Edit tour

Windows Analysis Report
https://dein-homeassistant.de/

Overview

General Information

Sample URL:	https://dein-homeassistant.de/
Analysis ID:	1521660
Tags:	openphish
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2152,i,1625745417374272125,14849371256803489597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1864 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dein-homeassistant.de/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2891 HTTP/1.1Host: www.facebook.comConnection: keep-aliveContent-Length: 132sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedsec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.facebook.comSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.facebook.com/dein.homeassistantAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_l=0; ps_n=0; sb=hpX4ZnYp9g7XiIWeuV9jkFBi

Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/dein.homeassistant/followers/	HTTP Parser: <input type="password" .../> found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: <input type="password" .../> found

Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant/followers/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/dein.homeassistant/followers/	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="author".. found

Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant/followers/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/dein.homeassistant/followers/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50215 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	DNS traffic detected: DNS query: dein-homeassistant.de
Source: global traffic	DNS traffic detected: DNS query: consent.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: consentcdn.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: imgsct.cookiebot.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-msp1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: medium.com
Source: global traffic	DNS traffic detected: DNS query: glyph.medium.com
Source: global traffic	DNS traffic detected: DNS query: cdn-static-1.medium.com
Source: global traffic	DNS traffic detected: DNS query: cdn-images-1.medium.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cdn.branch.io
Source: global traffic	DNS traffic detected: DNS query: csp.medium.com
Source: global traffic	DNS traffic detected: DNS query: app.link
Source: global traffic	DNS traffic detected: DNS query: api2.branch.io
Source: global traffic	DNS traffic detected: DNS query: miro.medium.com
Source: global traffic	DNS traffic detected: DNS query: facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.instagram.com
Source: global traffic	DNS traffic detected: DNS query: static.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: scontent.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: graph.instagram.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 4w0SlsHiFSuQvX9BAjv/Km6RB8sd4Y+UzaqykVvr75KY7VnGnYshPoH4HpI778+g0mmxso0RtQHqndmxk1uenQ==Date: Sat, 28 Sep 2024 23:47:24 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: Eu/D+0CpatI8dkvKO8rU/34b9dPjcQDnmuOgKf9QrK1wRdCjZpa+P90imSt3I5Mf3C+ge2MIRjchbKikwjVq9w==Date: Sat, 28 Sep 2024 23:47:25 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: LnjF+jzt/MbgEJuzkpn7XFSu6HsuZEK8W4bHNg1zFQG+Lx9AYWpVGA4Zej5+DL683xTwIOa4YzMCLtgKRa2+pA==Date: Sat, 28 Sep 2024 23:47:26 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: jPiuJ2L0bX4XZtV7p30LH22LW+cwXYb0+oj3lrIoUvQ/ZC2Q1bYN8N2gPiutxTyhfB3SyDbUZcDpbjRCd+crKg==Date: Sat, 28 Sep 2024 23:47:27 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: qVkHe+mWAMN9vbqjx1xwC/DnrHeaAy3nxIDtLWEWclg4VRo9WKqPH9ZnAjvNYIE1viS8//dxUuRwsqdCThN7nA==Date: Sat, 28 Sep 2024 23:47:28 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1727567248; path=/; domain=.facebook.com; httponlySet-Cookie: datr=hpX4ZqtW4FOPsBaSLglEUCJ5; expires=Sun, 02-Nov-2025 23:47:29 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: DAMiXWaJqMqNQzRRB/PBw/dms7tKTWV662lv1lnyqCFkg1UM8UISS1v8W5Yya7l/V+wf4HU3/Ywe9PSxAD7f8g==Date: Sat, 28 Sep 2024 23:47:29 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 4vHA4iTjPeLWuF54vffc0eELWjYmt8bbasQWqTugYKSmCjceFUvfyNbb993xqYC5ZKfUGZPvtQvmi5JzEBSQ/Q==Date: Sat, 28 Sep 2024 23:47:40 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainContent-Length: 18Connection: closeAccess-Control-Allow-Origin: *Date: Sat, 28 Sep 2024 23:47:41 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Powered-By: BranchX-Cache: Error from cloudfrontVia: 1.1 d76db2cbee553c8bb2de7fd88a960646.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: NsGyvH9R51JXBdlijeytnjZW2O44f-TIJP61_k-C0BQjo9AG_VBfpA==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plainContent-Length: 18Connection: closeAccess-Control-Allow-Origin: *Date: Sat, 28 Sep 2024 23:47:42 GMTStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Powered-By: BranchX-Cache: Error from cloudfrontVia: 1.1 da749f044be44d389a30372d73356c4e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: WNfAO-k8tDHEXaCQHUrvRi4R-2Re9gm06UkkHAJnKZDOxb4zUWbaUw==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: uXPzxs/844aQJKOzNzh863osvBWJSRbSHu3ZeisRKNscbiAHDAQc90+dVdIkHUd/DB6aIXX4aRTlzKJ5I1j92w==Date: Sat, 28 Sep 2024 23:47:51 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: WEPKJWyec1FkIV2DFSeUjncIqC/HzAKSM5Uo7WVFmmU3yF41SYeJyUdAJfVXxmqoIFpvYsMJnCgUt/DtmnqXKg==Date: Sat, 28 Sep 2024 23:47:52 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 7oNoIkdz2v3uB3UH2pvsYdI0SmagiRY5tEMbOEdFfPAnjUjdyrcueWK4/u9J7UdyDxDpWzzcDLHVMdsJlirdew==Date: Sat, 28 Sep 2024 23:47:55 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: 061M0nx/PXPqusaKnTOe9rcLu/wwz1wfEcYibRXECWjK60t/pGPmP1A2JO4smDJhuN7HEHYeSjKNrrU/AdjmXQ==Date: Sat, 28 Sep 2024 23:47:56 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy-report-only: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: smAEApOM7JOSzJkuKX4FalVoMGx6M4d87Biblu1B6I2QqZAqjyVBy48Tzrw5Pb2fU92iizJA+MJZ7HWv6s/aVg==Date: Sat, 28 Sep 2024 23:48:14 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: /chzCVX784BziSnq9UA9omIDhLXCh9q0FI+8ILM155aN8Ea+9PFFjJgZrMdRUbMAJzyuJc1emIUeJqg18UK2Og==Date: Sat, 28 Sep 2024 23:48:17 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: dbuoaL4NuqK+ySdIFUXjTE3GXsfB3T37zyvVkXqu90+SIqt1MR2dFisWAqc0xtc4sgG/BbDs8Tbazi9eWYPPNw==Date: Sat, 28 Sep 2024 23:48:18 GMTTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2152,i,1625745417374272125,14849371256803489597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dein-homeassistant.de/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2152,i,1625745417374272125,14849371256803489597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://www.internalfb.com/intern/invariant/	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe

Source: chromecache_309.2.dr	String found in binary or memory: >https://www.facebook.com/business/help/611774685654668</a equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: >https://www.facebook.com/business/help/651294705016616</a equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: >https://www.facebook.com/settings?tab=ads</a equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: <a href="https://www.facebook.com/about/privacy/">https://www.facebook.com/about/privacy/</a>. equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: <a href="https://www.facebook.com/business/help/611774685654668" equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: <a href="https://www.facebook.com/business/help/651294705016616" target="_blank" rel="noopener noreferrer" equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: <a href="https://www.facebook.com/dein.homeassistant" target="_blank" rel="noreferrer" equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: <a href="https://www.facebook.com/settings?tab=ads" target="_blank" rel="noopener noreferrer" equals www.facebook.com (Facebook)
Source: chromecache_309.2.dr	String found in binary or memory: Facebook: https://www.facebook.com/policy.php. Spezielle Informationen und Details zum Facebook-Pixel und equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/-chchjkxRCr/ equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/5RZXhVZje9T/ equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr, chromecache_384.2.dr, chromecache_300.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr, chromecache_550.2.dr, chromecache_359.2.dr, chromecache_456.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/A4tfXiHOGrs/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_269.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr, chromecache_550.2.dr, chromecache_359.2.dr, chromecache_456.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Ga6vBwdwgUx/ equals www.facebook.com (Facebook)
Source: chromecache_319.2.dr, chromecache_412.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/HAC-_9WTKIm/ equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/KRXTwBoPvVj/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_396.2.dr, chromecache_269.2.dr, chromecache_384.2.dr, chromecache_387.2.dr, chromecache_300.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_269.2.dr, chromecache_387.2.dr, chromecache_351.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_384.2.dr, chromecache_300.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V8_l6oUwABQ/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_384.2.dr, chromecache_300.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/VZYwkcc3BWr/ equals www.facebook.com (Facebook)
Source: chromecache_473.2.dr, chromecache_397.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Vkd8AdLnKqZ/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_514.2.dr, chromecache_269.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_269.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_269.2.dr, chromecache_384.2.dr, chromecache_300.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/cr2jmG-CdKo/ equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_269.2.dr, chromecache_384.2.dr, chromecache_387.2.dr, chromecache_300.2.dr, chromecache_345.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_353.2.dr, chromecache_529.2.dr, chromecache_294.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_353.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_+M"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_/b"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2953" autocomplete="off" /><input type="hidden" name="lsd" value="AVpmDyHYY5Y" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_8x" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_G4" /><input type="hidden" name="lgnrnd" value="164740_X5KU" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3NTY3MjYwLCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4
Source: chromecache_294.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_3v"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_Xs"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="2937" autocomplete="off" /><input type="hidden" name="lsd" value="AVpmDyHYPFA" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_lC" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_k+" /><input type="hidden" name="lgnrnd" value="164814_AgAL" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3NTY3Mjk0LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _4
Source: chromecache_529.2.dr	String found in binary or memory: <i class="_3jii img sp_PEqIp1jvkJq sx_17d8b9" id="u_0_1_v0"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_QZ"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1" onsubmit=""><input type="hidden" name="jazoest" value="21011" autocomplete="off" /><input type="hidden" name="lsd" value="AVpmDyHYxBg" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_RO" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_v4" /><input type="hidden" name="lgnrnd" value="164818_HaKe" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzI3NTY3Mjk4LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_PEqIp1jvkJq sx_82a77e"></i><div class="mbl pvl _
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: ((null==d?0:d.imageId)&&280<(null==d?null:d.originalWidth)&&150<(null==d?null:d.originalHeight)?'\x3cmeta name\x3d"twitter:card" content\x3d"summary_large_image"\x3e':'\x3cmeta name\x3d"twitter:card" content\x3d"summary"\x3e')+((null==a.post.approvedHomeCollection?0:a.post.approvedHomeCollection.domain)&&(null==a.post.approvedHomeCollection?0:a.post.approvedHomeCollection.facebookPageName)?'\x3cmeta property\x3d"article:publisher" content\x3d"https://www.facebook.com/'+z.C(null==a.post.approvedHomeCollection? equals www.facebook.com (Facebook)
Source: chromecache_529.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fbulk-route-definitions%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_SOkuOHNUdYM sx_2458cb"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT3hXCmCd5Ismqt__sf1Q0grOtGkV6u8povB5kAn8m3JJc-yvz0UiLSNI460GCArKz67_D368ekeBziVK7WGBqWTfKavd-j31lHrQYoyzVsPVIOxoKWnCLsaKGLHgq6TQ7i7rzBTp7DkqQirg-4GYQ" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&cam
Source: chromecache_294.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fajax%2Fwebstorage%2Fprocess_keys%2F%3Fstate%3D1&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_SOkuOHNUdYM sx_2458cb"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT0PgHOVO8tuKLZXfblLnqP1HpuZxavOxW1gv6RneW9HpFJwa29wrlU3rXRVpvTqcMfh6DYIyedrzR1tjTwHP7C90KePYT6d4sv0QA9KohxAnfINoC7t4zmbUPV4YYBkvwjtBrS07gm1y4Tm4MGI6Q" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placeme
Source: chromecache_353.2.dr	String found in binary or memory: </a></li><li><a role="button" class="_42ft _4jy0 _517i _517h _51sy" rel="dialog" ajaxify="/settings/language/language/?uri=https%3A%2F%2Fja-jp.facebook.com%2Fshared%2Fuser_preferences%2F&source=www_list_selector_more" href="#" title="Show more languages"><i class="img sp_SOkuOHNUdYM sx_2458cb"></i></a></li></ul><div id="contentCurve"></div><div id="pageFooterChildren" role="contentinfo" aria-label="Facebook site links"><ul class="uiList pageFooterLinkList _509- _4ki _703 _6-i"><li><a href="/reg/" title="Sign up for Facebook">Sign Up</a></li><li><a href="/login/" title="Log in to Facebook">Log in</a></li><li><a href="https://messenger.com/" title="Take a look at Messenger.">Messenger</a></li><li><a href="/lite/" title="Facebook Lite for Android.">Facebook Lite</a></li><li><a href="https://www.facebook.com/watch/" title="Browse in Video">Video</a></li><li><a href="/places/" title="Take a look at popular places on Facebook.">Places</a></li><li><a href="/games/" title="Check out Facebook games.">Games</a></li><li><a href="/marketplace/" title="Buy and sell on Facebook Marketplace.">Marketplace</a></li><li><a href="https://about.meta.com/technologies/meta-pay" title="Learn more about Meta Pay" target="_blank">Meta Pay</a></li><li><a href="https://www.meta.com/" title="Discover Meta" target="_blank">Meta Store</a></li><li><a href="https://www.meta.com/quest/" title="Learn more about Meta Quest" target="_blank">Meta Quest</a></li><li><a href="https://www.meta.com/smart-glasses/" title="Learn more about Ray-Ban Meta" target="_blank">Ray-Ban Meta</a></li><li><a href="https://www.meta.ai/" title="Meta AI">Meta AI</a></li><li><a href="https://l.facebook.com/l.php?u=https%3A%2F%2Fwww.instagram.com%2F&h=AT0GWs_mafDaFqPGd6foBLIs-NmUjwEnzypObKMhidXRa6TF_7yt1kJPyflo6f3YgPg_1DfVwnE4SSdwb7UbTRSzZcCyRJNo7sMYmbcmpo6wzTwnNQbswiQ984MHiqdPwZHOVm6NMjPGbPDX9xpwGQ" title="Take a look at Instagram" target="_blank" rel="noreferrer nofollow" data-lynx-mode="asynclazy">Instagram</a></li><li><a href="https://www.threads.net/" title="Check out Threads">Threads</a></li><li><a href="/fundraisers/" title="Donate to worthy causes.">Fundraisers</a></li><li><a href="/biz/directory/" title="Browse our Facebook Services directory.">Services</a></li><li><a href="/votinginformationcenter/?entry_point=c2l0ZQ%3D%3D" title="See the Voting Information Centre">Voting Information Centre</a></li><li><a href="/privacy/policy/?entry_point=facebook_page_footer" title="Learn how we collect, use and share information to support Facebook.">Privacy Policy</a></li><li><a href="/privacy/center/?entry_point=facebook_page_footer" title="Learn how to manage and control your privacy on Facebook.">Privacy Centre</a></li><li><a href="/groups/discover/" title="Explore our groups.">Groups</a></li><li><a href="https://about.meta.com/" accesskey="8" title="Read our blog, discover the resource centre and find job opportunities.">About</a></li><li><a href="/ad_campaign/landing.php?placement=pflo&campaig
Source: chromecache_294.2.dr	String found in binary or memory: <script type="text/javascript" nonce="Ww6XxJQU">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT280cbWQa9Ovpt4oKIBWsE7PdCQ_NE2lW4iCsCGzTCBCfJA9xrM8AA-zUfsFK2nZzrnm6PYdqbvB-sy3F9JiWo5Ejj486AlZgo448ebCX9mcQ3lwjQspJC6-CXtCzlCcOMawmSA4_IUCya1O5sGnw","untrusted_link_default_hash":"AT2-E0lI_rnkcCHqlpUwKbSJa7aPYWkHZYLeleUdftHMJ7GTR4kcT8C7vQKwiTe5bX0Hrcem1S4cNOqCEACtl_Ki3__cbHN5hO28rVkOl3LC-xy5k00t143aT2QYWK5CYjhURE-ijGUkcVo_--2YYQ","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_QZ","u_0_0_jq",1],["__elem_94c15385_0_0_W9","u_0_1_3v",1],["__elem_a588f507_0_3_2F","u_0_2_Xs",1],["__elem_835c633a_0_0_Fc","login_form",1],["__elem_efa9dffa_0_0_RU","email",1],["__elem_45d73b5d_0_0_MB","loginbutton",1],["__elem_f46f4946_0_0_1n","u_0_3_lC",1],["__elem_f46f4946_0_1_uZ","u_0_4_k+",1],["__elem_a588f507_0_1_BA","u_0_5_9G",1],["__elem_9f5fac15_0_0_K6","pagelet_bluebar",1],["__elem_a588f507_0_0_AD","globalContainer",1],["__elem_a588f507_0_2_dW","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0vhzScEJ1gGalbY0e","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/webstorage\/process_keys\/?state=1"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_AD"],[{"__m":"__elem_a588f507_0_0_AD"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_W9","__elem_072b8e64_0_0_QZ","__elem_a588f507_0_3_2F"],[{"__m":"__elem_94c15385_0_0_W9"},{"__m":"__elem_072b8e64_0_0_QZ"},{"__m":"__elem_a588f507_0_3_2F"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_1n"],[{"__m":"__elem_f46f4946_0_0_1n"},1727567294]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_uZ"],[{"__m":"__elem_f46f4946_0_1_uZ"}]],["LoginFormContr
Source: chromecache_529.2.dr	String found in binary or memory: <script type="text/javascript" nonce="eo655Owb">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT3HerVMh1JNp_09qmaMVpCXP29kNbMiMVRjxBF30M1F7R7VjnMUjbVV-c07vFSF2YIB2tFF3maVd4snTCqq8V6STu_yC1YoCR-ISzm_SmTuPWDMErrNFec124ynXEeJOT5eHPdhzgwmY8zsFISfJA","untrusted_link_default_hash":"AT2pdQe5y4EuzGsloj2vvlq3uUb3fXZrxcUlhU-68s9aqvQ-bHoAsNZ7rRdU3W0Nn9Jvy1fitgF4CU-p7QbTvINOZ4zZlBI89Co2QUNmEv3rHeC118OCqOCMrHUA_GAf_tnd4SypzSd_7fAHfu2HKw","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_up","u_0_0_5O",1],["__elem_94c15385_0_0_Ib","u_0_1_v0",1],["__elem_a588f507_0_3_oo","u_0_2_QZ",1],["__elem_835c633a_0_0_vY","login_form",1],["__elem_efa9dffa_0_0_m7","email",1],["__elem_45d73b5d_0_0_JW","loginbutton",1],["__elem_f46f4946_0_0_Dc","u_0_3_RO",1],["__elem_f46f4946_0_1_\/t","u_0_4_v4",1],["__elem_a588f507_0_1_0K","u_0_5_kS",1],["__elem_9f5fac15_0_0_Mm","pagelet_bluebar",1],["__elem_a588f507_0_0_Ka","globalContainer",1],["__elem_a588f507_0_2_gD","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0OiADmJZqM6qDKv1T","ef_page":null,"uri":"https:\/\/www.facebook.com\/ajax\/bulk-route-definitions\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_Ka"],[{"__m":"__elem_a588f507_0_0_Ka"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_Ib","__elem_072b8e64_0_0_up","__elem_a588f507_0_3_oo"],[{"__m":"__elem_94c15385_0_0_Ib"},{"__m":"__elem_072b8e64_0_0_up"},{"__m":"__elem_a588f507_0_3_oo"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_Dc"],[{"__m":"__elem_f46f4946_0_0_Dc"},1727567298]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_\/t"],[{"__m":"__elem_f46f4946_0_1_\/t"}]],["LoginFormController",
Source: chromecache_353.2.dr	String found in binary or memory: <script type="text/javascript" nonce="p6ukdKbQ">requireLazy(["TimeSliceImpl","ServerJS"],function(TimeSlice,ServerJS){var s=(new ServerJS());s.handle({"define":[["cr:7736",["FBLynxLogging"],{"__rc":["FBLynxLogging",null]},-1],["LinkshimHandlerConfig",[],{"supports_meta_referrer":true,"default_meta_referrer_policy":"origin-when-crossorigin","switched_meta_referrer_policy":"origin","non_linkshim_lnfb_mode":null,"link_react_default_hash":"AT334PMq-XUQUnV2hvgZLMwaYAR0RkQn5FgFo5QLqzxgWLU6ZEGPlsvw-7mDEdJZS5w5jomq_6Hf2pwRpnjG6YauavWv-lsHrazQACMEo8gHWnhjhtQSM7DiJbxtwuhrgSWpfRUJZ3h34YJCWLKudA","untrusted_link_default_hash":"AT1C4_MrHp-P8m2xqJ-T3886OBwXqfYLvN6-fCezi86NL1VQc_gi3PMNmUT7gjaQrxdVu2iZFSafwj01CdhksbGL4kH67_gtdrfPgdl-5-5ZM2Iqr3FLDMxMVLTeCOnrb3VquF1wIbD_yN7fQScedQ","linkshim_host":"l.facebook.com","linkshim_path":"\/l.php","linkshim_enc_param":"h","linkshim_url_param":"u","use_rel_no_opener":true,"use_rel_no_referrer":true,"always_use_https":true,"onion_always_shim":true,"middle_click_requires_event":true,"www_safe_js_mode":"asynclazy","m_safe_js_mode":"MLynx_asynclazy","ghl_param_link_shim":false,"click_ids":[],"is_linkshim_supported":true,"current_domain":"facebook.com","blocklisted_domains":["ad.doubleclick.net","ads-encryption-url-example.com","bs.serving-sys.com","ad.atdmt.com","adform.net","ad13.adfarm1.adition.com","ilovemyfreedoms.com","secure.adnxs.com"],"is_mobile_device":false},27]],"elements":[["__elem_072b8e64_0_0_2k","u_0_0_Ad",1],["__elem_94c15385_0_0_1A","u_0_1_+M",1],["__elem_a588f507_0_3_1b","u_0_2_\/b",1],["__elem_835c633a_0_0_PS","login_form",1],["__elem_efa9dffa_0_0_Js","email",1],["__elem_45d73b5d_0_0_bU","loginbutton",1],["__elem_f46f4946_0_0_JR","u_0_3_8x",1],["__elem_f46f4946_0_1_HD","u_0_4_G4",1],["__elem_a588f507_0_1_Is","u_0_5_BX",1],["__elem_9f5fac15_0_0_mH","pagelet_bluebar",1],["__elem_a588f507_0_0_jU","globalContainer",1],["__elem_a588f507_0_2_ee","content",1]],"require":[["WebPixelRatioDetector","startDetecting",[],[false]],["ScriptPath","set",[],["X4oh4Controller","a1f3c513",{"imp_id":"0uW0jgCQZqX3m2lPu","ef_page":null,"uri":"https:\/\/www.facebook.com\/shared\/user_preferences\/"}]],["UITinyViewportAction","init",[],[]],["ResetScrollOnUnload","init",["__elem_a588f507_0_0_jU"],[{"__m":"__elem_a588f507_0_0_jU"}]],["KeyboardActivityLogger","init",[],[]],["FocusRing","init",[],[]],["ErrorMessageConsole","listenForUncaughtErrors",[],[]],["HardwareCSS","init",[],[]],["AsyncRequestNectarLogging"],["FourOhFourJSLogger","log",[],[]],["IntlUtils"],["FBLynx","setupDelegation",[],[]],["LoginbarPopover","init",["__elem_94c15385_0_0_1A","__elem_072b8e64_0_0_2k","__elem_a588f507_0_3_1b"],[{"__m":"__elem_94c15385_0_0_1A"},{"__m":"__elem_072b8e64_0_0_2k"},{"__m":"__elem_a588f507_0_3_1b"}]],["TimezoneAutoset","setInputValue",["__elem_f46f4946_0_0_JR"],[{"__m":"__elem_f46f4946_0_0_JR"},1727567260]],["ScreenDimensionsAutoSet","setInputValue",["__elem_f46f4946_0_1_HD"],[{"__m":"__elem_f46f4946_0_1_HD"}]],["LoginFormController","init"
Source: chromecache_448.2.dr	String found in binary or memory: __d("Chromedome",["fbt"],(function(a,b,c,d,e,f,g,h){function i(){if(document.domain==null)return null;var a=document.domain,b=/^intern\./.test(a);if(b)return null;b=/(^\|\.)facebook\.(com\|sg)$/.test(a);if(b)return"facebook";b=/(^\|\.)instagram\.com$/.test(a);if(b)return"instagram";b=/(^\|\.)threads\.net$/.test(a);if(b)return"threads";b=/(^\|\.)messenger\.com$/.test(a);return b?"messenger":null}function j(a){if(a==="instagram")return h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable an Instagram feature or \"hack\" someone's account, it is a scam and will give them access to your Instagram account.");return a==="threads"?h._("This is a browser feature intended for developers. If someone told you to copy-paste something here to enable a Threads feature or \"hack\" someone's account, it is a scam and will give them access to your Threads account."):h._("This is a browser feature intended for developers. If someone told you to copy and paste something here to enable a Facebook feature or \"hack\" someone's account, it is a scam and will give them access to your Facebook account.")}function a(a){if(top!==window)return;a=i();if(a==null)return;var b=h._("Stop!");a=j(a);var c=h._("See {url} for more information.",[h._param("url","https://www.facebook.com/selfxss")]),d="font-family:helvetica; font-size:20px; ";[[b,d+"font-size:50px; font-weight:bold; color:red; -webkit-text-stroke:1px black;"],[a,d],[c,d],["",""]].map(function(a){window.setTimeout(console.log.bind(console,"\n%c"+a[0].toString(),a[1]))})}g.start=a}),226); equals www.facebook.com (Facebook)
Source: chromecache_360.2.dr	String found in binary or memory: __d("CometLegalFooter.react",["fbt","ix","BaseMiddot.react","CometErrorBoundary.react","CometLink.react","CometPressable.react","FBCookieSettingsLoggedOutConfig","FDSLazyPopoverTrigger.react","FDSText.react","JSResourceForInteraction","ServerTime","TetraIcon.react","XHealthPolicyCometControllerRouteBuilder","XPrivacyPolicyCometControllerRouteBuilder","fbicon","gkx","react","useCurrentRoute"],(function(a,b,c,d,e,f,g,h,i){"use strict";var j,k=j\|\|d("react"),l=c("JSResourceForInteraction")("CometLegalFooterMoreMenu.react").__setRef("CometLegalFooter.react");function m(){try{var a;return(a=new Date(d("ServerTime").getMillis()))==null?void 0:a.getFullYear()}catch(a){return null}}function a(a){var b=a.isHelpCenter;b=b===void 0?!1:b;var e=a.isPage;e=e===void 0?!1:e;var f=a.onClick;a=d("FBCookieSettingsLoggedOutConfig").should_show_cookie_settings;var g=c("useCurrentRoute")(),j=m(),n=c("XPrivacyPolicyCometControllerRouteBuilder").buildUri({entry_point:"comet_dropdown"}),o=c("XHealthPolicyCometControllerRouteBuilder").buildUri({});e=[{href:"https://www.facebook.com/legal/terms/information_about_page_insights_data",label:h._("Information about Page Insights data"),render:e&&c("gkx")("22806")},{href:n.toString(),label:h._("Privacy"),testid:"CometDropdownPrivacy"},{href:o.toString(),label:h._("Consumer Health Privacy"),render:c("gkx")("2828"),testid:"CometDropdownHealthPrivacy"},{href:"/terms?ref=pf",label:"Impressum/Terms/NetzDG/UrhDaG",render:c("gkx")("22807")&&!c("gkx")("22808")},{href:"/terms?ref=pf",label:h._("Imprint\/terms"),render:c("gkx")("22808")},{href:"/legal/germany/",label:"UrhDaG/MStV",render:c("gkx")("22808")},{href:"/policies?ref=pf",label:h._("Terms"),render:!c("gkx")("22807")&&!c("gkx")("22808"),testid:"CometDropdownTerms"},{href:"/business/",label:h._("Advertising")},{href:"/help/568137493302217",label:k.jsxs(k.Fragment,{children:[h._("Ad choices")," ",k.jsx(c("CometErrorBoundary.react"),{children:k.jsx("span",{className:"x1n2onr6 x1qiirwl",children:k.jsx(c("TetraIcon.react"),{color:"secondary",icon:d("fbicon")._(i("871692"),12)})})})]})},{href:"/policies/cookies/",label:h._("Cookies"),testid:"CometDropdownCookies"},{href:"/privacy/cookie_settings/",label:h._("Cookie settings"),render:a},{href:"https://www.facebook.com/help/cancelcontracts?source=facebook.com",label:h._("Cancel contracts here"),open_in_new_tab:!0,render:c("gkx")("4387")}].filter(function(a){return a.render==null\|\|a.render===!0});var p=[];if((g==null?void 0:(n=g.rootView.props)==null?void 0:n.seoCrawlingPool)&&(g==null?void 0:(o=g.rootView.props)==null?void 0:o.seoCrawlingPool.url)){Array.from(Array((g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.multiple_links)\|\|0)).forEach(function(a,b){p.push(k.jsxs("li",{className:"xt0psk2",children:[k.jsx(c("CometLink.react"),{color_DEPRECATED:"secondary",href:g==null?void 0:(a=g.rootView.props)==null?void 0:a.seoCrawlingPool.url,onClick:f,weight_DEPRECATED:"normal",children:g==null?void 0:(a=g.rootView.props)==null

Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: http://creativecommons.org/publicdomain/zero/1.0/
Source: chromecache_309.2.dr	String found in binary or memory: http://ec.europa.eu/consumers/odr
Source: chromecache_269.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_265.2.dr, chromecache_481.2.dr	String found in binary or memory: http://github.com/cferdinandi/smooth-scroll
Source: chromecache_309.2.dr	String found in binary or memory: http://instagram.com/about/legal/privacy/
Source: chromecache_355.2.dr, chromecache_370.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_309.2.dr	String found in binary or memory: http://optout.networkadvertising.org/
Source: chromecache_540.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_355.2.dr, chromecache_370.2.dr	String found in binary or memory: http://stackoverflow.com/a/5624139/3493650
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: http://twitter.com/$3$4
Source: chromecache_309.2.dr	String found in binary or memory: http://www.aboutads.info/choices
Source: chromecache_309.2.dr	String found in binary or memory: http://www.aboutads.info/choices/
Source: chromecache_309.2.dr	String found in binary or memory: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401
Source: chromecache_396.2.dr	String found in binary or memory: http://www.windowsphone.com/s?appid=3222a126-7f20-4273-ab4a-161120b21aea
Source: chromecache_309.2.dr	String found in binary or memory: http://www.youronlinechoices.com/
Source: chromecache_309.2.dr	String found in binary or memory: http://www.youronlinechoices.com/uk/your-ad-choices/
Source: chromecache_269.2.dr	String found in binary or memory: https://about.instagram.com
Source: chromecache_269.2.dr	String found in binary or memory: https://about.instagram.com/blog/
Source: chromecache_269.2.dr	String found in binary or memory: https://about.meta.com
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_309.2.dr	String found in binary or memory: https://adssettings.google.com/authenticated
Source: chromecache_388.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_396.2.dr	String found in binary or memory: https://apps.apple.com/app/instagram/id
Source: chromecache_415.2.dr	String found in binary or memory: https://apps.apple.com/us/app/instagram/id389801252
Source: chromecache_340.2.dr	String found in binary or memory: https://blog.medium.com
Source: chromecache_340.2.dr	String found in binary or memory: https://blog.medium.com/partner-program-updates-part-ii-stats-edition-194ddd7c016c
Source: chromecache_340.2.dr	String found in binary or memory: https://buy.itunes.apple.com/WebObjects/MZFinance.woa/wa/manageSubscriptions
Source: chromecache_309.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/cferdinandi/smooth-scroll
Source: chromecache_309.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/particles.js
Source: chromecache_309.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_309.2.dr	String found in binary or memory: https://consent.cookiebot.com/c51b8f34-b969-4265-ad46-2cd6c9f42e52/cd.js
Source: chromecache_409.2.dr	String found in binary or memory: https://consent.cookiebot.com/uc.js
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-nc-nd/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-nc-sa/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-nc/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-nd/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/licenses/by-sa/4.0/
Source: chromecache_340.2.dr, chromecache_540.2.dr	String found in binary or memory: https://creativecommons.org/publicdomain/mark/1.0/

Name	Source	Malicious	Antivirus Detection	Reputation
https://medium.com/writerprogram	chromecache_340.2.dr	false		unknown
https://creativecommons.org/licenses/by-nc-sa/4.0/	chromecache_340.2.dr, chromecache_540.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_388.2.dr	false	URL Reputation: safe	unknown
https://www.internalfb.com/intern/invariant/	chromecache_313.2.dr, chromecache_550.2.dr, chromecache_359.2.dr, chromecache_456.2.dr	false	URL Reputation: safe	unknown
https://glyph.medium.com/font/15b127a/3k-4f_4h-52_54-6bt_6bv-6c3_6c5-6c7_6ca-6cb_6ce-6ch_6cj-6cl_6cn	chromecache_552.2.dr	false		unknown
https://github.com/Medium/tickets/issues/7437	chromecache_340.2.dr	false		unknown
https://help.instagram.com/222826637847963	chromecache_269.2.dr	false		unknown
https://medium.com/policy/medium-rules-30e5502c4eb4	chromecache_340.2.dr, chromecache_540.2.dr	false		unknown
https://youradchoices.ca/	chromecache_268.2.dr, chromecache_510.2.dr, chromecache_364.2.dr, chromecache_269.2.dr, chromecache_345.2.dr	false		unknown
https://glyph.medium.com/font/76c214a/3k-4f_4h-52_54-6bt_6bv-6c3_6c5-6c7_6ca-6cb_6ce-6ch_6cj-6cl_6cn	chromecache_552.2.dr	false		unknown
https://about.instagram.com/blog/	chromecache_269.2.dr	false		unknown
https://medium.zendesk.com/hc/en-us/categories/200058025-Writing	chromecache_340.2.dr	false		unknown
https://help.medium.com/hc/en-us/requests/new?ticket_form_id	chromecache_340.2.dr	false		unknown
https://adssettings.google.com/authenticated	chromecache_309.2.dr	false		unknown
https://help.instagram.com/626057554667531	chromecache_269.2.dr	false		unknown
https://glyph.medium.com/font/7907ad9/0-3j_4g_53_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/fell-500-normal.wof	chromecache_552.2.dr	false		unknown
https://help.medium.com/hc/en-us/articles/226447508-Why-do-I-keep-getting-signed-out	chromecache_340.2.dr	false		unknown
https://medium.com/policy/mediums-trademark-policy-e3bb53df59a7	chromecache_340.2.dr, chromecache_540.2.dr	false		unknown
https://fburl.com/wiki/xrzohrqb	chromecache_252.2.dr, chromecache_269.2.dr, chromecache_413.2.dr, chromecache_316.2.dr	false		unknown
https://about.instagram.com	chromecache_269.2.dr	false		unknown
https://help.instagram.com/126382350847838	chromecache_269.2.dr	false		unknown
https://medium.com/	chromecache_340.2.dr, chromecache_540.2.dr	false		unknown
https://edge-chat.instagram.com/mqtt/pull	chromecache_387.2.dr	false		unknown
http://ec.europa.eu/consumers/odr	chromecache_309.2.dr	false		unknown
https://familycenter.instagram.com/accounts/	chromecache_269.2.dr	false		unknown
https://help.medium.com/hc/en-us/articles/360018677974	chromecache_340.2.dr	false		unknown
https://medium.com/about	chromecache_340.2.dr	false		unknown
https://www.google.com/intl/de/policies/privacy/partners	chromecache_309.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_337.2.dr, chromecache_281.2.dr, chromecache_261.2.dr, chromecache_368.2.dr, chromecache_390.2.dr	false	URL Reputation: safe	unknown
https://glyph.medium.com/font/b156742/0-3j_4g_53_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/source-serif-pro-70	chromecache_552.2.dr	false		unknown
https://medium.statuspage.io/	chromecache_340.2.dr	false		unknown
https://www.google.com/recaptcha/api.js	chromecache_340.2.dr, chromecache_540.2.dr	false		unknown
http://optout.networkadvertising.org/	chromecache_309.2.dr	false		unknown
https://help.instagram.com/273556485011659?ref=ipl	chromecache_269.2.dr	false		unknown
https://help.medium.com/hc/en-us/articles/222246047	chromecache_340.2.dr	false		unknown
https://glyph.medium.com/font/7f2eb60/0-3j_4g_53_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/source-serif-pro-70	chromecache_552.2.dr	false		unknown
http://github.com/cferdinandi/smooth-scroll	chromecache_265.2.dr, chromecache_481.2.dr	false		unknown
http://www.aboutads.info/choices	chromecache_309.2.dr	false		unknown
https://glyph.medium.com/font/6f4b679/3k-4f_4h-52_54-6bt_6bv-6c3_6c5-6c7_6ca-6cb_6ce-6ch_6cj-6cl_6cn	chromecache_552.2.dr	false		unknown
https://i.instagram.com	chromecache_269.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
176.96.136.56	dein-homeassistant.de	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
157.240.0.63	instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.153.4	glyph.medium.com	United States	13335	CLOUDFLARENETUS	false
162.159.152.4	csp.medium.com	United States	13335	CLOUDFLARENETUS	false
157.240.253.63	scontent.cdninstagram.com	United States	32934	FACEBOOKUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
157.240.251.63	unknown	United States	32934	FACEBOOKUS	false
157.240.26.27	scontent-msp1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
108.138.26.87	cdn.branch.io	United States	16509	AMAZON-02US	false
65.9.66.31	unknown	United States	16509	AMAZON-02US	false
157.240.252.13	unknown	United States	32934	FACEBOOKUS	false
65.9.66.103	app.link	United States	16509	AMAZON-02US	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	facebook.com	United States	32934	FACEBOOKUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
108.138.26.118	unknown	United States	16509	AMAZON-02US	false
108.138.26.116	api2.branch.io	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
157.240.253.174	z-p42-instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
157.240.251.35	unknown	United States	32934	FACEBOOKUS	false

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
app.link	65.9.66.103	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
z-p42-instagram.c10r.instagram.com	157.240.253.174	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
facebook.com	157.240.0.35	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
glyph.medium.com	162.159.153.4	true	false	unknown
dein-homeassistant.de	176.96.136.56	true	false	unknown
scontent-msp1-1.xx.fbcdn.net	157.240.26.27	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
csp.medium.com	162.159.152.4	true	false	unknown
video.xx.fbcdn.net	157.240.0.3	true	false	unknown
cdn.branch.io	108.138.26.87	true	false	unknown
cdn-images-1.medium.com	162.159.152.4	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
medium.com	162.159.153.4	true	false	unknown
scontent.cdninstagram.com	157.240.253.63	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
cdn-static-1.medium.com	162.159.152.4	true	false	unknown
miro.medium.com	162.159.152.4	true	false	unknown
instagram.c10r.instagram.com	157.240.0.63	true	false	unknown
api2.branch.io	108.138.26.116	true	false	unknown
ka-f.fontawesome.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
graph.instagram.com	unknown	unknown	false	unknown
static.cdninstagram.com	unknown	unknown	false	unknown
imgsct.cookiebot.com	unknown	unknown	false	unknown
consentcdn.cookiebot.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
kit.fontawesome.com	unknown	unknown	false	unknown
consent.cookiebot.com	unknown	unknown	false	unknown
static.xx.fbcdn.net	unknown	unknown	false	unknown
www.instagram.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://glyph.medium.com/css/e/sr/latin/e/ssr/latin/e/ssb/latin/m2-unbound-source-serif-pro.css	false	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__dyn=7xe6E5aQ1PyUbFp41twpUnwgU29zE6u7E3rw5ux60Vo1upE4W0OE2WxO0FE2awt81s8hwnU1oU6C0lW0ny0RE2Jw8Xwn83fw5rwSyE1582ZwrU1Xo1UU3jw&__hs=19994.BP%3ADEFAULT.2.0..0.0&__hsi=7419845056240340751&__req=2&__rev=1016899317&__s=zncf45%3At20dsv%3Ay3fuip&__spin_b=trunk&__spin_r=1016899317&__spin_t=1727567299&__user=0&dpr=1&jazoest=2980&lsd=AVpmDyHY6Ys	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y3/r/BQdeC67wT9z.png	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yB/r/7WNcE4Mu0gB.js	false	unknown
https://static.cdninstagram.com/rsrc.php/v3idBq4/yt/l/en_US/g80cL-YoGJU.js	false	unknown
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=19994.HYP%3Ainstagram_web_pkg.2.1..0.0&__hsi=7419844940234179012&__req=b&__rev=1016898692&__s=stxgux%3A1bb85g%3Aad4s57&__spin_b=trunk&__spin_r=1016898692&__spin_t=1727567273&__user=0&dpr=1&jazoest=21046&lsd=AVpjyNmiz9U&ph=C3	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yr/r/jJPH6iCu1HH.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3io2S4/yo/l/en_GB/tItrIS4IQZW.js	false	unknown
https://cdn-static-1.medium.com/_/fp/css/main-branding-base.W9J-2zkF03j8TkriAGn1Tg.12.css	false	unknown
https://static.cdninstagram.com/rsrc.php/v3i3mP4/y9/l/en_US/iUNq-19PmYe.js	false	unknown
https://scontent-msp1-1.xx.fbcdn.net/m1/v/t6/An-ltDiBj6BlExJAIyJiOGWs0CtdQwF9K9SyRSRhTIMgJd0MMzaw7ju3gnTsliPfba99uYjQem5sn3JzgpEnBVKOKfyfbcp-sMBJ.kf?ccb=10-5&oh=00_AYDqTubSZ4UpYsvgU9lpr3aJmmNSkxgMamEYW3vm8EAXKA&oe=67200B97&_nc_sid=7da55a	false	unknown
https://scontent.cdninstagram.com/v/t51.2885-19/125899093_472984010329979_1292044501950470146_n.jpg?stp=dst-jpg_s150x150&_nc_ht=scontent.cdninstagram.com&_nc_cat=111&_nc_ohc=LJrr_AHVGT4Q7kNvgGWtxTl&_nc_gid=49c38dcef9c84438bfcdfbe045318f59&edm=APs17CUBAAAA&ccb=7-5&oh=00_AYD4u1hstUY6RfjgQBbgnSCGrLm58Mn4HSCrW6QF7Y-82w&oe=66FE6FF3&_nc_sid=10d13b	false	unknown
https://static.cdninstagram.com/rsrc.php/v3iyQM4/yo/l/en_US/KaNfpE9FPZc.js	false	unknown
https://static.cdninstagram.com/rsrc.php/v3/yE/r/t98ZFitznKQ.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iihK4/y1/l/en_GB/U9F7Yn_BlDCR8OS880pBZln7Ett9jR3_w6_RtQfr4HCEhe8tBESRxOFMnOwfiBaqD5Hu47cYFbOLO6G_0LeVZpiD.js	false	unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t39.30808-1/301113599_453585786783227_4113993713106374532_n.png?stp=cp0_dst-png_s40x40&_nc_cat=105&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=u3yNQVRFWeIQ7kNvgFxnRWA&_nc_ht=scontent-msp1-1.xx&_nc_gid=AZub0SLhs2PhX4LvMUfNzmQ&oh=00_AYA1pk4SGVDHlDjwNozYEiUV-bgMTR5lyVJEMM33KvoT_w&oe=66FE7101	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i19e4/y0/l/en_GB/hXvAvK6d8jm.js	false	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19994.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7419844902532381526&__req=9&__rev=1016899317&__s=zncf45%3Apr0oba%3A61li98&__spin_b=trunk&__spin_r=1016899317&__spin_t=1727567264&__user=0&dpr=1&jazoest=2924&lsd=AVpmDyHYa54&ph=C3	false	unknown
https://dein-homeassistant.de/images/robin.png	false	unknown
https://api2.branch.io/v1/open	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yM/r/7QNyOKeJP6X.js	false	unknown
https://www.instagram.com/graphql/query/?doc_id=18113378221181848&variables=%7B%22include_chaining%22%3Afalse%2C%22include_highlight_reels%22%3Atrue%2C%22include_live_status%22%3Afalse%2C%22include_logged_out_extras%22%3Atrue%2C%22include_reel%22%3Afalse%2C%22include_suggested_users%22%3Afalse%2C%22user_id%22%3A%2243105557557%22%7D	false	unknown
https://medium.com/cdn-cgi/rum?	false	unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t1.6435-9/143765133_175491504325462_1049320700762738759_n.jpg?_nc_cat=107&ccb=1-7&_nc_sid=cc71e4&_nc_ohc=A78vUQpcdUcQ7kNvgEnE-ZW&_nc_ht=scontent-msp1-1.xx&_nc_gid=AiYbvSkIboJ7jsmzoyJ2kV8&oh=00_AYC0yKzfvXFOLehN2WUmDkL03gAr-VhvmHO6eBVZqlgtDQ&oe=672018F8	false	unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t1.6435-9/143765133_175491504325462_1049320700762738759_n.jpg?stp=c268.0.315.315a_dst-jpg_s160x160&_nc_cat=107&ccb=1-7&_nc_sid=578376&_nc_ohc=A78vUQpcdUcQ7kNvgEnE-ZW&_nc_ht=scontent-msp1-1.xx&_nc_gid=AquCGuUKvyDDNpTtHdXtT-i&oh=00_AYC2Nqqexw35nXVTlWsJwwpBIoOHKavUzeiXBpW07R8uAA&oe=672018F8	false	unknown
https://dein-homeassistant.de/images/dein-homeassistant-small-logo.png	false	unknown
https://dein-homeassistant.de/style.css	false	unknown
https://dein-homeassistant.de/fonts/poppins-v13-latin-700.woff2	false	unknown
https://scontent-msp1-1.xx.fbcdn.net/v/t39.30808-1/301113599_453585786783227_4113993713106374532_n.png?stp=dst-png_s200x200&_nc_cat=105&ccb=1-7&_nc_sid=f4b9fd&_nc_ohc=u3yNQVRFWeIQ7kNvgFxnRWA&_nc_ht=scontent-msp1-1.xx&_nc_gid=AS-wAv1ufUsI_Hkxz1uZ-Ig&oh=00_AYCmIv1diaLKDhkzAm30-BXXGLGtcMUb6UE7uY9LZ_CFtQ&oe=66FE7101	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3i7p24/yO/l/en_GB/vnMxHb0P9Ps.js	false	unknown
https://medium.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	unknown
https://www.facebook.com/ajax/qm/?__a=1&__user=0&__comet_req=15&jazoest=2891	false	unknown
https://www.instagram.com/ajax/bulk-route-definitions/	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yl/r/G6w41FKWeQN.png	false	unknown
https://dein-homeassistant.de/fonts/poppins-v13-latin-regular.woff2	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yd/r/_at8rCNG77_.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iBAG4/yi/l/en_GB/i6a1xDLycGp.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yL/r/fFznIA4fHu-.js	false	unknown
https://www.facebook.com/x/oauth/status?client_id=124024574287414&input_token&origin=1&redirect_uri=https%3A%2F%2Fwww.instagram.com%2Fdein.homeassistant%2F&sdk=joey&wants_cookie_data=true	false	unknown
https://static.xx.fbcdn.net/rsrc.php/yb/r/hLRJ1GG_y0J.ico	false	unknown
https://static.cdninstagram.com/rsrc.php/v3if1r4/ya/l/en_US/KV5i8CA5Shc.js	false	unknown
https://cdn-static-1.medium.com/_/fp/gen-js/main-home-screens.bundle.NqJXOgeDpJqVQLhdMGq7zw.12.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3iZJJ4/yQ/l/en_GB/E9G7terIYX8.js	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/y2/r/O287_AcFyg4.png	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/fo219H1KM4T.css	false	unknown
https://cdn-images-1.medium.com/max/800/1*59T5qLTmgBclbskSvCTnAA.jpeg	false	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=19994.HYP%3Acomet_loggedout_pkg.2.1..0.0&__hsi=7419845017728894852&__req=4&__rev=1016899317&__s=zncf45%3At20dsv%3Au91hrp&__spin_b=trunk&__spin_r=1016899317&__spin_t=1727567291&__user=0&dpr=1&jazoest=21007&lsd=AVpmDyHYvo8&ph=C3	false	unknown
https://dein-homeassistant.de/	false	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/ys/r/4zS6aBDBtHT.js	false	unknown
https://cdn-images-1.medium.com/max/2000/1*p7gAP1986oFLTwDPSezV2Q.png	false	unknown
https://www.facebook.com/ajax/bulk-route-definitions/	false	unknown
https://static.cdninstagram.com/rsrc.php/v3iLpP4/y9/l/en_US/pQ14dubC_jq.js	false	unknown
https://cdn.branch.io/branch-latest.min.js	false	unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521660
Start date and time:	2024-09-29 01:46:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dein-homeassistant.de/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/488@120/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.facebook.com/dein.homeassistant Browse: https://medium.com/dein-homeassistant Browse: https://facebook.com/dein.homeassistant Browse: https://www.instagram.com/dein.homeassistant/ Browse: https://www.facebook.com/dein.homeassistant/followers/

Input	Output
URL: https://dein-homeassistant.de/ Model: jbxai	{ "brand":["dein Homeassistant"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Medium", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://dein-homeassistant.de/ Model: jbxai	{ "brand":["dein Homeassistant"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Medium", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://dein-homeassistant.de/ Model: jbxai	{ "brand":["DeinHomeassistant"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Medium", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://dein-homeassistant.de/ Model: jbxai	{ "brand":["dein Homeassistant"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/dein.homeassistant Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/dein.homeassistant Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/dein.homeassistant Model: jbxai	{ "phishing_score":1, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is well-known and globally recognized.", "The URL 'www.facebook.com' matches the legitimate domain name for Facebook.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL."], "brand_matches":[true], "url_match":true, "brand_input":"Facebook", "input_fields":"Email address or phone number, Password"}

URL: https://www.instagram.com/dein.homeassistant/ Model: jbxai	{ "brand":["Instagram"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.instagram.com/dein.homeassistant/ Model: jbxai	{ "brand":["Instagram"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/dein.homeassistant/followers/ Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"Log in", "text_input_field_labels":"Email address or phone number, Password", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://medium.com/dein-homeassistant Model: jbxai

URL: https://www.facebook.com/dein.homeassistant/followers/ Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/dein.homeassistant/followers/ Model: jbxai	{ "phishing_score":1, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is well-known and globally recognized.", "The URL 'www.facebook.com' matches the legitimate domain name for Facebook.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL."], "brand_matches":[true], "url_match":false, "brand_input":"Facebook", "input_fields":"Email address or phone number, Password"}

URL: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1 Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":true, "trigger_text":"The email address or mobile number you entered isn't connected to an account. Find your account and log in.", "prominent_button_name":"Log in", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.facebook.com/login/device-based/regular/login/?login_attempt=1 Model: jbxai	{ "phishing_score":1, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is well-known and globally recognized.", "The URL 'www.facebook.com' matches the legitimate domain name for Facebook.", "No suspicious elements such as misspellings, extra characters, or unusual domain extensions are present in the URL."], "brand_matches":[true], "url_match":false, "brand_input":"Facebook", "input_fields":"Email address or phone number, Password"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 150x150, components 3
Category:	dropped
Size (bytes):	2833
Entropy (8bit):	7.514682125212309
Encrypted:	false
SSDEEP:	48:gLiWcbry7/b+j1W923xpHSE92dykC2BAllVlZg8yHo8CVqMXiyfQjxOn:13MxchF92de0AllVjkI8CAMDPn
MD5:	9E73E49FD236E5601AE544F8E9C4A5C7
SHA1:	7F877393B3D429C2334C39C875EDB64138A86F91
SHA-256:	3267C886B4C5A6BA65AAB082B8AD6626DDBC474258565C410A5FA83132AD4B78
SHA-512:	6C29A3C957033173DE3AD2CE9902724CA1D76DF4FCFBC9E1B6B282E1EC8C000A3BB00D99718063F0BC9CE970536E429F95F971809AFC2011630F1FEB909DCABA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......h..(.bFBMD0a000a6f010000c6020000a20300003c040000cf040000d0050000190700009507000043080000eb080000110b0000....C.....................................%...#... , #&')*)..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................MO..pMd.@e.....!).0..;3S. .$D&....MJ.$..DCl.....M.".R...L.5=y.$..DCl.....M."..O.....9..^k..'...>D."!.N...H&.OO.y..2z....T..v.~c;...{.......r".d..Lt.h.......y.l....&.........<..?}"W....;3S. .$D.....<....q.G.}_/n.'y.D6......"!5(MN.jP.$M.".d..Lt.h....&.A5(..&....vgh...I......v@.$.D.!.O...#.........................0.53`.!@...........<D..@...DM.p.1.Q.g..J.i.....x.}..i.h..b...6.PK.Q.p;}...Mx..U`n..I##.5.#T^....zikK.....z:.v..7..\|33.oW.Yo%Y....{.sV.{6.]7.\|Ab..{..{...j...v.....3..P.9.g=.1.o.....).......................!.. 1.#03@APQR.a........?.....%G......Oy.B..~.,......c.........sE..S...]d......

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 01:47:01.772279024 CEST	192.168.2.6	1.1.1.1	0xa992	Standard query (0)	dein-homeassistant.de	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:01.772614956 CEST	192.168.2.6	1.1.1.1	0x9575	Standard query (0)	dein-homeassistant.de	65	IN (0x0001)	false
Sep 29, 2024 01:47:02.877464056 CEST	192.168.2.6	1.1.1.1	0xe371	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:02.877625942 CEST	192.168.2.6	1.1.1.1	0x9322	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:02.878642082 CEST	192.168.2.6	1.1.1.1	0xc6c2	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:02.879028082 CEST	192.168.2.6	1.1.1.1	0xa740	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:02.879551888 CEST	192.168.2.6	1.1.1.1	0xc687	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:02.879713058 CEST	192.168.2.6	1.1.1.1	0xd9ca	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:02.880389929 CEST	192.168.2.6	1.1.1.1	0x68de	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:02.880779982 CEST	192.168.2.6	1.1.1.1	0x2aa1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:03.964358091 CEST	192.168.2.6	1.1.1.1	0x4fa7	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:03.964628935 CEST	192.168.2.6	1.1.1.1	0x1e61	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:03.978344917 CEST	192.168.2.6	1.1.1.1	0xd0da	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:03.978799105 CEST	192.168.2.6	1.1.1.1	0x49be	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:03.981148958 CEST	192.168.2.6	1.1.1.1	0x51c3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:03.981620073 CEST	192.168.2.6	1.1.1.1	0x7fd3	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:04.167747974 CEST	192.168.2.6	1.1.1.1	0xe203	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:04.167902946 CEST	192.168.2.6	1.1.1.1	0xe670	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:04.892721891 CEST	192.168.2.6	1.1.1.1	0xe75d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:04.893173933 CEST	192.168.2.6	1.1.1.1	0x5a0f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:05.001027107 CEST	192.168.2.6	1.1.1.1	0xd650	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:05.005372047 CEST	192.168.2.6	1.1.1.1	0x25f9	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:06.586081028 CEST	192.168.2.6	1.1.1.1	0xc5dc	Standard query (0)	consent.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:06.586481094 CEST	192.168.2.6	1.1.1.1	0x27d2	Standard query (0)	consent.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:06.777050018 CEST	192.168.2.6	1.1.1.1	0x67bc	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:06.777367115 CEST	192.168.2.6	1.1.1.1	0x31f9	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:06.796979904 CEST	192.168.2.6	1.1.1.1	0x4b29	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:06.797746897 CEST	192.168.2.6	1.1.1.1	0x40a2	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:06.998615980 CEST	192.168.2.6	1.1.1.1	0x6780	Standard query (0)	dein-homeassistant.de	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:06.999217987 CEST	192.168.2.6	1.1.1.1	0x9b30	Standard query (0)	dein-homeassistant.de	65	IN (0x0001)	false
Sep 29, 2024 01:47:07.001601934 CEST	192.168.2.6	1.1.1.1	0x4171	Standard query (0)	consentcdn.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:07.002145052 CEST	192.168.2.6	1.1.1.1	0xe00c	Standard query (0)	consentcdn.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:09.529534101 CEST	192.168.2.6	1.1.1.1	0x2d3f	Standard query (0)	ka-f.fontawesome.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:09.529860020 CEST	192.168.2.6	1.1.1.1	0xff72	Standard query (0)	ka-f.fontawesome.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:09.559858084 CEST	192.168.2.6	1.1.1.1	0x3201	Standard query (0)	imgsct.cookiebot.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:09.560328960 CEST	192.168.2.6	1.1.1.1	0x40ee	Standard query (0)	imgsct.cookiebot.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:17.574464083 CEST	192.168.2.6	1.1.1.1	0x2874	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:17.574762106 CEST	192.168.2.6	1.1.1.1	0x28f7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:19.417525053 CEST	192.168.2.6	1.1.1.1	0xceb6	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:19.417700052 CEST	192.168.2.6	1.1.1.1	0x74d4	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:19.418488979 CEST	192.168.2.6	1.1.1.1	0xde8a	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:19.418797970 CEST	192.168.2.6	1.1.1.1	0xf8b2	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:19.424005032 CEST	192.168.2.6	1.1.1.1	0xf80c	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:19.424005032 CEST	192.168.2.6	1.1.1.1	0x259b	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:22.474812031 CEST	192.168.2.6	1.1.1.1	0xa32b	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:22.475213051 CEST	192.168.2.6	1.1.1.1	0xfcc2	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:23.146764040 CEST	192.168.2.6	1.1.1.1	0xc27	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:23.146934032 CEST	192.168.2.6	1.1.1.1	0x578e	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:23.619703054 CEST	192.168.2.6	1.1.1.1	0xce3d	Standard query (0)	scontent-msp1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:23.619703054 CEST	192.168.2.6	1.1.1.1	0x1571	Standard query (0)	scontent-msp1-1.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:25.459603071 CEST	192.168.2.6	1.1.1.1	0xcdab	Standard query (0)	scontent-msp1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:25.459770918 CEST	192.168.2.6	1.1.1.1	0xbada	Standard query (0)	scontent-msp1-1.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:27.436674118 CEST	192.168.2.6	1.1.1.1	0x2681	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:27.437176943 CEST	192.168.2.6	1.1.1.1	0xed01	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:47:30.403058052 CEST	192.168.2.6	1.1.1.1	0x8069	Standard query (0)	medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:30.403523922 CEST	192.168.2.6	1.1.1.1	0x5e66	Standard query (0)	medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:31.422951937 CEST	192.168.2.6	1.1.1.1	0xecfa	Standard query (0)	glyph.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:31.423202991 CEST	192.168.2.6	1.1.1.1	0xa7d0	Standard query (0)	glyph.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:31.424459934 CEST	192.168.2.6	1.1.1.1	0xa421	Standard query (0)	cdn-static-1.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:31.424638987 CEST	192.168.2.6	1.1.1.1	0xfc0a	Standard query (0)	cdn-static-1.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:31.425116062 CEST	192.168.2.6	1.1.1.1	0xe4c5	Standard query (0)	cdn-images-1.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:31.425375938 CEST	192.168.2.6	1.1.1.1	0x185b	Standard query (0)	cdn-images-1.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:32.790824890 CEST	192.168.2.6	1.1.1.1	0x14cd	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:32.790951014 CEST	192.168.2.6	1.1.1.1	0xb36a	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:33.244374037 CEST	192.168.2.6	1.1.1.1	0x5294	Standard query (0)	medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:33.244846106 CEST	192.168.2.6	1.1.1.1	0xeaf4	Standard query (0)	medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:33.246721983 CEST	192.168.2.6	1.1.1.1	0x9c95	Standard query (0)	cdn-images-1.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:33.246895075 CEST	192.168.2.6	1.1.1.1	0x8ed1	Standard query (0)	cdn-images-1.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:34.104434013 CEST	192.168.2.6	1.1.1.1	0x5f43	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:34.105124950 CEST	192.168.2.6	1.1.1.1	0xbb00	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:34.761197090 CEST	192.168.2.6	1.1.1.1	0xce99	Standard query (0)	cdn.branch.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:34.761537075 CEST	192.168.2.6	1.1.1.1	0xb4c5	Standard query (0)	cdn.branch.io	65	IN (0x0001)	false
Sep 29, 2024 01:47:34.839942932 CEST	192.168.2.6	1.1.1.1	0xa66a	Standard query (0)	csp.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:34.840389013 CEST	192.168.2.6	1.1.1.1	0xd597	Standard query (0)	csp.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:35.864198923 CEST	192.168.2.6	1.1.1.1	0x260	Standard query (0)	cdn-static-1.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:35.864530087 CEST	192.168.2.6	1.1.1.1	0x48f8	Standard query (0)	cdn-static-1.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:37.818183899 CEST	192.168.2.6	1.1.1.1	0x3e36	Standard query (0)	app.link	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:37.818311930 CEST	192.168.2.6	1.1.1.1	0x22ec	Standard query (0)	app.link	65	IN (0x0001)	false
Sep 29, 2024 01:47:38.200321913 CEST	192.168.2.6	1.1.1.1	0x3771	Standard query (0)	cdn.branch.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:38.200598001 CEST	192.168.2.6	1.1.1.1	0x1949	Standard query (0)	cdn.branch.io	65	IN (0x0001)	false
Sep 29, 2024 01:47:39.002743006 CEST	192.168.2.6	1.1.1.1	0xccd7	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:39.003020048 CEST	192.168.2.6	1.1.1.1	0xca4d	Standard query (0)	api2.branch.io	65	IN (0x0001)	false
Sep 29, 2024 01:47:39.015248060 CEST	192.168.2.6	1.1.1.1	0xde0f	Standard query (0)	miro.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:39.016036034 CEST	192.168.2.6	1.1.1.1	0x34c0	Standard query (0)	miro.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:39.023535967 CEST	192.168.2.6	1.1.1.1	0x758e	Standard query (0)	app.link	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:39.023802042 CEST	192.168.2.6	1.1.1.1	0xe8e2	Standard query (0)	app.link	65	IN (0x0001)	false
Sep 29, 2024 01:47:39.879599094 CEST	192.168.2.6	1.1.1.1	0xbfef	Standard query (0)	miro.medium.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:39.879817009 CEST	192.168.2.6	1.1.1.1	0x1ceb	Standard query (0)	miro.medium.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:40.402560949 CEST	192.168.2.6	1.1.1.1	0xef64	Standard query (0)	api2.branch.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:40.402924061 CEST	192.168.2.6	1.1.1.1	0x557a	Standard query (0)	api2.branch.io	65	IN (0x0001)	false
Sep 29, 2024 01:47:42.553787947 CEST	192.168.2.6	1.1.1.1	0xf18d	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:42.554007053 CEST	192.168.2.6	1.1.1.1	0x61b3	Standard query (0)	facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:51.844782114 CEST	192.168.2.6	1.1.1.1	0x6d32	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:51.845726013 CEST	192.168.2.6	1.1.1.1	0xb93f	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:53.847656965 CEST	192.168.2.6	1.1.1.1	0xcc7d	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:53.847846985 CEST	192.168.2.6	1.1.1.1	0x2ddc	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:54.995795965 CEST	192.168.2.6	1.1.1.1	0x5622	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:54.996059895 CEST	192.168.2.6	1.1.1.1	0x380f	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:47:59.267071009 CEST	192.168.2.6	1.1.1.1	0xfd6b	Standard query (0)	scontent.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:47:59.267354012 CEST	192.168.2.6	1.1.1.1	0xf9d7	Standard query (0)	scontent.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:00.151290894 CEST	192.168.2.6	1.1.1.1	0x2fea	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:00.151453018 CEST	192.168.2.6	1.1.1.1	0x8f4b	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:01.492615938 CEST	192.168.2.6	1.1.1.1	0xa8c5	Standard query (0)	scontent.cdninstagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:01.493072033 CEST	192.168.2.6	1.1.1.1	0xc059	Standard query (0)	scontent.cdninstagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:01.498647928 CEST	192.168.2.6	1.1.1.1	0xd49b	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:01.499274015 CEST	192.168.2.6	1.1.1.1	0xba01	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:05.408961058 CEST	192.168.2.6	1.1.1.1	0x4da2	Standard query (0)	graph.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:05.409962893 CEST	192.168.2.6	1.1.1.1	0x4b22	Standard query (0)	graph.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:08.295205116 CEST	192.168.2.6	1.1.1.1	0xe088	Standard query (0)	graph.instagram.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:08.295205116 CEST	192.168.2.6	1.1.1.1	0x461c	Standard query (0)	graph.instagram.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:18.423831940 CEST	192.168.2.6	1.1.1.1	0x555b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:18.424072027 CEST	192.168.2.6	1.1.1.1	0x66e5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:20.451668024 CEST	192.168.2.6	1.1.1.1	0xeb48	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:20.452187061 CEST	192.168.2.6	1.1.1.1	0x6d04	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:48:22.236274004 CEST	192.168.2.6	1.1.1.1	0xd4e5	Standard query (0)	facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:22.236426115 CEST	192.168.2.6	1.1.1.1	0x5ee5	Standard query (0)	facebook.com	65	IN (0x0001)	false
Sep 29, 2024 01:48:22.733326912 CEST	192.168.2.6	1.1.1.1	0x7854	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:22.733767986 CEST	192.168.2.6	1.1.1.1	0xe8fa	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Sep 29, 2024 01:48:26.812835932 CEST	192.168.2.6	1.1.1.1	0x5964	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 01:48:26.813138962 CEST	192.168.2.6	1.1.1.1	0xdbdd	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:46:59 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 77 71 61 74 59 49 49 2b 30 43 57 65 76 36 34 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 65 30 38 36 37 63 63 66 64 37 36 31 34 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DwqatYII+0CWev64.1Context: cbe0867ccfd76146
2024-09-28 23:46:59 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:46:59 UTC	1076	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 35 33 0d 0a 4d 53 2d 43 56 3a 20 44 77 71 61 74 59 49 49 2b 30 43 57 65 76 36 34 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 65 30 38 36 37 63 63 66 64 37 36 31 34 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 77 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 55 45 6b 33 4e 66 59 68 39 44 37 4a 45 5a 56 62 6c 51 70 7a 62 55 68 49 35 31 6e 4c 71 31 6c 79 78 73 49 65 70 6c 50 58 6f 72 4f 79 52 49 56 48 6e 75 53 2b 51 69 6e 32 63 6a 51 38 47 78 6c 52 66 65 2f 66 72 53 38 6e 4e 35 33 45 6b 50 56 49 67 5a 54 76 4c 63 7a 43 74 4b 2f 74 4b 78 6b 4e 6c 45 66 39 33 48 61 4b 43 39 4b Data Ascii: ATH 2 CON\DEVICE 1053MS-CV: DwqatYII+0CWev64.2Context: cbe0867ccfd76146<device><compact-ticket>t=EwCwAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzUEk3NfYh9D7JEZVblQpzbUhI51nLq1lyxsIeplPXorOyRIVHnuS+Qin2cjQ8GxlRfe/frS8nN53EkPVIgZTvLczCtK/tKxkNlEf93HaKC9K
2024-09-28 23:46:59 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 44 77 71 61 74 59 49 49 2b 30 43 57 65 76 36 34 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 62 65 30 38 36 37 63 63 66 64 37 36 31 34 36 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: DwqatYII+0CWev64.3Context: cbe0867ccfd76146<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:46:59 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:46:59 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 6e 6a 61 4f 52 46 62 48 6b 4f 41 6e 45 45 69 38 50 58 30 34 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: XnjaORFbHkOAnEEi8PX04w.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 30 2f 4f 67 53 41 30 35 53 30 32 79 74 49 32 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 35 65 62 65 64 39 62 37 34 64 31 34 36 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 0/OgSA05S02ytI2V.1Context: 7b5ebed9b74d1462
2024-09-28 23:47:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-28 23:47:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 30 2f 4f 67 53 41 30 35 53 30 32 79 74 49 32 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 35 65 62 65 64 39 62 37 34 64 31 34 36 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 68 49 6a 58 55 61 4e 39 6f 39 70 4d 6f 46 34 56 32 61 6c 6d 5a 70 45 32 62 31 59 6f 6b 62 44 49 68 6b 49 69 50 54 53 71 63 6c 46 41 33 64 62 70 38 65 67 39 50 57 73 49 49 35 66 63 52 51 41 6e 4f 55 79 79 67 71 31 52 2b 62 52 4d 44 32 49 6f 75 65 53 75 75 5a 56 75 46 59 39 30 5a 79 59 33 39 78 77 42 75 75 59 43 44 7a 50 51 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 0/OgSA05S02ytI2V.2Context: 7b5ebed9b74d1462<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAThIjXUaN9o9pMoF4V2almZpE2b1YokbDIhkIiPTSqclFA3dbp8eg9PWsII5fcRQAnOUyygq1R+bRMD2IoueSuuZVuFY90ZyY39xwBuuYCDzPQ
2024-09-28 23:47:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 30 2f 4f 67 53 41 30 35 53 30 32 79 74 49 32 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 62 35 65 62 65 64 39 62 37 34 64 31 34 36 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 0/OgSA05S02ytI2V.3Context: 7b5ebed9b74d1462<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-28 23:47:02 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-28 23:47:02 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 45 36 4e 58 50 50 33 32 52 45 75 78 50 36 69 2f 2f 61 4e 70 68 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: E6NXPP32REuxP6i//aNphg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:02 UTC	664	OUT	GET / HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:02 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:02 GMT Content-Type: text/html Content-Length: 77206 Last-Modified: Tue, 02 Jan 2024 19:26:05 GMT Connection: close Vary: Accept-Encoding ETag: "6594634d-12d96" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:02 UTC	16043	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 0a 20 20 20 20 20 20 69 64 3d 22 43 6f 6f 6b 69 65 62 6f 74 22 0a 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 73 65 6e 74 2e 63 6f 6f 6b 69 65 62 6f 74 2e 63 6f 6d 2f 75 63 2e 6a 73 22 0a 20 20 20 20 20 20 64 61 74 61 2d 63 62 69 64 3d 22 63 35 31 62 38 66 33 34 2d 62 39 36 39 2d 34 32 36 35 2d 61 64 34 36 2d 32 63 64 36 63 39 66 34 32 65 35 32 22 0a 20 20 20 20 20 20 64 61 74 61 2d 62 6c 6f 63 6b 69 6e 67 6d 6f 64 65 3d 22 61 75 74 6f 22 0a 20 20 20 20 20 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 0a 20 20 20 20 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <script id="Cookiebot" src="https://consent.cookiebot.com/uc.js" data-cbid="c51b8f34-b969-4265-ad46-2cd6c9f42e52" data-blockingmode="auto" type="text/javascript" ></script>
2024-09-28 23:47:02 UTC	16384	IN	Data Raw: 61 72 62 65 69 74 75 6e 67 20 7a 75 72 20 57 61 68 72 75 6e 67 20 75 6e 73 65 72 65 72 20 62 65 72 65 63 68 74 69 67 74 65 6e 20 49 6e 74 65 72 65 73 73 65 6e 20 69 73 74 20 41 72 74 2e 20 36 20 41 62 73 2e 20 31 20 6c 69 74 2e 20 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 44 53 47 56 4f 2e 20 46 c3 bc 72 20 64 65 6e 20 46 61 6c 6c 2c 20 64 61 73 73 20 6c 65 62 65 6e 73 77 69 63 68 74 69 67 65 20 49 6e 74 65 72 65 73 73 65 6e 20 64 65 72 20 62 65 74 72 6f 66 66 65 6e 65 6e 20 50 65 72 73 6f 6e 20 6f 64 65 72 20 65 69 6e 65 72 20 61 6e 64 65 72 65 6e 20 6e 61 74 c3 bc 72 6c 69 63 68 65 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 50 65 72 73 6f 6e 20 65 69 6e 65 20 56 65 72 61 72 62 65 69 74 75 6e 67 20 70 65 72 73 6f 6e 65 6e 62 65 7a 6f 67 65 6e 65 72 20 44 Data Ascii: arbeitung zur Wahrung unserer berechtigten Interessen ist Art. 6 Abs. 1 lit. f DSGVO. Fr den Fall, dass lebenswichtige Interessen der betroffenen Person oder einer anderen natrlichen Person eine Verarbeitung personenbezogener D
2024-09-28 23:47:02 UTC	16384	IN	Data Raw: 79 73 65 6e 20 6f 64 65 72 20 50 72 6f 66 69 6c 65 20 70 65 72 73 6f 6e 65 6e 62 65 7a 6f 67 65 6e 20 73 69 6e 64 2c 20 77 65 72 64 65 6e 20 73 69 65 20 6d 69 74 20 4b c3 bc 6e 64 69 67 75 6e 67 20 64 65 72 20 4e 75 74 7a 65 72 20 67 65 6c c3 b6 73 63 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 64 65 72 20 61 6e 6f 6e 79 6d 69 73 69 65 72 74 2c 20 73 6f 6e 73 74 20 6e 61 63 68 20 7a 77 65 69 20 4a 61 68 72 65 6e 20 61 62 20 56 65 72 74 72 61 67 73 73 63 68 6c 75 73 73 2e 20 49 6d 20 c3 9c 62 72 69 67 65 6e 20 77 65 72 64 65 6e 20 64 69 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 73 61 6d 74 62 65 74 72 69 65 62 73 77 69 72 74 73 63 68 61 66 74 6c 69 63 68 65 6e 20 41 6e 61 6c 79 73 65 6e 20 75 6e 64 20 61 6c 6c 67 65 6d 65 69 6e 65 20 54 65 6e 64 Data Ascii: ysen oder Profile personenbezogen sind, werden sie mit Kndigung der Nutzer gelscht oder anonymisiert, sonst nach zwei Jahren ab Vertragsschluss. Im brigen werden die gesamtbetriebswirtschaftlichen Analysen und allgemeine Tend
2024-09-28 23:47:02 UTC	16384	IN	Data Raw: 20 20 75 6e 73 65 72 65 6e 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 65 6e 20 75 6e 64 20 4c 65 69 73 74 75 6e 67 65 6e 20 68 61 62 65 6e 2e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 72 6f 6e 67 3e 31 39 2e 20 46 61 63 65 62 6f 6f 6b 2d 2c 20 43 75 73 74 6f 6d 20 41 75 64 69 65 6e 63 65 73 20 75 6e 64 20 46 61 63 65 62 6f 6f 6b 2d 4d 61 72 6b 65 74 69 6e 67 2d 44 69 65 6e 73 74 65 3c 2f 73 74 72 6f 6e 67 3e 3c 62 72 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 31 39 2e 31 2e 20 49 6e 6e 65 72 68 61 6c 62 20 75 6e 73 65 72 65 73 20 4f 6e 6c 69 6e 65 61 6e 67 65 62 6f 74 65 73 20 77 69 72 64 20 61 75 66 67 72 75 6e 64 20 75 6e 73 65 72 65 72 20 62 65 72 65 63 68 74 69 Data Ascii: unseren Informationen und Leistungen haben. </p> <p> <strong>19. Facebook-, Custom Audiences und Facebook-Marketing-Dienste</strong><br /> 19.1. Innerhalb unseres Onlineangebotes wird aufgrund unserer berechti
2024-09-28 23:47:02 UTC	12011	IN	Data Raw: 20 20 62 65 6f 62 61 63 68 74 65 6e 2e 20 44 69 65 20 41 75 73 77 65 72 74 75 6e 67 65 6e 20 64 69 65 6e 65 6e 20 75 6e 73 20 76 69 65 6c 20 6d 65 68 72 20 64 61 7a 75 2c 20 64 69 65 20 4c 65 73 65 67 65 77 6f 68 6e 68 65 69 74 65 6e 20 75 6e 73 65 72 65 72 20 4e 75 74 7a 65 72 20 7a 75 20 65 72 6b 65 6e 6e 65 6e 20 75 6e 64 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 6e 73 65 72 65 20 49 6e 68 61 6c 74 65 20 61 75 66 20 73 69 65 20 61 6e 7a 75 70 61 73 73 65 6e 20 6f 64 65 72 20 75 6e 74 65 72 73 63 68 69 65 64 6c 69 63 68 65 20 49 6e 68 61 6c 74 65 20 65 6e 74 73 70 72 65 63 68 65 6e 64 20 64 65 6e 20 49 6e 74 65 72 65 73 73 65 6e 20 75 6e 73 65 72 65 72 20 4e 75 74 7a 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 75 20 76 65 72 73 65 6e 64 65 6e 2e 0a Data Ascii: beobachten. Die Auswertungen dienen uns viel mehr dazu, die Lesegewohnheiten unserer Nutzer zu erkennen und unsere Inhalte auf sie anzupassen oder unterschiedliche Inhalte entsprechend den Interessen unserer Nutzer zu versenden.

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:02 UTC	550	OUT	GET /style.css HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:03 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:02 GMT Content-Type: text/css Content-Length: 9656 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close Vary: Accept-Encoding ETag: "657f1a3e-25b8" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:03 UTC	9656	IN	Data Raw: 2f 2a 20 70 6f 70 70 69 6e 73 2d 72 65 67 75 6c 61 72 20 2d 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 50 6f 70 70 69 6e 73 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 50 6f 70 70 69 6e 73 20 52 65 67 75 6c 61 72 27 29 2c 20 6c 6f 63 61 6c 28 27 50 6f 70 70 69 6e 73 2d 52 65 67 75 6c 61 72 27 29 2c 0a 20 20 20 20 75 72 6c 28 27 2e 2f 66 6f 6e 74 73 2f 70 6f 70 70 69 6e 73 2d 76 31 33 2d 6c 61 74 69 6e 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 0a 20 20 20 20 2f 2a 20 43 68 72 6f 6d 65 20 32 36 2b Data Ascii: /* poppins-regular - latin /@font-face { font-family: 'Poppins'; font-style: normal; font-weight: 400; src: local('Poppins Regular'), local('Poppins-Regular'), url('./fonts/poppins-v13-latin-regular.woff2') format('woff2'), / Chrome 26+

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dein-homeassistant.de/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Windows Analysis Report
https://dein-homeassistant.de/

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:03 UTC	575	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dein-homeassistant.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:03 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:47:03 GMT Age: 3759006 X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890076-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 3595 X-Timer: S1727567223.430395,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:03 UTC	592	OUT	GET /npm/particles.js@2.0.0/particles.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dein-homeassistant.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:03 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 43009 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 2.0.0 X-JSD-Version-Type: version ETag: W/"a801-bUGy39lLm46LlrldElj1fvsRqto" Accept-Ranges: bytes Age: 292653 Date: Sat, 28 Sep 2024 23:47:03 GMT X-Served-By: cache-fra-eddf8230156-FRA, cache-ewr-kewr1740023-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2a 20 41 75 74 68 6f 72 20 3a 20 56 69 6e 63 65 6e 74 20 47 61 72 72 65 61 75 20 20 2d 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 0a 2f 2a 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 2f 2a 20 44 65 6d 6f 20 2f 20 47 65 6e 65 72 61 74 6f 72 20 3a 20 76 69 6e 63 65 6e 74 67 61 72 72 65 61 75 2e 63 6f 6d 2f 70 61 72 74 69 63 6c 65 73 2e 6a 73 0a 2f 2a 20 47 69 74 48 75 62 20 3a 20 67 69 74 68 75 62 2e 63 6f 6d 2f 56 69 6e 63 65 6e 74 47 61 72 72 65 61 75 2f 70 61 72 74 69 63 6c 65 73 2e 6a Data Ascii: /* -----------------------------------------------/* Author : Vincent Garreau - vincentgarreau.com/* MIT license: http://opensource.org/licenses/MIT/* Demo / Generator : vincentgarreau.com/particles.js/* GitHub : github.com/VincentGarreau/particles.j
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 6e 61 62 6c 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 20 32 30 2c 0a 20 20 20 20 20 20 20 20 20 20 73 69 7a 65 5f 6d 69 6e 3a 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 73 79 6e 63 3a 20 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6c 69 6e 65 5f 6c 69 6e 6b 65 64 3a 20 7b 0a 20 20 20 20 20 20 20 20 65 6e 61 62 6c 65 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 64 69 73 74 61 6e 63 65 3a 20 31 30 30 2c 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 27 23 66 66 66 27 2c 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 2c 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 6d 6f 76 65 3a 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: nable: false, speed: 20, size_min: 0, sync: false } }, line_linked: { enable: true, distance: 100, color: '#fff', opacity: 1, width: 1 }, move: {
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 73 20 73 65 74 74 69 6e 67 73 20 2a 2f 0a 20 20 69 66 28 70 61 72 61 6d 73 29 7b 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 65 70 45 78 74 65 6e 64 28 70 4a 53 2c 20 70 61 72 61 6d 73 29 3b 0a 20 20 7d 0a 0a 20 20 70 4a 53 2e 74 6d 70 2e 6f 62 6a 20 3d 20 7b 0a 20 20 20 20 73 69 7a 65 5f 76 61 6c 75 65 3a 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 73 69 7a 65 2e 76 61 6c 75 65 2c 0a 20 20 20 20 73 69 7a 65 5f 61 6e 69 6d 5f 73 70 65 65 64 3a 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 73 69 7a 65 2e 61 6e 69 6d 2e 73 70 65 65 64 2c 0a 20 20 20 20 6d 6f 76 65 5f 73 70 65 65 64 3a 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6d 6f 76 65 2e 73 70 65 65 64 2c 0a 20 20 20 20 6c 69 6e 65 5f 6c 69 6e 6b 65 64 5f 64 69 73 74 61 6e 63 65 3a 20 70 4a 53 2e 70 61 Data Ascii: s settings */ if(params){ Object.deepExtend(pJS, params); } pJS.tmp.obj = { size_value: pJS.particles.size.value, size_anim_speed: pJS.particles.size.anim.speed, move_speed: pJS.particles.move.speed, line_linked_distance: pJS.pa
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 70 4a 53 2e 74 6d 70 2e 6f 62 6a 2e 6d 6f 64 65 5f 67 72 61 62 5f 64 69 73 74 61 6e 63 65 20 2a 20 70 4a 53 2e 63 61 6e 76 61 73 2e 70 78 72 61 74 69 6f 3b 0a 20 20 20 20 70 4a 53 2e 69 6e 74 65 72 61 63 74 69 76 69 74 79 2e 6d 6f 64 65 73 2e 62 75 62 62 6c 65 2e 64 69 73 74 61 6e 63 65 20 3d 20 70 4a 53 2e 74 6d 70 2e 6f 62 6a 2e 6d 6f 64 65 5f 62 75 62 62 6c 65 5f 64 69 73 74 61 6e 63 65 20 2a 20 70 4a 53 2e 63 61 6e 76 61 73 2e 70 78 72 61 74 69 6f 3b 0a 20 20 20 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6c 69 6e 65 5f 6c 69 6e 6b 65 64 2e 77 69 64 74 68 20 3d 20 70 4a 53 2e 74 6d 70 2e 6f 62 6a 2e 6c 69 6e 65 5f 6c 69 6e 6b 65 64 5f 77 69 64 74 68 20 2a 20 70 4a 53 2e 63 61 6e 76 61 73 2e 70 78 72 61 74 69 6f 3b 0a 20 20 20 20 70 4a 53 2e 69 6e 74 Data Ascii: pJS.tmp.obj.mode_grab_distance * pJS.canvas.pxratio; pJS.interactivity.modes.bubble.distance = pJS.tmp.obj.mode_bubble_distance * pJS.canvas.pxratio; pJS.particles.line_linked.width = pJS.tmp.obj.line_linked_width * pJS.canvas.pxratio; pJS.int
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 73 44 72 61 77 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 76 65 6e 64 6f 72 73 2e 64 65 6e 73 69 74 79 41 75 74 6f 50 61 72 74 69 63 6c 65 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2f 2a 20 64 65 6e 73 69 74 79 20 70 61 72 74 69 63 6c 65 73 20 65 6e 61 62 6c 65 64 20 2a 2f 0a 20 20 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 76 65 6e 64 6f 72 73 2e 64 65 6e 73 69 74 79 41 75 74 6f 50 61 72 74 69 63 6c 65 73 28 29 3b 0a 0a 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 7d 0a 0a 20 20 7d 3b 0a 0a 0a 20 20 70 4a 53 2e 66 6e 2e 63 61 6e 76 61 73 50 61 69 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 70 4a 53 2e 63 61 6e 76 61 73 2e 63 74 78 2e 66 69 6c 6c 52 65 63 74 28 30 2c 20 30 2c 20 Data Ascii: sDraw(); pJS.fn.vendors.densityAutoParticles(); } /* density particles enabled */ pJS.fn.vendors.densityAutoParticles(); }); } }; pJS.fn.canvasPaint = function(){ pJS.canvas.ctx.fillRect(0, 0,
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6d 6f 76 65 2e 62 6f 75 6e 63 65 29 7b 0a 20 20 20 20 20 20 70 4a 53 2e 66 6e 2e 76 65 6e 64 6f 72 73 2e 63 68 65 63 6b 4f 76 65 72 6c 61 70 28 74 68 69 73 2c 20 70 6f 73 69 74 69 6f 6e 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 63 6f 6c 6f 72 20 2a 2f 0a 20 20 20 20 74 68 69 73 2e 63 6f 6c 6f 72 20 3d 20 7b 7d 3b 0a 20 20 20 20 69 66 28 74 79 70 65 6f 66 28 63 6f 6c 6f 72 2e 76 61 6c 75 65 29 20 3d 3d 20 27 6f 62 6a 65 63 74 27 29 7b 0a 0a 20 20 20 20 20 20 69 66 28 63 6f 6c 6f 72 2e 76 61 6c 75 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6c 6f 72 5f 73 65 6c 65 63 74 65 64 20 3d 20 63 6f 6c 6f 72 2e 76 61 6c 75 65 5b 4d 61 74 68 2e 66 6c 6f 6f Data Ascii: pJS.particles.move.bounce){ pJS.fn.vendors.checkOverlap(this, position); } /* color */ this.color = {}; if(typeof(color.value) == 'object'){ if(color.value instanceof Array){ var color_selected = color.value[Math.floo
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 66 28 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6f 70 61 63 69 74 79 2e 61 6e 69 6d 2e 65 6e 61 62 6c 65 29 7b 0a 20 20 20 20 20 20 74 68 69 73 2e 6f 70 61 63 69 74 79 5f 73 74 61 74 75 73 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 76 6f 20 3d 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6f 70 61 63 69 74 79 2e 61 6e 69 6d 2e 73 70 65 65 64 20 2f 20 31 30 30 3b 0a 20 20 20 20 20 20 69 66 28 21 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 6f 70 61 63 69 74 79 2e 61 6e 69 6d 2e 73 79 6e 63 29 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 6f 20 3d 20 74 68 69 73 2e 76 6f 20 2a 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 20 61 6e 69 6d 61 74 69 6f 6e 20 2d 20 76 65 6c 6f 63 Data Ascii: f(pJS.particles.opacity.anim.enable){ this.opacity_status = false; this.vo = pJS.particles.opacity.anim.speed / 100; if(!pJS.particles.opacity.anim.sync){ this.vo = this.vo * Math.random(); } } /* animation - veloc
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 74 61 29 3b 0a 20 20 20 20 2f 2f 20 74 68 69 73 2e 76 79 20 3d 20 4d 61 74 68 2e 73 69 6e 28 74 68 65 74 61 29 3b 0a 0a 20 20 20 20 74 68 69 73 2e 76 78 5f 69 20 3d 20 74 68 69 73 2e 76 78 3b 0a 20 20 20 20 74 68 69 73 2e 76 79 5f 69 20 3d 20 74 68 69 73 2e 76 79 3b 0a 0a 20 20 20 20 0a 0a 20 20 20 20 2f 2a 20 69 66 20 73 68 61 70 65 20 69 73 20 69 6d 61 67 65 20 2a 2f 0a 0a 20 20 20 20 76 61 72 20 73 68 61 70 65 5f 74 79 70 65 20 3d 20 70 4a 53 2e 70 61 72 74 69 63 6c 65 73 2e 73 68 61 70 65 2e 74 79 70 65 3b 0a 20 20 20 20 69 66 28 74 79 70 65 6f 66 28 73 68 61 70 65 5f 74 79 70 65 29 20 3d 3d 20 27 6f 62 6a 65 63 74 27 29 7b 0a 20 20 20 20 20 20 69 66 28 73 68 61 70 65 5f 74 79 70 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 0a 20 20 20 Data Ascii: ta); // this.vy = Math.sin(theta); this.vx_i = this.vx; this.vy_i = this.vy; /* if shape is image */ var shape_type = pJS.particles.shape.type; if(typeof(shape_type) == 'object'){ if(shape_type instanceof Array){
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 25 2c 27 2b 70 2e 63 6f 6c 6f 72 2e 68 73 6c 2e 6c 2b 27 25 2c 27 2b 6f 70 61 63 69 74 79 2b 27 29 27 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 70 4a 53 2e 63 61 6e 76 61 73 2e 63 74 78 2e 66 69 6c 6c 53 74 79 6c 65 20 3d 20 63 6f 6c 6f 72 5f 76 61 6c 75 65 3b 0a 20 20 20 20 70 4a 53 2e 63 61 6e 76 61 73 2e 63 74 78 2e 62 65 67 69 6e 50 61 74 68 28 29 3b 0a 0a 20 20 20 20 73 77 69 74 63 68 28 70 2e 73 68 61 70 65 29 7b 0a 0a 20 20 20 20 20 20 63 61 73 65 20 27 63 69 72 63 6c 65 27 3a 0a 20 20 20 20 20 20 20 20 70 4a 53 2e 63 61 6e 76 61 73 2e 63 74 78 2e 61 72 63 28 70 2e 78 2c 20 70 2e 79 2c 20 72 61 64 69 75 73 2c 20 30 2c 20 4d 61 74 68 2e 50 49 20 2a 20 32 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 0a 20 20 20 20 20 20 63 61 73 Data Ascii: %,'+p.color.hsl.l+'%,'+opacity+')'; } pJS.canvas.ctx.fillStyle = color_value; pJS.canvas.ctx.beginPath(); switch(p.shape){ case 'circle': pJS.canvas.ctx.arc(p.x, p.y, radius, 0, Math.PI * 2, false); break; cas
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 20 20 20 70 4a 53 2e 63 61 6e 76 61 73 2e 63 74 78 2e 64 72 61 77 49 6d 61 67 65 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6d 67 5f 6f 62 6a 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 78 2d 72 61 64 69 75 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 2e 79 2d 72 61 64 69 75 73 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 61 64 69 75 73 2a 32 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 61 64 69 75 73 2a 32 20 2f 20 70 2e 69 6d 67 2e 72 61 74 69 6f 0a 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 28 70 4a 53 2e 74 6d 70 2e 69 6d 67 5f 74 79 70 65 20 3d 3d 20 27 73 76 67 27 29 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 6d 67 5f 6f 62 6a 20 3d 20 70 2e 69 6d 67 2e 6f 62 6a 3b 0a 20 20 Data Ascii: pJS.canvas.ctx.drawImage( img_obj, p.x-radius, p.y-radius, radius2, radius2 / p.img.ratio ); } if(pJS.tmp.img_type == 'svg'){ var img_obj = p.img.obj;

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:03 UTC	588	OUT	GET /gh/cferdinandi/smooth-scroll@15/dist/smooth-scroll.polyfills.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:03 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6445 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 15.2.1 X-JSD-Version-Type: version ETag: W/"192d-saB3N3hoyPQeaKFqdq2O7QZfLIk" Accept-Ranges: bytes Age: 28305 Date: Sat, 28 Sep 2024 23:47:03 GMT X-Served-By: cache-fra-eddf8230150-FRA, cache-nyc-kteb1890035-NYC X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 2f 2a 21 20 73 6d 6f 6f 74 68 2d 73 63 72 6f 6c 6c 20 76 31 35 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 31 39 20 43 68 72 69 73 20 46 65 72 64 69 6e 61 6e 64 69 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 63 66 65 72 64 69 6e 61 6e 64 69 2f 73 6d 6f 6f 74 68 2d 73 63 72 6f 6c 6c 20 2a 2f 0a 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 26 26 21 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 26 26 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 73 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 Data Ascii: /! smooth-scroll v15.2.1 \| (c) 2019 Chris Ferdinandi \| MIT License \| http://github.com/cferdinandi/smooth-scroll /window.Element&&!Element.prototype.closest&&(Element.prototype.closest=function(e){var t,n=(this.document\|\|this.ownerDocument).querySelect
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 49 3d 7b 69 67 6e 6f 72 65 3a 22 5b 64 61 74 61 2d 73 63 72 6f 6c 6c 2d 69 67 6e 6f 72 65 5d 22 2c 68 65 61 64 65 72 3a 6e 75 6c 6c 2c 74 6f 70 4f 6e 45 6d 70 74 79 48 61 73 68 3a 21 30 2c 73 70 65 65 64 3a 35 30 30 2c 73 70 65 65 64 41 73 44 75 72 61 74 69 6f 6e 3a 21 31 2c 64 75 72 61 74 69 6f 6e 4d 61 78 3a 6e 75 6c 6c 2c 64 75 72 61 74 69 6f 6e 4d 69 6e 3a 6e 75 6c 6c 2c 63 6c 69 70 3a 21 30 2c 6f 66 66 73 65 74 3a 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 22 2c 63 75 73 74 6f 6d 45 61 73 69 Data Ascii: l?global:"undefined"!=typeof window?window:this,(function(M){"use strict";var I={ignore:"[data-scroll-ignore]",header:null,topOnEmptyHash:!0,speed:500,speedAsDuration:!1,durationMax:null,durationMin:null,clip:!0,offset:0,easing:"easeInOutCubic",customEasi
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 6e 28 6f 2c 65 29 7b 76 61 72 20 41 2c 61 2c 4f 2c 43 2c 71 3d 7b 7d 3b 71 2e 63 61 6e 63 65 6c 53 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 43 29 2c 43 3d 6e 75 6c 6c 2c 65 7c 7c 48 28 22 73 63 72 6f 6c 6c 43 61 6e 63 65 6c 22 2c 41 29 7d 2c 71 2e 61 6e 69 6d 61 74 65 53 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 63 2c 65 29 7b 71 2e 63 61 6e 63 65 6c 53 63 72 6f 6c 6c 28 29 3b 76 61 72 20 73 3d 46 28 41 7c 7c 49 2c 65 7c 7c 7b 7d 29 2c 75 3d 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 2c 74 3d 75 7c 7c 21 72 2e 74 61 67 4e 61 6d 65 3f 6e 75 6c 6c 3a 72 3b 69 Data Ascii: n(o,e){var A,a,O,C,q={};q.cancelScroll=function(e){cancelAnimationFrame(C),C=null,e\|\|H("scrollCancel",A)},q.animateScroll=function(r,c,e){q.cancelScroll();var s=F(A\|\|I,e\|\|{}),u="[object Number]"===Object.prototype.toString.call(r),t=u\|\|!r.tagName?null:r;i
2024-09-28 23:47:03 UTC	1378	IN	Data Raw: 4f 75 74 43 75 62 69 63 22 3d 3d 3d 74 2e 65 61 73 69 6e 67 26 26 28 6f 3d 6e 3c 2e 35 3f 34 2a 6e 2a 6e 2a 6e 3a 28 6e 2d 31 29 2a 28 32 2a 6e 2d 32 29 2a 28 32 2a 6e 2d 32 29 2b 31 29 2c 22 65 61 73 65 49 6e 51 75 61 72 74 22 3d 3d 3d 74 2e 65 61 73 69 6e 67 26 26 28 6f 3d 6e 2a 6e 2a 6e 2a 6e 29 2c 22 65 61 73 65 4f 75 74 51 75 61 72 74 22 3d 3d 3d 74 2e 65 61 73 69 6e 67 26 26 28 6f 3d 31 2d 20 2d 2d 6e 2a 6e 2a 6e 2a 6e 29 2c 22 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 22 3d 3d 3d 74 2e 65 61 73 69 6e 67 26 26 28 6f 3d 6e 3c 2e 35 3f 38 2a 6e 2a 6e 2a 6e 2a 6e 3a 31 2d 38 2a 2d 2d 6e 2a 6e 2a 6e 2a 6e 29 2c 22 65 61 73 65 49 6e 51 75 69 6e 74 22 3d 3d 3d 74 2e 65 61 73 69 6e 67 26 26 28 6f 3d 6e 2a 6e 2a 6e 2a 6e 2a 6e 29 2c 22 65 61 73 65 4f 75 74 Data Ascii: OutCubic"===t.easing&&(o=n<.5?4nnn:(n-1)(2n-2)(2n-2)+1),"easeInQuart"===t.easing&&(o=nnnn),"easeOutQuart"===t.easing&&(o=1- --nnnn),"easeInOutQuart"===t.easing&&(o=n<.5?8nnnn:1-8--nnnn),"easeInQuint"===t.easing&&(o=nnnn*n),"easeOut
2024-09-28 23:47:03 UTC	933	IN	Data Raw: 79 28 65 29 2c 61 6e 63 68 6f 72 3a 74 7c 7c 4d 2e 70 61 67 65 59 4f 66 66 73 65 74 7d 2c 64 6f 63 75 6d 65 6e 74 2e 74 69 74 6c 65 2c 74 7c 7c 4d 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7d 7d 29 28 41 29 2c 71 2e 61 6e 69 6d 61 74 65 53 63 72 6f 6c 6c 28 6e 2c 61 29 29 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 68 69 73 74 6f 72 79 2e 73 74 61 74 65 26 26 68 69 73 74 6f 72 79 2e 73 74 61 74 65 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 26 26 68 69 73 74 6f 72 79 2e 73 74 61 74 65 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 41 29 29 7b 76 61 72 20 74 3d 68 69 73 74 6f 72 79 2e 73 74 61 74 65 2e 61 6e 63 68 6f 72 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 Data Ascii: y(e),anchor:t\|\|M.pageYOffset},document.title,t\|\|M.location.href)}})(A),q.animateScroll(n,a))}},n=function(e){if(null!==history.state&&history.state.smoothScroll&&history.state.smoothScroll===JSON.stringify(A)){var t=history.state.anchor;"string"==typeof t

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:04 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:04 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 23:47:04 GMT Age: 3759007 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 5889, 68 X-Timer: S1727567225.526315,VS0,VE0 Vary: Accept-Encoding
2024-09-28 23:47:04 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-28 23:47:04 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-09-28 23:47:04 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-09-28 23:47:04 UTC	15850	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-09-28 23:47:04 UTC	16384	IN	Data Raw: 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 74 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 6e 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6f 70 74 69 6f 6e 22 29 29 2c 74 74 2e 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 2c 79 2e 63 68 65 63 6b 4f 6e 3d 22 22 21 3d 3d 74 74 2e 76 61 6c 75 65 2c 79 2e 6f 70 74 53 65 6c 65 63 74 65 64 3d Data Ascii: ,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},tt=E.createElement("input"),nt=E.createElement("select").appendChild(E.createElement("option")),tt.type="checkbox",y.checkOn=""!==tt.value,y.optSelected=
2024-09-28 23:47:04 UTC	8115	IN	Data Raw: 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c Data Ascii: rap:function(e){return this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:04 UTC	621	OUT	GET /images/dein-homeassistant-logo.svg HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:04 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:04 GMT Content-Type: image/svg+xml Content-Length: 10802 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close Vary: Accept-Encoding ETag: "657f1a3e-2a32" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:04 UTC	10802	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 35 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 45 62 65 6e 65 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 25.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Ebene_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:04 UTC	603	OUT	GET /images/robin.png HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dein-homeassistant.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:04 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:04 GMT Content-Type: image/png Content-Length: 308619 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close ETag: "657f1a3e-4b58b" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:04 UTC	16065	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 a8 00 00 02 a8 08 06 00 00 00 bb b8 0d 5c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 7f 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 Data Ascii: PNGIHDR\tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53
2024-09-28 23:47:04 UTC	16384	IN	Data Raw: 7e 62 a9 e6 b1 9d db f6 fd b6 dd 9e c6 cf 00 a0 bc 7e fd 7a e7 96 2f 63 3b 39 d9 44 db b5 df 9f 87 df 68 b3 fc 41 7a 0a c1 28 ba f0 07 86 10 98 d3 4d 3c fe 66 73 12 be 7f 2d be c6 99 7f ea b9 a3 1a d9 b4 c2 9a b5 26 e6 ae c5 56 98 12 79 7c 54 78 0d d6 8d 57 14 6d 8c aa 98 4c 33 e7 01 c3 2e a5 d6 e3 65 50 e7 6e 4e bd 31 a8 a9 ca 6e 29 db 9f 33 5f e6 26 c1 6a 00 59 f3 42 73 9d e6 49 38 24 ad a4 08 af 51 41 19 f8 37 e8 fd 16 dd 3c a4 65 11 bb 76 50 80 3a a7 2a c2 dc 98 3f ae 3b a7 55 38 e0 00 93 02 54 1e a7 e3 01 b6 5e d6 cf cb b4 ac ed b2 5b 72 0c 76 7e 30 93 3f 37 1c ef cb c2 eb 27 4b cf 29 c5 3c 78 44 c8 db c9 61 1f db 0a 01 c8 d9 00 e8 fd a8 65 6f f3 5d a7 2e f4 9f 13 46 a0 7d 56 5b 28 a4 2a 61 23 03 d3 60 25 96 7d 77 8a fb b6 74 67 fc 77 19 01 4b fb 9d Data Ascii: ~b~z/c;9DhAz(M<fs-&Vy\|TxWmL3.ePnN1n)3_&jYBsI8$QA7<evP:?;U8T^[rv~0?7'K)<xDaeo].F}V[(a#`%}wtgwK
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 15 24 4b 37 fe df f7 fb 73 83 ab 79 02 d7 b4 7f aa d9 ee ac 54 7f 6a a5 1e af 12 30 d5 8c cc 10 fb 33 fd 5c 64 6b 8a 75 ac 93 95 5c c1 37 b9 d2 38 c0 f8 c9 12 75 3c 51 07 70 d3 b2 8f 11 78 46 e6 75 df 33 04 9b 72 90 26 b8 76 b2 21 ec 66 f7 3b 35 66 a5 d7 9d 56 69 3b 8c a3 22 40 a7 2d 08 f0 0f c0 d1 a6 6c 81 1b b8 e0 c1 d5 7f 1a 75 2a 4f 7a 71 6d 60 30 1b 5a 1e a0 a4 b1 62 4d cc b2 de 05 c0 06 4c 57 cb cc 76 da a5 50 41 08 aa 34 ed ce 7b 26 37 ba f0 e1 87 80 cf ac bb ac ff 7d dd cb ca 50 99 ac 98 da bf 09 fd 11 ce 05 5e ac e3 17 ea e8 be 83 f8 c7 4d 64 02 b7 c5 ed dd ed c8 98 02 50 3d bd b6 6d 93 9c 80 35 05 7d d3 f0 5b bb b3 00 92 37 45 dc 08 c0 79 ef 77 5d 2d a9 78 3e 10 47 59 f7 95 db f6 11 a0 36 f1 fc 11 a0 46 c6 65 0f 40 fd 5a 51 9e 54 c5 f9 d9 3e 02 Data Ascii: $K7syTj03\dku\78u<QpxFu3r&v!f;5fVi;"@-lu*Ozqm`0ZbMLWvPA4{&7}P^MdP=m5}[7Eyw]-x>GY6Fe@ZQT>
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 8f 08 e4 dc 60 a0 8a f7 d2 4e cf f4 07 db 2e bb bf 3f 28 d8 d4 be 9c 8a 54 20 2b 05 a4 89 19 7e 2a e7 87 eb 9f 4d d9 e3 14 bf de a1 cf f3 79 aa d1 7e 29 56 50 b3 dc da 33 95 52 51 8a 8d 9f 00 d2 4a d1 8b c2 bd 80 8b 1a d0 e7 c7 b3 61 43 89 65 2d 1f 58 7a 11 08 f9 fd b0 a4 31 97 b0 45 25 29 14 1c a0 73 bd 28 86 8e 90 c0 42 c3 59 32 81 00 b0 fe b8 2c 95 c1 df 76 fc 07 90 95 84 3b 2f a7 a0 d4 d2 b5 b6 42 98 51 2d 7b e4 8c cd 4b c7 e1 da 31 2a 8e 6c a0 23 72 fa 63 80 da cc da 7c f1 b7 71 0e 89 30 b6 08 e9 0f cf ce cc f6 ee be 63 50 59 5a 41 47 f9 f0 b3 47 74 8d de 31 f7 ee dd 33 fb fb 37 e8 3a 6f 99 db 77 53 9b d8 d7 b7 f7 6e fd 5e 6e 1a 9b fc f9 22 94 90 a8 04 c3 8f c8 85 c9 b9 7e 71 82 a6 31 28 7c af 69 ac 0d 8d fd fd fb 7e 1d 20 db c4 da 5e c7 a2 77 d5 39 Data Ascii: `N.?(T +~My~)VP3RQJaCe-Xz1E%)s(BY2,v;/BQ-{K1l#rc\|q0cPYZAGGt137:owSn^n"~q1(\|i~ ^w9
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 7f e1 b7 b2 11 98 da 09 9d ec 8c be 2b d6 67 d3 48 18 68 f8 f6 be f9 fa 1b 6c 97 b6 b5 3d 30 77 ef de 91 ca 50 46 e4 06 ac 1f d6 ca 50 ba 08 cd 0b a7 ed e4 f0 3c 16 30 a5 6e 49 7d 5c b2 51 40 96 93 94 b9 ab 9e e7 fa 82 66 fd 87 80 d0 cb c8 af 16 c9 b1 96 9a e3 7d b0 36 3b d2 42 18 51 15 fa 97 bb a7 36 de fa f7 44 48 cc a8 e6 5e 17 c9 a1 24 ee 69 86 70 af 89 21 fc f1 63 f9 e3 3f a2 ed 7f a6 6d f8 79 3c 38 bd ae e9 d3 3d 80 82 43 77 e1 a4 1e dc 00 bf 48 ef 3f d3 e4 45 ca e1 7b 0b 26 55 fc ae 9a d6 30 93 5b ff ed 97 c9 f3 13 a8 42 2f d5 26 c1 79 93 be 45 85 ed 5a 4a 34 d4 b7 2e bb 99 db 4a 97 86 e0 33 64 8f 7d 40 db b6 1a d6 ca 29 8b b2 fe 7d 1d d2 e6 19 8d cb 43 27 f3 b2 85 c5 ee 11 4d 85 20 9a 8e b3 29 89 49 07 64 84 45 c3 8a 54 fa 50 00 14 ea 53 b5 6f 68 Data Ascii: +gHhl=0wPFP<0nI}\Q@f}6;BQ6DH^$ip!c?my<8=CwH?E{&U0[B/&yEZJ4.J3d}@)}C'M )IdETPSoh
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 20 26 18 73 e7 d8 60 ec 2a 9a a8 30 19 88 3b 42 06 f3 de 83 fb f2 ce 34 97 09 74 c3 05 92 b2 74 f2 d3 d9 91 c7 6f be 23 ef bc f7 ae dc d1 c9 55 1f d7 93 4e dc b0 bf 66 88 72 d5 53 0f fa 60 18 fa 53 96 81 e6 4d c8 0e 5c e5 0b cd 4e 48 6e 63 e3 93 23 67 3c c9 50 95 48 71 42 e7 fc 7e 5f ea 75 84 6b 66 a2 d7 23 ae 29 ea bd dd 3d 01 af f1 64 85 bf 8f 78 36 36 72 8c 68 79 6f 27 66 5e af 60 51 56 e6 9b 8c 83 66 63 0b 16 30 80 1a a6 53 6d 95 01 6f 91 85 bd 2e 39 f0 cd cf af e5 cf 13 5d fe a1 2e ff f7 57 02 50 4b 4f c9 6c 9d 9d f2 d9 be fe 44 66 f6 b2 d3 50 7a e0 c5 e8 c7 74 05 54 d6 2e 9c 1a f6 a9 02 0a fe a8 6a f7 13 82 9f 6d 56 3f 95 27 6b 73 e6 fd eb eb 18 be f5 52 7f d1 a8 37 dc c6 a6 6e 7e 57 45 bb e8 34 55 00 0f 49 e4 3a 87 e3 44 96 c9 d2 e9 77 1d 20 95 2c Data Ascii: &s`*0;B4tto#UNfrS`SM\NHnc#g<PHqB~_ukf#)=dx66rhyo'f^`QVfc0Smo.9].WPKOlDfPztT.jmV?'ksR7n~WE4UI:Dw ,
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: af 97 25 cd af e7 4f 2e 92 2f 72 57 39 69 06 bd 50 73 db c9 99 9f 66 e6 86 9a 74 fa ee 08 fb 84 ce b1 f3 91 02 d4 66 a4 1c 7d 68 be 3c 04 1a c7 00 66 76 f3 d9 03 b9 63 f2 bf 43 00 7c 68 1f 72 97 82 41 36 75 a4 a2 7a ac 6c 62 e8 6f 87 de 63 e8 18 0a 81 04 ac f7 4f 8f c5 47 c7 ea 83 07 19 d4 a9 e6 9d a1 d7 da ae 72 e3 23 fa 4c ec a5 26 cb e7 83 8c 61 06 3e 34 42 31 75 87 ef 3a 91 ba b2 65 96 e1 b3 ec 9d 32 36 79 72 d2 21 ad 8a 15 88 1f 1a dc 43 cc f3 a1 52 be 6d 00 1a 6b ee c9 1b a3 c6 82 07 86 00 ee 58 7c d9 a1 bf 1b 1a ec f6 78 0e 99 fa 83 7d e8 80 51 db 95 d4 64 d2 28 d4 57 53 59 ed 8a 1b 1a a8 83 ba ed ac 7b 7a db 98 35 cd f5 53 90 da bd b2 19 6f 9f 78 0e d6 a1 07 98 f1 6c 17 2b 79 10 40 91 ba 79 b5 e4 23 37 ff d0 a4 2e 58 cb 4e 77 db e1 52 e9 8c f5 7e Data Ascii: %O./rW9iPsftf}h<fvcC\|hrA6uzlbocOGr#L&a>4B1u:e26yr!CRmkX\|x}Qd(WSY{z5Soxl+y@y#7.XNwR~
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: a0 ea 22 be 2d 4c 33 22 2a 34 85 f8 b0 86 bd fb 36 69 44 49 b3 1d c4 11 62 26 64 eb 2e 59 3e 41 fa 33 5b 00 50 c2 71 e1 84 18 65 7c b1 d3 06 12 b6 ae e3 31 b9 e7 0a 88 86 4e 34 6c f7 84 7d 72 bb 86 3d 79 21 33 c0 3d 62 5e 72 13 59 04 99 cf 5e be 70 ef 10 b2 b0 d9 92 d4 80 af 33 b6 a0 b2 f1 d5 60 4f 31 5e 70 ec 00 90 a1 3d c5 22 41 17 e8 43 f2 ae b1 b9 70 a8 3c fb ab aa ba f9 e0 5c fb d1 29 b2 6f 39 be 3d 80 2f 0e 9f 8b 0f b7 94 9a 22 b6 e4 7d 09 a0 f6 c2 7f f4 33 0d c9 66 a3 d9 3f b4 8b ff 2c 3e 7e df 89 f6 e1 63 96 f8 1f b2 7d 87 c4 cf 43 46 f3 53 25 f8 a1 9b f8 58 59 ff d8 41 92 2e fe 22 cd 8a 83 9f 6b 4b d0 f6 7b 0b 4c 2d 1b 95 fb 9a 0e 35 6d 8d ed b7 7f 8f b4 a7 63 07 a8 4e e8 ed 7b de b3 86 b2 a0 ed c3 9e 23 0b 22 73 99 c4 90 97 ac 82 0c ed ce a7 ee Data Ascii: "-L3"*46iDIb&d.Y>A3[Pqe\|1N4l}r=y!3=b^rY^p3`O1^p="ACp<\)o9=/"}3f?,>~c}CFS%XYA."kK{L-5mcN{#"s
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 3e cd dd b1 cf 0b 5f d9 32 36 36 a2 e6 b4 25 ad 66 87 db d6 c0 22 b1 d1 36 16 72 86 d7 67 2c d1 4f 87 03 d3 0e 4f e6 32 56 c0 89 6e fe 56 bb c3 86 2e c8 14 c0 a6 ea d7 60 27 ff 68 96 96 db db ea 36 a5 a5 ef a7 ef 24 03 7d ed c5 c5 15 17 19 93 49 aa c7 6b 57 17 12 6d d9 3f d8 e5 67 4e f5 18 5f 5e de 12 94 5e de 0e e5 42 c1 ea 0f 6f df c8 f7 6f 15 98 9e 5f c8 d5 f5 ad cc 67 f3 92 d2 6e 74 fb b2 73 78 22 47 cf 5e 48 ef e0 58 42 dd ae c1 e0 5c 2e af 2e 4c 06 a0 9f f5 e2 e9 2b 79 fe f4 05 8d f9 01 94 b1 00 c1 02 07 e7 18 7e c6 a8 6e 04 b1 0b be c8 59 ca 67 4a 2d c7 7f 56 7a 2f 6f 9a 6f cc 43 d6 5d 1a 1e 99 d3 c7 db 8f b8 31 93 c4 2e c1 ff d3 a6 e7 c5 f7 0c b4 bf 37 e6 40 d6 02 80 32 a1 22 5f 6e 7e 71 7d b2 4b 59 e4 7e 22 5c 6a 88 f2 ef bf e4 d1 e8 ca 7e 85 6b Data Ascii: >_266%f"6rg,OO2VnV.`'h6$}IkWm?gN_^^Boo_gntsx"G^HXB\..L+y~nYgJ-Vz/ooC]1.7@2"_n~q}KY~"\j~k
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 50 de 28 6f 73 d1 18 21 c4 40 8f 27 16 6b 70 a1 00 db cc f3 31 70 f6 87 a1 b8 26 c6 80 cc 7a 11 ba 00 6a 30 f2 85 73 53 a8 5c 47 ec 9a 1f dd 99 93 d9 95 5f 5e ab 56 03 54 9f 60 f7 63 ae cf 3f b7 e6 d5 c7 db af ea f6 5b bd ff e7 a5 12 7f e5 80 7f ba a9 54 5c 07 20 eb 92 73 16 1a b0 7c a9 43 bf ba 82 f3 1d fa d5 98 d1 6a 0a 54 95 a1 ad 32 a6 75 90 ba a9 04 bf 75 99 e0 9e 52 fe 2f 05 48 6d 63 f1 b4 a9 fc bb 4d 52 d8 ba 06 a0 77 01 b7 bf 74 6d 51 e1 ca ac 9b 6e b9 63 38 7c 29 ae 0e 56 eb 87 a9 ea 6e 41 bf 44 9d f8 c0 e2 01 a4 e2 e7 11 e2 1d c7 66 37 e5 1b 1c f3 60 d9 03 37 28 6a a0 d8 55 1f c8 c0 84 ee 1c 8c 82 72 12 2b 5c 28 91 11 38 0a 06 91 1a 05 d6 07 40 a0 dd 44 10 bb 02 07 b1 12 ba 4e aa f0 c5 a4 e9 37 4a cc 51 5c d1 97 3b 70 1d 9b 31 7a 48 7b a4 84 1d Data Ascii: P(os!@'kp1p&zj0sS\G_^VT`c?[T\ s\|CjT2uuR/HmcMRwtmQnc8\|)VnADf7`7(jUr+\(8@DN7JQ\;p1zH{

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:04 UTC	636	OUT	GET /images/background-dein-homeassistant.jpg HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dein-homeassistant.de/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:05 UTC	320	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:05 GMT Content-Type: image/jpeg Content-Length: 185628 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close ETag: "657f1a3e-2d51c" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:05 UTC	16064	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 77 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<whttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: b4 fa be 27 91 fe 43 e4 5f e9 d2 91 e9 bf f3 97 d3 63 63 63 63 59 56 f1 ed 42 c5 b5 c2 dd b8 a8 2f a1 23 ea e3 c5 5a 46 95 88 88 7c 6c 99 6f 92 75 bc cd a7 d5 b7 57 c7 81 b7 31 52 bc e8 f4 01 a7 7e a0 4f b3 83 40 17 ce 80 5d 52 4f 87 70 0a 55 f7 72 0a a9 f6 fc 58 09 6a 48 15 2a aa 05 55 55 ca 9d 80 64 e8 be ba 11 59 3e 15 f8 91 56 3d aa a9 f3 f0 24 8e bd d3 37 1f 33 36 59 18 f8 90 c2 b7 25 14 b1 ed b6 e3 58 aa 39 6b da ce 58 71 cd 2b a4 db ab d5 df c8 cb 5b df aa b5 8a 47 28 72 c7 5f a9 23 ac b8 ab 4e 9f 61 07 e6 1e e4 c5 fe 91 ee e9 5e 8a a6 36 6f f3 57 25 e7 d2 6b e1 2d 4f c5 fb ae 0e de 79 e5 6d af df 7b 37 93 dd f1 e3 5d f5 f9 67 f0 dd fa 3c 1f 79 e2 46 d5 fb 39 f6 d5 28 d2 9d 3b 19 f3 9f 55 fa 2f b7 f7 05 b8 ec d8 b9 55 ea b9 d3 e9 dd ff 00 1c 34 7f Data Ascii: 'C_ccccYVB/#ZF\|louW1R~O@]ROpUrXjH*UUdY>V=$736Y%X9kXq+[G(r_#Na^6oW%k-Oym{7]g<yF9(;U/U4
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: ee 77 a7 f8 0c 2f 34 df 96 e7 4f 1a f6 2a 09 d9 b1 31 d3 8c ee 7d 67 b4 7d b9 87 ed bd ae 3b ce e1 15 2c fb aa b8 d6 1f 1a f6 be e4 7c fc b7 9c 96 ed d3 77 19 7d 2c 74 8a 47 72 ff 00 84 3c ed c7 33 2b 70 cd 95 eb b2 72 73 e1 29 77 f7 76 1f 4b 16 38 c7 5e 98 7c cc d9 a6 f6 d6 5a 65 72 dd a8 3e 52 8f de af 3e 7c a8 cd 4c e8 e3 1b 5f 2b bf fb 8e dd 8b 6d 5b 69 dd 6b 55 1a e9 f2 3c 99 72 bd be 3f 8d 36 97 c6 dd b9 95 9b 75 ca b5 93 a2 51 a5 16 be 07 18 ac d9 f5 ab 15 a4 3d 7c 2d aa d5 b8 fa 97 5f 9b 8f 45 3b 0f 5d 31 e8 f1 65 cf 33 b2 1d 57 b2 e1 6a 29 43 47 d9 5d 68 d7 ed 35 6b 44 39 56 9a ef 61 8d 8b 99 9f 75 5b b3 1d 6a a9 3d 69 f4 9c b5 b5 b7 2d ad 5a 6f 7d 36 d5 ed 8b 56 69 76 f5 65 73 9d 4e d5 c5 10 f1 e4 cd 36 f8 3e 82 ce 35 9b 69 2b 51 d1 2a 56 2a 8b Data Ascii: w/4O1}g};,\|w},tGr<3+prs)wvK8^\|Zer>R>\|L_+m[ikU<r?6uQ=\|-_E;]1e3Wj)CG]h5kD9Vau[j=i-Zo}6VivesN6>5i+QV*
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 47 d1 f6 b6 2c 15 17 ad 71 cd f8 25 45 f5 98 8d b9 27 d2 1d 26 74 c5 f1 97 cd 7b 9e e4 e7 2b 18 90 7a c9 a6 d3 e1 4e df a4 e9 6d b2 d7 8d 1a 44 cb 1d bf 0e 39 39 d6 ed 38 ff 00 27 1f cd 35 cb 4e 09 fc 4d e8 96 b6 cf 8b da dd 32 15 8b 51 b7 07 d3 29 27 c3 94 57 12 cc b9 44 3e 46 73 bd 9d 9b 0c 5b 4b c6 bf c3 4a 1c ad 3a ce 90 f4 44 45 6b d5 2f d1 3d bf b3 c6 c5 88 5a 8c 7c b1 a2 4d 73 6f 9a 33 92 f1 10 e1 4a cd a7 59 7d 15 dc 9b 58 36 25 39 e8 d2 a7 53 ee 5c 8f 1d 69 37 97 ba 26 29 0f 8c cc ce bf ba e4 e9 2a 59 8b f2 f7 d1 9e fd 22 91 a4 3c ba cd a7 59 7a b8 d1 85 9b 71 a7 96 10 5c 7b 29 ad 4e 3d 3c 65 ab 64 d1 e4 6e fe e6 a3 95 8c 69 79 96 93 9a 5f 57 eb 35 14 72 db 3b 65 f3 b2 bf 76 72 ea 9c 9d 39 37 46 dd 7b 4e d5 85 d1 ae 79 4a 32 8c 14 7a ee 49 d1 5b Data Ascii: G,q%E'&t{+zNmD998'5NM2Q)'WD>Fs[KJ:DEk/=Z\|Mso3JY}X6%9S\i7&)*Y"<Yzq\{)N=<edniy_W5r;evr97F{NyJ2zI[
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 43 35 df 32 f0 2e cd 7a 93 9c a4 fa 75 94 e4 e8 a9 cd f1 3a 4c b0 e2 dc 67 2c 4d a2 10 e3 7f 32 5d 53 7f bd af d3 c0 e5 3b 9e bc 71 ac b6 e1 a5 87 b6 c2 d4 55 2e 5c d6 5a 72 fa cd c4 68 99 6f ae c7 a1 fd 26 e5 bd be 19 50 6e 52 a7 f3 2d be 30 8f ee 96 b7 db a3 cd 96 93 31 ab 93 4e d3 ab ce 9f 40 06 be 20 3e 90 08 02 7c 80 27 af d4 04 54 02 fd 40 47 c7 ea 02 c7 46 09 3b 00 76 2e 00 13 a7 20 15 d2 bf 1a 81 7a bb 34 06 8f 92 fc c2 da d6 46 14 33 61 1f 3c 7c 93 7e 1a c7 f5 1f 98 f7 ff 00 1f 4b 57 24 71 d9 3f e8 fd b7 f8 a7 95 ad 2d 86 7f 6f cd 1f 09 df fa ff 00 37 e5 f7 6b 06 a5 4d 61 ab 3f 3a fd 73 4e 42 56 b2 63 76 3f 76 54 9a f8 81 d9 37 d5 69 49 71 83 aa 7f dd 96 8f e9 a0 1f 73 f9 2f ee 78 6c 5e f6 c6 57 dd 31 33 ab 63 22 2f ee d2 5e 57 55 e1 e6 f8 1f 47 Data Ascii: C52.zu:Lg,M2]S;qU.\Zrho&PnR-01N@ >\|'T@GF;v. z4F3a<\|~KW$q?-o7kMa?:sNBVcv?vT7iIqs/xl^W13c"/^WUG
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: d5 2b 7b 9c 54 9b d2 97 25 da 66 72 4b 71 93 17 24 bb ed df 7f 41 42 1f 8f 77 23 1a a8 c7 d4 ad 13 d7 4a 99 ee 43 7d 58 da 5e d1 f9 81 19 74 d2 33 8a 7a 55 db 6e 9d ba a1 dc 85 ff 00 af 9b 9e e5 8f 7b 43 cd 3c 08 5c 74 e3 e9 c1 b7 f2 a0 eb 85 8a d3 9b 44 ef ef f1 4b d7 d9 e2 de b5 fe 5b 5e 2f cb 41 d5 55 ed c7 36 1f d6 ef da 7d 57 f6 e9 c7 4a 36 9d c8 aa 8d 2b 27 6a 79 b3 87 ba 31 56 93 b7 7e cb 7a 69 73 85 16 bf 79 19 ed d4 ed d9 d7 67 dd 38 92 97 fe f6 f4 2a a8 db 8a 97 87 06 49 c1 1c 13 e6 e4 f5 31 bd cd 1b d6 7d 3f c7 5a 9b 4a 8e 37 21 28 e9 cb 5a 13 ed 8e b9 86 ed ab 7e bd 1b 8e db f4 2e c6 4d c5 28 dc 49 e9 aa e2 cd 61 c5 35 b3 cf e4 cf 55 3e 0f 63 fa ac 5d 7d 5c 59 55 f0 71 a4 97 d0 7b 7b 73 c2 5f 33 ab 9c 1f 8d da ae 69 3f 25 78 29 45 ad 7b 18 d2 Data Ascii: +{T%frKq$ABw#JC}X^t3zUn{C<\tDK[^/AU6}WJ6+'jy1V~zisyg8*I1}?ZJ7!(Z~.M(Ia5U>c]}\YUq{{s_3i?%x)E{
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: da 27 ea 84 8b 5a af 13 33 6c dc f0 53 57 23 eb da d1 79 95 74 5f 32 4d 26 37 6d 86 a2 d5 9f 49 68 c3 c8 bb 8b 76 57 76 ec 87 8d 72 54 ae 3c b5 8c bb a8 cc 44 f2 6e d3 33 f5 46 be af 6b 07 7d c3 bd 94 95 f6 f6 9d c5 fe f4 74 b5 3a 7f 11 d2 2f ae c9 73 9c 53 11 ad 67 58 7d 15 ad ca 9e 4d c6 3e 8c 9a 4e de 55 bd 6d 49 3e 0d f6 13 a7 4d cc c5 a3 8b d4 86 43 8c 22 af 35 2b 54 f2 de 8e a9 2e 47 29 ae bb b7 93 4e 4e bc 7c bb b6 d2 9d a9 75 c3 8b 92 68 e5 6c 71 3b 25 69 9a 6a f6 b1 f3 b1 f3 2d fa 57 e2 ba d6 9d 5d ff 00 51 e2 b6 39 a4 eb 0f a1 5c b5 c9 1a 59 c7 97 83 7b 1d a9 db 6e 76 a9 a4 d5 2a 91 da 99 62 db 27 7b cb 97 0d a9 b6 37 31 8d e8 5c 49 4e 8e 54 fb cb f4 e0 59 ac c3 31 68 97 36 5e 14 5c 1c 6e 2e a8 4b 4e 07 4a 64 e4 e5 93 16 af 36 d5 db f8 32 56 ae Data Ascii: 'Z3lSW#yt_2M&7mIhvWvrT<Dn3Fk}t:/sSgX}M>NUmI>MC"5+T.G)NN\|uhlq;%ij-W]Q9\Y{nv*b'{71\INTY1h6^\n.KNJd62V
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 46 aa 56 65 d9 fd dd 3e 83 71 2d 4c 3a ac dd 4a 31 9c 5d 5d 75 7c 1d 57 79 d2 25 cf 8b da b5 35 94 ad be bf 47 3e ce b8 f7 9f 09 57 5e 99 76 c5 9c ef 5e 5b 97 7b 56 e5 8e b3 31 1e 74 2d 28 64 5a f2 66 63 f6 d3 8a ed f0 39 6e 67 74 b6 6d 19 2d 4a 13 6d 3b 98 ea 31 bc de 9d 76 1f dd 93 ff 00 09 a9 db 1a 1a e9 3a be 96 17 22 ae 38 c5 e9 2f 3c 25 c5 57 8f 85 0f 34 c6 c7 4b 73 7b 50 94 6f ed f1 9d 35 b7 25 c7 47 47 cc f1 cc 74 df e2 f4 7d 58 fe 0d 57 d7 55 a8 b5 c7 82 5d d4 37 5d ee 56 db 57 8f 97 18 fe 1e 49 d3 8c 9f db f5 a3 d7 4d ef 3c ee 7c 9e 4c 3d 3c 8b 91 e5 5a aa 76 3d 57 d6 7a 6b 3b 1e 7b 46 d6 b5 57 f1 34 cc b2 54 2a 4b 2d 02 2a af c8 a8 ba 3e 7c 02 2a e2 51 79 50 20 50 ee 01 d9 cc 0a 03 b8 21 c5 80 ed 5d 80 17 d8 00 00 00 00 10 0e f0 00 00 a0 39 00 Data Ascii: FVe>q-L:J1]]u\|Wy%5G>W^v^[{V1t-(dZfc9ngtm-Jm;1v:"8/<%W4Ks{Po5%GGt}XWU]7]VWIM<\|L=<Zv=Wzk;{FW4TK->\|*QyP P!]9
2024-09-28 23:47:05 UTC	16384	IN	Data Raw: 06 49 e0 db 6f da fb ad c8 b5 55 06 f9 3f ba d3 e4 62 7c ca 43 a5 7c 2c 92 e9 b5 ec 9c b9 49 39 de 51 4e ba 2f a2 bc 4e 53 ee 15 8e 0e b5 f6 eb 4e f9 74 db f6 14 1a fe 66 52 ab d1 35 d9 d8 73 9f 71 e5 0e b1 ed bc ec de bd 83 b7 56 b7 32 b8 f2 fd 46 27 dc ad c2 1d 23 db 6b fd ce 98 7b 1b db c9 d6 79 12 75 ae a8 e7 3e e3 97 84 3a 47 b7 e2 8e 2d f1 f6 8f b4 ed c5 b9 c9 c9 3e f3 13 e6 e7 9d cd c7 87 82 37 cb 7a d8 3d 95 15 ad a4 f5 f0 d5 71 31 f7 3e 4f 36 fb 1e 34 36 ad b7 d9 11 d5 d8 8b 7c 9f d3 c8 c7 77 ca 9e 2d 74 f8 b1 c1 b1 63 fb 2a 31 af e1 61 2e ff 00 03 33 3e 4c fe e6 a2 7c 58 fd ab 19 fb 2e 09 b5 87 05 4e dd 7e 24 9a f9 33 fb a5 7b be 34 7e d6 5f 8f f6 7c 55 3f 07 69 ae 7a 2d 19 3b 1e 4c fe e9 5f b9 f1 e3 f6 c3 15 ba fb 4e 2f ab f0 56 d7 7d 11 7e db Data Ascii: IoU?b\|C\|,I9QN/NSNtfR5sqV2F'#k{yu>:G->7z=q1>O646\|w-tc*1a.3>L\|X.N~$3{4~_\|U?iz-;L_N/V}~

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:04 UTC	633	OUT	GET /images/Medium_logo_Wordmark_white.png HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dein-homeassistant.de/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:05 UTC	316	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:05 GMT Content-Type: image/png Content-Length: 7917 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close ETag: "657f1a3e-1eed" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:05 UTC	7917	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 18 00 00 00 9d 08 06 00 00 00 37 e8 de 92 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 1e 9f 49 44 41 54 78 9c ed dd eb 71 23 37 16 86 61 78 cb ff c9 8d 80 74 04 d2 46 20 39 02 c9 11 48 13 81 39 11 8c 14 81 e5 08 4c 45 b0 52 04 23 45 60 31 82 a1 22 30 19 81 b6 b8 3e 5d ee 61 77 b3 bb 49 5c ce 01 de a7 4a 35 de d6 d4 0e af 68 7c 00 0e f0 c3 c7 c7 87 03 00 a0 00 97 1d 4f 71 2d 3f 00 00 0f 7e e4 45 04 00 64 6a ee 9c bb 76 ce dd 3a e7 ce 7a 9e e2 d6 39 f7 54 fb 01 00 1c 89 19 0c 00 c0 10 d5 e8 7f f5 e7 b9 74 de 35 da 3d c6 3b e7 dc c5 91 8f 6d 17 36 1e e4 67 d3 f8 2d 00 e0 20 02 06 00 60 2e 3f 53 09 0e f5 3f 0f 8d fc ff d0 b8 92 d6 54 42 c1 8d a7 47 b1 95 d9 0f 66 34 00 60 04 02 Data Ascii: PNGIHDR7pHYs&?IDATxq#7axtF 9H9LER#E`1"0>]awI\J5h\|Oq-?~Edjv:z9Tt5=;m6g- `.?S?TBGf4`

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:05 UTC	603	OUT	GET /fonts/poppins-v13-latin-700.woff2 HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dein-homeassistant.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dein-homeassistant.de/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:05 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:05 GMT Content-Type: font/woff2 Content-Length: 7832 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close ETag: "657f1a3e-1e98" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:05 UTC	7832	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e 98 00 0c 00 00 00 00 3e 50 00 00 1e 46 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e5 14 cf 2e 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 44 07 84 0b 1b e2 30 33 03 31 c6 01 0c 33 6e ab 28 aa 14 65 f6 5f 26 68 47 98 fc 2e 46 58 b0 88 1a 45 71 08 33 51 4c b2 53 47 b8 7f 3b f7 d9 f4 43 e3 80 42 93 4a 7b f6 f5 f1 6a 2b 6e 84 34 26 96 27 6a 3f d0 b7 7b 3f 8c 8a 4a 20 0c 30 a8 b8 82 ac 42 d9 a9 65 1d b0 65 90 75 44 42 11 ba 4e 6e 78 7e 9b 3d c4 5e 94 36 6d 80 44 09 08 8a 88 92 8a a8 54 59 a8 60 62 16 56 dd 5c eb ad 8c b9 f8 3b 57 37 17 37 5d e4 55 6d 57 8b ab 5e 5f aa 3f fa 97 2f 6b b2 96 44 30 4f 85 c6 83 59 e8 e7 52 b4 c0 ff 3d c0 00 f0 ff d3 f5 fa 46 da 35 dc 3b e3 Data Ascii: wOF2>PF 0`T.66$h D0313n(e_&hG.FXEq3QLSG;CBJ{j+n4&'j?{?J 0BeeuDBNnx~=^6mDTY`bV\;W77]UmW^_?/kD0OYR=F5;

Timestamp	Bytes transferred	Direction	Data
2024-09-28 23:47:06 UTC	607	OUT	GET /fonts/poppins-v13-latin-regular.woff2 HTTP/1.1 Host: dein-homeassistant.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dein-homeassistant.de sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dein-homeassistant.de/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 23:47:06 UTC	317	IN	HTTP/1.1 200 OK Server: nginx Date: Sat, 28 Sep 2024 23:47:06 GMT Content-Type: font/woff2 Content-Length: 7900 Last-Modified: Sun, 17 Dec 2023 15:56:46 GMT Connection: close ETag: "657f1a3e-1edc" Strict-Transport-Security: max-age=15768000; includeSubDomains X-Powered-By: PleskLin Accept-Ranges: bytes
2024-09-28 23:47:06 UTC	7900	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 1e dc 00 0c 00 00 00 00 3f a0 00 00 1e 8a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 20 1c 30 06 60 00 81 54 0a e7 4c d2 36 0b 83 36 00 01 36 02 24 03 86 68 04 20 05 83 5c 07 84 0b 1b 82 32 b3 22 d8 38 00 20 a1 77 15 45 a5 22 ca fe ab 04 6e 0e 70 1d 4d 24 44 44 78 55 55 d5 ae 6f a9 13 30 1c 23 31 b9 67 cf 3f 5f 0c 70 02 80 21 b0 2f 54 ac ba da 0e d9 58 86 9f 78 4c 57 a4 73 d2 11 1a fb 24 97 e7 e9 f7 e3 7f 6b ef 73 bf 5b d3 f4 e7 57 6b 22 16 0d 88 3e 5d 2b 15 af 0c 91 08 d9 33 59 2c 24 f1 f8 ce f0 fc 36 7b 8a 33 36 17 a9 3d 8c a2 4a a2 3f f1 81 0f 48 e4 27 04 13 2b 58 39 73 11 ed a2 dc 76 ba bb f3 76 b2 c8 ba a8 ed 7a d9 fe 97 ae ec b7 7a c6 f0 5e cb 1b e4 0e 22 8a 22 68 18 d6 b2 d6 96 81 17 50 Data Ascii: wOF2? 0`TL666$h \2"8 wE"npM$DDxUUo0#1g?_p!/TXxLWs$ks[Wk">]+3Y,$6{36=J?H'+X9svvzz^""hP