Edit tour

Windows Analysis Report
https://trezor-docs-info.github.io/

Overview

General Information

Sample URL:	https://trezor-docs-info.github.io/
Analysis ID:	1521714
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Yara detected HtmlPhish64

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6620 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2164,i,17548006147424488746,12955934992555054697,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-docs-info.github.io/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /x/migrate HTTP/1.1Host: x.comConnection: keep-aliveContent-Length: 450Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://twitter.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172757015553530382; guest_id_ads=v1%3A172757015553530382; personalization_id="v1_pP7iTKgknDgzLYjdSeXrYA=="; guest_id=v1%3A172757015553530382

Source: trezor-docs.github.io	Virustotal: Detection: 6%			Perma Link
Source: trezor-docs-info.github.io	Virustotal: Detection: 17%			Perma Link

Source: https://trezor-docs-info.github.io/	HTTP Parser: No favicon
Source: https://trezor-docs.github.io/	HTTP Parser: No favicon
Source: https://x.com/githubstatus	HTTP Parser: No favicon
Source: https://x.com/githubstatus	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon
Source: https://www.githubstatus.com/	HTTP Parser: No favicon

Source: https://x.com/githubstatus	HTTP Parser: No <meta name="author".. found
Source: https://x.com/githubstatus	HTTP Parser: No <meta name="author".. found

Source: https://x.com/githubstatus	HTTP Parser: No <meta name="copyright".. found
Source: https://x.com/githubstatus	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.2.167:443 -> 192.168.2.6:50225 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/ces/p2
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/onboarding/sso_init.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json
Source: global traffic	HTTP traffic detected: GET is not allowed on path /1.1/jot/client_event.json

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.2.167

Source: chromecache_643.2.dr	String found in binary or memory: <a href="https://www.facebook.com/GitHub" data-ga-click="Footer, go to Facebook, text:facebook" aria-label="GitHub Facebook" style="color: #959da5;"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 15.3 15.4" class="d-block" height="18" role="img"><title>GitHub Facebook</title> equals www.facebook.com (Facebook)
Source: chromecache_643.2.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/github" data-ga-click="Footer, go to Linkedin, text:linkedin" aria-label="GitHub LinkedIn" style="color: #959da5;"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 19 18" class="d-block" height="18" role="img"><title>GitHub LinkedIn</title> equals www.linkedin.com (Linkedin)
Source: chromecache_643.2.dr	String found in binary or memory: <a href="https://www.youtube.com/github" data-ga-click="Footer, go to YouTube, text:youtube" aria-label="GitHub YouTube" style="color: #959da5;"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 19.17 13.6" class="d-block" height="16" role="img"><title>GitHub YouTube</title> equals www.youtube.com (Youtube)
Source: chromecache_643.2.dr	String found in binary or memory: <li class="mr-3"><a href="https://twitter.com/github" data-ga-click="Footer, go to Twitter, text:twitter" aria-label="GitHub Twitter" style="color: #959da5;"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 273.5 222.3" class="d-block" height="18" role="img"><title>GitHub Twitter</title> equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: trezor-docs-info.github.io
Source: global traffic	DNS traffic detected: DNS query: i.ibb.co
Source: global traffic	DNS traffic detected: DNS query: trezor.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: trezor-docs.github.io
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: abs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.twitter.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: pbs.twimg.com
Source: global traffic	DNS traffic detected: DNS query: api.x.com
Source: global traffic	DNS traffic detected: DNS query: video.twimg.com
Source: global traffic	DNS traffic detected: DNS query: abs-0.twimg.com
Source: global traffic	DNS traffic detected: DNS query: githubstatus.com
Source: global traffic	DNS traffic detected: DNS query: www.githubstatus.com
Source: global traffic	DNS traffic detected: DNS query: dka575ofm4ao0.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: rsms.me
Source: global traffic	DNS traffic detected: DNS query: user-images.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: help.github.com
Source: global traffic	DNS traffic detected: DNS query: docs.github.com
Source: global traffic	DNS traffic detected: DNS query: analytics.githubassets.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: collector.githubapp.com
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: github.githubassets.com
Source: global traffic	DNS traffic detected: DNS query: avatars.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: github-cloud.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: api.github.com
Source: global traffic	DNS traffic detected: DNS query: collector.github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9379Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()x-origin-cache: HITAccess-Control-Allow-Origin: *Strict-Transport-Security: max-age=31556952ETag: "64d39a40-24a3"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'x-proxy-cache: MISSX-GitHub-Request-Id: AF90:20AB97:276E314:2C432EA:66F8A0D2Accept-Ranges: bytesAge: 0Date: Sun, 29 Sep 2024 00:35:32 GMTVia: 1.1 varnishX-Served-By: cache-nyc-kteb1890075-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727570132.311955,VS0,VE17Vary: Accept-EncodingX-Fastly-Request-ID: bce8eb356fca72066e2b1bd5bb0a39b32f9df406
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9379Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()Access-Control-Allow-Origin: *Strict-Transport-Security: max-age=31556952ETag: "64d39a40-24a3"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'x-proxy-cache: MISSX-GitHub-Request-Id: B42E:1C68D:2A88A86:2F5E081:66F8A0D4Accept-Ranges: bytesAge: 0Date: Sun, 29 Sep 2024 00:35:34 GMTVia: 1.1 varnishX-Served-By: cache-nyc-kteb1890056-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727570134.232102,VS0,VE27Vary: Accept-EncodingX-Fastly-Request-ID: 40b59f4c1c0eab4ca8e8c9f706d5954bfd053757
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9115Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()ETag: "66f42b03-239b"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'X-GitHub-Request-Id: FA7C:1664:F65724:11B6F8D:66F8A0E0Accept-Ranges: bytesAge: 0Date: Sun, 29 Sep 2024 00:35:44 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740062-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727570145.819365,VS0,VE12Vary: Accept-EncodingX-Fastly-Request-ID: 311a782824f74c68566feb728efdb12ec1dffea3
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:18 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 8a98a3954e01a1c4x-rate-limit-limit: 500x-rate-limit-reset: 1727571078x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 57x-connection-hash: 1030163c4fd4838a769bb4c44d7c3413480906bdb05540f3791c0e142d192731connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenperf: 7402827104cache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 225e717f582ed1acaccess-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 2x-connection-hash: cefa66a39fa62ba9495484383cbe3a2643b5bc01954fcee6c1658603cfb3099edate: Sun, 29 Sep 2024 00:36:19 GMTserver: tsa_bconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:21 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 6ed437cb7f9b2b08x-rate-limit-limit: 500x-rate-limit-reset: 1727571081x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 8x-connection-hash: 59cdae66b7043d71b617f4930a0739314dcf4ec382f4d8f780c3dc610900a5c9connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9379Server: GitHub.comContent-Type: text/html; charset=utf-8x-origin-cache: HITAccess-Control-Allow-Origin: *ETag: "64d39a40-24a3"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'x-proxy-cache: MISSX-GitHub-Request-Id: E210:298D2D:256CC9F:2A10610:66F8A108Accept-Ranges: bytesAge: 0Date: Sun, 29 Sep 2024 00:36:24 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740051-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727570185.911610,VS0,VE16Vary: Accept-EncodingX-Fastly-Request-ID: 4f36d028eec6c4209a6fe010840482167e18554e
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:25 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: e064183509aa8c62x-rate-limit-limit: 500x-rate-limit-reset: 1727571085x-rate-limit-remaining: 499strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 9x-connection-hash: 0263da7db739eb7c5f9a67dfca1fef8c731c936af6da749d1a41de09d7acca9dconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:27 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 176ef367d09f54e9x-rate-limit-limit: 500x-rate-limit-reset: 1727571085x-rate-limit-remaining: 498strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 8x-connection-hash: 31817b7852807f5e8a7fe479b58be3b155985ba0e077c37d2e1022a684c699f5connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:36 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 84eec8347ce05008x-rate-limit-limit: 500x-rate-limit-reset: 1727571085x-rate-limit-remaining: 497strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 13x-connection-hash: 49faa7685bd79afc560e4502e7c35156a609e71d81eb149b8370d6e9212eb5f3connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:39 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: 253525dfdd49891cx-rate-limit-limit: 500x-rate-limit-reset: 1727571085x-rate-limit-remaining: 496strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 7x-connection-hash: 0515ee515efab11cb1334f0f26fdd2ceb9881095c65b9a0428592284c1a6e98aconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Founddate: Sun, 29 Sep 2024 00:36:52 UTCperf: 7402827104server: tsa_bcache-control: no-cache, no-store, max-age=0content-length: 0x-transaction-id: af263e9371b80a8fx-rate-limit-limit: 500x-rate-limit-reset: 1727571085x-rate-limit-remaining: 495strict-transport-security: max-age=631138519access-control-allow-origin: https://x.comaccess-control-allow-credentials: trueaccess-control-expose-headers: X-Twitter-Spotify-Access-Token,X-Twitter-Client-Version,X-Twitter-Diffy-Request-Key,X-Rate-Limit-Limit,X-TD-Mtime,X-Twitter-Client,Backoff-Policy,X-Rate-Limit-Remaining,Content-Length,X-Rate-Limit-Reset,X-Transaction-Id,X-Acted-As-User-Id,X-Twitter-Polling,X-Twitter-UTCOffset,X-Response-Timex-response-time: 13x-connection-hash: d76f535d7d94efd0500374d00482ea632f327e14a0cb35ccdab127c4bbe5cad4connection: close

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2164,i,17548006147424488746,12955934992555054697,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://trezor-docs-info.github.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=2164,i,17548006147424488746,12955934992555054697,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Link
avatars.githubusercontent.com	0%	Virustotal	Browse
www-githubstatus-com-20d6fabf-f78f-4f10-805a-85ca798cfac2.saas.atlassian.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
dualstack.video.twitter.map.fastly.net	0%	Virustotal	Browse
glb-db52c2cf8be544.github.com	0%	Virustotal	Browse
www.recaptcha.net	0%	Virustotal	Browse
platform.twitter.map.fastly.net	0%	Virustotal	Browse
docs.github.com	0%	Virustotal	Browse
github.githubassets.com	0%	Virustotal	Browse
t.co	0%	Virustotal	Browse
twimg.twitter.map.fastly.net	0%	Virustotal	Browse
trezor-docs.github.io	6%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
i.ibb.co	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
rsms.me	0%	Virustotal	Browse
twitter.com	0%	Virustotal	Browse
tpop-api.twitter.com	0%	Virustotal	Browse
trezor.io	0%	Virustotal	Browse
github.github.io	0%	Virustotal	Browse
tpop-api.x.com	0%	Virustotal	Browse
api.github.com	0%	Virustotal	Browse
s3-w.us-east-1.amazonaws.com	0%	Virustotal	Browse
dka575ofm4ao0.cloudfront.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
redirect.github.com	0%	Virustotal	Browse
syndication.twitter.com	0%	Virustotal	Browse
githubstatus.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
abs-zero.twimg.com	0%	Virustotal	Browse
github.com	0%	Virustotal	Browse
abs-0.twimg.com	0%	Virustotal	Browse
trezor-docs-info.github.io	18%	Virustotal	Browse
github-cloud.s3.amazonaws.com	0%	Virustotal	Browse
user-images.githubusercontent.com	0%	Virustotal	Browse
dualstack.twimg.twitter.map.fastly.net	0%	Virustotal	Browse
abs.twimg.com	0%	Virustotal	Browse
x.com	1%	Virustotal	Browse

Source	Detection	Scanner	Label
https://abs.twimg.com/responsive-web/client-web/shared~loader.Typeahead~loader.DMDrawer~bundle.Grok~bundle.MultiAccount~bundle.ReaderMode~bundle.Articles~bun.f39400ca.js	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
avatars.githubusercontent.com	185.199.109.133	true	false	0%, Virustotal, Browse	unknown
dualstack.video.twitter.map.fastly.net	151.101.120.158	true	false	0%, Virustotal, Browse	unknown
rsms.me	104.21.234.234	true	false	0%, Virustotal, Browse	unknown
www.recaptcha.net	172.217.16.195	true	false	0%, Virustotal, Browse	unknown
docs.github.com	185.199.109.154	true	false	0%, Virustotal, Browse	unknown
glb-db52c2cf8be544.github.com	140.82.113.22	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
www-githubstatus-com-20d6fabf-f78f-4f10-805a-85ca798cfac2.saas.atlassian.com	108.138.26.12	true	false	0%, Virustotal, Browse	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	0%, Virustotal, Browse	unknown
github.githubassets.com	185.199.109.154	true	false	0%, Virustotal, Browse	unknown
i.ibb.co	162.19.58.160	true	false	0%, Virustotal, Browse	unknown
tpop-api.twitter.com	104.244.42.194	true	false	0%, Virustotal, Browse	unknown
t.co	172.66.0.227	true	false	0%, Virustotal, Browse	unknown
twimg.twitter.map.fastly.net	199.232.188.159	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	0%, Virustotal, Browse	unknown
trezor-docs.github.io	185.199.108.153	true	false	6%, Virustotal, Browse	unknown
www.google.com	172.217.18.4	true	false	0%, Virustotal, Browse	unknown
twitter.com	104.244.42.65	true	false	0%, Virustotal, Browse	unknown
trezor.io	104.20.80.175	true	false	0%, Virustotal, Browse	unknown
github.github.io	185.199.109.153	true	false	0%, Virustotal, Browse	unknown
github.com	140.82.121.3	true	false	0%, Virustotal, Browse	unknown
tpop-api.x.com	104.244.42.66	true	false	0%, Virustotal, Browse	unknown
api.github.com	140.82.121.5	true	false	0%, Virustotal, Browse	unknown
redirect.github.com	140.82.112.18	true	false	0%, Virustotal, Browse	unknown
syndication.twitter.com	104.244.42.72	true	false	0%, Virustotal, Browse	unknown
dka575ofm4ao0.cloudfront.net	18.244.20.103	true	false	0%, Virustotal, Browse	unknown
s3-w.us-east-1.amazonaws.com	54.231.234.249	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
githubstatus.com	185.199.111.153	true	false	0%, Virustotal, Browse	unknown
play.google.com	172.217.23.110	true	false	0%, Virustotal, Browse	unknown
dualstack.twimg.twitter.map.fastly.net	199.232.188.159	true	false	0%, Virustotal, Browse	unknown
abs-zero.twimg.com	104.244.43.131	true	false	0%, Virustotal, Browse	unknown
trezor-docs-info.github.io	185.199.110.153	true	false	18%, Virustotal, Browse	unknown
x.com	104.244.42.65	true	false	1%, Virustotal, Browse	unknown
user-images.githubusercontent.com	185.199.110.133	true	false	0%, Virustotal, Browse	unknown
github-cloud.s3.amazonaws.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
abs.twimg.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
abs-0.twimg.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
help.github.com	unknown	unknown	false		unknown
api.twitter.com	unknown	unknown	false		unknown
collector.github.com	unknown	unknown	false		unknown
collector.githubapp.com	unknown	unknown	false		unknown
video.twimg.com	unknown	unknown	false		unknown
platform.twitter.com	unknown	unknown	false		unknown
pbs.twimg.com	unknown	unknown	false		unknown
api.x.com	unknown	unknown	false		unknown
analytics.githubassets.com	unknown	unknown	false		unknown
www.githubstatus.com	unknown	unknown	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.audio.8d83897a.j	chromecache_564.2.dr, chromecache_530.2.dr	false		unknown
https://docs.github.com/de/pages	chromecache_285.2.dr	false		unknown
http://underscorejs.org	chromecache_461.2.dr, chromecache_298.2.dr	false	URL Reputation: safe	unknown
https://support.x.com/articles/14016	chromecache_465.2.dr, chromecache_478.2.dr	false		unknown
https://dka575ofm4ao0.cloudfront.net/assets/register_subscription_form-589b657fec607087fc5c740c56827	chromecache_643.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11471_Anime_ABEMA_18ce54aqujn_Hashmoji_20240705_20241007_Monogata	chromecache_610.2.dr	false	URL Reputation: safe	unknown
https://github.com/features	chromecache_643.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.TimelineRenderer.	chromecache_513.2.dr, chromecache_517.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/modules.common.0481c12a.	chromecache_415.2.dr, chromecache_477.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_552.2.dr, chromecache_318.2.dr, chromecache_504.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SignupModule.b618	chromecache_625.2.dr, chromecache_562.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11662_Com2us_summoners_STAFF_Branding_Q324_after/BF-11662_Com2us_	chromecache_610.2.dr	false	URL Reputation: safe	unknown
https://openjsf.org/	chromecache_441.2.dr, chromecache_342.2.dr	false	URL Reputation: safe	unknown
http://primer.style/css	chromecache_515.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11949_GlicoThailandPockyBox_Hashmoji2024_/BF-11949_GlicoThailandP	chromecache_610.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_504.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11628_fgoproject_9thAnniversary_Hashmoji2024/BF-11628_fgoproject_	chromecache_610.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.ProfileSidebar.	chromecache_490.2.dr, chromecache_341.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11712_GenshinMualani_Hashmoji2024/BF-11712_GenshinMualani_Hashmoj	chromecache_610.2.dr	false	URL Reputation: safe	unknown
https://dka575ofm4ao0.cloudfront.net/assets/ProximaNovaSemibold-86724fb2152613d735ba47c3f47a9ad2424b	chromecache_643.2.dr	false		unknown
http://underscorejs.org/LICENSE	chromecache_441.2.dr, chromecache_342.2.dr	false	URL Reputation: safe	unknown
https://abs.twimg.com/hashflags/BF-11751_Global_miHoYo_Final_Hashmoji_v2/BF-11751_Global_miHoYo_Fina	chromecache_610.2.dr	false		unknown
https://dka575ofm4ao0.cloudfront.net/assets/ProximaNovaRegular-a40a469edbd27b65b845b8000d47445a17def	chromecache_643.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11708_NetflixJP_Weare_Hashmoji2024/BF-11708_NetflixJP_Weare_Hashm	chromecache_610.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11950_Riyadhseason_Hashmoji2024_/BF-11950_Riyadhseason_Hashmoji20	chromecache_610.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/i18n/emoji-en.3afd1e4a.j	chromecache_278.2.dr, chromecache_370.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.s.7346fe0a.js.m	chromecache_589.2.dr, chromecache_453.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.DividerHandler.f6	chromecache_499.2.dr, chromecache_579.2.dr	false		unknown
http://partner.github.com/	chromecache_643.2.dr	false		unknown
https://x.com/en/privacy	chromecache_299.2.dr, chromecache_362.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/ondemand.LottieWeb.bcf99	chromecache_526.2.dr, chromecache_343.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~loader.AppModules	chromecache_372.2.dr, chromecache_436.2.dr, chromecache_595.2.dr, chromecache_382.2.dr, chromecache_661.2.dr, chromecache_307.2.dr, chromecache_571.2.dr, chromecache_540.2.dr, chromecache_528.2.dr, chromecache_621.2.dr	false		unknown
https://x.com/i/broadcasts/$	chromecache_367.2.dr, chromecache_272.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-12102_SND2024_OrganicHashmojiMENA/BF-12102_SND2024_OrganicHashmoj	chromecache_610.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_552.2.dr, chromecache_318.2.dr, chromecache_504.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/loader.SideNav.e8d0899a.	chromecache_508.2.dr, chromecache_380.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF_12060_MOC_2024_SND_Hashmoji/BF_12060_MOC_2024_SND_Hashmoji.png	chromecache_610.2.dr	false		unknown
https://meet.google.com	chromecache_401.2.dr, chromecache_591.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Birdwatch~	chromecache_597.2.dr, chromecache_566.2.dr, chromecache_429.2.dr, chromecache_454.2.dr, chromecache_558.2.dr, chromecache_365.2.dr, chromecache_658.2.dr, chromecache_482.2.dr, chromecache_587.2.dr, chromecache_421.2.dr	false		unknown
https://abs.twimg.com/hashflags/BF-11479_Zenless_Zone_Zero_Launch2024_Nicole_Livestream/BF-11479_Zen	chromecache_610.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Communitie	chromecache_463.2.dr, chromecache_679.2.dr, chromecache_676.2.dr, chromecache_312.2.dr, chromecache_411.2.dr, chromecache_348.2.dr	false		unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~ondemand.InlinePl	chromecache_505.2.dr, chromecache_265.2.dr	false		unknown
https://blog.github.com	chromecache_643.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_552.2.dr, chromecache_318.2.dr, chromecache_504.2.dr	false	URL Reputation: safe	unknown
https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web/shared~bundle.Bookmarks~	chromecache_351.2.dr, chromecache_360.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
185.199.111.153	githubstatus.com	Netherlands	54113	FASTLYUS	false
104.244.42.72	syndication.twitter.com	United States	13414	TWITTERUS	false
185.199.111.154	unknown	Netherlands	54113	FASTLYUS	false
185.199.109.133	avatars.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.20.80.175	trezor.io	United States	13335	CLOUDFLARENETUS	false
104.244.43.131	abs-zero.twimg.com	United States	54113	FASTLYUS	false
142.250.184.227	unknown	United States	15169	GOOGLEUS	false
185.199.110.154	unknown	Netherlands	54113	FASTLYUS	false
185.199.110.153	trezor-docs-info.github.io	Netherlands	54113	FASTLYUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
104.21.234.234	rsms.me	United States	13335	CLOUDFLARENETUS	false
185.199.109.154	docs.github.com	Netherlands	54113	FASTLYUS	false
185.199.109.153	github.github.io	Netherlands	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
185.199.108.153	trezor-docs.github.io	Netherlands	54113	FASTLYUS	false
199.232.188.159	twimg.twitter.map.fastly.net	United States	54113	FASTLYUS	false
172.217.16.195	www.recaptcha.net	United States	15169	GOOGLEUS	false
140.82.112.18	redirect.github.com	United States	36459	GITHUBUS	false
162.19.58.160	i.ibb.co	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
18.244.20.103	dka575ofm4ao0.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
172.217.23.110	play.google.com	United States	15169	GOOGLEUS	false
140.82.113.22	glb-db52c2cf8be544.github.com	United States	36459	GITHUBUS	false
151.101.120.158	dualstack.video.twitter.map.fastly.net	United States	54113	FASTLYUS	false
185.199.110.133	user-images.githubusercontent.com	Netherlands	54113	FASTLYUS	false
169.197.85.95	unknown	United States	26548	PUREVOLTAGE-INCUS	false
104.244.42.66	tpop-api.x.com	United States	13414	TWITTERUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.2	unknown	United States	13414	TWITTERUS	false
18.244.20.179	unknown	United States	16509	AMAZON-02US	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
104.244.42.194	tpop-api.twitter.com	United States	13414	TWITTERUS	false
185.199.108.133	unknown	Netherlands	54113	FASTLYUS	false
108.138.26.12	www-githubstatus-com-20d6fabf-f78f-4f10-805a-85ca798cfac2.saas.atlassian.com	United States	16509	AMAZON-02US	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false
172.217.16.131	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521714
Start date and time:	2024-09-29 02:34:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://trezor-docs-info.github.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@26/584@116/41
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://trezor-docs.github.io/ Browse: https://twitter.com/githubstatus Browse: https://githubstatus.com/ Browse: https://help.github.com/pages/

Input	Output
URL: https://trezor-docs.github.io/ Model: jbxai	{ "brand":["GitHub"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://docs.github.com/en/pages Model: jbxai	{ "brand":["GitHub"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Quickstart", "text_input_field_labels":["Start here"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://trezor-docs-info.github.io/ Model: jbxai	{ "brand":["Trezor"], "contains_trigger_text":true, "trigger_text":"Take control of your crypto in Trezor Suite", "prominent_button_name":"Trezor Suite Web App Login", "text_input_field_labels":["my trezor", "Bitcoin", "Ethereum", "Cardano", "Dogecoin", "XRP"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://x.com/githubstatus?mx=2 Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.githubstatus.com/ Model: jbxai	{ "brand":["GitHub"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71365
Entropy (8bit):	5.434388742232653
Encrypted:	false
SSDEEP:	1536:DlZAbLK//S5aumwWYAsmXYzlMxbOL150NBbCZVp:DLa5VmOOWH
MD5:	8C56DEA6998A620D92EE3EC1B029F36E
SHA1:	73CD99B5893E5FD1DAF2256BF75EB37E115EC88E
SHA-256:	CBE571FA451678B6BC298265E050B2C77C73D3C70DF042F801C9FAFDC4B351BF
SHA-512:	08D463FE4356C2DC5AC10BF2349188E740639E132BE69814CF52CB83493E9DFF53F06D0181C4FD733F45F891BF71D936B9E5BEC29F81F0653919AC6B5EDA2C64
Malicious:	false
Reputation:	low
URL:	https://abs.twimg.com/responsive-web/client-web/shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun.a10c715a.js
Preview:	"use strict";(self.webpackChunk_twitter_responsive_web=self.webpackChunk_twitter_responsive_web\|\|[]).push([["shared~ondemand.InlinePlayer~loader.AudioOnlyVideoPlayer~loader.immersiveTweetHandler~bundle.TV~bundle.Accoun"],{907187:(t,e,i)=>{i.d(e,{Z:()=>De});i(334115),i(200634),i(320796),i(449228),i(438695),i(827233),i(374083),i(418145),i(315735),i(543450),i(743108),i(332501),i(24895),i(499120),i(865584),i(326936),i(271245),i(414586),i(458143),i(43105),i(334769),i(358188),i(73439),i(477950),i(888233),i(428673),i(201939),i(906886),i(154226);var n,r,a,o,s=i(580753),c=i(981665),u=i(256666),l=i(22699),d=i.n(l);function h(t,e){var i;if("undefined"==typeof Symbol\|\|null==t[Symbol.iterator]){if(Array.isArray(t)\|\|(i=function(t,e){if(!t)return;if("string"==typeof t)return f(t,e);var i=Object.prototype.toString.call(t).slice(8,-1);"Object"===i&&t.constructor&&(i=t.constructor.name);if("Map"===i\|\|"Set"===i)return Array.from(t);if("Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i))re

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 02:35:31.625921011 CEST	192.168.2.6	1.1.1.1	0xff37	Standard query (0)	trezor-docs-info.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:31.626225948 CEST	192.168.2.6	1.1.1.1	0xddf9	Standard query (0)	trezor-docs-info.github.io	65	IN (0x0001)	false
Sep 29, 2024 02:35:32.240272999 CEST	192.168.2.6	1.1.1.1	0xbc74	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:32.240319014 CEST	192.168.2.6	1.1.1.1	0xf40b	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Sep 29, 2024 02:35:32.240802050 CEST	192.168.2.6	1.1.1.1	0xeeb6	Standard query (0)	trezor.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:32.240993023 CEST	192.168.2.6	1.1.1.1	0x1723	Standard query (0)	trezor.io	65	IN (0x0001)	false
Sep 29, 2024 02:35:33.650796890 CEST	192.168.2.6	1.1.1.1	0x4730	Standard query (0)	trezor.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:33.651066065 CEST	192.168.2.6	1.1.1.1	0xb370	Standard query (0)	trezor.io	65	IN (0x0001)	false
Sep 29, 2024 02:35:34.403732061 CEST	192.168.2.6	1.1.1.1	0x54ba	Standard query (0)	i.ibb.co	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:34.404011011 CEST	192.168.2.6	1.1.1.1	0x8f1a	Standard query (0)	i.ibb.co	65	IN (0x0001)	false
Sep 29, 2024 02:35:34.405283928 CEST	192.168.2.6	1.1.1.1	0x712f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:34.405463934 CEST	192.168.2.6	1.1.1.1	0xee92	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:44.141987085 CEST	192.168.2.6	1.1.1.1	0x80c9	Standard query (0)	trezor-docs.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:44.142232895 CEST	192.168.2.6	1.1.1.1	0xd710	Standard query (0)	trezor-docs.github.io	65	IN (0x0001)	false
Sep 29, 2024 02:35:54.150399923 CEST	192.168.2.6	1.1.1.1	0xa630	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:54.150763035 CEST	192.168.2.6	1.1.1.1	0x4bbe	Standard query (0)	twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:54.890158892 CEST	192.168.2.6	1.1.1.1	0x9e28	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:54.890158892 CEST	192.168.2.6	1.1.1.1	0x62ed	Standard query (0)	x.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:55.948729038 CEST	192.168.2.6	1.1.1.1	0xf359	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:55.948960066 CEST	192.168.2.6	1.1.1.1	0xafc0	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:55.950031996 CEST	192.168.2.6	1.1.1.1	0x1336	Standard query (0)	api.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:55.950536013 CEST	192.168.2.6	1.1.1.1	0x2ca4	Standard query (0)	api.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:55.971949100 CEST	192.168.2.6	1.1.1.1	0xe201	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:55.972121954 CEST	192.168.2.6	1.1.1.1	0x532f	Standard query (0)	t.co	65	IN (0x0001)	false
Sep 29, 2024 02:35:55.973563910 CEST	192.168.2.6	1.1.1.1	0xe569	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:55.973815918 CEST	192.168.2.6	1.1.1.1	0xbacd	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:55.982297897 CEST	192.168.2.6	1.1.1.1	0x31c8	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:55.982527018 CEST	192.168.2.6	1.1.1.1	0x79cc	Standard query (0)	api.x.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:57.035757065 CEST	192.168.2.6	1.1.1.1	0xf9c9	Standard query (0)	video.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:57.035955906 CEST	192.168.2.6	1.1.1.1	0xf920	Standard query (0)	video.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:57.103511095 CEST	192.168.2.6	1.1.1.1	0xb487	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:57.103657961 CEST	192.168.2.6	1.1.1.1	0xf5f4	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:57.777153969 CEST	192.168.2.6	1.1.1.1	0xf2a8	Standard query (0)	abs-0.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:57.777481079 CEST	192.168.2.6	1.1.1.1	0xa9ad	Standard query (0)	abs-0.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:35:58.566456079 CEST	192.168.2.6	1.1.1.1	0x136	Standard query (0)	abs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:35:58.566772938 CEST	192.168.2.6	1.1.1.1	0x6b3e	Standard query (0)	abs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:02.897557020 CEST	192.168.2.6	1.1.1.1	0x150c	Standard query (0)	api.x.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:02.897557020 CEST	192.168.2.6	1.1.1.1	0x5eaf	Standard query (0)	api.x.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:17.297374010 CEST	192.168.2.6	1.1.1.1	0xe220	Standard query (0)	pbs.twimg.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:17.297497988 CEST	192.168.2.6	1.1.1.1	0xc60	Standard query (0)	pbs.twimg.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:24.166800022 CEST	192.168.2.6	1.1.1.1	0x52c0	Standard query (0)	githubstatus.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:24.166939020 CEST	192.168.2.6	1.1.1.1	0xd6b	Standard query (0)	githubstatus.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:24.858772993 CEST	192.168.2.6	1.1.1.1	0xdfe	Standard query (0)	www.githubstatus.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:24.859018087 CEST	192.168.2.6	1.1.1.1	0x330d	Standard query (0)	www.githubstatus.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:26.188704014 CEST	192.168.2.6	1.1.1.1	0x4ffb	Standard query (0)	dka575ofm4ao0.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:26.188896894 CEST	192.168.2.6	1.1.1.1	0xbaa9	Standard query (0)	dka575ofm4ao0.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 02:36:26.190924883 CEST	192.168.2.6	1.1.1.1	0x11b8	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:26.191108942 CEST	192.168.2.6	1.1.1.1	0xd2a5	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:26.312268972 CEST	192.168.2.6	1.1.1.1	0x88a2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:26.312604904 CEST	192.168.2.6	1.1.1.1	0xa97a	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:26.823148012 CEST	192.168.2.6	1.1.1.1	0x9ee1	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:26.823462009 CEST	192.168.2.6	1.1.1.1	0xd94d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:27.368642092 CEST	192.168.2.6	1.1.1.1	0x9650	Standard query (0)	dka575ofm4ao0.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:27.369227886 CEST	192.168.2.6	1.1.1.1	0xa94d	Standard query (0)	dka575ofm4ao0.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 02:36:28.759370089 CEST	192.168.2.6	1.1.1.1	0x7ff	Standard query (0)	rsms.me	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:28.759583950 CEST	192.168.2.6	1.1.1.1	0xc966	Standard query (0)	rsms.me	65	IN (0x0001)	false
Sep 29, 2024 02:36:28.956373930 CEST	192.168.2.6	1.1.1.1	0x7860	Standard query (0)	user-images.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:28.956531048 CEST	192.168.2.6	1.1.1.1	0x6a49	Standard query (0)	user-images.githubusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:29.736443043 CEST	192.168.2.6	1.1.1.1	0xe805	Standard query (0)	help.github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:29.736903906 CEST	192.168.2.6	1.1.1.1	0x54fc	Standard query (0)	help.github.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:30.137964010 CEST	192.168.2.6	1.1.1.1	0x9ac7	Standard query (0)	user-images.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:30.138624907 CEST	192.168.2.6	1.1.1.1	0xd2ee	Standard query (0)	user-images.githubusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:30.420150042 CEST	192.168.2.6	1.1.1.1	0xc7ec	Standard query (0)	docs.github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:30.420718908 CEST	192.168.2.6	1.1.1.1	0x558b	Standard query (0)	docs.github.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:30.452236891 CEST	192.168.2.6	1.1.1.1	0xfe82	Standard query (0)	analytics.githubassets.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:30.453412056 CEST	192.168.2.6	1.1.1.1	0x25af	Standard query (0)	analytics.githubassets.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:31.911521912 CEST	192.168.2.6	1.1.1.1	0x6016	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:31.911840916 CEST	192.168.2.6	1.1.1.1	0xfdd7	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Sep 29, 2024 02:36:31.912158012 CEST	192.168.2.6	1.1.1.1	0xe481	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:31.912264109 CEST	192.168.2.6	1.1.1.1	0x2905	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:32.022299051 CEST	192.168.2.6	1.1.1.1	0x48a	Standard query (0)	collector.githubapp.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:32.022970915 CEST	192.168.2.6	1.1.1.1	0x5436	Standard query (0)	collector.githubapp.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:33.920012951 CEST	192.168.2.6	1.1.1.1	0x88e9	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:33.920164108 CEST	192.168.2.6	1.1.1.1	0x6cc8	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:33.921471119 CEST	192.168.2.6	1.1.1.1	0xaa17	Standard query (0)	analytics.githubassets.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:33.921632051 CEST	192.168.2.6	1.1.1.1	0x748c	Standard query (0)	analytics.githubassets.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:34.680232048 CEST	192.168.2.6	1.1.1.1	0xbf9d	Standard query (0)	www.githubstatus.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:34.680588007 CEST	192.168.2.6	1.1.1.1	0x9bc	Standard query (0)	www.githubstatus.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:35.563337088 CEST	192.168.2.6	1.1.1.1	0x2c76	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:35.563966036 CEST	192.168.2.6	1.1.1.1	0xbde3	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:35.695853949 CEST	192.168.2.6	1.1.1.1	0x4c85	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:35.696248055 CEST	192.168.2.6	1.1.1.1	0x61fe	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Sep 29, 2024 02:36:35.700532913 CEST	192.168.2.6	1.1.1.1	0x5829	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:35.700948000 CEST	192.168.2.6	1.1.1.1	0x25d9	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:36.702892065 CEST	192.168.2.6	1.1.1.1	0xba43	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:36.703001022 CEST	192.168.2.6	1.1.1.1	0x1b25	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Sep 29, 2024 02:36:37.382090092 CEST	192.168.2.6	1.1.1.1	0x5047	Standard query (0)	docs.github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:37.382502079 CEST	192.168.2.6	1.1.1.1	0x323b	Standard query (0)	docs.github.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:37.678956032 CEST	192.168.2.6	1.1.1.1	0x99fc	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:37.678956032 CEST	192.168.2.6	1.1.1.1	0x3d29	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:40.492116928 CEST	192.168.2.6	1.1.1.1	0xd32f	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:40.492582083 CEST	192.168.2.6	1.1.1.1	0x274c	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:40.984059095 CEST	192.168.2.6	1.1.1.1	0xcff7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:40.984663010 CEST	192.168.2.6	1.1.1.1	0x15bf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:41.787302017 CEST	192.168.2.6	1.1.1.1	0x65a8	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:41.788156033 CEST	192.168.2.6	1.1.1.1	0x231e	Standard query (0)	twitter.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:49.700440884 CEST	192.168.2.6	1.1.1.1	0x14cc	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:49.700926065 CEST	192.168.2.6	1.1.1.1	0x2c00	Standard query (0)	github.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:50.589765072 CEST	192.168.2.6	1.1.1.1	0x72bc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:50.589989901 CEST	192.168.2.6	1.1.1.1	0x39c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:50.829998016 CEST	192.168.2.6	1.1.1.1	0xae3e	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:50.830476046 CEST	192.168.2.6	1.1.1.1	0x6b13	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:50.831151009 CEST	192.168.2.6	1.1.1.1	0x1d02	Standard query (0)	avatars.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:50.831346035 CEST	192.168.2.6	1.1.1.1	0x6865	Standard query (0)	avatars.githubusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:50.858705044 CEST	192.168.2.6	1.1.1.1	0xec28	Standard query (0)	github-cloud.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:50.858889103 CEST	192.168.2.6	1.1.1.1	0x59c8	Standard query (0)	github-cloud.s3.amazonaws.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:50.859612942 CEST	192.168.2.6	1.1.1.1	0x9cf2	Standard query (0)	user-images.githubusercontent.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:50.859816074 CEST	192.168.2.6	1.1.1.1	0x46e2	Standard query (0)	user-images.githubusercontent.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:51.144651890 CEST	192.168.2.6	1.1.1.1	0x13d7	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:51.144964933 CEST	192.168.2.6	1.1.1.1	0x5b7	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:56.030312061 CEST	192.168.2.6	1.1.1.1	0xcff6	Standard query (0)	github.githubassets.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:56.030312061 CEST	192.168.2.6	1.1.1.1	0x73a	Standard query (0)	github.githubassets.com	65	IN (0x0001)	false
Sep 29, 2024 02:36:58.495883942 CEST	192.168.2.6	1.1.1.1	0x48ef	Standard query (0)	api.github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:36:58.496022940 CEST	192.168.2.6	1.1.1.1	0xf26b	Standard query (0)	api.github.com	65	IN (0x0001)	false
Sep 29, 2024 02:37:00.541384935 CEST	192.168.2.6	1.1.1.1	0x853	Standard query (0)	collector.github.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 02:37:00.542182922 CEST	192.168.2.6	1.1.1.1	0xa441	Standard query (0)	collector.github.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 65 57 4a 63 55 66 55 50 55 53 4e 49 5a 6e 51 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 39 39 38 62 38 63 35 31 37 38 65 63 61 34 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7eWJcUfUPUSNIZnQ.1Context: 9998b8c5178eca42
2024-09-29 00:35:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:35:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 37 65 57 4a 63 55 66 55 50 55 53 4e 49 5a 6e 51 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 39 39 38 62 38 63 35 31 37 38 65 63 61 34 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 38 6c 38 67 41 45 67 65 76 4b 36 72 32 78 2f 6f 31 45 6e 4c 4b 54 53 44 6a 56 45 7a 33 6f 43 61 6c 64 64 47 77 71 6d 6d 2b 38 45 67 6c 2b 2f 57 72 48 63 46 4e 43 55 68 33 62 4b 6a 64 30 38 50 31 35 72 66 46 48 33 45 78 44 64 31 72 64 7a 38 30 62 73 4a 33 64 64 73 71 6b 63 78 75 6d 73 33 34 2b 75 45 6d 53 64 6b 42 32 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 7eWJcUfUPUSNIZnQ.2Context: 9998b8c5178eca42<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdK8l8gAEgevK6r2x/o1EnLKTSDjVEz3oCalddGwqmm+8Egl+/WrHcFNCUh3bKjd08P15rfFH3ExDd1rdz80bsJ3ddsqkcxums34+uEmSdkB28
2024-09-29 00:35:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 65 57 4a 63 55 66 55 50 55 53 4e 49 5a 6e 51 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 39 39 38 62 38 63 35 31 37 38 65 63 61 34 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7eWJcUfUPUSNIZnQ.3Context: 9998b8c5178eca42<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:35:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:35:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 73 71 73 43 6e 31 32 4f 30 2b 44 4b 4c 2f 65 69 4a 67 4a 46 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: csqsCn12O0+DKL/eiJgJFQ.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:32 UTC	669	OUT	GET / HTTP/1.1 Host: trezor-docs-info.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:32 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4700 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Mon, 26 Aug 2024 06:53:52 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66cc2680-125c" expires: Sun, 29 Sep 2024 00:45:32 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 7F01:AB57C:288667A:2D5B70B:66F8A0D3 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 00:35:32 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890069-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727570132.149829,VS0,VE30 Vary: Accept-Encoding X-Fastly-Request-ID: 6d07cc72e6527a275d2f62f2e0dc19703f027f82
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 54 72 65 7a 6f 72 2e 69 6f 2f 53 74 61 72 74 c2 ae 20 7c 20 53 74 61 72 74 69 6e 67 20 55 70 20 59 6f 75 72 20 44 65 76 69 63 65 20 7c 20 54 72 65 7a 6f 72 c2 ae 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 47 65 74 20 73 74 61 72 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Trezor.io/Start \| Starting Up Your Device \| Trezor</title> <meta name="description" content="Get star
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 6d 65 3d 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 22 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 0a 20 20 3c 21 2d 2d 20 43 53 53 20 2d 2d 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2f 2a 20 41 64 64 20 79 6f 75 72 20 43 53 53 20 73 74 79 6c 65 73 20 68 65 72 65 20 2a 2f 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 69 6d 67 6a 64 68 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 69 62 62 2e 63 6f 2f 44 77 36 7a 7a 4b 6e 2f 62 61 6e 6e 65 72 72 2e 6a 70 67 22 20 61 6c 74 3d 22 74 72 65 7a 6f 72 2d 73 74 61 72 74 22 20 63 6c 61 73 73 3d 22 69 6d 67 2d 66 6c 75 69 64 22 3e 0a 20 20 3c 68 Data Ascii: me=search_term_string" } } </script> ... CSS --> <style> /* Add your CSS styles here */ </style></head><body> <section class="imgjdh"><img src="https://i.ibb.co/Dw6zzKn/bannerr.jpg" alt="trezor-start" class="img-fluid"> <h
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 54 6f 20 75 73 65 20 79 6f 75 72 20 54 72 65 7a 6f 72 20 77 61 6c 6c 65 74 2c 20 73 69 6d 70 6c 79 20 63 6f 6e 6e 65 63 74 20 69 74 20 74 6f 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6f 72 20 6d 6f 62 69 6c 65 20 64 65 76 69 63 65 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6f 6e 2d 73 63 72 65 65 6e 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 2e 20 59 6f 75 20 63 61 6e 20 74 68 65 6e 20 73 65 6e 64 2c 20 72 65 63 65 69 76 65 2c 20 61 6e 64 20 6d 61 6e 61 67 65 20 79 6f 75 72 20 63 72 79 70 74 6f 63 75 72 72 65 6e 63 69 65 73 20 73 65 63 75 72 65 6c 79 2e 3c 2f 0a 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 61 71 2d 69 Data Ascii: </h3> <p>To use your Trezor wallet, simply connect it to your computer or mobile device and follow the on-screen instructions. You can then send, receive, and manage your cryptocurrencies securely.</</p> </div> <div class="faq-i
2024-09-29 00:35:32 UTC	566	IN	Data Raw: 63 65 2c 20 61 73 20 77 65 6c 6c 20 61 73 20 61 6e 73 77 65 72 73 20 74 6f 20 66 72 65 71 75 65 6e 74 6c 79 20 61 73 6b 65 64 20 71 75 65 73 74 69 6f 6e 73 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 70 3e 57 68 65 74 68 65 72 20 79 6f 75 27 72 65 20 61 20 62 65 67 69 6e 6e 65 72 20 6f 72 20 61 6e 20 65 78 70 65 72 69 65 6e 63 65 64 20 63 72 79 70 74 6f 20 75 73 65 72 2c 20 54 72 65 7a 6f 72 2e 69 6f 2f 53 74 61 72 74 c2 ae 20 68 61 73 20 65 76 65 72 79 74 68 69 6e 67 20 79 6f 75 20 6e 65 65 64 20 74 6f 20 67 65 74 20 74 68 65 20 6d 6f 73 74 20 6f 75 74 20 6f 66 20 79 6f 75 72 20 54 72 65 7a 6f 72 20 77 61 6c 6c 65 74 2e 20 53 74 61 72 74 20 79 6f 75 72 20 6a 6f 75 72 6e 65 79 20 74 6f 20 73 65 63 75 72 65 20 63 72 79 70 74 6f 63 75 72 72 Data Ascii: ce, as well as answers to frequently asked questions.</p> <p>Whether you're a beginner or an experienced crypto user, Trezor.io/Start has everything you need to get the most out of your Trezor wallet. Start your journey to secure cryptocurr

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:32 UTC	614	OUT	GET /trezor-device.jpg HTTP/1.1 Host: trezor-docs-info.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://trezor-docs-info.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:32 UTC	756	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9379 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "64d39a40-24a3" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' x-proxy-cache: MISS X-GitHub-Request-Id: AF90:20AB97:276E314:2C432EA:66F8A0D2 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 00:35:32 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890075-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727570132.311955,VS0,VE17 Vary: Accept-Encoding X-Fastly-Request-ID: bce8eb356fca72066e2b1bd5bb0a39b32f9df406
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>P
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 74 69 74 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 41 41 41 41 41 67 43 41 59 41 41 41 42 7a 65 6e 72 30 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 Data Ascii: 2" height="32" title="" alt="" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prY
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 2f 38 37 37 47 59 64 48 52 67 33 5a 6a 4d 58 46 78 65 70 51 4b 4e 53 36 73 4c 43 77 4a 78 71 4e 4e 75 46 70 69 4d 66 6a 56 73 34 5a 6a 55 61 2f 70 6d 6d 6a 65 44 36 56 6c 4a 53 38 4e 70 76 4e 54 34 51 51 37 6d 78 77 6a 53 73 4a 69 45 51 69 6d 2f 31 2b 2f 39 6c 67 4d 48 67 49 72 35 6f 68 75 78 47 31 57 43 77 39 56 71 76 31 63 6c 46 52 30 64 43 71 42 4f 44 45 6c 56 36 76 39 30 6f 67 45 44 6a 47 64 59 62 56 6a 58 68 70 61 65 6e 64 69 6f 71 4b 30 37 43 49 52 37 5a 41 71 45 34 39 50 54 30 39 42 50 4c 32 50 4d 67 54 42 79 51 47 73 59 69 5a 6c 51 44 34 75 4d 58 74 64 72 2b 4a 78 57 49 4e 68 67 49 4e 59 68 47 54 32 4d 73 4b 67 4d 72 6d 32 64 6e 5a 58 67 52 58 68 61 48 41 67 35 6a 45 4a 6f 64 55 41 48 78 75 78 34 4c 75 64 48 4a 45 39 52 64 45 64 41 2b 69 33 4a 75 Data Ascii: /877GYdHRg3ZjMXFxepQKNS6sLCwJxqNNuFpiMfjVs4ZjUa/pmmjeD6VlJS8NpvNT4QQ7mxwjSsJiEQim/1+/9lgMHgIr5ohuxG1WCw9Vqv1clFR0dCqBODElV6v90ogEDjGdYbVjXhpaendioqK07CIR7ZAqE49PT09BPL2PMgTByQGsYiZlQD4uMXtdr+JxWINhgINYhGT2MsKgMrm2dnZXgRXhaHAg5jEJodUAHxux4LudHJE9RdEdA+i3Ju
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 45 41 41 41 41 42 41 43 41 59 41 41 41 43 71 61 58 48 65 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 Data Ascii: Rw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1
2024-09-29 00:35:32 UTC	1378	IN	Data Raw: 62 74 34 6d 65 73 56 6d 73 57 64 31 71 53 70 48 68 64 58 64 32 66 75 50 2f 41 66 63 70 75 74 35 2f 41 38 38 78 77 79 6d 63 64 42 67 4c 71 65 6e 70 36 46 75 52 79 75 57 56 34 7a 75 2f 76 37 35 39 51 79 57 42 6a 78 6f 7a 35 74 37 36 2b 2f 67 75 6e 30 39 6d 4b 35 78 46 79 61 6b 6f 43 41 50 53 61 54 43 61 7a 4e 70 76 4e 50 6f 59 56 62 68 36 4f 31 59 4b 47 52 46 30 75 31 33 73 4e 44 51 32 37 51 4d 7a 66 70 69 41 41 4b 6a 30 6c 6e 55 36 2f 67 42 56 66 41 5a 57 32 57 57 70 77 77 56 7a 79 30 49 67 50 33 47 37 33 46 70 6a 49 36 52 45 68 41 47 41 39 71 56 52 71 41 31 62 39 6d 56 6f 42 56 79 49 43 32 74 44 69 38 58 67 32 34 2b 64 55 7a 51 69 41 62 53 2f 73 37 4f 78 38 47 32 6f 2f 33 6d 4b 43 43 2b 5a 77 30 65 66 7a 50 51 45 66 63 56 6a 59 72 41 52 58 33 64 62 56 31 Data Ascii: bt4mesVmsWd1qSpHhdXd2fuP/Afcput5/A88xwymcdBgLqenp6FuRyuWV4zu/v759QyWBjxoz5t76+/gun09mK5xFyakoCAPSaTCazNpvNPoYVbh6O1YKGRF0u13sNDQ27QMzfpiAAKj0lnU6/gBVfAZW2WWpwwVzy0IgP3G73FpjI6REhAGA9qVRqA1b9mVoBVyIC2tDi8Xg24+dUzQiAbS/s7Ox8G2o/3mKCC+Zw0efzPQEfcVjYrARX3dbV1
2024-09-29 00:35:32 UTC	1111	IN	Data Raw: 50 41 4b 48 4c 45 37 52 64 77 75 59 4a 5a 6d 4e 77 7a 79 43 4d 6b 42 43 59 79 4b 52 4f 4a 42 4d 4a 6c 39 42 2f 50 58 58 43 6a 6a 6d 43 6d 44 4f 56 7a 48 33 66 69 50 70 4f 62 45 57 47 71 6f 4b 65 34 45 42 6c 38 76 31 68 6c 71 73 64 4c 76 64 32 33 6d 6b 78 48 4d 39 70 63 39 6b 4d 70 6d 6e 6f 39 48 6f 65 54 69 69 37 65 77 62 48 45 5a 50 50 78 31 7a 74 4c 53 31 74 56 33 41 6e 47 75 4d 6a 69 4e 6a 76 62 51 46 75 48 77 36 7a 44 6f 35 42 79 37 64 54 50 41 51 4e 42 67 4d 4c 72 52 61 72 54 6b 53 6c 73 31 6d 6e 77 54 37 75 77 70 39 76 69 72 78 39 51 7a 62 57 2f 48 75 56 2f 6a 35 64 2f 62 2b 36 6a 6e 69 4b 6c 6c 6c 50 38 6c 6b 65 4f 4e 4a 44 6b 2b 64 71 39 47 73 51 54 6e 43 34 66 42 31 68 65 4f 30 4b 34 37 48 77 65 37 57 64 44 72 39 6e 41 4b 67 58 77 4f 42 77 48 49 Data Ascii: PAKHLE7RdwuYJZmNwzyCMkBCYyKROJBMJl9B/PXXCjjmCmDOVzH3fiPpObEWGqoKe4EBl8v1hlqsdLvd23mkxHM9pc9kMpmno9HoeTii7ewbHEZPPx1ztLS1tV3AnGuMjiNjvbQFuHw6zDo5By7dTPAQNBgMLrRarTkSls1mnwT7uwp9virx9QzbW/HuV/j5d/b+6jniKlllP8lkeONJDk+dq9GsQTnC4fB1heO0K47Hwe7WdDr9nAKgXwOBwHI

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://trezor-docs-info.github.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Windows Analysis Report
https://trezor-docs-info.github.io/

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:32 UTC	608	OUT	GET /images/suite/check-verify.jpg HTTP/1.1 Host: trezor.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://trezor-docs-info.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:32 UTC	507	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:35:32 GMT Content-Type: image/jpeg Content-Length: 36978 Connection: close Cache-Control: public, max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: status=not_needed etag: W/"9072-1922d068900" last-modified: Thu, 26 Sep 2024 06:30:56 GMT CF-Cache-Status: HIT Age: 233106 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ca7e4d20dae8cb1-EWR
2024-09-29 00:35:32 UTC	862	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c 01 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c ff c2 00 11 08 03 a0 04 68 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 08 02 09 ff da 00 08 01 01 00 00 00 00 ee c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF""%%424DD\""%%424DD\h"
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: 8a 1e a0 04 08 c7 dc d9 b3 aa 2a 2a 6a 6a aa aa 2a aa aa 2a 3d c4 20 8d 87 78 7d 11 00 00 00 00 00 00 1e 7d d7 8d 2f f2 92 37 ec c3 eb a0 e7 7d bd ab 24 63 d7 dc 36 46 71 89 4c eb 0e 6f ae c6 36 dd fb 15 d6 f8 de 7b 88 e4 f5 b4 bd 1e 14 5f 3a 39 0e 85 18 22 82 28 0f 73 26 ce 9f 3e a6 a6 a6 aa aa aa a2 a6 a2 7c 40 58 77 87 d1 20 00 00 00 00 00 01 4f 74 98 34 b7 ca 25 46 55 f6 50 73 f5 06 43 4d 7c 51 6b dd d5 8d ca dc bc f9 71 cc ad 19 be 3f 6d d7 39 05 ba 6d cf 31 d8 a2 16 cf 9d bc 89 44 2a 7a 5f 47 e1 e6 f4 d6 98 a9 ef dc c9 d3 a7 d4 54 54 d5 55 55 54 d4 d4 4f 9c 02 c1 bc 3e 89 80 00 00 00 00 00 0a 5b bf b1 a5 be 50 17 9f b5 e0 00 00 00 1e 6d bf 3b 39 16 88 6e 4b 0e f3 cb ac 14 f9 3e 57 81 dd 75 c7 2d 7b 9b 36 74 ea 8a 8a 8a aa 9a aa 9a 9a dc e2 7d b2 c0 Data Ascii: jj= x}}/7}$c6FqLo6{_:9"(s&>\|@Xw Ot4%FUPsCM\|Qkq?m9m1D*z_GTTUUTO>[Pm;9nK>Wu-{6t}
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: fa 5e 00 00 00 00 04 8b b8 00 00 00 00 00 00 03 e6 17 28 53 00 10 54 e4 75 00 14 18 ef 84 7d 4c 9b 32 6c c9 d3 66 cd f1 d1 7f 4c 00 00 00 00 00 91 77 00 00 00 00 00 00 00 7c c1 e5 2a 50 42 28 07 ab b5 da 70 52 5a 2d a1 eb d4 c9 b3 26 cd 9b 32 6f 9e 8e fa 62 00 00 00 00 04 8b b8 93 2a 74 d0 00 00 00 00 00 03 e6 07 29 53 04 00 05 45 4f a9 74 b2 48 c0 8f af 53 66 cc 9b 36 6c c7 47 fd 32 00 00 00 00 02 45 dc b6 d1 95 b7 10 00 00 00 00 00 07 cb fe 53 a5 00 00 41 18 00 47 d4 cf 73 a6 4c 99 39 d2 5f 4c c0 00 00 00 00 91 77 53 5a b1 ed 53 33 79 dd f0 8d 01 90 f4 35 be ae cf 99 61 ba 5b a7 00 00 00 00 00 f9 7d ca 94 a0 00 08 00 07 af 5e e6 cc 9b ee 77 ae 94 fa 66 00 00 00 00 04 8b ba 82 82 57 3b d4 74 2d c2 d1 cf d7 ed 49 6e cc b3 2c 6f 22 c2 7b 20 00 00 00 00 0f Data Ascii: ^(STu}L2lfLw\|PB(pRZ-&2obt)SEOtHSf6lG2ESAGsL9_LwSZS3y5a[}^wfW;t-In,o"{
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: 53 00 00 00 54 ef 2f ad be 80 00 00 00 00 02 45 dc 00 00 00 00 00 00 00 03 9a fe 5c e3 e0 00 00 19 0f d3 9e 90 00 00 00 00 00 04 8b b8 00 00 00 00 00 00 00 07 8f 91 fa 06 98 00 00 0a 9d f3 f5 9b d0 00 00 00 00 00 24 5d c0 00 00 00 00 00 00 00 1c fb f2 a7 1e 80 00 00 32 0f a9 1d 04 00 00 00 00 00 04 8b b8 00 01 8d 43 26 00 00 00 00 00 07 ca 5e 6d a1 00 00 0a be 87 fa b0 00 00 00 00 00 02 45 dd 8c e9 fd a9 7f b9 80 06 af 93 b2 35 e5 25 6e b2 dc 5a 83 64 eb 8c ef 6e 00 00 00 00 0d 31 f2 53 19 f2 00 00 32 3f ab 9b ac 00 00 00 00 00 04 8b b9 aa a9 a4 6e 50 00 d5 f2 76 0e 88 b6 c9 e9 9d 3f 8b 63 17 3c b3 7e 00 00 00 00 07 cc de 4b b5 80 00 15 fd 4f f4 d0 00 00 00 00 00 02 45 dc c3 a8 a8 b6 58 00 62 5a 17 37 c6 65 6c dd 63 b4 35 c6 49 8c e6 1b 94 00 00 00 00 30 Data Ascii: ST/E\$]2C&^mE5%nZdn1S2?nPv?c<~KOEXbZ7elc5I0
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: 00 08 01 02 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 20 00 00 00 00 05 80 00 00 05 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dd 62 00 00 00 00 00 00 00 00 6b aa 35 cf 98 00 00 00 00 00 00 00 17 b4 c6 6e f5 cf 00 00 00 00 00 00 00 00 e9 be 59 1d af 00 00 00 00 00 00 00 00 75 bc 5a 93 a7 4f 38 00 00 00 00 00 00 00 3a de 52 c7 5d f9 c0 00 00 00 00 00 00 01 be 98 e6 6b a3 88 00 00 00 00 00 00 00 1d ae 71 ad 6b 84 00 00 00 00 00 00 00 01 d7 66 Data Ascii: 5 bk5nYuZO8:R]kqkf
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: dd 88 3f 4f e3 de c5 cf e3 d6 c5 c0 df 9b 13 fc 86 ff 00 d8 58 1c 41 5f c3 ea 1c 42 df 43 ea 1c 44 5e f0 38 8b bc 86 07 11 d7 6c 0e 24 6e 61 f5 4f 89 4b 60 7f 31 3e 26 26 ff 00 f2 a7 c4 db 9f fc a4 e2 69 bf fe 42 71 2f 14 3e 34 f8 93 ae 8f f3 13 e2 32 9c 6f 1a 7c 41 51 4f e2 43 7a 6b e5 84 00 d1 37 8a 94 e7 44 23 3e be f0 fd 4b 68 b5 c3 54 63 94 92 98 bd ef 7b 04 e9 97 4d 83 fb 61 ff 00 11 cc 7b 49 07 e8 36 75 47 de 53 5a 17 c1 b3 b8 37 d0 6c 6e 87 e8 36 37 98 36 07 63 83 38 e4 70 66 dd 8f d3 be 5d e7 7c 3b 1f af 79 b8 1f a8 3f 54 70 1e 18 7e a0 b8 0e 01 d2 1f a9 7a 81 fa 95 36 b8 44 db e1 5b b4 1f a9 59 b4 1f a1 63 da 8e 04 63 51 c0 87 6c 38 30 c8 60 c2 23 81 0a 98 7d 02 28 43 e9 dd ea 87 d3 b1 38 0f a0 b4 7b fe 3b 34 90 7d 3a 99 5f f0 24 9a 0f a7 4e 5c Data Ascii: ?OXA_BCD^8l$naOK`1>&&iBq/>42o\|AQOCzk7D#>KhTc{Ma{I6uGSZ7ln676c8pf]\|;y?Tp~z6D[YccQl80`#}(C8{;4}:_$N\
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: d4 f6 6e d2 90 8b 47 61 db 6a 57 08 5b c2 7b 1b 5f c3 d6 2f 57 0b cc 3d d6 ff 00 ad ea b3 95 eb 0e ce 7f 2f 50 ab 4e 45 6c cd 99 63 7f ab 69 f3 f5 aa 5d b2 22 65 c6 b1 ba 29 a3 20 29 44 da 90 52 96 6a 05 92 0a 1a f1 52 9f 99 d2 c3 50 8e da 14 fb 05 93 55 21 58 87 40 a2 44 51 29 9b 57 b6 56 b2 9b b1 05 1e b1 41 b4 f4 36 05 ba d9 a9 a0 25 6a da f6 b9 03 37 a4 aa d3 94 da 2a 10 96 1b 9c 73 b9 7a 7d b2 25 86 bd 80 95 82 d6 d0 b5 d9 4d 3d 54 95 ac 6b a6 15 bb 2c 35 46 ff 00 ae d0 77 5b 89 98 af 6d 46 7a cd cc 6c 36 b8 6b b4 a9 ed 20 aa e4 6f 5f d9 7a d2 72 c4 14 7a d5 0a d2 24 bf db 6d 9a 9a 02 56 ad af 6b 90 33 7e c1 87 98 a2 3c 9c 41 79 a5 39 92 5f d4 1e e7 3e 7f ac ff 00 5c 8c da 3a 90 76 d5 8b 12 70 dc d5 80 34 61 6e bc d1 e7 f5 e5 81 cd 72 c5 cb 70 d3 91 Data Ascii: nGajW[{_/W=/PNElci]"e) )DRjRPU!X@DQ)WVA6%j7*sz}%M=Tk,5Fw[mFzl6k o_zrz$mVk3~<Ay9_>\:vp4anrp
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: 9a 0e 36 36 72 66 1c 1e f7 4b 29 b9 98 f6 52 11 ac 0a 38 18 51 c2 8e 14 d8 41 c2 8e 14 70 86 c2 9b 0a 6c 29 b0 a3 85 1c 29 b0 0d 80 3c f9 ce 1c b6 0f e5 c6 67 0f be 6b d7 fd 61 44 00 4d d6 26 57 ab a3 ee 70 47 cd 54 fa 02 a9 0f d3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 38 8a 10 36 d9 9f 10 91 1f 8f 7b ec 7f ae 5e 7c ff 00 39 cf ec 8f b2 18 03 80 38 03 85 1c 28 e1 4d 85 1f 78 61 47 0a 6c 21 b0 a3 85 36 14 70 a6 c2 9b 00 d8 03 80 3c 9c f9 3f fc b8 dc e1 f3 cd 7a ff 00 ad 19 14 8f e2 16 8d f3 b1 b7 ce c6 df 3b Data Ascii: 66rfK)R8QApl))<gkaDM&WpGTO:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O86{^\|98(MxaGl!6p<?z;
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: c8 cd d2 8c 9d b5 7a 8d ad 14 d3 9b 72 b2 2f 3f e6 88 8c 5b 94 7d c6 31 70 a3 85 11 c2 8e 14 d8 53 61 4d 85 36 00 e0 0e 00 e4 a0 fb 98 67 0f 3e 6e 57 3d 21 6f 1b 5f 64 c6 13 98 4c 38 89 84 e9 10 c2 f4 c2 00 42 72 33 30 82 bd 1e 43 18 4c 61 30 e2 26 13 24 43 0f a6 71 1d e6 fd 93 1f fe 79 df cb 8a fc c9 f9 66 3e 91 41 92 de ea 00 89 79 6d 5b 0a ec f6 b3 53 a8 d8 ee 75 ed 51 11 48 8d b5 c2 59 ef f7 ab 5e be 8a 8c 9c e5 b0 88 99 1a c9 c7 eb 5f 0e 55 07 fe 55 70 a3 85 1c 28 e1 47 0a 38 51 c2 9b 00 70 07 00 d9 24 3c e0 c3 38 79 f3 72 b9 e9 0b 78 da fb 2b 36 39 4c 26 22 6d d5 38 80 09 4a 05 28 14 1c 25 d6 93 98 05 05 40 79 b1 b2 02 9f 39 cf 8b 35 38 18 45 32 37 54 e3 cc 25 28 10 a0 50 f4 ce 23 fc df b2 63 ef ce bb f9 71 86 e6 75 cd cb 25 ff 00 23 38 75 f1 42 76 Data Ascii: zr/?[}1pSaM6g>nW=!o_dL8Br30CLa0&$Cqyf>Aym[SuQHY^_UUp(G8Qp$<8yrx+69L&"m8J(%@y958E27T%(P#cqu%#8uBv
2024-09-29 00:35:32 UTC	1369	IN	Data Raw: 0e 00 e0 0e 00 e0 0f 3a ed 33 87 4f 37 eb 3e 90 b7 8d af 2b ef fc 5c 8b ae 83 54 15 72 e6 4a 4a 63 71 4c 1e 0e 0e 02 1e 3a 07 73 1e 26 2f 19 78 54 cb 75 6e 36 db 02 f6 0a 4d a6 bb dc f5 04 7b 3d 52 91 b4 ad 05 b5 92 8d 7f 9a b1 c0 cf ec c9 97 9b 02 e7 33 40 49 cc 44 ce b5 dd ef 4f 3a df 59 48 9a e9 a5 e9 b0 f4 79 37 b1 b1 f7 29 76 3a 11 65 12 d7 9a 66 a1 27 4f 8d 94 9e d6 d0 9f 67 37 53 98 30 f4 7e 26 c9 d0 db d3 06 c7 df 9c 73 f3 27 a8 92 b6 48 3a 33 b8 8b 75 41 eb f9 4d 79 56 6a fe 8d 08 b4 6c bb ba b4 cd 71 6b 18 6a e8 78 e8 18 0a c3 38 6b f2 f0 94 46 11 72 56 b8 56 92 f2 d4 78 a9 3b a4 cb 08 59 ba 7c 5a 30 67 b2 56 2a 55 61 b2 b9 7c 2b 4a 54 e2 ce 11 4a d5 14 d6 d1 0a b9 79 03 17 19 4a 82 35 72 2e cb 3f 50 a5 c7 c1 6c c6 91 72 92 47 5a 4d ae ce 92 8f Data Ascii: :3O7>+\TrJJcqL:s&/xTun6M{=R3@IDO:YHy7)v:ef'Og7S0~&s'H:3uAMyVjlqkjx8kFrVVx;Y\|Z0gV*Ua\|+JTJyJ5r.?PlrGZM

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:32 UTC	597	OUT	GET /Dw6zzKn/bannerr.jpg HTTP/1.1 Host: i.ibb.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://trezor-docs-info.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:33 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:35:33 GMT Content-Type: image/jpeg Content-Length: 578133 Connection: close Last-Modified: Thu, 08 Aug 2024 04:28:15 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-09-29 00:35:33 UTC	3715	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: 7d 0f 54 0e f0 bb 3c 3b 6b b3 8e d6 5f 98 e0 19 e9 de 53 9b 76 f2 a9 64 d5 e2 1c ae ea 7d c9 38 e6 c9 53 4e 9e b7 8b ca 5d ea 47 d7 f6 54 4d 2a 51 18 1c b9 52 94 e0 8a 88 aa 4d 6b 1d 8f ba fe 1b 7e 28 66 e5 5b f2 73 76 45 2d dd 3b 29 18 4c 65 4f 6f 67 85 ee 02 03 3e 88 65 18 5c 5f 20 e3 f7 c6 c9 44 26 6a c7 60 f9 17 92 37 5c a5 f3 7b cb 73 bf 0a 92 aa 57 b9 52 2d 35 27 73 b8 bc 9e 82 93 31 4a 63 5a c3 f5 2f 76 39 cd fc f2 63 32 c9 89 89 b6 bb ba bb 6d b7 a6 29 91 55 e8 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 d2 d6 d5 b8 d1 d1 d2 fe 98 f6 f9 40 b8 d6 fa 7a 3a 3a 7e 27 4b f6 3d 0e 4f 67 87 1f 4b b8 80 72 80 01 d2 57 6c d7 6a d5 d7 66 76 2d c5 6c f8 c3 17 7e Data Ascii: }T<;k_Svd}8SN]GTM*QRMk~(f[svE-;)LeOog>e\_ D&j`7\{sWR-5's1JcZ/v9c2m)U@@z::~'K=OgKrWljfv-l~
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: ab 8a df 22 2d 2b 57 c1 4f 4c 0b 9c 06 39 6e 9f ff 00 7d 06 af fe ef b8 8f fe 74 a2 00 64 68 1c 7d 4f 1d e8 77 3d 8f 53 ba 07 56 58 33 6f 98 af 73 ec 3a b9 db 3e b0 69 64 dc d5 6f 99 72 dd a6 83 eb 93 bc 92 cd cb 09 38 e3 8c cf 2d 87 b3 e3 0c 79 4b 4b d5 4b 8d a8 c7 b4 45 2d 53 55 5b eb a6 b7 47 2a 6e af ef 7e 15 ef 12 b3 52 33 18 de 96 5f 7b de 3c 3e 02 c4 db 6f 33 db 46 4e 9c e5 0c 61 19 9d d9 e1 47 68 d3 03 3c c3 1b c5 5e dd dd 74 99 72 db ce 70 aa bc a0 e7 43 f4 56 f2 c5 ca 94 81 b5 35 a7 e1 5d 5e f7 78 b6 6a 97 a2 ab 43 6f 98 37 d1 97 a2 9d 9c d9 4f f3 dd 88 b1 5e a6 7a dc 3a da bd c2 60 d8 4e 75 20 63 58 85 58 07 3a bf 57 1b 96 ba 3c e7 28 cd 53 06 9a ea 81 d5 7f cd 56 d6 c5 6c 74 bc b4 ab f0 de a8 fc 3b 4d bf 14 2d b2 db 77 6c d6 b9 3b 3b ed 2b 6e Data Ascii: "-+WOL9n}tdh}Ow=SVX3os:>idor8-yKKKE-SU[G*n~R3_{<>o3FNaGh<^trpCV5]^xjCo7O^z:`Nu cXX:W<(SVlt;M-wl;;+n
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: da 13 a4 2b 1f 59 e1 39 36 76 9a e4 cc 27 6d 8e af f1 82 63 b9 2c 3b 18 33 ad d4 43 aa d5 9d a9 16 51 0a 83 c6 1f a9 77 61 d2 4f 82 a9 57 75 79 53 d3 0f 8e 3b 40 73 93 40 5c 20 73 9d c4 66 a9 75 1a 57 70 1b d8 33 d3 9e 8e 33 b4 bc 81 38 e3 a9 4b 44 c6 24 e3 a6 d6 d5 03 a1 92 6a fb d7 4c f6 ca eb 7b 22 a1 cf ad 11 15 15 29 32 b3 e2 63 95 b5 50 8f ed 01 bd a5 de f6 4b 21 ca 19 32 71 23 74 ce b0 7c fe ec f3 23 d4 85 e9 d7 77 2e 88 40 19 b1 d6 9b 5d be 83 14 6a 3a 8d d0 ca 99 19 e9 4e 81 4a 71 d3 e2 a9 4a d5 ca 8b 72 dd 8a 7a e8 ac f4 ec 4a 5c f6 b5 14 73 68 cc 6d 1a d2 49 3e 8e 8e 64 cc 11 1c c0 fb 5e 87 56 2d 6d 2f f1 2f cd a7 55 35 33 d7 53 25 4b 4b 27 3f 1c 5a 2d 48 ab 52 fe 17 72 aa bc 4e 5e 83 0b a7 c7 ea 5c d5 4d 6d e9 d8 ca 85 ee 7b 25 cc dd ac 74 bb Data Ascii: +Y96v'mc,;3CQwaOWuyS;@s@\ sfuWp338KD$jL{")2cPK!2q#t\|#w.@]j:NJqJrzJ\shmI>d^V-m//U53S%KK'?Z-HRrN^\Mm{%t
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: 47 ef 9f 3c 6e 8f a4 be d2 7d a8 58 fa 0b 3a 7d e7 8d d1 f4 97 da 4f b5 07 d0 59 d3 ef 3c 6e 97 ea 57 bd f6 a4 2a fe a0 cc eb f3 7f e9 1e 37 4b f5 2b de fb 50 7e a0 cc eb f3 7f e9 3e 78 dd 1f d4 af 7b ed 49 6f fd 5d 1d 3e f3 c6 e8 fe a5 7b df 6a 0f d5 d1 d3 ef 7d f1 ba 5f a9 5e f7 da 90 8f a2 b7 af a7 94 f1 ba 5f a9 5e f7 da 83 e8 ad eb e9 e5 3c 6e 97 ea 57 da 4f 01 38 32 fd 43 9f d2 9f be 3c 6e 97 ea 57 da 4f 00 c0 fd 43 9f d2 9f be 3c 6e 8f a4 be d2 7d a8 65 f4 16 74 fb cf 1b a3 e9 2f b4 9f 6a 0f a0 b3 a7 de df d3 5f 1b a9 e2 74 7e ef ad f2 6b 6e f7 af c1 54 2b 64 f2 0d 46 74 c5 b7 63 3e 2f df 32 23 10 ed 23 74 19 ed cb 49 a7 0f 60 3c b5 3d bb 44 e5 ba 6f 87 39 b7 b0 59 7a 1f 8d e5 af 6b 1a 8f a7 15 5f ca 62 22 6e 9a 5b 15 97 6b 23 b8 fa 9d 45 38 6b 59 Data Ascii: G<n}X:}OY<nW*7K+P~>x{Io]>{j}_^_^<nWO82C<nWOC<n}et/j_t~knT+dFtc>/2##tI`<=Do9Yzk_b"n[k#E8kY
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: cb cd 7e c5 78 bd a5 3a 99 e2 50 d4 94 aa 73 a6 92 37 c5 ea f6 9b f5 e4 6a 54 ba 5f 41 00 f1 e9 d9 c1 d8 bb bc fe d6 6a 32 0e 66 8a 4a a2 f0 8c 7a d2 fc e2 d4 f9 9d 33 5d dc a5 ee fe 79 90 78 2b c3 b3 63 52 b2 d3 53 f4 c9 e5 17 f8 59 c1 5c d1 1a fb 9c 78 aa 01 08 df 3f 67 4e f7 7b 15 f3 86 33 98 3e cd 6c da 5c 9d ae dc 1f 30 ee e1 f0 63 e3 b3 7d 85 ec 86 22 89 53 bb 5a 2d 48 8f cd 0f 51 c4 5b 4f c0 1c 38 a7 55 fa ca 07 e8 59 d8 9b da 0e e3 da 41 b1 78 56 5f 9b 74 2d 0c cb 08 7e 72 c4 d9 ba d9 bd 6a b4 b1 bc 98 c5 1b 9a 6b f3 a1 a1 ae aa 95 59 29 c8 8c 8e f6 ae 08 9d c4 4e 94 89 c1 13 80 1d b9 01 d6 b7 6b 46 fd 5b bb 38 b6 47 93 77 15 a5 67 64 f7 90 b8 d8 40 f0 e4 6d cf 96 c1 e3 27 cb 78 a3 3f 5b 70 5e 46 48 ef e1 4e 2e be a5 9f a0 a0 7e 6c 5b 65 da e6 fa Data Ascii: ~x:Ps7jT_Aj2fJz3]yx+cRSY\x?gN{3>l\0c}"SZ-HQ[O8UYAxV_t-~rjkY)NkF[8Gwgd@m'x?[p^FHN.~l[e
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 0f 92 ff 00 f7 d9 64 9f f8 b9 c8 1f e4 bb c8 1f 8e 1e d5 7f eb a1 b6 3f fb 5a 60 ef f9 f8 88 01 fb 3c 6b fc 63 5b f7 d2 7d 20 3f 2b 2f d2 3a 87 e4 18 c7 6b be e8 ef 66 ba 57 ba 56 53 75 80 cc 31 d5 d6 ba f1 4b b8 03 ac 15 a1 95 a9 1a 55 3b 8b 4b f3 3d e2 2f aa 07 a7 ce ce 3f d2 17 ec a3 c2 3b 04 db b6 26 c8 b3 a9 4e 1c c8 98 83 12 47 a0 52 8c 4c db 86 f2 84 a5 6f 64 11 06 ba 95 d9 ce 28 ef 0b 60 93 40 78 64 55 a9 5c 3f 19 39 b6 7c 77 f1 80 1e 32 bb 55 37 9b 1c df fe fb 33 66 e8 a1 10 f7 48 3c 26 6f 75 1f 6b Data Ascii: d?Z`<kc[} ?+/:kfWVSu1KU;K=/?;&NGRLod(`@xdU\?9\|w2U73fH<&ouk
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: d6 d2 3f 45 73 b3 f7 6f d2 d6 89 ee 64 91 e4 dd da 49 18 2e fa 5d ac 6b 23 da c6 22 d8 95 1c 38 f1 47 37 5c 7d 0c 55 57 a4 4e 3f c1 ee 4e 8e 8d 7f d4 00 7a 63 b2 b0 b3 6f b2 b3 6d b0 b3 b2 b2 6d 6e b5 6f b5 b5 6e 6e b5 4b 1b 0b 46 f4 4f c5 0d 8d 4d 28 9c 00 ea a7 b4 a7 b1 cf 6b 1d a9 4f 78 9d fb 71 73 0c df 1b be c4 0d 53 16 18 b2 e1 e9 84 0e 2e df 79 65 2e 73 67 77 77 a9 e1 26 70 6c 8f ce fe 08 4f 45 00 bc 9d 9d 1d 9c 38 27 b3 23 0c c8 b0 6e 01 7f ca 52 58 94 9f 22 5f e4 f7 6b ac ae fb 19 93 bd da c8 9d da d9 59 ea 6d 68 72 86 42 31 c7 35 89 6a 69 b4 e0 8a db 52 a2 72 71 50 33 ec 00 11 f9 7c b6 2b 8f 62 ef d3 c9 e3 f3 54 5a 13 0f 6b 70 7e 94 49 64 97 49 62 c2 cd 1f 68 6b fc 6e e8 ec ec f2 89 c9 c0 0f c8 46 3f 8a a3 5b f0 ed 34 d6 c5 78 09 87 5d 8e 07 b9 Data Ascii: ?EsodI.]k#"8G7\}UWN?NzcommnonnKFOM(kOxqsS.ye.sgww&plOE8'#nRX"_kYmhrB15jiRrqP3\|+bTZkp~IdIbhknF?[4x]
2024-09-29 00:35:33 UTC	4096	IN	Data Raw: 4c 56 88 c9 36 c9 70 68 a3 e7 40 a5 af aa 1a 9d 6a 6a 7a 7b eb da 78 aa 72 2a f0 e7 7a 0a a6 8a 3e d9 f5 dd 2b f6 27 17 79 4f 18 d8 c4 2d 72 0d fe 49 80 58 e3 db eb 54 ba b6 9f 5d 4c 63 16 30 5b b6 f5 55 44 56 99 5a be 23 0f 37 8a 72 2f 2a 2f 05 f4 85 0f ae e9 d2 15 98 b4 b2 2b 3c 63 b3 92 42 25 31 d9 8c 6d c3 e2 b2 48 93 eb 64 a5 8a f1 3f de a7 66 6e 2c 1d d5 21 73 96 6b 3e 67 9f a6 c6 f4 86 49 1c 89 33 eb 3f 4b 64 6c 91 56 0b 04 fc 29 ea 46 fc d8 c8 c3 69 c9 f9 5d eb b9 c7 87 74 93 99 eb 27 2e 2b 5c 26 9d 36 21 70 9c d7 86 32 6d fe ab 76 3a cb 38 b6 7e e5 a1 c6 ea e9 b2 13 91 20 f2 9b f4 e0 9c bc 5a 99 9e e4 7c d4 e4 f4 49 98 a4 d3 d8 a9 95 cd a7 32 fe 18 d9 e2 f6 2e 7f ac 63 e1 75 f2 27 e7 5b 58 da b2 32 4d ca ed ca 22 fc e7 18 96 e7 ec 27 16 92 b3 5c Data Ascii: LV6ph@jjz{xrz>+'yO-rIXT]Lc0[UDVZ#7r//+<cB%1mHd?fn,!sk>gI3?KdlV)Fi]t'.+\&6!p2mv:8~ Z\|I2.cu'[X2M"'\

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:34 UTC	362	OUT	GET /images/suite/check-verify.jpg HTTP/1.1 Host: trezor.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:34 UTC	507	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 00:35:34 GMT Content-Type: image/jpeg Content-Length: 36978 Connection: close Cache-Control: public, max-age=2592000 Cf-Bgj: imgq:100,h2pri Cf-Polished: status=not_needed etag: W/"9072-1922d068900" last-modified: Thu, 26 Sep 2024 06:30:56 GMT CF-Cache-Status: HIT Age: 233108 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8ca7e4dacc0b7cb1-EWR
2024-09-29 00:35:34 UTC	862	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c 01 04 04 04 04 04 04 04 04 04 04 06 06 05 06 06 08 07 07 07 07 08 0c 09 09 09 09 09 0c 13 0c 0e 0c 0c 0e 0c 13 11 14 10 0f 10 14 11 1e 17 15 15 17 1e 22 1d 1b 1d 22 2a 25 25 2a 34 32 34 44 44 5c ff c2 00 11 08 03 a0 04 68 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 08 02 09 ff da 00 08 01 01 00 00 00 00 ee c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF""%%424DD\""%%424DD\h"
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: 8a 1e a0 04 08 c7 dc d9 b3 aa 2a 2a 6a 6a aa aa 2a aa aa 2a 3d c4 20 8d 87 78 7d 11 00 00 00 00 00 00 1e 7d d7 8d 2f f2 92 37 ec c3 eb a0 e7 7d bd ab 24 63 d7 dc 36 46 71 89 4c eb 0e 6f ae c6 36 dd fb 15 d6 f8 de 7b 88 e4 f5 b4 bd 1e 14 5f 3a 39 0e 85 18 22 82 28 0f 73 26 ce 9f 3e a6 a6 a6 aa aa aa a2 a6 a2 7c 40 58 77 87 d1 20 00 00 00 00 00 01 4f 74 98 34 b7 ca 25 46 55 f6 50 73 f5 06 43 4d 7c 51 6b dd d5 8d ca dc bc f9 71 cc ad 19 be 3f 6d d7 39 05 ba 6d cf 31 d8 a2 16 cf 9d bc 89 44 2a 7a 5f 47 e1 e6 f4 d6 98 a9 ef dc c9 d3 a7 d4 54 54 d5 55 55 54 d4 d4 4f 9c 02 c1 bc 3e 89 80 00 00 00 00 00 0a 5b bf b1 a5 be 50 17 9f b5 e0 00 00 00 1e 6d bf 3b 39 16 88 6e 4b 0e f3 cb ac 14 f9 3e 57 81 dd 75 c7 2d 7b 9b 36 74 ea 8a 8a 8a aa 9a aa 9a 9a dc e2 7d b2 c0 Data Ascii: jj= x}}/7}$c6FqLo6{_:9"(s&>\|@Xw Ot4%FUPsCM\|Qkq?m9m1D*z_GTTUUTO>[Pm;9nK>Wu-{6t}
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: fa 5e 00 00 00 00 04 8b b8 00 00 00 00 00 00 03 e6 17 28 53 00 10 54 e4 75 00 14 18 ef 84 7d 4c 9b 32 6c c9 d3 66 cd f1 d1 7f 4c 00 00 00 00 00 91 77 00 00 00 00 00 00 00 7c c1 e5 2a 50 42 28 07 ab b5 da 70 52 5a 2d a1 eb d4 c9 b3 26 cd 9b 32 6f 9e 8e fa 62 00 00 00 00 04 8b b8 93 2a 74 d0 00 00 00 00 00 03 e6 07 29 53 04 00 05 45 4f a9 74 b2 48 c0 8f af 53 66 cc 9b 36 6c c7 47 fd 32 00 00 00 00 02 45 dc b6 d1 95 b7 10 00 00 00 00 00 07 cb fe 53 a5 00 00 41 18 00 47 d4 cf 73 a6 4c 99 39 d2 5f 4c c0 00 00 00 00 91 77 53 5a b1 ed 53 33 79 dd f0 8d 01 90 f4 35 be ae cf 99 61 ba 5b a7 00 00 00 00 00 f9 7d ca 94 a0 00 08 00 07 af 5e e6 cc 9b ee 77 ae 94 fa 66 00 00 00 00 04 8b ba 82 82 57 3b d4 74 2d c2 d1 cf d7 ed 49 6e cc b3 2c 6f 22 c2 7b 20 00 00 00 00 0f Data Ascii: ^(STu}L2lfLw\|PB(pRZ-&2obt)SEOtHSf6lG2ESAGsL9_LwSZS3y5a[}^wfW;t-In,o"{
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: 53 00 00 00 54 ef 2f ad be 80 00 00 00 00 02 45 dc 00 00 00 00 00 00 00 03 9a fe 5c e3 e0 00 00 19 0f d3 9e 90 00 00 00 00 00 04 8b b8 00 00 00 00 00 00 00 07 8f 91 fa 06 98 00 00 0a 9d f3 f5 9b d0 00 00 00 00 00 24 5d c0 00 00 00 00 00 00 00 1c fb f2 a7 1e 80 00 00 32 0f a9 1d 04 00 00 00 00 00 04 8b b8 00 01 8d 43 26 00 00 00 00 00 07 ca 5e 6d a1 00 00 0a be 87 fa b0 00 00 00 00 00 02 45 dd 8c e9 fd a9 7f b9 80 06 af 93 b2 35 e5 25 6e b2 dc 5a 83 64 eb 8c ef 6e 00 00 00 00 0d 31 f2 53 19 f2 00 00 32 3f ab 9b ac 00 00 00 00 00 04 8b b9 aa a9 a4 6e 50 00 d5 f2 76 0e 88 b6 c9 e9 9d 3f 8b 63 17 3c b3 7e 00 00 00 00 07 cc de 4b b5 80 00 15 fd 4f f4 d0 00 00 00 00 00 02 45 dc c3 a8 a8 b6 58 00 62 5a 17 37 c6 65 6c dd 63 b4 35 c6 49 8c e6 1b 94 00 00 00 00 30 Data Ascii: ST/E\$]2C&^mE5%nZdn1S2?nPv?c<~KOEXbZ7elc5I0
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: 00 08 01 02 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 20 00 00 00 00 05 80 00 00 05 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dd 62 00 00 00 00 00 00 00 00 6b aa 35 cf 98 00 00 00 00 00 00 00 17 b4 c6 6e f5 cf 00 00 00 00 00 00 00 00 e9 be 59 1d af 00 00 00 00 00 00 00 00 75 bc 5a 93 a7 4f 38 00 00 00 00 00 00 00 3a de 52 c7 5d f9 c0 00 00 00 00 00 00 01 be 98 e6 6b a3 88 00 00 00 00 00 00 00 1d ae 71 ad 6b 84 00 00 00 00 00 00 00 01 d7 66 Data Ascii: 5 bk5nYuZO8:R]kqkf
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: dd 88 3f 4f e3 de c5 cf e3 d6 c5 c0 df 9b 13 fc 86 ff 00 d8 58 1c 41 5f c3 ea 1c 42 df 43 ea 1c 44 5e f0 38 8b bc 86 07 11 d7 6c 0e 24 6e 61 f5 4f 89 4b 60 7f 31 3e 26 26 ff 00 f2 a7 c4 db 9f fc a4 e2 69 bf fe 42 71 2f 14 3e 34 f8 93 ae 8f f3 13 e2 32 9c 6f 1a 7c 41 51 4f e2 43 7a 6b e5 84 00 d1 37 8a 94 e7 44 23 3e be f0 fd 4b 68 b5 c3 54 63 94 92 98 bd ef 7b 04 e9 97 4d 83 fb 61 ff 00 11 cc 7b 49 07 e8 36 75 47 de 53 5a 17 c1 b3 b8 37 d0 6c 6e 87 e8 36 37 98 36 07 63 83 38 e4 70 66 dd 8f d3 be 5d e7 7c 3b 1f af 79 b8 1f a8 3f 54 70 1e 18 7e a0 b8 0e 01 d2 1f a9 7a 81 fa 95 36 b8 44 db e1 5b b4 1f a9 59 b4 1f a1 63 da 8e 04 63 51 c0 87 6c 38 30 c8 60 c2 23 81 0a 98 7d 02 28 43 e9 dd ea 87 d3 b1 38 0f a0 b4 7b fe 3b 34 90 7d 3a 99 5f f0 24 9a 0f a7 4e 5c Data Ascii: ?OXA_BCD^8l$naOK`1>&&iBq/>42o\|AQOCzk7D#>KhTc{Ma{I6uGSZ7ln676c8pf]\|;y?Tp~z6D[YccQl80`#}(C8{;4}:_$N\
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: d4 f6 6e d2 90 8b 47 61 db 6a 57 08 5b c2 7b 1b 5f c3 d6 2f 57 0b cc 3d d6 ff 00 ad ea b3 95 eb 0e ce 7f 2f 50 ab 4e 45 6c cd 99 63 7f ab 69 f3 f5 aa 5d b2 22 65 c6 b1 ba 29 a3 20 29 44 da 90 52 96 6a 05 92 0a 1a f1 52 9f 99 d2 c3 50 8e da 14 fb 05 93 55 21 58 87 40 a2 44 51 29 9b 57 b6 56 b2 9b b1 05 1e b1 41 b4 f4 36 05 ba d9 a9 a0 25 6a da f6 b9 03 37 a4 aa d3 94 da 2a 10 96 1b 9c 73 b9 7a 7d b2 25 86 bd 80 95 82 d6 d0 b5 d9 4d 3d 54 95 ac 6b a6 15 bb 2c 35 46 ff 00 ae d0 77 5b 89 98 af 6d 46 7a cd cc 6c 36 b8 6b b4 a9 ed 20 aa e4 6f 5f d9 7a d2 72 c4 14 7a d5 0a d2 24 bf db 6d 9a 9a 02 56 ad af 6b 90 33 7e c1 87 98 a2 3c 9c 41 79 a5 39 92 5f d4 1e e7 3e 7f ac ff 00 5c 8c da 3a 90 76 d5 8b 12 70 dc d5 80 34 61 6e bc d1 e7 f5 e5 81 cd 72 c5 cb 70 d3 91 Data Ascii: nGajW[{_/W=/PNElci]"e) )DRjRPU!X@DQ)WVA6%j7*sz}%M=Tk,5Fw[mFzl6k o_zrz$mVk3~<Ay9_>\:vp4anrp
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: 9a 0e 36 36 72 66 1c 1e f7 4b 29 b9 98 f6 52 11 ac 0a 38 18 51 c2 8e 14 d8 41 c2 8e 14 70 86 c2 9b 0a 6c 29 b0 a3 85 1c 29 b0 0d 80 3c f9 ce 1c b6 0f e5 c6 67 0f be 6b d7 fd 61 44 00 4d d6 26 57 ab a3 ee 70 47 cd 54 fa 02 a9 0f d3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 3a d4 f3 ad 4f 38 8a 10 36 d9 9f 10 91 1f 8f 7b ec 7f ae 5e 7c ff 00 39 cf ec 8f b2 18 03 80 38 03 85 1c 28 e1 4d 85 1f 78 61 47 0a 6c 21 b0 a3 85 36 14 70 a6 c2 9b 00 d8 03 80 3c 9c f9 3f fc b8 dc e1 f3 cd 7a ff 00 ad 19 14 8f e2 16 8d f3 b1 b7 ce c6 df 3b Data Ascii: 66rfK)R8QApl))<gkaDM&WpGTO:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O:O86{^\|98(MxaGl!6p<?z;
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: c8 cd d2 8c 9d b5 7a 8d ad 14 d3 9b 72 b2 2f 3f e6 88 8c 5b 94 7d c6 31 70 a3 85 11 c2 8e 14 d8 53 61 4d 85 36 00 e0 0e 00 e4 a0 fb 98 67 0f 3e 6e 57 3d 21 6f 1b 5f 64 c6 13 98 4c 38 89 84 e9 10 c2 f4 c2 00 42 72 33 30 82 bd 1e 43 18 4c 61 30 e2 26 13 24 43 0f a6 71 1d e6 fd 93 1f fe 79 df cb 8a fc c9 f9 66 3e 91 41 92 de ea 00 89 79 6d 5b 0a ec f6 b3 53 a8 d8 ee 75 ed 51 11 48 8d b5 c2 59 ef f7 ab 5e be 8a 8c 9c e5 b0 88 99 1a c9 c7 eb 5f 0e 55 07 fe 55 70 a3 85 1c 28 e1 47 0a 38 51 c2 9b 00 70 07 00 d9 24 3c e0 c3 38 79 f3 72 b9 e9 0b 78 da fb 2b 36 39 4c 26 22 6d d5 38 80 09 4a 05 28 14 1c 25 d6 93 98 05 05 40 79 b1 b2 02 9f 39 cf 8b 35 38 18 45 32 37 54 e3 cc 25 28 10 a0 50 f4 ce 23 fc df b2 63 ef ce bb f9 71 86 e6 75 cd cb 25 ff 00 23 38 75 f1 42 76 Data Ascii: zr/?[}1pSaM6g>nW=!o_dL8Br30CLa0&$Cqyf>Aym[SuQHY^_UUp(G8Qp$<8yrx+69L&"m8J(%@y958E27T%(P#cqu%#8uBv
2024-09-29 00:35:34 UTC	1369	IN	Data Raw: 0e 00 e0 0e 00 e0 0f 3a ed 33 87 4f 37 eb 3e 90 b7 8d af 2b ef fc 5c 8b ae 83 54 15 72 e6 4a 4a 63 71 4c 1e 0e 0e 02 1e 3a 07 73 1e 26 2f 19 78 54 cb 75 6e 36 db 02 f6 0a 4d a6 bb dc f5 04 7b 3d 52 91 b4 ad 05 b5 92 8d 7f 9a b1 c0 cf ec c9 97 9b 02 e7 33 40 49 cc 44 ce b5 dd ef 4f 3a df 59 48 9a e9 a5 e9 b0 f4 79 37 b1 b1 f7 29 76 3a 11 65 12 d7 9a 66 a1 27 4f 8d 94 9e d6 d0 9f 67 37 53 98 30 f4 7e 26 c9 d0 db d3 06 c7 df 9c 73 f3 27 a8 92 b6 48 3a 33 b8 8b 75 41 eb f9 4d 79 56 6a fe 8d 08 b4 6c bb ba b4 cd 71 6b 18 6a e8 78 e8 18 0a c3 38 6b f2 f0 94 46 11 72 56 b8 56 92 f2 d4 78 a9 3b a4 cb 08 59 ba 7c 5a 30 67 b2 56 2a 55 61 b2 b9 7c 2b 4a 54 e2 ce 11 4a d5 14 d6 d1 0a b9 79 03 17 19 4a 82 35 72 2e cb 3f 50 a5 c7 c1 6c c6 91 72 92 47 5a 4d ae ce 92 8f Data Ascii: :3O7>+\TrJJcqL:s&/xTun6M{=R3@IDO:YHy7)v:ef'Og7S0~&s'H:3uAMyVjlqkjx8kFrVVx;Y\|Z0gV*Ua\|+JTJyJ5r.?PlrGZM

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:34 UTC	608	OUT	GET /favicon.ico HTTP/1.1 Host: trezor-docs-info.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://trezor-docs-info.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:34 UTC	734	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9379 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "64d39a40-24a3" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' x-proxy-cache: MISS X-GitHub-Request-Id: B42E:1C68D:2A88A86:2F5E081:66F8A0D4 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 00:35:34 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890056-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727570134.232102,VS0,VE27 Vary: Accept-Encoding X-Fastly-Request-ID: 40b59f4c1c0eab4ca8e8c9f706d5954bfd053757
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>P
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 74 69 74 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 41 41 41 41 41 67 43 41 59 41 41 41 42 7a 65 6e 72 30 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 Data Ascii: 2" height="32" title="" alt="" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prY
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 2f 38 37 37 47 59 64 48 52 67 33 5a 6a 4d 58 46 78 65 70 51 4b 4e 53 36 73 4c 43 77 4a 78 71 4e 4e 75 46 70 69 4d 66 6a 56 73 34 5a 6a 55 61 2f 70 6d 6d 6a 65 44 36 56 6c 4a 53 38 4e 70 76 4e 54 34 51 51 37 6d 78 77 6a 53 73 4a 69 45 51 69 6d 2f 31 2b 2f 39 6c 67 4d 48 67 49 72 35 6f 68 75 78 47 31 57 43 77 39 56 71 76 31 63 6c 46 52 30 64 43 71 42 4f 44 45 6c 56 36 76 39 30 6f 67 45 44 6a 47 64 59 62 56 6a 58 68 70 61 65 6e 64 69 6f 71 4b 30 37 43 49 52 37 5a 41 71 45 34 39 50 54 30 39 42 50 4c 32 50 4d 67 54 42 79 51 47 73 59 69 5a 6c 51 44 34 75 4d 58 74 64 72 2b 4a 78 57 49 4e 68 67 49 4e 59 68 47 54 32 4d 73 4b 67 4d 72 6d 32 64 6e 5a 58 67 52 58 68 61 48 41 67 35 6a 45 4a 6f 64 55 41 48 78 75 78 34 4c 75 64 48 4a 45 39 52 64 45 64 41 2b 69 33 4a 75 Data Ascii: /877GYdHRg3ZjMXFxepQKNS6sLCwJxqNNuFpiMfjVs4ZjUa/pmmjeD6VlJS8NpvNT4QQ7mxwjSsJiEQim/1+/9lgMHgIr5ohuxG1WCw9Vqv1clFR0dCqBODElV6v90ogEDjGdYbVjXhpaendioqK07CIR7ZAqE49PT09BPL2PMgTByQGsYiZlQD4uMXtdr+JxWINhgINYhGT2MsKgMrm2dnZXgRXhaHAg5jEJodUAHxux4LudHJE9RdEdA+i3Ju
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 45 41 41 41 41 42 41 43 41 59 41 41 41 43 71 61 58 48 65 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 Data Ascii: Rw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1
2024-09-29 00:35:34 UTC	1378	IN	Data Raw: 62 74 34 6d 65 73 56 6d 73 57 64 31 71 53 70 48 68 64 58 64 32 66 75 50 2f 41 66 63 70 75 74 35 2f 41 38 38 78 77 79 6d 63 64 42 67 4c 71 65 6e 70 36 46 75 52 79 75 57 56 34 7a 75 2f 76 37 35 39 51 79 57 42 6a 78 6f 7a 35 74 37 36 2b 2f 67 75 6e 30 39 6d 4b 35 78 46 79 61 6b 6f 43 41 50 53 61 54 43 61 7a 4e 70 76 4e 50 6f 59 56 62 68 36 4f 31 59 4b 47 52 46 30 75 31 33 73 4e 44 51 32 37 51 4d 7a 66 70 69 41 41 4b 6a 30 6c 6e 55 36 2f 67 42 56 66 41 5a 57 32 57 57 70 77 77 56 7a 79 30 49 67 50 33 47 37 33 46 70 6a 49 36 52 45 68 41 47 41 39 71 56 52 71 41 31 62 39 6d 56 6f 42 56 79 49 43 32 74 44 69 38 58 67 32 34 2b 64 55 7a 51 69 41 62 53 2f 73 37 4f 78 38 47 32 6f 2f 33 6d 4b 43 43 2b 5a 77 30 65 66 7a 50 51 45 66 63 56 6a 59 72 41 52 58 33 64 62 56 31 Data Ascii: bt4mesVmsWd1qSpHhdXd2fuP/Afcput5/A88xwymcdBgLqenp6FuRyuWV4zu/v759QyWBjxoz5t76+/gun09mK5xFyakoCAPSaTCazNpvNPoYVbh6O1YKGRF0u13sNDQ27QMzfpiAAKj0lnU6/gBVfAZW2WWpwwVzy0IgP3G73FpjI6REhAGA9qVRqA1b9mVoBVyIC2tDi8Xg24+dUzQiAbS/s7Ox8G2o/3mKCC+Zw0efzPQEfcVjYrARX3dbV1
2024-09-29 00:35:34 UTC	1111	IN	Data Raw: 50 41 4b 48 4c 45 37 52 64 77 75 59 4a 5a 6d 4e 77 7a 79 43 4d 6b 42 43 59 79 4b 52 4f 4a 42 4d 4a 6c 39 42 2f 50 58 58 43 6a 6a 6d 43 6d 44 4f 56 7a 48 33 66 69 50 70 4f 62 45 57 47 71 6f 4b 65 34 45 42 6c 38 76 31 68 6c 71 73 64 4c 76 64 32 33 6d 6b 78 48 4d 39 70 63 39 6b 4d 70 6d 6e 6f 39 48 6f 65 54 69 69 37 65 77 62 48 45 5a 50 50 78 31 7a 74 4c 53 31 74 56 33 41 6e 47 75 4d 6a 69 4e 6a 76 62 51 46 75 48 77 36 7a 44 6f 35 42 79 37 64 54 50 41 51 4e 42 67 4d 4c 72 52 61 72 54 6b 53 6c 73 31 6d 6e 77 54 37 75 77 70 39 76 69 72 78 39 51 7a 62 57 2f 48 75 56 2f 6a 35 64 2f 62 2b 36 6a 6e 69 4b 6c 6c 6c 50 38 6c 6b 65 4f 4e 4a 44 6b 2b 64 71 39 47 73 51 54 6e 43 34 66 42 31 68 65 4f 30 4b 34 37 48 77 65 37 57 64 44 72 39 6e 41 4b 67 58 77 4f 42 77 48 49 Data Ascii: PAKHLE7RdwuYJZmNwzyCMkBCYyKROJBMJl9B/PXXCjjmCmDOVzH3fiPpObEWGqoKe4EBl8v1hlqsdLvd23mkxHM9pc9kMpmno9HoeTii7ewbHEZPPx1ztLS1tV3AnGuMjiNjvbQFuHw6zDo5By7dTPAQNBgMLrRarTkSls1mnwT7uwp9virx9QzbW/HuV/j5d/b+6jniKlllP8lkeONJDk+dq9GsQTnC4fB1heO0K47Hwe7WdDr9nAKgXwOBwHI

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:34 UTC	351	OUT	GET /Dw6zzKn/bannerr.jpg HTTP/1.1 Host: i.ibb.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:35 UTC	381	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 00:35:34 GMT Content-Type: image/jpeg Content-Length: 578133 Connection: close Last-Modified: Thu, 08 Aug 2024 04:28:15 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2024-09-29 00:35:35 UTC	3715	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 2b 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd+http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xm
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: 7d 0f 54 0e f0 bb 3c 3b 6b b3 8e d6 5f 98 e0 19 e9 de 53 9b 76 f2 a9 64 d5 e2 1c ae ea 7d c9 38 e6 c9 53 4e 9e b7 8b ca 5d ea 47 d7 f6 54 4d 2a 51 18 1c b9 52 94 e0 8a 88 aa 4d 6b 1d 8f ba fe 1b 7e 28 66 e5 5b f2 73 76 45 2d dd 3b 29 18 4c 65 4f 6f 67 85 ee 02 03 3e 88 65 18 5c 5f 20 e3 f7 c6 c9 44 26 6a c7 60 f9 17 92 37 5c a5 f3 7b cb 73 bf 0a 92 aa 57 b9 52 2d 35 27 73 b8 bc 9e 82 93 31 4a 63 5a c3 f5 2f 76 39 cd fc f2 63 32 c9 89 89 b6 bb ba bb 6d b7 a6 29 91 55 e8 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d3 d2 d6 d5 b8 d1 d1 d2 fe 98 f6 f9 40 b8 d6 fa 7a 3a 3a 7e 27 4b f6 3d 0e 4f 67 87 1f 4b b8 80 72 80 01 d2 57 6c d7 6a d5 d7 66 76 2d c5 6c f8 c3 17 7e Data Ascii: }T<;k_Svd}8SN]GTM*QRMk~(f[svE-;)LeOog>e\_ D&j`7\{sWR-5's1JcZ/v9c2m)U@@z::~'K=OgKrWljfv-l~
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: ab 8a df 22 2d 2b 57 c1 4f 4c 0b 9c 06 39 6e 9f ff 00 7d 06 af fe ef b8 8f fe 74 a2 00 64 68 1c 7d 4f 1d e8 77 3d 8f 53 ba 07 56 58 33 6f 98 af 73 ec 3a b9 db 3e b0 69 64 dc d5 6f 99 72 dd a6 83 eb 93 bc 92 cd cb 09 38 e3 8c cf 2d 87 b3 e3 0c 79 4b 4b d5 4b 8d a8 c7 b4 45 2d 53 55 5b eb a6 b7 47 2a 6e af ef 7e 15 ef 12 b3 52 33 18 de 96 5f 7b de 3c 3e 02 c4 db 6f 33 db 46 4e 9c e5 0c 61 19 9d d9 e1 47 68 d3 03 3c c3 1b c5 5e dd dd 74 99 72 db ce 70 aa bc a0 e7 43 f4 56 f2 c5 ca 94 81 b5 35 a7 e1 5d 5e f7 78 b6 6a 97 a2 ab 43 6f 98 37 d1 97 a2 9d 9c d9 4f f3 dd 88 b1 5e a6 7a dc 3a da bd c2 60 d8 4e 75 20 63 58 85 58 07 3a bf 57 1b 96 ba 3c e7 28 cd 53 06 9a ea 81 d5 7f cd 56 d6 c5 6c 74 bc b4 ab f0 de a8 fc 3b 4d bf 14 2d b2 db 77 6c d6 b9 3b 3b ed 2b 6e Data Ascii: "-+WOL9n}tdh}Ow=SVX3os:>idor8-yKKKE-SU[G*n~R3_{<>o3FNaGh<^trpCV5]^xjCo7O^z:`Nu cXX:W<(SVlt;M-wl;;+n
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: da 13 a4 2b 1f 59 e1 39 36 76 9a e4 cc 27 6d 8e af f1 82 63 b9 2c 3b 18 33 ad d4 43 aa d5 9d a9 16 51 0a 83 c6 1f a9 77 61 d2 4f 82 a9 57 75 79 53 d3 0f 8e 3b 40 73 93 40 5c 20 73 9d c4 66 a9 75 1a 57 70 1b d8 33 d3 9e 8e 33 b4 bc 81 38 e3 a9 4b 44 c6 24 e3 a6 d6 d5 03 a1 92 6a fb d7 4c f6 ca eb 7b 22 a1 cf ad 11 15 15 29 32 b3 e2 63 95 b5 50 8f ed 01 bd a5 de f6 4b 21 ca 19 32 71 23 74 ce b0 7c fe ec f3 23 d4 85 e9 d7 77 2e 88 40 19 b1 d6 9b 5d be 83 14 6a 3a 8d d0 ca 99 19 e9 4e 81 4a 71 d3 e2 a9 4a d5 ca 8b 72 dd 8a 7a e8 ac f4 ec 4a 5c f6 b5 14 73 68 cc 6d 1a d2 49 3e 8e 8e 64 cc 11 1c c0 fb 5e 87 56 2d 6d 2f f1 2f cd a7 55 35 33 d7 53 25 4b 4b 27 3f 1c 5a 2d 48 ab 52 fe 17 72 aa bc 4e 5e 83 0b a7 c7 ea 5c d5 4d 6d e9 d8 ca 85 ee 7b 25 cc dd ac 74 bb Data Ascii: +Y96v'mc,;3CQwaOWuyS;@s@\ sfuWp338KD$jL{")2cPK!2q#t\|#w.@]j:NJqJrzJ\shmI>d^V-m//U53S%KK'?Z-HRrN^\Mm{%t
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: 47 ef 9f 3c 6e 8f a4 be d2 7d a8 58 fa 0b 3a 7d e7 8d d1 f4 97 da 4f b5 07 d0 59 d3 ef 3c 6e 97 ea 57 bd f6 a4 2a fe a0 cc eb f3 7f e9 1e 37 4b f5 2b de fb 50 7e a0 cc eb f3 7f e9 3e 78 dd 1f d4 af 7b ed 49 6f fd 5d 1d 3e f3 c6 e8 fe a5 7b df 6a 0f d5 d1 d3 ef 7d f1 ba 5f a9 5e f7 da 90 8f a2 b7 af a7 94 f1 ba 5f a9 5e f7 da 83 e8 ad eb e9 e5 3c 6e 97 ea 57 da 4f 01 38 32 fd 43 9f d2 9f be 3c 6e 97 ea 57 da 4f 00 c0 fd 43 9f d2 9f be 3c 6e 8f a4 be d2 7d a8 65 f4 16 74 fb cf 1b a3 e9 2f b4 9f 6a 0f a0 b3 a7 de df d3 5f 1b a9 e2 74 7e ef ad f2 6b 6e f7 af c1 54 2b 64 f2 0d 46 74 c5 b7 63 3e 2f df 32 23 10 ed 23 74 19 ed cb 49 a7 0f 60 3c b5 3d bb 44 e5 ba 6f 87 39 b7 b0 59 7a 1f 8d e5 af 6b 1a 8f a7 15 5f ca 62 22 6e 9a 5b 15 97 6b 23 b8 fa 9d 45 38 6b 59 Data Ascii: G<n}X:}OY<nW*7K+P~>x{Io]>{j}_^_^<nWO82C<nWOC<n}et/j_t~knT+dFtc>/2##tI`<=Do9Yzk_b"n[k#E8kY
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: cb cd 7e c5 78 bd a5 3a 99 e2 50 d4 94 aa 73 a6 92 37 c5 ea f6 9b f5 e4 6a 54 ba 5f 41 00 f1 e9 d9 c1 d8 bb bc fe d6 6a 32 0e 66 8a 4a a2 f0 8c 7a d2 fc e2 d4 f9 9d 33 5d dc a5 ee fe 79 90 78 2b c3 b3 63 52 b2 d3 53 f4 c9 e5 17 f8 59 c1 5c d1 1a fb 9c 78 aa 01 08 df 3f 67 4e f7 7b 15 f3 86 33 98 3e cd 6c da 5c 9d ae dc 1f 30 ee e1 f0 63 e3 b3 7d 85 ec 86 22 89 53 bb 5a 2d 48 8f cd 0f 51 c4 5b 4f c0 1c 38 a7 55 fa ca 07 e8 59 d8 9b da 0e e3 da 41 b1 78 56 5f 9b 74 2d 0c cb 08 7e 72 c4 d9 ba d9 bd 6a b4 b1 bc 98 c5 1b 9a 6b f3 a1 a1 ae aa 95 59 29 c8 8c 8e f6 ae 08 9d c4 4e 94 89 c1 13 80 1d b9 01 d6 b7 6b 46 fd 5b bb 38 b6 47 93 77 15 a5 67 64 f7 90 b8 d8 40 f0 e4 6d cf 96 c1 e3 27 cb 78 a3 3f 5b 70 5e 46 48 ef e1 4e 2e be a5 9f a0 a0 7e 6c 5b 65 da e6 fa Data Ascii: ~x:Ps7jT_Aj2fJz3]yx+cRSY\x?gN{3>l\0c}"SZ-HQ[O8UYAxV_t-~rjkY)NkF[8Gwgd@m'x?[p^FHN.~l[e
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 0f 92 ff 00 f7 d9 64 9f f8 b9 c8 1f e4 bb c8 1f 8e 1e d5 7f eb a1 b6 3f fb 5a 60 ef f9 f8 88 01 fb 3c 6b fc 63 5b f7 d2 7d 20 3f 2b 2f d2 3a 87 e4 18 c7 6b be e8 ef 66 ba 57 ba 56 53 75 80 cc 31 d5 d6 ba f1 4b b8 03 ac 15 a1 95 a9 1a 55 3b 8b 4b f3 3d e2 2f aa 07 a7 ce ce 3f d2 17 ec a3 c2 3b 04 db b6 26 c8 b3 a9 4e 1c c8 98 83 12 47 a0 52 8c 4c db 86 f2 84 a5 6f 64 11 06 ba 95 d9 ce 28 ef 0b 60 93 40 78 64 55 a9 5c 3f 19 39 b6 7c 77 f1 80 1e 32 bb 55 37 9b 1c df fe fb 33 66 e8 a1 10 f7 48 3c 26 6f 75 1f 6b Data Ascii: d?Z`<kc[} ?+/:kfWVSu1KU;K=/?;&NGRLod(`@xdU\?9\|w2U73fH<&ouk
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: d6 d2 3f 45 73 b3 f7 6f d2 d6 89 ee 64 91 e4 dd da 49 18 2e fa 5d ac 6b 23 da c6 22 d8 95 1c 38 f1 47 37 5c 7d 0c 55 57 a4 4e 3f c1 ee 4e 8e 8d 7f d4 00 7a 63 b2 b0 b3 6f b2 b3 6d b0 b3 b2 b2 6d 6e b5 6f b5 b5 6e 6e b5 4b 1b 0b 46 f4 4f c5 0d 8d 4d 28 9c 00 ea a7 b4 a7 b1 cf 6b 1d a9 4f 78 9d fb 71 73 0c df 1b be c4 0d 53 16 18 b2 e1 e9 84 0e 2e df 79 65 2e 73 67 77 77 a9 e1 26 70 6c 8f ce fe 08 4f 45 00 bc 9d 9d 1d 9c 38 27 b3 23 0c c8 b0 6e 01 7f ca 52 58 94 9f 22 5f e4 f7 6b ac ae fb 19 93 bd da c8 9d da d9 59 ea 6d 68 72 86 42 31 c7 35 89 6a 69 b4 e0 8a db 52 a2 72 71 50 33 ec 00 11 f9 7c b6 2b 8f 62 ef d3 c9 e3 f3 54 5a 13 0f 6b 70 7e 94 49 64 97 49 62 c2 cd 1f 68 6b fc 6e e8 ec ec f2 89 c9 c0 0f c8 46 3f 8a a3 5b f0 ed 34 d6 c5 78 09 87 5d 8e 07 b9 Data Ascii: ?EsodI.]k#"8G7\}UWN?NzcommnonnKFOM(kOxqsS.ye.sgww&plOE8'#nRX"_kYmhrB15jiRrqP3\|+bTZkp~IdIbhknF?[4x]
2024-09-29 00:35:35 UTC	4096	IN	Data Raw: 4c 56 88 c9 36 c9 70 68 a3 e7 40 a5 af aa 1a 9d 6a 6a 7a 7b eb da 78 aa 72 2a f0 e7 7a 0a a6 8a 3e d9 f5 dd 2b f6 27 17 79 4f 18 d8 c4 2d 72 0d fe 49 80 58 e3 db eb 54 ba b6 9f 5d 4c 63 16 30 5b b6 f5 55 44 56 99 5a be 23 0f 37 8a 72 2f 2a 2f 05 f4 85 0f ae e9 d2 15 98 b4 b2 2b 3c 63 b3 92 42 25 31 d9 8c 6d c3 e2 b2 48 93 eb 64 a5 8a f1 3f de a7 66 6e 2c 1d d5 21 73 96 6b 3e 67 9f a6 c6 f4 86 49 1c 89 33 eb 3f 4b 64 6c 91 56 0b 04 fc 29 ea 46 fc d8 c8 c3 69 c9 f9 5d eb b9 c7 87 74 93 99 eb 27 2e 2b 5c 26 9d 36 21 70 9c d7 86 32 6d fe ab 76 3a cb 38 b6 7e e5 a1 c6 ea e9 b2 13 91 20 f2 9b f4 e0 9c bc 5a 99 9e e4 7c d4 e4 f4 49 98 a4 d3 d8 a9 95 cd a7 32 fe 18 d9 e2 f6 2e 7f ac 63 e1 75 f2 27 e7 5b 58 da b2 32 4d ca ed ca 22 fc e7 18 96 e7 ec 27 16 92 b3 5c Data Ascii: LV6ph@jjz{xrz>+'yO-rIXT]Lc0[UDVZ#7r//+<cB%1mHd?fn,!sk>gI3?KdlV)Fi]t'.+\&6!p2mv:8~ Z\|I2.cu'[X2M"'\

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:35:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=144567 Date: Sun, 29 Sep 2024 00:35:35 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 00:35:37 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=144596 Date: Sun, 29 Sep 2024 00:35:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 00:35:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:38 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 39 63 33 48 35 33 75 4b 56 45 47 4f 66 43 49 6e 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 33 62 32 35 37 36 63 39 37 30 66 31 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: 9c3H53uKVEGOfCIn.1Context: 4e3b2576c970f12
2024-09-29 00:35:38 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:35:38 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 39 63 33 48 35 33 75 4b 56 45 47 4f 66 43 49 6e 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 33 62 32 35 37 36 63 39 37 30 66 31 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 38 6c 38 67 41 45 67 65 76 4b 36 72 32 78 2f 6f 31 45 6e 4c 4b 54 53 44 6a 56 45 7a 33 6f 43 61 6c 64 64 47 77 71 6d 6d 2b 38 45 67 6c 2b 2f 57 72 48 63 46 4e 43 55 68 33 62 4b 6a 64 30 38 50 31 35 72 66 46 48 33 45 78 44 64 31 72 64 7a 38 30 62 73 4a 33 64 64 73 71 6b 63 78 75 6d 73 33 34 2b 75 45 6d 53 64 6b 42 32 38 76 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: 9c3H53uKVEGOfCIn.2Context: 4e3b2576c970f12<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdK8l8gAEgevK6r2x/o1EnLKTSDjVEz3oCalddGwqmm+8Egl+/WrHcFNCUh3bKjd08P15rfFH3ExDd1rdz80bsJ3ddsqkcxums34+uEmSdkB28v
2024-09-29 00:35:38 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 39 63 33 48 35 33 75 4b 56 45 47 4f 66 43 49 6e 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 65 33 62 32 35 37 36 63 39 37 30 66 31 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: 9c3H53uKVEGOfCIn.3Context: 4e3b2576c970f12<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:35:39 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:35:39 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 66 6d 74 78 59 45 51 34 35 30 47 63 4c 4f 65 79 6f 76 32 73 64 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: fmtxYEQ450GcLOeyov2sdw.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:44 UTC	644	OUT	GET / HTTP/1.1 Host: trezor-docs.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 00:35:44 UTC	634	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9115 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() ETag: "66f42b03-239b" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' X-GitHub-Request-Id: FA7C:1664:F65724:11B6F8D:66F8A0E0 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 00:35:44 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740062-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727570145.819365,VS0,VE12 Vary: Accept-Encoding X-Fastly-Request-ID: 311a782824f74c68566feb728efdb12ec1dffea3
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>S
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 Data Ascii: x4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvb
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 45 39 46 4e 72 67 77 42 43 4c 69 72 4d 46 56 39 4f 6b 68 35 65 66 6c 46 68 38 50 52 35 6e 4b 35 6e 44 61 62 72 52 32 42 4e 4a 6c 4b 4f 30 54 33 35 2b 4c 69 34 6e 34 2b 2f 4a 2b 2f 4a 51 43 78 68 6d 75 35 68 33 75 4a 6f 58 4e 48 50 62 6d 57 5a 41 48 4d 73 68 57 42 38 6c 35 2f 69 70 71 61 6d 6d 61 41 66 30 7a 50 44 44 78 31 4f 4e 56 33 76 75 72 64 69 64 71 77 41 51 4c 2b 70 45 63 38 73 4c 63 41 65 31 43 43 76 51 33 59 48 78 49 57 38 50 6c 38 35 78 53 57 4e 43 31 68 41 44 44 49 76 30 72 49 45 2f 6f 34 4a 30 6b 33 6b 77 77 34 78 53 6c 77 49 68 63 71 33 45 46 46 4f 6d 37 4b 4e 2f 68 55 47 4f 51 6b 74 30 43 46 61 35 57 70 4e 4a 6c 4d 76 78 42 45 7a 2f 49 56 51 41 78 67 2f 5a 52 5a 6c 39 77 69 48 41 36 33 79 44 59 69 65 4d 37 44 6e 4c 50 35 43 69 41 47 73 43 37 Data Ascii: E9FNrgwBCLirMFV9Okh5eflFh8PR5nK5nDabrR2BNJlKO0T35+Li4n4+/J+/JQCxhmu5h3uJoXNHPbmWZAHMshWB8l5/ipqammaAf0zPDDx1ONV3vurdidqwAQL+pEc8sLcAe1CCvQ3YHxIW8Pl85xSWNC1hADDIv0rIE/o4J0k3kww4xSlwIhcq3EFFOm7KN/hUGOQkt0CFa5WpNJlMvxBEz/IVQAxg/ZRZl9wiHA63yDYieM7DnLP5CiAGsC7
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 79 31 6a 4d 44 45 78 49 44 59 32 4c 6a 45 30 4e 54 59 32 4d 53 77 67 4d 6a 41 78 4d 69 38 77 4d 69 38 77 4e 69 30 78 4e 44 6f 31 4e 6a 6f 79 4e 79 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 Data Ascii: b2JlIFhNUCBDb3JlIDUuMy1jMDExIDY2LjE0NTY2MSwgMjAxMi8wMi8wNi0xNDo1NjoyNyAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3h
2024-09-29 00:35:44 UTC	1378	IN	Data Raw: 74 34 32 66 2b 4d 70 30 79 55 54 56 51 62 64 57 73 41 48 56 73 69 6b 64 69 48 6b 48 61 50 78 63 51 58 51 75 66 58 67 55 42 67 4d 52 78 6d 65 39 55 30 41 41 78 66 48 34 76 46 76 6a 4d 37 65 46 36 55 6b 62 4a 53 35 71 6f 51 77 45 51 47 41 35 37 41 63 35 4a 6c 6c 46 79 55 56 5a 5a 35 63 6b 55 45 67 4d 56 78 73 4b 32 6a 6c 53 59 7a 49 2b 51 58 4a 73 69 79 6a 7a 4e 45 41 4a 79 4a 41 7a 62 2f 4b 51 61 34 31 6a 4a 4b 4c 38 70 4f 44 4d 51 69 54 45 41 79 6d 58 77 35 6e 38 2f 50 30 49 6a 44 33 62 68 37 52 67 6f 67 35 39 61 61 6e 78 69 49 52 54 56 76 56 2f 6f 6a 30 74 6e 48 63 61 2f 57 4d 72 56 77 4f 44 77 42 33 72 61 54 47 78 7a 6b 42 67 2f 67 6e 5a 56 61 70 46 56 36 32 57 79 32 6e 35 41 4f 37 30 48 4d 2f 35 77 62 4a 30 51 6e 58 79 51 53 61 56 50 44 49 75 4e 5a 7a Data Ascii: t42f+Mp0yUTVQbdWsAHVsikdiHkHaPxcQXQufXgUBgMRxme9U0AAxfH4vFvjM7eF6UkbJS5qoQwEQGA57Ac5JllFyUVZZ5ckUEgMVxsK2jlSYzI+QXJsiyjzNEAJyJAzb/KQa41jJKL8pODMQiTEAymXw5n8/P0IjD3bh7Rgog59aanxiIRTVvV/oj0tnHca/WMrVwODwB3raTGxzkBg/gnZVapFV62Wy2n5AO70HM/5wbJ0QnXyQSaVPDIuNZz
2024-09-29 00:35:44 UTC	847	IN	Data Raw: 36 73 64 34 32 39 54 55 4e 45 63 6d 55 64 63 2b 50 52 61 4c 48 63 76 6e 38 37 64 58 57 34 75 67 7a 64 73 61 47 78 75 66 4c 39 34 4e 46 76 39 7a 69 31 4a 37 47 56 62 68 6c 76 62 32 64 6e 61 4a 33 53 56 72 78 66 63 2b 6e 32 2b 4e 54 73 5a 37 2f 48 37 2f 4d 72 33 67 35 58 64 53 49 48 79 4a 53 48 31 50 5a 2b 37 66 54 6f 79 6c 32 2b 45 72 71 69 6c 67 5a 34 4e 61 4c 59 42 39 67 6f 56 47 61 48 6a 52 39 33 48 76 31 5a 72 55 34 58 44 73 46 54 32 30 6b 48 33 50 4f 62 7a 62 57 6b 30 43 67 47 31 6a 61 63 56 49 55 6e 41 51 62 39 46 2b 56 65 78 79 4c 4d 7a 6b 70 63 4c 76 30 49 4a 56 37 41 48 51 49 4f 43 41 55 59 48 78 37 76 35 71 67 53 63 6d 59 48 74 54 71 53 41 79 5a 4c 45 4a 54 4b 32 32 42 69 65 34 69 71 33 78 73 71 70 6d 34 53 41 66 39 48 71 39 61 32 44 6e 4a 34 75 Data Ascii: 6sd429TUNEcmUdc+PRaLHcvn87dXW4ugzdsaGxufL94NFv9zi1J7GVbhlvb2dnaJ3SVrxfc+n2+NTsZ7/H7/Mr3g5XdSIHyJSH1PZ+7fToyl2+ErqilgZ4NaLYB9goVGaHjR93Hv1ZrU4XDsFT20kH3PObzbWk0CgG1jacVIUnAQb9F+VexyLMzkpcLv0IJV7AHQIOCAUYHx7v5qgScmYHtTqSAyZLEJTK22Bie4iq3xsqpm4SAf9Hq9a2DnJ4u

Timestamp	Bytes transferred	Direction	Data
2024-09-29 00:35:50 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 45 79 4e 72 44 46 78 78 65 55 36 50 77 6c 47 46 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 33 61 34 65 36 36 38 32 61 30 66 33 33 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: EyNrDFxxeU6PwlGF.1Context: b13a4e6682a0f339
2024-09-29 00:35:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 00:35:50 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 45 79 4e 72 44 46 78 78 65 55 36 50 77 6c 47 46 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 33 61 34 65 36 36 38 32 61 30 66 33 33 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 64 4b 38 6c 38 67 41 45 67 65 76 4b 36 72 32 78 2f 6f 31 45 6e 4c 4b 54 53 44 6a 56 45 7a 33 6f 43 61 6c 64 64 47 77 71 6d 6d 2b 38 45 67 6c 2b 2f 57 72 48 63 46 4e 43 55 68 33 62 4b 6a 64 30 38 50 31 35 72 66 46 48 33 45 78 44 64 31 72 64 7a 38 30 62 73 4a 33 64 64 73 71 6b 63 78 75 6d 73 33 34 2b 75 45 6d 53 64 6b 42 32 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: EyNrDFxxeU6PwlGF.2Context: b13a4e6682a0f339<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAdK8l8gAEgevK6r2x/o1EnLKTSDjVEz3oCalddGwqmm+8Egl+/WrHcFNCUh3bKjd08P15rfFH3ExDd1rdz80bsJ3ddsqkcxums34+uEmSdkB28
2024-09-29 00:35:50 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 45 79 4e 72 44 46 78 78 65 55 36 50 77 6c 47 46 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 31 33 61 34 65 36 36 38 32 61 30 66 33 33 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: EyNrDFxxeU6PwlGF.3Context: b13a4e6682a0f339<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 00:35:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 00:35:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 52 41 47 4a 76 36 6c 6b 55 4f 58 59 35 6a 48 4a 35 77 68 70 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: oRAGJv6lkUOXY5jHJ5whpA.0Payload parsing failed.