 25 d2 45 30 49 eb a4 92 cc b5 83 ab 10 e1 f4 e0 53 d1 9f f2 e0 b6 d7 2d 0f 3d ec db 80 19 7c 19 80 98 fb 06 ee ed 42 55 ca c0 1c ea cb bb 73 e4 25 59 97 d5 7d 48 86 1a 0c 06 5d 91 e0 34 68 19 fe 9c c9 bb 72 3a 0c 35 cb 12 f5 94 53 ed 12 b1 32 69 96 4f db 4f 5b 9e 64 cd ef d8 f2 92 7e b4 c8 a9 25 90 1c 5d b6 09 e4 41 6f ab 29 7f c8 86 0f Data Ascii: sF:ETskMVMTCH8 H?WjZ/-k:\@05eiO3nWst(%'"E#=R_zrP%E0IS-=\|BUs%Y}H]4hr:5S2iOO[d~%]Ao)
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 03 0c 91 ee 44 0f 3c 54 16 ac 6e 0d 2b d7 45 15 30 a3 b3 f1 88 6c 2e 36 b5 5d 6d 16 ad 62 4f 60 ea f4 c2 0f 2f 98 e4 55 03 98 11 33 2d 56 31 07 96 5f 4c ef 61 d3 a8 fd c8 fd ac 92 4a 16 25 6c e0 a7 c2 cf 3f 55 78 09 48 d0 2f 5a 8a 69 f6 ed 0b f0 2f 4a 1d 19 de 29 a4 c7 c8 db 1e c7 c1 36 cc b0 41 f4 37 e3 3b 06 73 3b 29 23 58 a5 01 dd 0c 30 19 63 f6 69 0f 94 a9 3c a1 56 fd 8f c0 f3 83 55 19 24 42 b1 bb d7 ae df 74 b9 af 3d a6 c0 04 2d 29 a1 96 ea 10 2e 49 3f e5 f0 a5 b7 50 5e a2 fa b7 49 51 6a 85 16 f9 0a 5a d7 12 43 84 68 37 65 c6 70 70 1a 9b 31 74 dc d7 e5 7c 1e bb d2 12 a9 a1 30 0b 46 32 e2 b7 93 f5 d1 b0 49 d7 77 cd 63 fc 7b 25 a8 56 a1 e6 3c e0 e6 95 ef 24 15 86 56 a0 89 be 41 fe 47 9a 51 89 6e 26 d1 10 a3 6c 5e 02 a3 9e 0d fe 65 85 16 54 f2 40 71 e6 Data Ascii: D<Tn+E0l.6]mbO`/U3-V1_LaJ%l?UxH/Zi/J)6A7;s;)#X0ci<VU$Bt=-).I?P^IQjZCh7epp1t\|0F2Iwc{%V<$VAGQn&l^eT@q
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 50 f0 65 24 c0 ba b6 7d 11 14 38 b3 17 4a b0 41 cf 08 9d 99 8f f4 11 1f 88 3b fc b3 0b 43 f8 30 a5 15 d3 07 70 42 0b 5f 0b 63 af 41 77 bf 1c 48 fd 9d 6c 48 f6 10 69 0b 9e 7a 4d 67 90 da df 7e 30 1b 18 b3 5a f2 76 a0 e5 de 29 03 88 8e 6f 63 8a b6 5c 5c 35 ec ab 1b a0 c5 b0 e2 33 85 91 4a a5 b9 e0 d3 53 37 ef db 48 bf d7 ed 23 c0 36 e6 c2 41 2f df 09 88 79 c8 b1 1e a3 11 c7 82 a8 00 fd ac b5 a8 aa ec fc a8 f8 0d 4c a9 00 fc 4b e0 79 f3 7e 2c c8 cb 2d 9e 9f 8b 3c ba e6 71 16 44 7d a5 2d d9 43 36 45 00 10 65 77 98 bc ae 4f 84 da f2 c2 c9 fe aa b1 6f 05 ed 3f 90 11 06 eb b0 6e 61 55 9b 9a 47 ac bf a9 13 dd 2b df 83 70 1e 80 ad 9f 52 a0 fe 38 af d5 81 99 af eb a8 90 a7 6a 7f 87 3d 89 79 05 b1 c5 a5 73 71 d0 a6 5b 78 0d 0c 9c 8b aa d2 94 a6 e9 88 89 a6 b0 46 98 Data Ascii: Pe$}8JA;C0pB_cAwHlHizMg~0Zv)oc\\53JS7H#6A/yLKy~,-<qD}-C6EewOo?naUG+pR8j=ysq[xF
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: ce 2f ec 27 4b 56 e0 08 1b 60 84 5b 72 75 db 0c a5 9e d9 ca 69 e9 96 9e 7f 07 28 ce 7c 45 76 60 fc a1 e6 21 74 42 22 29 67 6e a7 9d 30 83 a3 b2 d9 74 f3 b5 f9 47 0e 7c 47 16 91 3e dc 3e e7 36 8c 9b 15 af 42 ee 02 8a 37 4b c9 85 5c 56 51 ae 43 05 b3 2b 4a 6e 6c 41 a4 4d ff 1a e3 7b 59 4d d7 90 19 49 4c b9 54 70 7d 8b d8 98 b5 ac bf 75 9d 72 48 c2 30 4c f0 e7 c0 d8 ec f9 ab 93 47 d7 23 c9 5a ae c1 64 ad 7c 51 ee 94 e3 f4 a9 0a 89 dc c6 ac 02 55 b0 34 e2 62 b1 3f 6f 6e c5 2d 87 fe 7b 36 cd b6 2a 80 b6 ab 0b 11 21 07 5d e8 ab 8f fd 16 8a dd 37 2b 85 89 7e e3 95 75 6d 65 5b c9 b9 92 c1 df cb 6c 85 0a 79 0a 8e 79 ad 95 e7 d7 af c3 71 16 64 32 00 94 26 f8 a2 14 a2 42 4e 7e 77 25 2c 39 15 68 d7 3e 28 68 cc 99 e9 54 12 7d c0 29 8f 37 0d ba 40 37 69 94 9e 7e 37 bd Data Ascii: /'KV`[rui(\|Ev`!tB")gn0tG\|G>>6B7K\VQC+JnlAM{YMILTp}urH0LG#Zd\|QU4b?on-{6*!]7+~ume[lyyqd2&BN~w%,9h>(hT})7@7i~7
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 4a 5d e7 9c 76 47 2d 96 a6 7f be 28 5f 6f b3 33 27 7f 95 60 e8 9c 1b b7 44 2a 2d 5c d3 fb 20 70 53 83 e4 40 f8 20 0f 02 77 b7 de de 35 a7 61 ce 54 f2 92 e9 f1 65 4b 88 61 4f a6 99 49 12 00 5c 8d 68 71 03 4c da be 81 68 ec d1 a6 4a ef c7 32 f2 6e 15 fd a3 28 0a 54 0d 8c 36 a1 c8 4f 89 05 0d 61 f8 94 83 48 09 98 46 37 51 ee dc 37 af 5a a0 72 e8 35 95 3a 1d 3a 06 60 6e f5 ae 8b 8f 10 0f c7 7f 9e 2e e6 c0 09 f6 b4 ba c4 51 9c 32 b6 a9 51 4d c7 04 f7 e6 37 d2 94 93 df b2 cb d2 50 71 0c 75 c8 54 a7 71 20 6b 41 d4 77 b0 0d 02 e3 17 7e 12 55 d1 d5 61 41 4b 6b d9 1d 6d e3 fc f3 1b 4f fa 76 63 5a 70 d4 44 d3 15 d1 f1 50 89 66 5f ad fa 0c 25 eb 4a f1 66 e7 b1 df 0f 84 d8 a2 4e d8 65 57 08 d1 60 01 31 49 31 7e eb 70 5c b4 a6 1a 86 99 22 fd 99 dd 78 0d d9 00 82 60 df Data Ascii: J]vG-(_o3'`D*-\ pS@ w5aTeKaOI\hqLhJ2n(T6OaHF7Q7Zr5::`n.Q2QM7PquTq kAw~UaAKkmOvcZpDPf_%JfNeW`1I1~p\"x`

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	648	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 10:14:56 GMT Expires: Wed, 19 Mar 2025 10:29:56 GMT Cache-Control: public, max-age=900 Age: 894 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:50 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	670	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Wed, 19 Mar 2025 10:29:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	671	OUT	GET /js/th/_t1GFu6ymA48_djLKSLwGyGpFUFJ2k6dr6Vox9QB4jk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 58917 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Mar 2025 18:10:36 GMT Expires: Wed, 18 Mar 2026 18:10:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 10 Mar 2025 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 58754 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:50 UTC	567	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 77 3d 4e 2c 4a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 79 3d 75 29 3a 79 3d 3d 33 32 26 26 28 6d 2e 63 6f 6e 73 6f 6c 65 5b 4c 5d 28 6c 2e 6d 65 73 73 61 67 65 29 2c 79 3d 61 29 7d 7d 7d 63 61 74 63 68 28 71 29 7b 69 66 28 44 3d 3d 33 39 29 74 68 72 6f 77 20 71 3b 44 3d 3d 38 31 26 26 28 6c 3d 71 2c 79 3d 36 39 29 7d 7d 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 56 2e 63 61 6c 6c 28 74 68 69 73 2c 58 29 7d 2c 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 58 2c 75 29 7b 72 65 74 75 72 6e 28 75 3d 78 28 37 37 2c 35 30 2c 39 35 2c 38 35 2c 22 61 64 22 2c 6e 75 6c 6c 2c 22 65 72 72 6f 72 22 29 29 26 26 58 2e 65 76 61 6c 28 75 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 22 31 22 29 Data Ascii: w=N,J=m.trustedTypes,y=u):y==32&&(m.console[L](l.message),y=a)}}}catch(q){if(D==39)throw q;D==81&&(l=q,y=69)}}},v=function(X){return V.call(this,X)},m=this\|\|self;(0,eval)(function(X,u){return(u=x(77,50,95,85,"ad",null,"error"))&&X.eval(u.createScript("1")
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 72 75 65 2c 56 2c 4a 5b 53 5d 2c 75 2c 76 29 2c 6d 3d 36 30 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 35 31 29 6d 3d 53 3c 4a 2e 6c 65 6e 67 74 68 3f 38 37 3a 36 32 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 37 39 29 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 2c 4a 3d 79 53 28 77 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 54 29 7b 66 6f 72 28 54 3d 31 3b 54 21 3d 38 35 3b 29 54 3d 3d 31 3f 54 3d 44 3f 35 30 3a 38 35 3a 54 3d 3d 35 30 26 26 28 61 26 26 58 47 28 61 29 2c 58 3d 6c 2c 44 28 29 2c 44 3d 76 6f 69 64 20 30 2c 54 3d 38 35 29 7d 2c 21 21 61 29 2c 56 3d 4a 5b 30 5d 2c 75 3d 4a 5b 31 5d 2c 71 3d 7b 68 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 54 2c 4e 2c 4c 2c 6b 2c 68 2c 41 29 7b 66 6f 72 28 41 3d 38 31 3b 41 21 3d 34 3b 29 69 66 28 41 3d 3d Data Ascii: rue,V,J[S],u,v),m=60;else if(m==51)m=S<J.length?87:62;else if(m==79)D=function(){},X=void 0,J=yS(w,function(l,T){for(T=1;T!=85;)T==1?T=D?50:85:T==50&&(a&&XG(a),X=l,D(),D=void 0,T=85)},!!a),V=J[0],u=J[1],q={hot:function(l,T,N,L,k,h,A){for(A=81;A!=4;)if(A==
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 6d 70 6f 6e 65 6e 74 20 73 74 61 74 65 22 29 3b 7d 6d 3d 36 37 7d 7d 7d 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 58 2c 79 2c 61 2c 77 2c 56 2c 4a 2c 75 2c 76 2c 53 2c 6d 2c 44 29 7b 7b 6d 3d 31 36 3b 77 68 69 6c 65 28 6d 21 3d 34 35 29 69 66 28 6d 3d 3d 38 29 6d 3d 4a 3f 32 34 3a 39 31 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 33 39 29 6d 3d 79 3f 31 34 3a 35 33 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 37 34 29 6d 3d 56 3f 36 34 3a 32 30 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 31 34 29 77 3d 74 68 69 73 2e 74 79 70 65 3d 79 2e 74 79 70 65 2c 56 3d 79 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 26 26 79 2e 63 68 61 6e 67 65 64 54 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 3f 79 2e 63 68 61 6e 67 65 64 54 6f 75 63 Data Ascii: row Error("Invalid component state");}m=67}}}},f=function(X,y,a,w,V,J,u,v,S,m,D){{m=16;while(m!=45)if(m==8)m=J?24:91;else if(m==39)m=y?14:53;else if(m==74)m=V?64:20;else if(m==14)w=this.type=y.type,V=y.changedTouches&&y.changedTouches.length?y.changedTouc
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 2c 79 5b 6c 47 5d 3d 32 37 39 36 2c 6d 3d 36 37 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 35 32 29 6d 3d 28 58 26 31 30 38 29 3d 3d 58 3f 31 35 3a 36 37 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 31 33 29 4a 3d 79 2e 74 6f 45 6c 65 6d 65 6e 74 2c 6d 3d 32 34 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 32 33 29 6d 3d 28 58 26 34 35 29 3d 3d 58 3f 38 30 3a 36 35 3b 65 6c 73 65 20 69 66 28 6d 3d 3d 36 34 29 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 56 2e 63 6c 69 65 6e 74 58 21 3d 3d 76 6f 69 64 20 30 3f 56 2e 63 6c 69 65 6e 74 58 3a 56 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 56 2e 63 6c 69 65 6e 74 59 21 3d 3d 76 6f 69 64 20 30 3f 56 2e 63 6c 69 65 6e 74 59 3a 56 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 56 2e 73 63 72 65 65 6e 58 7c 7c 30 2c Data Ascii: ,y[lG]=2796,m=67;else if(m==52)m=(X&108)==X?15:67;else if(m==13)J=y.toElement,m=24;else if(m==23)m=(X&45)==X?80:65;else if(m==64)this.clientX=V.clientX!==void 0?V.clientX:V.pageX,this.clientY=V.clientY!==void 0?V.clientY:V.pageY,this.screenX=V.screenX\|\|0,
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 6f 72 28 76 61 72 20 6c 3d 36 33 3b 6c 21 3d 36 31 3b 29 69 66 28 6c 3d 3d 34 32 29 7b 76 61 72 20 54 3d 6e 68 28 22 6c 6f 61 64 22 2c 66 61 6c 73 65 2c 4a 2c 4c 29 3b 6c 3d 32 32 7d 65 6c 73 65 20 69 66 28 6c 3d 3d 34 39 29 7b 76 61 72 20 4e 3d 21 4a 2e 44 2e 6c 65 6e 67 74 68 3b 5a 75 28 33 32 2c 30 2c 4c 2c 4a 29 2c 4e 26 26 66 28 35 39 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 4a 2c 66 61 6c 73 65 29 2c 6c 3d 32 32 7d 65 6c 73 65 20 69 66 28 6c 3d 3d 32 38 29 6c 3d 4a 2e 76 3f 36 34 3a 34 31 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 34 38 29 5a 75 28 33 39 2c 30 2c 4c 2c 4a 29 2c 54 3d 66 28 36 33 2c 66 61 6c 73 65 2c 66 61 6c 73 65 2c 4a 2c 66 61 6c 73 65 29 2c 6c 3d 32 32 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 34 31 29 53 26 26 6d 26 26 53 2e 72 65 6d 6f 76 65 Data Ascii: or(var l=63;l!=61;)if(l==42){var T=nh("load",false,J,L);l=22}else if(l==49){var N=!J.D.length;Zu(32,0,L,J),N&&f(59,false,false,J,false),l=22}else if(l==28)l=J.v?64:41;else if(l==48)Zu(39,0,L,J),T=f(63,false,false,J,false),l=22;else if(l==41)S&&m&&S.remove
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 74 68 3b 2b 2b 76 29 69 66 28 75 3d 4a 5b 76 5d 2c 21 75 2e 4f 74 26 26 75 2e 6c 69 73 74 65 6e 65 72 3d 3d 61 26 26 75 2e 63 61 70 74 75 72 65 3d 3d 21 21 77 26 26 75 2e 70 55 3d 3d 56 29 7b 71 3d 76 3b 62 72 65 61 6b 20 61 7d 71 3d 2d 31 7d 44 3d 39 39 7d 65 6c 73 65 20 69 66 28 44 3d 3d 33 35 29 44 3d 28 58 26 32 39 29 3d 3d 58 3f 34 39 3a 31 33 3b 65 6c 73 65 20 69 66 28 44 3d 3d 34 29 77 3d 5b 5d 2c 53 3d 75 3d 30 2c 44 3d 38 37 3b 65 6c 73 65 20 69 66 28 44 3d 3d 32 39 29 44 3d 54 57 3f 37 31 3a 39 36 3b 65 6c 73 65 20 69 66 28 44 3d 3d 34 35 29 56 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 53 2c 4a 29 2c 44 3d 31 33 3b 65 6c 73 65 20 69 66 28 44 3d 3d 38 38 29 44 3d 35 35 3b 65 6c 73 65 20 69 66 28 44 3d 3d 34 39 29 41 72 72 61 79 2e 69 73 41 72 72 Data Ascii: th;++v)if(u=J[v],!u.Ot&&u.listener==a&&u.capture==!!w&&u.pU==V){q=v;break a}q=-1}D=99}else if(D==35)D=(X&29)==X?49:13;else if(D==4)w=[],S=u=0,D=87;else if(D==29)D=TW?71:96;else if(D==45)V.setAttribute(S,J),D=13;else if(D==88)D=55;else if(D==49)Array.isArr
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 6c 2c 54 29 7b 7b 54 3d 37 33 3b 77 68 69 6c 65 28 54 21 3d 31 30 29 69 66 28 54 3d 3d 39 32 29 4a 2e 73 72 63 3d 6e 75 6c 6c 2c 56 5b 46 47 5d 3d 6e 75 6c 6c 2c 54 3d 32 34 3b 65 6c 73 65 20 69 66 28 54 3d 3d 32 30 29 76 3d 77 2e 70 72 6f 78 79 2c 75 3d 77 2e 74 79 70 65 2c 56 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 56 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 75 2c 76 2c 77 2e 63 61 70 74 75 72 65 29 3a 56 2e 64 65 74 61 63 68 45 76 65 6e 74 3f 56 2e 64 65 74 61 63 68 45 76 65 6e 74 28 66 68 28 32 36 2c 61 2c 75 29 2c 76 29 3a 56 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 56 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 56 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 76 29 2c 4f 6f 2d 2d 2c 4a 3d 49 56 Data Ascii: l,T){{T=73;while(T!=10)if(T==92)J.src=null,V[FG]=null,T=24;else if(T==20)v=w.proxy,u=w.type,V.removeEventListener?V.removeEventListener(u,v,w.capture):V.detachEvent?V.detachEvent(fh(26,a,u),v):V.addListener&&V.removeListener&&V.removeListener(v),Oo--,J=IV
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 61 2b 32 26 37 29 3d 3d 58 3f 35 31 3a 35 38 3b 65 6c 73 65 20 69 66 28 75 3d 3d 35 31 29 56 2e 54 3d 28 28 56 2e 54 3f 56 2e 54 2b 22 7e 22 3a 22 45 3a 22 29 2b 77 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 77 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 79 2c 32 30 34 38 29 2c 75 3d 35 38 3b 65 6c 73 65 20 69 66 28 75 3d 3d 33 34 29 72 65 74 75 72 6e 20 4a 7d 2c 76 75 3d 66 75 6e 63 74 69 6f 6e 28 58 2c 79 2c 61 2c 77 2c 56 2c 4a 2c 75 2c 76 2c 53 29 7b 66 6f 72 28 76 3d 39 33 3b 76 21 3d 37 33 3b 29 69 66 28 76 3d 3d 35 32 29 76 3d 34 32 3b 65 6c 73 65 20 69 66 28 76 3d 3d 33 31 29 53 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 69 34 2b 28 74 68 69 73 2e 67 28 29 2d 74 68 69 73 2e 67 61 29 29 2c 76 3d 35 33 3b 65 6c 73 65 20 69 66 28 76 3d 3d 39 33 29 Data Ascii: a+2&7)==X?51:58;else if(u==51)V.T=((V.T?V.T+"~":"E:")+w.message+":"+w.stack).slice(y,2048),u=58;else if(u==34)return J},vu=function(X,y,a,w,V,J,u,v,S){for(v=93;v!=73;)if(v==52)v=42;else if(v==31)S=Math.floor(this.i4+(this.g()-this.ga)),v=53;else if(v==93)
2025-03-19 10:29:50 UTC	1378	IN	Data Raw: 6c 65 6e 67 74 68 3e 30 3f 22 20 22 2b 6d 3a 6d 29 29 2c 71 3d 39 35 29 3a 71 3d 3d 38 34 3f 71 3d 28 61 2e 63 6c 61 73 73 4c 69 73 74 3f 61 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 6d 29 3a 4b 28 35 36 2c 30 2c 6d 2c 4b 28 34 30 2c 22 22 2c 61 29 29 29 3f 39 35 3a 31 31 3a 71 3d 3d 39 32 26 26 28 71 3d 61 2e 63 6c 61 73 73 4c 69 73 74 3f 36 39 3a 38 34 29 7d 29 2c 76 3d 33 34 29 3a 76 3d 3d 33 34 3f 76 3d 58 2b 38 3e 3e 34 3f 33 35 3a 34 35 3a 76 3d 3d 37 30 3f 76 3d 28 58 5e 31 30 29 26 31 30 3f 33 34 3a 38 39 3a 76 3d 3d 34 35 26 26 28 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 3d 77 2e 70 72 6f 74 6f 74 79 70 65 2c 79 2e 41 3d 77 2e 70 72 6f 74 6f 74 79 70 65 2c 79 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: length>0?" "+m:m)),q=95):q==84?q=(a.classList?a.classList.contains(m):K(56,0,m,K(40,"",a)))?95:11:q==92&&(q=a.classList?69:84)}),v=34):v==34?v=X+8>>4?35:45:v==70?v=(X^10)&10?34:89:v==45&&(u=function(){},u.prototype=w.prototype,y.A=w.prototype,y.prototype=

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	758	OUT	GET /ytc/AIdro_kF7wsfgXlAhhOLTdgB178lkxHcHltsgxx7zg7hFUlrvg=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	577	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1276 X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 07:30:34 GMT Expires: Thu, 20 Mar 2025 07:30:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 10756 ETag: "v8" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:50 UTC	801	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 ff db 00 84 00 03 02 02 09 06 0a 08 0b 08 0b 07 0b 0a 07 08 08 08 08 10 08 09 08 07 0e 08 0a 08 0a 08 08 08 08 0b 08 0b 0e 08 10 0a 08 08 06 08 08 08 0a 10 08 08 08 15 0a 09 08 08 17 18 16 08 18 09 08 15 08 01 03 04 04 05 05 05 08 05 05 05 08 06 05 05 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 14 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 19 00 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 09 08 07 06 05 ff c4 00 34 10 00 02 02 01 02 04 Data Ascii: JFIFExifII1PicasaDD4
2025-03-19 10:29:50 UTC	475	IN	Data Raw: 3d 8f 4f 68 2d a7 20 fa 94 96 38 63 41 79 9e 49 24 92 9b 33 b4 8c d2 33 93 34 db 96 76 24 93 fa 93 9a 1d ff 00 01 80 c0 60 43 df 37 3f cc d3 ff 00 2b a3 ff 00 27 c9 45 a0 f0 e7 f0 54 3e 4a af d2 4c a3 d1 60 49 df 3a ff 00 c6 70 ff 00 ca 6a 1f 56 a6 4a 36 df 97 b7 e5 6e 1f f9 23 f5 a6 ca 34 3e 03 01 80 c0 87 fe 6d eb bf 13 4c 3e 3a 65 01 fe a6 c9 45 23 e5 4b 9e 1d 03 89 60 a7 5a bd a1 0d d8 e0 86 13 5e f0 15 65 76 8d 0a 1f 47 72 52 c6 e2 26 70 2b 4b 29 54 d8 b0 8f 7d b2 8d 03 c6 7c 73 53 48 85 ec 6a 16 2b 56 82 3d ba e4 b5 2c 75 d1 4b 1d 95 7a dc a8 ea 66 21 54 03 bb 31 00 6f b8 c0 8b 9e 65 fc d2 e9 7c 69 73 4e 3a 43 4f 2c 5a 6c 16 63 79 24 85 eb ac cd 61 e1 75 f4 92 4e 99 3a 50 46 43 19 61 8b b9 1b 75 77 39 28 a7 1e 5e df 95 b8 7f e4 8f d6 9b 28 d0 f8 0c Data Ascii: =Oh- 8cAyI$334v$`C7?+'ET>JL`I:pjVJ6n#4>mL>:eE#K`Z^evGrR&p+K)T}\|sSHj+V=,uKzf!T1oe\|isN:CO,Zlcy$auN:PFCauw9(^(

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:50 UTC	679	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:50 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Wed, 19 Mar 2025 10:29:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:50 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 50 72 4d 39 4f 35 5f 78 64 57 4c 48 45 38 6f 74 67 50 34 65 53 76 73 45 31 68 45 41 4a 4e 45 4b 79 75 45 46 42 74 62 68 44 6a 47 75 46 6d 79 2d 61 41 71 37 38 69 37 5f 57 49 72 31 78 74 78 6f 36 55 38 44 56 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpPrM9O5_xdWLHE8otgP4eSvsE1hEAJNEKyuEFBtbhDjGuFmy-aAq78i7_WIr1xtxo6U8DV","type":4}
2025-03-19 10:29:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://trezor-io-start-r---starting-auth.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Windows Analysis Report
https://trezor-io-start-r---starting-auth.webflow.io/

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:51 UTC	754	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1099 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:51 UTC	1099	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 37 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 33 34 22 5d 2c 5b 22 4e 6f 74 3a 41 2d 42 72 61 6e 64 22 2c 22 32 34 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 33 34 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 33 34 2e 30 2e 36 39 39 38 2e 33 36 22 5d 2c 5b 33 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 34 32 33 38 30 31 39 30 36 34 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"47",null,[[["Chromium","134"],["Not:A-Brand","24"],["Google Chrome","134"]],0,"Windows","10.0.0","x86","","134.0.6998.36"],[3,0]]],1828,[["1742380190649",null,null,null,null,
2025-03-19 10:29:51 UTC	495	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 19 Mar 2025 10:29:51 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-03-19 10:29:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:51 UTC	931	OUT	GET /generate_204?p0bFag HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
2025-03-19 10:29:51 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Wed, 19 Mar 2025 10:29:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:52 UTC	670	OUT	GET /img/favicon.ico HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://trezor-io-start-r---starting-auth.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:52 UTC	645	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 10:29:52 GMT Content-Type: image/x-icon Content-Length: 15086 Connection: close x-amz-id-2: QRs3q+dhKhAMTlvzYZ9HsOXkYLhQn66tiVr3vbhVW/V2FbAxceQ9QjMXwPqcyzjtLgD1BjyzKEE= x-amz-request-id: BSTN61CAHM9SMTMC Last-Modified: Thu, 05 Oct 2023 23:38:20 GMT ETag: "1f894f487d068a2ced95d5cd4f88598c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: C5TuT6ObkzP1GjuEGkIHJatwDHqj5J6N CF-Cache-Status: HIT Age: 19893 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 922c4a88ff708fdc-FRA alt-svc: h3=":443"; ma=86400
2025-03-19 10:29:52 UTC	724	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 32 2b 88 39 32 2b f3 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: 00 %6 % h6(0` $92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: f8 f8 f8 ff f8 f8 f8 ff f8 f8 f8 ff f7 f7 f7 ff 8e 8a 86 ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 30 29 ff 50 49 43 ff e0 e0 df ff f8 f9 f9 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff f9 f9 f9 ff e2 e1 e0 ff 9a 96 93 ff 4b 44 3e ff 44 3d 36 ff c9 c7 c5 ff f9 fa fa ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f9 f9 f9 ff d6 d5 d4 ff 4f 49 42 ff 38 31 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+80)PICKD>D=6OIB81)92+92+92+92+92+92+92+92+92+
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: f9 f9 ff de dd dc ff 56 50 4a ff 37 30 29 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 38 31 2a ff 4b 45 3f ff c0 be bc ff d3 d2 d1 ff d2 d1 d0 ff d2 d1 d0 ff d1 cf ce ff d9 d8 d6 ff f5 f4 f4 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff 9c 99 96 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: VPJ70)92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+81*KE?92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3c 36 2f ff 53 4d 47 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 50 4a 44 ff 3b 34 2d ff 38 31 2a ff 41 3a 33 ff 56 50 4a ff 56 51 4b ff 56 50 4b ff 57 51 4b ff 54 4e 48 ff 3f 38 31 ff 39 32 2a ff 3a 33 2d ff 50 4a 44 ff 57 51 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 56 50 4b ff 57 51 4b ff 4f 49 43 ff 3a 33 2c ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+<6/SMGWQKVPKVPKVPKWQKPJD;4-81A:3VPJVQKVPKWQKTNH?8192:3-PJDWQKVPKVPKVPKVPKWQKOIC:3,92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+9
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b f3 39 32 2b 89 39 32 2b f4 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b Data Ascii: 92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff Data Ascii: 2+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+
2025-03-19 10:29:52 UTC	1369	IN	Data Raw: 2b ff 39 32 2b ff 3c 35 2e ff 54 4e 48 ff 76 72 6d ff b2 b0 ad ff eb ea ea ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f3 f3 f3 ff f6 f6 f6 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff ef ef ef ff 72 6d 68 ff 36 2f 28 ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 3f 39 32 ff 68 63 5d ff 6e 69 64 ff 74 6f 6b ff b1 ae ab ff f5 f5 f5 ff f7 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f7 f7 f7 ff f8 f8 f8 ff f7 f7 f7 ff f7 f7 f7 ff fa fa fa ff c0 be bc ff 41 3b 34 ff 38 31 2a ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 32 2b ff 39 Data Ascii: +92+<5.TNHvrmrmh6/(92+92+92+92+92+92+92+92+92+92+92+92+92+92+92+?92hc]nidtokA;481*92+92+92+92+92+92+92+92+92+92+92+92+9

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:52 UTC	1686	OUT	POST /youtubei/v1/log_event?alt=json HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 12573 sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 X-YouTube-Client-Name: 56 X-YouTube-Ad-Signals: dt=1742380188602&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1265%2C711&vis=1&wgl=true&ca_type=image X-Goog-Event-Time: 1742380192309 X-YouTube-Client-Version: 1.20250312.01.00 Content-Type: application/json X-YouTube-Page-Label: youtube.player.web_20250312_01_RC00 X-YouTube-Page-CL: 736287689 X-YouTube-Utc-Offset: -240 X-YouTube-Device: cbr=Chrome&cbrver=134.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-Goog-Visitor-Id: CgtSTUFadVNrRXZrSSicueq-BjIKCgJERRIEEgAgFQ%3D%3D X-Goog-Request-Time: 1742380192310 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-YouTube-Time-Zone: America/New_York Accept: / Origin: https://www.youtube.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/HuVH_9hnUu8?rel=0&controls=1&autoplay=0&mute=0&start=0 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=9JFvDSoXclE; __Secure-ROLLOUT_TOKEN=COj97Yb37L7AkQEQ_KnIgfiVjAMY_KnIgfiVjAM%3D; VISITOR_INFO1_LIVE=RMAZuSkEvkI; VISITOR_PRIVACY_METADATA=CgJERRIEEgAgFQ%3D%3D
2025-03-19 10:29:52 UTC	12573	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 44 45 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 35 30 33 31 32 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4a 79 35 36 72 34 47 45 49 69 53 7a 68 77 51 79 65 61 77 42 52 44 77 34 73 34 63 45 4f 4f 44 75 43 49 51 6b 39 6e 4f 48 42 44 35 36 4d 34 63 45 49 69 48 73 41 55 51 69 62 44 4f 48 42 44 38 73 73 34 63 45 49 48 4e 7a 68 77 51 74 2d 72 2d 45 68 44 72 36 50 34 53 45 4d 6a 34 5f 78 49 51 68 66 6e 5f 45 68 43 5f 76 73 34 63 45 4f 44 67 5f 78 49 51 39 6f 61 78 42 52 43 2d 69 72 41 46 45 50 Data Ascii: {"context":{"client":{"hl":"en","gl":"DE","clientName":56,"clientVersion":"1.20250312.01.00","configInfo":{"appInstallData":"CJy56r4GEIiSzhwQyeawBRDw4s4cEOODuCIQk9nOHBD56M4cEIiHsAUQibDOHBD8ss4cEIHNzhwQt-r-EhDr6P4SEMj4_xIQhfn_EhC_vs4cEODg_xIQ9oaxBRC-irAFEP
2025-03-19 10:29:52 UTC	408	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Wed, 19 Mar 2025 10:29:52 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:52 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2025-03-19 10:29:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:55 UTC	474	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:55 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Wed, 19 Mar 2025 10:29:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:29:55 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 4b 7a 71 46 4d 69 36 48 66 39 69 67 34 4e 48 33 43 64 35 56 79 6b 43 61 6a 48 35 43 75 4f 34 58 47 6e 67 49 78 65 51 66 4a 42 67 64 4c 68 58 50 33 74 33 4f 66 64 4d 4d 36 72 5a 52 7a 45 45 36 36 66 61 39 6b 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKrKzqFMi6Hf9ig4NH3Cd5VykCajH5CuO4XGngIxeQfJBgdLhXP3t3OfdMM6rZRzEE66fa9k","type":4}
2025-03-19 10:29:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:29:55 UTC	474	OUT	GET /youtubei/v1/log_event?alt=json HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:29:56 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Wed, 19 Mar 2025 10:29:56 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-19 10:29:56 UTC	1138	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2025-03-19 10:29:56 UTC	471	IN	Data Raw: 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 Data Ascii: :2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo ar

Timestamp	Bytes transferred	Direction	Data
2025-03-19 10:30:21 UTC	754	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1291 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.youtube.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIk6HLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 10:30:21 UTC	1291	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 34 37 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 33 34 22 5d 2c 5b 22 4e 6f 74 3a 41 2d 42 72 61 6e 64 22 2c 22 32 34 22 5d 2c 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 33 34 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 33 34 2e 30 2e 36 39 39 38 2e 33 36 22 5d 2c 5b 33 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 34 32 33 38 30 32 32 31 32 39 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"47",null,[[["Chromium","134"],["Not:A-Brand","24"],["Google Chrome","134"]],0,"Windows","10.0.0","x86","","134.0.6998.36"],[3,0]]],1828,[["1742380221298",null,null,null,null,
2025-03-19 10:30:21 UTC	495	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 19 Mar 2025 10:30:21 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-19 10:30:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-03-19 10:30:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:29:40
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	1
Start time:	06:29:41
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2064,i,5520171474589340028,13777859735597685227,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	4
Start time:	06:29:47
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-io-start-r---starting-auth.webflow.io/"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true